last executing test programs: 58.21405243s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) unshare(0x22020600) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ftruncate(0xffffffffffffffff, 0x2007ffb) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 57.812125474s ago: executing program 1 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 56.84761494s ago: executing program 1 (id=43): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2400, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) 56.84497784s ago: executing program 32 (id=43): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2400, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) 24.494083246s ago: executing program 0 (id=667): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r0, r1, 0x0) 24.352402904s ago: executing program 0 (id=669): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x9, 0x69e}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 24.110680218s ago: executing program 0 (id=675): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x3]}, 0x8) close(r0) r1 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 24.08110763s ago: executing program 0 (id=677): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") syz_clone(0x1000000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 23.654547855s ago: executing program 0 (id=685): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x10, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x8000}, 0x90) 22.903455449s ago: executing program 0 (id=705): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) shutdown(r0, 0x1) 22.903156609s ago: executing program 33 (id=705): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) shutdown(r0, 0x1) 3.869756424s ago: executing program 3 (id=965): socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x3}, 0x20) 3.807059408s ago: executing program 3 (id=969): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 3.202081473s ago: executing program 4 (id=980): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x2000c000) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x2, 0x0, 0x0) 3.115561818s ago: executing program 4 (id=981): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x16}, 0x80b0, 0x4d, 0x800020, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xa6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@lazytime}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x569, &(0x7f0000000a40)="$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") sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20040084) read(r0, 0x0, 0x0) 2.74477791s ago: executing program 4 (id=982): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000140)=[{r1, 0x601}, {r1, 0x2304}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.653688805s ago: executing program 3 (id=983): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) socket(0x2a, 0x5, 0x9) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x8, 0x9, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6, 0x6, 0x5, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='cp\x88\xfb<\xbb\xbaw\xd7\xb7\x19\x18\xe0R~\xdd\xaa\x94\b\xd2\xbd\xbb\xc4<\xa1\x9e\x82XuNH<\xc2\xd4 h\xbb\xac\x96Tp*m\xbe#T3O\xa2\xf9\xb0\xda8\xd3t \x98 \x16\xd7n[J\xeb\n\x89\x82Ljj\x0e\xd2\x9e\x05\x92\xc7\x82\xa9\x819#\xa8\x10\xb63\xa8\x0e\x8a\x04tn\xcb\x81\xe0\xfb\xfb\xaa\x92\xd9P\b8(\x1aa\xcc\xa5@\xf7\x7fs3\x97\xec\\||\x7f\xff\xa7\xf2\xe4\x026\xa4#\x13\x11\xd8\xf2\xbd%N\xd68\xb1:\x92\x89\xc0\xb2\xe7\xa400\x81\x97J\xcd_\x8b\x97\"\xd3i\x13V:\xd4b\x9d\x14`Nv\xe6\x15\x9c\a\v\"]\x84\xacq>\x88\x1aR\x1c0') 2.457758627s ago: executing program 3 (id=985): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 1.848156432s ago: executing program 4 (id=989): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b7000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) 1.775746607s ago: executing program 6 (id=991): unshare(0x2040400) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) 1.745122798s ago: executing program 3 (id=992): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x1c3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.71480726s ago: executing program 3 (id=993): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 1.635303655s ago: executing program 6 (id=994): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.615414846s ago: executing program 6 (id=995): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @remote, 0x5}, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x2, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 863.91055ms ago: executing program 4 (id=998): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x83}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 670.707081ms ago: executing program 6 (id=1001): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1, r0}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 646.939843ms ago: executing program 2 (id=1002): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 623.578214ms ago: executing program 5 (id=1003): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x16) fcntl$setlease(r2, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 526.46956ms ago: executing program 2 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 465.989433ms ago: executing program 5 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 416.048156ms ago: executing program 2 (id=1006): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 289.847114ms ago: executing program 5 (id=1007): r0 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0xec, @mcast2, 0x1}}}, &(0x7f0000000040)=0x84) fsetxattr$security_selinux(r0, &(0x7f0000000480), &(0x7f0000000200)='system_u:object_r:run_init_exec_t:s0\x00', 0x9, 0x3) 287.228614ms ago: executing program 2 (id=1008): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x3, 0x1, 0x5}, &(0x7f00000000c0)=0x10) 223.204677ms ago: executing program 5 (id=1009): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x900) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) read(r1, 0x0, 0x0) read$watch_queue(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 216.316937ms ago: executing program 2 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 158.760021ms ago: executing program 5 (id=1011): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001040)=0x1007) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 134.340523ms ago: executing program 6 (id=1012): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x1000000000000010, 0x80802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x4008240b, 0x0) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) mq_getsetattr(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) 105.825144ms ago: executing program 2 (id=1013): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd6d, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b00a0000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 65.194627ms ago: executing program 6 (id=1014): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0}]) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r0, 0x0, r4, 0x0, 0x8000, 0x0) 60.038807ms ago: executing program 5 (id=1015): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac", 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000980)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c61fb18c7c8d9c69e138351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a78", 0xd5}, {&(0x7f0000000300)="1791613d45", 0x5}], 0x2}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 4 (id=1016): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) kernel console output (not intermixed with test programs): "syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.851665][ T29] audit: type=1400 audit(1770214096.932:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.872648][ T29] audit: type=1400 audit(1770214096.932:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.893233][ T29] audit: type=1400 audit(1770214096.932:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.913581][ T29] audit: type=1400 audit(1770214096.942:69): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.934506][ T29] audit: type=1400 audit(1770214096.952:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.956334][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.959373][ T29] audit: type=1400 audit(1770214096.952:71): avc: denied { search } for pid=3039 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.004722][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.113011][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.185174][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.192360][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.199525][ T3319] bridge_slave_0: entered allmulticast mode [ 35.206134][ T3319] bridge_slave_0: entered promiscuous mode [ 35.212837][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.219998][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.227270][ T3319] bridge_slave_1: entered allmulticast mode [ 35.233933][ T3319] bridge_slave_1: entered promiscuous mode [ 35.240491][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.309050][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.321250][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.330633][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.348030][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.399163][ T3319] team0: Port device team_slave_0 added [ 35.410164][ T3319] team0: Port device team_slave_1 added [ 35.415953][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.423025][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.430347][ T3312] bridge_slave_0: entered allmulticast mode [ 35.436690][ T3312] bridge_slave_0: entered promiscuous mode [ 35.465157][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.472295][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.479667][ T3312] bridge_slave_1: entered allmulticast mode [ 35.486172][ T3312] bridge_slave_1: entered promiscuous mode [ 35.505346][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.512319][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.538267][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.553750][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.570053][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.577049][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.603002][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.621956][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.629178][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.636449][ T3317] bridge_slave_0: entered allmulticast mode [ 35.642978][ T3317] bridge_slave_0: entered promiscuous mode [ 35.654248][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.661585][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.668776][ T3317] bridge_slave_1: entered allmulticast mode [ 35.675312][ T3317] bridge_slave_1: entered promiscuous mode [ 35.685352][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.699967][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.722952][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.730126][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.737389][ T3314] bridge_slave_0: entered allmulticast mode [ 35.743805][ T3314] bridge_slave_0: entered promiscuous mode [ 35.750476][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.757595][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.764731][ T3314] bridge_slave_1: entered allmulticast mode [ 35.771248][ T3314] bridge_slave_1: entered promiscuous mode [ 35.794194][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.813166][ T3312] team0: Port device team_slave_0 added [ 35.824212][ T3312] team0: Port device team_slave_1 added [ 35.833608][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.848655][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.875365][ T3319] hsr_slave_0: entered promiscuous mode [ 35.881421][ T3319] hsr_slave_1: entered promiscuous mode [ 35.891174][ T3314] team0: Port device team_slave_0 added [ 35.897835][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.915129][ T3314] team0: Port device team_slave_1 added [ 35.925398][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.932362][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.958310][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.997543][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.004568][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.030572][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.050905][ T3317] team0: Port device team_slave_0 added [ 36.059251][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.066347][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.073726][ T3311] bridge_slave_0: entered allmulticast mode [ 36.080352][ T3311] bridge_slave_0: entered promiscuous mode [ 36.089949][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.097050][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.122982][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.142987][ T3317] team0: Port device team_slave_1 added [ 36.153856][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.161101][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.168279][ T3311] bridge_slave_1: entered allmulticast mode [ 36.174831][ T3311] bridge_slave_1: entered promiscuous mode [ 36.192853][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.202237][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.209290][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.235257][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.258864][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.293867][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.300876][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.326789][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.348388][ T3312] hsr_slave_0: entered promiscuous mode [ 36.354568][ T3312] hsr_slave_1: entered promiscuous mode [ 36.360606][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 36.366367][ T3312] Cannot create hsr debugfs directory [ 36.377236][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.384204][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.410146][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.426567][ T3314] hsr_slave_0: entered promiscuous mode [ 36.432575][ T3314] hsr_slave_1: entered promiscuous mode [ 36.438565][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.444288][ T3314] Cannot create hsr debugfs directory [ 36.455824][ T3311] team0: Port device team_slave_0 added [ 36.465459][ T3311] team0: Port device team_slave_1 added [ 36.518078][ T3317] hsr_slave_0: entered promiscuous mode [ 36.524217][ T3317] hsr_slave_1: entered promiscuous mode [ 36.530156][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.535895][ T3317] Cannot create hsr debugfs directory [ 36.550971][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.557955][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.583992][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.597394][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.604357][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.630476][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.722315][ T3311] hsr_slave_0: entered promiscuous mode [ 36.728413][ T3311] hsr_slave_1: entered promiscuous mode [ 36.734342][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.740103][ T3311] Cannot create hsr debugfs directory [ 36.770492][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.794282][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.803360][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.815283][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.887436][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.897387][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.906606][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.915633][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.958973][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.971247][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.980216][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.989340][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.030297][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.040856][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.053235][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.065040][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.073837][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.094628][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.113366][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.129514][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.138659][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.148503][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.157283][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.172179][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.181381][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.188598][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.207070][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.214156][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.223151][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.230221][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.252102][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.259199][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.278822][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.315923][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.334165][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.353195][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.363958][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.371083][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.395759][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.402837][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.413670][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.420758][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.429709][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.436813][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.447951][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.477961][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.509580][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.520125][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.539358][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.546526][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.589906][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.600405][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.618416][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.625544][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.648120][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.708885][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.731086][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.775699][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.791983][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.869888][ T3312] veth0_vlan: entered promiscuous mode [ 37.881960][ T3312] veth1_vlan: entered promiscuous mode [ 37.908256][ T3312] veth0_macvtap: entered promiscuous mode [ 37.929723][ T3312] veth1_macvtap: entered promiscuous mode [ 37.938252][ T3314] veth0_vlan: entered promiscuous mode [ 37.959681][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.972692][ T3314] veth1_vlan: entered promiscuous mode [ 37.981096][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.008469][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.017907][ T3311] veth0_vlan: entered promiscuous mode [ 38.041499][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.051530][ T3319] veth0_vlan: entered promiscuous mode [ 38.068838][ T3319] veth1_vlan: entered promiscuous mode [ 38.075159][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.091298][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.101333][ T3317] veth0_vlan: entered promiscuous mode [ 38.107747][ T3311] veth1_vlan: entered promiscuous mode [ 38.122830][ T3314] veth0_macvtap: entered promiscuous mode [ 38.137203][ T3314] veth1_macvtap: entered promiscuous mode [ 38.144890][ T3317] veth1_vlan: entered promiscuous mode [ 38.163090][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.205188][ T3311] veth0_macvtap: entered promiscuous mode [ 38.212693][ T3311] veth1_macvtap: entered promiscuous mode [ 38.221898][ T3317] veth0_macvtap: entered promiscuous mode [ 38.229217][ T3319] veth0_macvtap: entered promiscuous mode [ 38.237308][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.251348][ T3319] veth1_macvtap: entered promiscuous mode [ 38.259025][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.269686][ T3317] veth1_macvtap: entered promiscuous mode [ 38.282384][ T372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.293367][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.306486][ T372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.316783][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.329792][ T372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.338949][ T372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.350947][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.361646][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.375592][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.391676][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.400590][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.409997][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.422568][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.436498][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.453736][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.477150][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 38.477169][ T29] audit: type=1400 audit(1770214101.582:105): avc: denied { create } for pid=3487 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.502760][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811ab05800: rx timeout, send abort [ 38.514655][ T29] audit: type=1400 audit(1770214101.622:106): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.519422][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.536869][ T29] audit: type=1400 audit(1770214101.622:107): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.567091][ T29] audit: type=1400 audit(1770214101.622:108): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.588669][ T29] audit: type=1400 audit(1770214101.622:109): avc: denied { add_name } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.609397][ T29] audit: type=1400 audit(1770214101.622:110): avc: denied { create } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.630104][ T29] audit: type=1400 audit(1770214101.622:111): avc: denied { append open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.653259][ T29] audit: type=1400 audit(1770214101.622:112): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.684925][ T3488] Zero length message leads to an empty skb [ 38.696228][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.742185][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.767848][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.783050][ T3492] loop1: detected capacity change from 0 to 1024 [ 38.793565][ T29] audit: type=1400 audit(1770214101.902:113): avc: denied { open } for pid=3493 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.812647][ T29] audit: type=1400 audit(1770214101.902:114): avc: denied { perfmon } for pid=3493 comm="syz.0.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.834434][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.839822][ T3492] ======================================================= [ 38.839822][ T3492] WARNING: The mand mount option has been deprecated and [ 38.839822][ T3492] and is ignored by this kernel. Remove the mand [ 38.839822][ T3492] option from the mount to silence this warning. [ 38.839822][ T3492] ======================================================= [ 38.843177][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.887826][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.909063][ T3492] EXT4-fs: Ignoring removed bh option [ 38.920273][ T3498] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 38.964258][ T3492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.987066][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811ab05a00: rx timeout, send abort [ 39.002826][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811ab05800: abort rx timeout. Force session deactivation [ 39.124337][ T3311] EXT4-fs error (device loop1): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 39.162827][ T3311] EXT4-fs error (device loop1): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 39.190551][ T3520] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15'. [ 39.209266][ T3520] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15'. [ 39.298357][ T3532] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 39.388191][ T3540] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 39.428527][ T3544] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 39.440389][ T3544] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 39.495466][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811ab05a00: abort rx timeout. Force session deactivation [ 39.514585][ T3552] netlink: 7 bytes leftover after parsing attributes in process `syz.0.30'. [ 39.612311][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 39.621163][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 39.630824][ T3557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.003749][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.013357][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.186721][ T3594] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.316028][ T3583] chnl_net:caif_netlink_parms(): no params data found [ 40.355156][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.362240][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.369800][ T3583] bridge_slave_0: entered allmulticast mode [ 40.377145][ T3583] bridge_slave_0: entered promiscuous mode [ 40.384123][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.391304][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.398605][ T3583] bridge_slave_1: entered allmulticast mode [ 40.405375][ T3583] bridge_slave_1: entered promiscuous mode [ 40.424225][ T3583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.435472][ T3583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.458129][ T3583] team0: Port device team_slave_0 added [ 40.464840][ T3583] team0: Port device team_slave_1 added [ 40.479853][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.486871][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.512871][ T3583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.524452][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.531443][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.557462][ T3583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.592719][ T3583] hsr_slave_0: entered promiscuous mode [ 40.599741][ T3583] hsr_slave_1: entered promiscuous mode [ 40.606057][ T3583] debugfs: 'hsr0' already exists in 'hsr' [ 40.611825][ T3583] Cannot create hsr debugfs directory [ 40.696345][ T3583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.713044][ T3583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.725683][ T3583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.737422][ T3583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.753949][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 40.769417][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.776612][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.783989][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.791107][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.834139][ T3583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.848738][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.864177][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.872170][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.884838][ T3583] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.896301][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.903403][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.928603][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.935767][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.128787][ T3583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.171414][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.241449][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.257932][ T3624] loop0: detected capacity change from 0 to 32768 [ 41.326724][ T3624] loop0: p1 p3 < p5 p6 > [ 41.331128][ T3624] loop0: partition table partially beyond EOD, truncated [ 41.369436][ T3659] syz.4.64 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.397437][ T12] bridge_slave_1: left allmulticast mode [ 41.403208][ T12] bridge_slave_1: left promiscuous mode [ 41.409264][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.418634][ T12] bridge_slave_0: left allmulticast mode [ 41.424489][ T12] bridge_slave_0: left promiscuous mode [ 41.430218][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.470253][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.489102][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 41.501237][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 41.512717][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 41.687384][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.697433][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.707321][ T12] bond0 (unregistering): Released all slaves [ 41.722056][ T3583] veth0_vlan: entered promiscuous mode [ 41.756076][ T3583] veth1_vlan: entered promiscuous mode [ 41.773307][ T12] hsr_slave_0: left promiscuous mode [ 41.779406][ T12] hsr_slave_1: left promiscuous mode [ 41.785503][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.792927][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.801141][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.808762][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.819790][ T12] veth1_macvtap: left promiscuous mode [ 41.825441][ T12] veth0_macvtap: left promiscuous mode [ 41.830977][ T12] veth1_vlan: left promiscuous mode [ 41.836401][ T12] veth0_vlan: left promiscuous mode [ 41.907890][ T12] team0 (unregistering): Port device team_slave_1 removed [ 41.917876][ T12] team0 (unregistering): Port device team_slave_0 removed [ 41.970754][ T3583] veth0_macvtap: entered promiscuous mode [ 41.982164][ T3583] veth1_macvtap: entered promiscuous mode [ 41.998349][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.007514][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.023027][ C0] hrtimer: interrupt took 34921 ns [ 42.035686][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.058857][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.069063][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.078034][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.186666][ T3672] chnl_net:caif_netlink_parms(): no params data found [ 42.270944][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.278088][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.285577][ T3672] bridge_slave_0: entered allmulticast mode [ 42.292107][ T3672] bridge_slave_0: entered promiscuous mode [ 42.300897][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.308031][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.315470][ T3672] bridge_slave_1: entered allmulticast mode [ 42.322168][ T3672] bridge_slave_1: entered promiscuous mode [ 42.341333][ T3672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.352830][ T3672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.390714][ T3672] team0: Port device team_slave_0 added [ 42.442262][ T3672] team0: Port device team_slave_1 added [ 42.480743][ T3672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.487778][ T3672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.513768][ T3672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.582806][ T3716] loop4: detected capacity change from 0 to 512 [ 42.589501][ T3716] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 42.619071][ T3672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.626119][ T3672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.652230][ T3672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.715872][ T3672] hsr_slave_0: entered promiscuous mode [ 42.734773][ T3672] hsr_slave_1: entered promiscuous mode [ 42.740789][ T3672] debugfs: 'hsr0' already exists in 'hsr' [ 42.746597][ T3672] Cannot create hsr debugfs directory [ 42.903055][ T3672] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.003403][ T3672] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.073858][ T3735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.086781][ T3672] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.097928][ T3735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.85'. [ 43.178683][ T3672] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.291283][ T3749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 43.300224][ T3749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 43.311288][ T3749] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 43.651290][ T3746] syz.5.91 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 43.665355][ T3746] CPU: 0 UID: 0 PID: 3746 Comm: syz.5.91 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.665384][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.665453][ T3746] Call Trace: [ 43.665465][ T3746] [ 43.665475][ T3746] __dump_stack+0x1d/0x30 [ 43.665506][ T3746] dump_stack_lvl+0x95/0xd0 [ 43.665535][ T3746] dump_stack+0x15/0x1b [ 43.665555][ T3746] dump_header+0x80/0x240 [ 43.665671][ T3746] oom_kill_process+0x295/0x350 [ 43.665697][ T3746] out_of_memory+0x97d/0xb80 [ 43.665751][ T3746] try_charge_memcg+0x62e/0xa10 [ 43.665782][ T3746] obj_cgroup_charge_pages+0x23/0xc0 [ 43.665813][ T3746] __memcg_kmem_charge_page+0x9e/0x170 [ 43.665854][ T3746] __alloc_frozen_pages_noprof+0x18a/0x350 [ 43.665939][ T3746] alloc_pages_mpol+0xb3/0x260 [ 43.665977][ T3746] alloc_pages_noprof+0x8f/0x130 [ 43.666019][ T3746] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 43.666110][ T3746] __kvmalloc_node_noprof+0x471/0x680 [ 43.666149][ T3746] ? ip_set_alloc+0x24/0x30 [ 43.666186][ T3746] ? ip_set_alloc+0x24/0x30 [ 43.666272][ T3746] ip_set_alloc+0x24/0x30 [ 43.666389][ T3746] hash_netiface_create+0x282/0x740 [ 43.666487][ T3746] ? __pfx_hash_netiface_create+0x10/0x10 [ 43.666529][ T3746] ip_set_create+0x3cf/0x970 [ 43.666568][ T3746] nfnetlink_rcv_msg+0x509/0x5d0 [ 43.666700][ T3746] netlink_rcv_skb+0x123/0x220 [ 43.666798][ T3746] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 43.666854][ T3746] nfnetlink_rcv+0x167/0x1720 [ 43.666891][ T3746] ? __kfree_skb+0x109/0x150 [ 43.666932][ T3746] ? nlmon_xmit+0x4f/0x60 [ 43.667029][ T3746] ? consume_skb+0x49/0x140 [ 43.667065][ T3746] ? nlmon_xmit+0x4f/0x60 [ 43.667098][ T3746] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 43.667195][ T3746] ? __dev_queue_xmit+0x139a/0x1f20 [ 43.667237][ T3746] ? __dev_queue_xmit+0x148/0x1f20 [ 43.667278][ T3746] ? ref_tracker_free+0x37d/0x3e0 [ 43.667424][ T3746] ? __netlink_deliver_tap+0x4dc/0x500 [ 43.667480][ T3746] netlink_unicast+0x5c0/0x690 [ 43.667591][ T3746] netlink_sendmsg+0x5c8/0x6f0 [ 43.667664][ T3746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.667691][ T3746] ____sys_sendmsg+0x5af/0x600 [ 43.667721][ T3746] ___sys_sendmsg+0x195/0x1e0 [ 43.667794][ T3746] __x64_sys_sendmsg+0xd4/0x160 [ 43.667867][ T3746] x64_sys_call+0x17ba/0x3000 [ 43.667928][ T3746] do_syscall_64+0xc0/0x2a0 [ 43.667970][ T3746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.667996][ T3746] RIP: 0033:0x7fbcff90aeb9 [ 43.668156][ T3746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.668249][ T3746] RSP: 002b:00007fbcfe367028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.668277][ T3746] RAX: ffffffffffffffda RBX: 00007fbcffb85fa0 RCX: 00007fbcff90aeb9 [ 43.668297][ T3746] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 43.668315][ T3746] RBP: 00007fbcff978c1f R08: 0000000000000000 R09: 0000000000000000 [ 43.668332][ T3746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.668349][ T3746] R13: 00007fbcffb86038 R14: 00007fbcffb85fa0 R15: 00007fff88087e08 [ 43.668452][ T3746] [ 43.668462][ T3746] memory: usage 307200kB, limit 307200kB, failcnt 158 [ 43.824234][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 43.824285][ T29] audit: type=1400 audit(1770214106.922:194): avc: denied { read } for pid=3756 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.827654][ T3746] memory+swap: usage 307208kB, limit 9007199254740988kB, failcnt 0 [ 43.884697][ T29] audit: type=1400 audit(1770214106.982:195): avc: denied { write } for pid=3756 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.888274][ T3746] kmem: usage 307004kB, limit 9007199254740988kB, failcnt 0 [ 44.046894][ T3746] Memory cgroup stats for /syz5: [ 44.047147][ T3746] cache 0 [ 44.055456][ T3746] rss 192512 [ 44.058679][ T3746] shmem 0 [ 44.061649][ T3746] mapped_file 0 [ 44.065214][ T3746] dirty 0 [ 44.068279][ T3746] writeback 0 [ 44.071600][ T3746] workingset_refault_anon 3 [ 44.076176][ T3746] workingset_refault_file 0 [ 44.080694][ T3746] swap 8192 [ 44.083844][ T3746] swapcached 12288 [ 44.087622][ T3746] pgpgin 3240 [ 44.090923][ T3746] pgpgout 3191 [ 44.094310][ T3746] pgfault 3918 [ 44.097782][ T3746] pgmajfault 1 [ 44.101241][ T3746] inactive_anon 12288 [ 44.105294][ T3746] active_anon 0 [ 44.108794][ T3746] inactive_file 0 [ 44.112467][ T3746] active_file 0 [ 44.116018][ T3746] unevictable 188416 [ 44.119933][ T3746] hierarchical_memory_limit 314572800 [ 44.125528][ T3746] hierarchical_memsw_limit 9223372036854771712 [ 44.131708][ T3746] total_cache 0 [ 44.135302][ T3746] total_rss 192512 [ 44.139052][ T3746] total_shmem 0 [ 44.142535][ T3746] total_mapped_file 0 [ 44.146670][ T3746] total_dirty 0 [ 44.150201][ T3746] total_writeback 0 [ 44.154046][ T3746] total_workingset_refault_anon 3 [ 44.159129][ T3746] total_workingset_refault_file 0 [ 44.164232][ T3746] total_swap 8192 [ 44.167922][ T3746] total_swapcached 12288 [ 44.172187][ T3746] total_pgpgin 3240 [ 44.176049][ T3746] total_pgpgout 3191 [ 44.179974][ T3746] total_pgfault 3918 [ 44.183890][ T3746] total_pgmajfault 1 [ 44.187877][ T3746] total_inactive_anon 12288 [ 44.192475][ T3746] total_active_anon 0 [ 44.196551][ T3746] total_inactive_file 0 [ 44.200788][ T3746] total_active_file 0 [ 44.204933][ T3746] total_unevictable 188416 [ 44.209446][ T3746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.91,pid=3745,uid=0 [ 44.223962][ T3746] Memory cgroup out of memory: Killed process 3746 (syz.5.91) total-vm:96240kB, anon-rss:1328kB, file-rss:22456kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 44.264357][ T3746] syz.5.91 (3746) used greatest stack depth: 7464 bytes left [ 44.366074][ T29] audit: type=1400 audit(1770214107.472:196): avc: denied { setopt } for pid=3774 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.385399][ T29] audit: type=1400 audit(1770214107.472:197): avc: denied { bind } for pid=3774 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.404540][ T29] audit: type=1400 audit(1770214107.472:198): avc: denied { name_bind } for pid=3774 comm="syz.4.97" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 44.426155][ T29] audit: type=1400 audit(1770214107.472:199): avc: denied { node_bind } for pid=3774 comm="syz.4.97" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 44.450066][ T29] audit: type=1400 audit(1770214107.552:200): avc: denied { cpu } for pid=3771 comm="syz.5.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.505412][ T3677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.525055][ T3672] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.559035][ T3672] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.577267][ T3672] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.592244][ T3672] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.618041][ T29] audit: type=1400 audit(1770214107.722:201): avc: denied { read open } for pid=3782 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.733410][ T29] audit: type=1400 audit(1770214107.722:202): avc: denied { write } for pid=3781 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.752694][ T29] audit: type=1400 audit(1770214107.752:203): avc: denied { getattr } for pid=3782 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.815710][ T3672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.828699][ T3672] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.852629][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.859804][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.901335][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.908464][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.917795][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 45.027893][ T3817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.041312][ T3817] bond1: option ad_select: unable to set because the bond device is up [ 45.074055][ T3830] netlink: 'syz.0.110': attribute type 15 has an invalid length. [ 45.081929][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 45.104119][ T3830] netlink: 'syz.0.110': attribute type 15 has an invalid length. [ 45.112000][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 45.128101][ T3339] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 45.137298][ T3339] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 45.148117][ T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 45.199604][ T31] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 45.256974][ T3672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.361148][ T3865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'. [ 45.380691][ T3672] veth0_vlan: entered promiscuous mode [ 45.403711][ T3672] veth1_vlan: entered promiscuous mode [ 45.489100][ T3672] veth0_macvtap: entered promiscuous mode [ 45.513383][ T3672] veth1_macvtap: entered promiscuous mode [ 45.553038][ T3672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.580278][ T3672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.654684][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.677432][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.716977][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.736938][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 45.768492][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 45.938926][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.986612][ T60] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 46.021780][ T60] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 46.041608][ T60] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 46.051137][ T3912] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 46.055698][ T60] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 46.213969][ T3934] loop3: detected capacity change from 0 to 256 [ 46.265035][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 46.475358][ T3954] xt_hashlimit: size too large, truncated to 1048576 [ 46.932305][ T3988] IPv6: Can't replace route, no match found [ 47.215913][ T4001] team0 (unregistering): Port device team_slave_0 removed [ 47.236069][ T4001] team0 (unregistering): Port device team_slave_1 removed [ 47.262748][ T4004] loop5: detected capacity change from 0 to 128 [ 47.409959][ T4010] syz.5.158: attempt to access beyond end of device [ 47.409959][ T4010] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 47.438024][ T4010] syz.5.158: attempt to access beyond end of device [ 47.438024][ T4010] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 47.457833][ T4010] syz.5.158: attempt to access beyond end of device [ 47.457833][ T4010] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 47.473050][ T4010] syz.5.158: attempt to access beyond end of device [ 47.473050][ T4010] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 47.492104][ T4010] syz.5.158: attempt to access beyond end of device [ 47.492104][ T4010] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 47.513341][ T4010] syz.5.158: attempt to access beyond end of device [ 47.513341][ T4010] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 47.530757][ T4010] syz.5.158: attempt to access beyond end of device [ 47.530757][ T4010] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 47.544273][ T4010] syz.5.158: attempt to access beyond end of device [ 47.544273][ T4010] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 47.585570][ T4010] syz.5.158: attempt to access beyond end of device [ 47.585570][ T4010] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 47.600298][ T4010] syz.5.158: attempt to access beyond end of device [ 47.600298][ T4010] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 47.793917][ T4019] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.164'. [ 47.847760][ T4030] netlink: 'syz.5.169': attribute type 3 has an invalid length. [ 47.855770][ T4030] netlink: 'syz.5.169': attribute type 3 has an invalid length. [ 47.867904][ T4032] loop4: detected capacity change from 0 to 512 [ 47.875589][ T4019] netlink: zone id is out of range [ 47.881103][ T4019] netlink: zone id is out of range [ 47.905710][ T4019] netlink: zone id is out of range [ 47.912578][ T4019] netlink: del zone limit has 8 unknown bytes [ 47.955044][ T4032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.980283][ T4032] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.012422][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 48.024526][ T4043] netlink: 208 bytes leftover after parsing attributes in process `syz.5.173'. [ 48.038453][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.108769][ T4048] loop4: detected capacity change from 0 to 512 [ 48.164958][ T4048] EXT4-fs (loop4): too many log groups per flexible block group [ 48.197835][ T4048] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 48.224920][ T4048] EXT4-fs (loop4): mount failed [ 48.314364][ T918] IPVS: starting estimator thread 0... [ 48.474277][ T4060] IPVS: using max 2208 ests per chain, 110400 per kthread [ 48.526778][ T3485] IPVS: starting estimator thread 0... [ 48.635459][ T4071] IPVS: using max 2208 ests per chain, 110400 per kthread [ 48.975333][ T60] IPVS: stop unused estimator thread 0... [ 49.202034][ T4084] loop3: detected capacity change from 0 to 4096 [ 49.225925][ T4084] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.187: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 49.286621][ T4084] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.187: Bad quota inode: 3, type: 0 [ 49.333458][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 49.333478][ T29] audit: type=1400 audit(1770214112.432:243): avc: denied { create } for pid=4053 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.362547][ T4084] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.411898][ T4084] EXT4-fs (loop3): mount failed [ 49.436094][ T29] audit: type=1400 audit(1770214112.532:244): avc: denied { setopt } for pid=4053 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.910685][ T29] audit: type=1326 audit(1770214113.012:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 49.934172][ T29] audit: type=1326 audit(1770214113.012:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 49.995537][ T29] audit: type=1326 audit(1770214113.012:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 50.018883][ T29] audit: type=1326 audit(1770214113.012:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 50.042183][ T29] audit: type=1326 audit(1770214113.012:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 50.071373][ T29] audit: type=1326 audit(1770214113.012:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 50.094909][ T29] audit: type=1326 audit(1770214113.012:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 50.118202][ T29] audit: type=1326 audit(1770214113.012:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 50.149709][ T4109] netlink: 'syz.5.196': attribute type 1 has an invalid length. [ 50.267163][ T4116] netlink: 'syz.3.199': attribute type 2 has an invalid length. [ 50.274913][ T4116] __nla_validate_parse: 1 callbacks suppressed [ 50.274925][ T4116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.199'. [ 50.306952][ T4117] loop5: detected capacity change from 0 to 512 [ 50.332716][ T4117] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.376477][ T4117] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 50.400067][ T4117] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.200: attempt to clear invalid blocks 2 len 1 [ 50.446948][ T4128] loop2: detected capacity change from 0 to 512 [ 50.454554][ T4117] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 50.469709][ T4117] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.200: invalid indirect mapped block 1819239214 (level 0) [ 50.484909][ T4117] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.200: invalid indirect mapped block 1819239214 (level 1) [ 50.500030][ T4117] EXT4-fs (loop5): 1 truncate cleaned up [ 50.506318][ T4117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.510657][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 50.546039][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.569871][ T4128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.615694][ T4128] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.685892][ T4144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 50.694829][ T4144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 50.713596][ T4128] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.205: corrupted inode contents [ 50.728480][ T4146] smc: net device bond0 applied user defined pnetid SYZ2 [ 50.736278][ T4144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 50.745226][ T4144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 50.757649][ T4146] netlink: 14 bytes leftover after parsing attributes in process `syz.5.213'. [ 50.767643][ T4128] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.205: mark_inode_dirty error [ 50.796389][ T4146] smc: removing net device bond0 with user defined pnetid SYZ2 [ 50.815960][ T4128] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.205: corrupted inode contents [ 50.828136][ T4146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.862487][ T4146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.887601][ T4146] bond0 (unregistering): Released all slaves [ 50.905053][ T4128] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.205: mark_inode_dirty error [ 50.976687][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.081979][ T4155] loop0: detected capacity change from 0 to 128 [ 51.482557][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 51.730207][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 51.739245][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 51.951103][ T4193] loop3: detected capacity change from 0 to 8192 [ 52.139168][ T4207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.194681][ T4207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.462884][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.478589][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.509257][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.536823][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.804987][ T4264] syz_tun: entered allmulticast mode [ 52.810806][ T4263] syz_tun: left allmulticast mode [ 52.932279][ T4274] loop0: detected capacity change from 0 to 128 [ 52.947878][ T4274] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.963445][ T4274] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.071058][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.175345][ T10] Process accounting resumed [ 54.020168][ T4326] loop2: detected capacity change from 0 to 512 [ 54.030862][ T4326] EXT4-fs: Ignoring removed oldalloc option [ 54.051346][ T4326] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.064547][ T4326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.090994][ T4326] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #11: comm syz.2.287: corrupted in-inode xattr: invalid ea_ino [ 54.116333][ T4326] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.287: couldn't read orphan inode 11 (err -117) [ 54.140189][ T4326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.208273][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.301649][ T4339] SELinux: failed to load policy [ 54.335310][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 54.335325][ T29] audit: type=1326 audit(1770214117.442:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.380481][ T29] audit: type=1326 audit(1770214117.442:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.403926][ T29] audit: type=1326 audit(1770214117.442:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.427234][ T29] audit: type=1326 audit(1770214117.442:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.450572][ T29] audit: type=1326 audit(1770214117.442:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.473998][ T29] audit: type=1326 audit(1770214117.442:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.497298][ T29] audit: type=1326 audit(1770214117.442:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.520573][ T29] audit: type=1326 audit(1770214117.442:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.543844][ T29] audit: type=1326 audit(1770214117.442:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.567154][ T29] audit: type=1326 audit(1770214117.442:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f45fb78e code=0x7ffc0000 [ 54.631516][ T4350] loop2: detected capacity change from 0 to 512 [ 54.662190][ T4350] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 54.670614][ T4350] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.677583][ T4350] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.692973][ T4350] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 54.703594][ T4350] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.298: corrupted inode contents [ 54.754418][ T4350] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #16: comm syz.2.298: mark_inode_dirty error [ 54.799384][ T4350] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.298: corrupted inode contents [ 54.835363][ T4350] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.298: mark_inode_dirty error [ 54.925262][ T4350] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.298: corrupted inode contents [ 54.974824][ T4350] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 54.999756][ T4350] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.298: corrupted inode contents [ 55.044010][ T4350] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.298: mark_inode_dirty error [ 55.083074][ T4350] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 55.109979][ T4350] EXT4-fs (loop2): 1 truncate cleaned up [ 55.118113][ T4350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.132062][ T4373] netlink: 'syz.5.307': attribute type 29 has an invalid length. [ 55.152515][ T4374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.181721][ T4373] netlink: 'syz.5.307': attribute type 29 has an invalid length. [ 55.278003][ T4350] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 55.319795][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.529164][ T4402] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 55.542980][ T4402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.595900][ T4402] bond1 (unregistering): Released all slaves [ 55.643792][ T4411] loop0: detected capacity change from 0 to 128 [ 55.666274][ T4411] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.696468][ T4411] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.038996][ T4436] loop5: detected capacity change from 0 to 512 [ 56.074778][ T4436] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 56.090944][ T4436] EXT4-fs (loop5): orphan cleanup on readonly fs [ 56.097812][ T4436] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.332: Block bitmap for bg 0 marked uninitialized [ 56.111704][ T4436] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 56.121819][ T4436] EXT4-fs (loop5): 1 orphan inode deleted [ 56.131330][ T4436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.146168][ T4436] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 56.171561][ T4436] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 56.200982][ T4446] geneve2: entered promiscuous mode [ 56.249166][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.745425][ T4488] loop0: detected capacity change from 0 to 512 [ 56.802464][ T4488] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 56.844085][ T4488] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.857974][ T4499] __nla_validate_parse: 8 callbacks suppressed [ 56.857992][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.351'. [ 56.901951][ T4488] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.348: Block bitmap for bg 0 marked uninitialized [ 56.926743][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.957004][ T4488] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 56.981060][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.002539][ T4488] EXT4-fs (loop0): 1 orphan inode deleted [ 57.020480][ T4488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.058716][ T4488] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 57.061622][ T4524] loop5: detected capacity change from 0 to 256 [ 57.081426][ T4488] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 57.181581][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.241309][ T4540] loop0: detected capacity change from 0 to 1024 [ 57.278746][ T4540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.309540][ T4540] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.485172][ T4540] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.355: Freeing blocks not in datazone - block = 0, count = 16 [ 57.668483][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.707854][ T4595] bridge_slave_1: left allmulticast mode [ 57.713586][ T4595] bridge_slave_1: left promiscuous mode [ 57.719420][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.741030][ T3339] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 57.763250][ T4599] loop5: detected capacity change from 0 to 128 [ 57.793088][ T3339] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.805474][ T3339] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.805474][ T3339] [ 57.815337][ T3339] EXT4-fs (loop0): Total free blocks count 0 [ 57.821410][ T3339] EXT4-fs (loop0): Free/Dirty block details [ 57.827420][ T3339] EXT4-fs (loop0): free_blocks=16 [ 57.832546][ T3339] EXT4-fs (loop0): dirty_blocks=32 [ 57.837716][ T3339] EXT4-fs (loop0): Block reservation details [ 57.843819][ T3339] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 57.854726][ T4595] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 57.942400][ T4584] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 3 with error 28 [ 57.942426][ T4599] bio_check_eod: 44 callbacks suppressed [ 57.942442][ T4599] syz.5.361: attempt to access beyond end of device [ 57.942442][ T4599] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 57.977127][ T4599] syz.5.361: attempt to access beyond end of device [ 57.977127][ T4599] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 57.990744][ T4599] syz.5.361: attempt to access beyond end of device [ 57.990744][ T4599] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 58.014458][ T4599] syz.5.361: attempt to access beyond end of device [ 58.014458][ T4599] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 58.060283][ T4599] syz.5.361: attempt to access beyond end of device [ 58.060283][ T4599] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 58.091712][ T4599] syz.5.361: attempt to access beyond end of device [ 58.091712][ T4599] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 58.126111][ T4621] netlink: 'syz.2.365': attribute type 4 has an invalid length. [ 58.163961][ T4599] syz.5.361: attempt to access beyond end of device [ 58.163961][ T4599] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 58.224610][ T4599] syz.5.361: attempt to access beyond end of device [ 58.224610][ T4599] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 58.264520][ T4599] syz.5.361: attempt to access beyond end of device [ 58.264520][ T4599] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 58.308743][ T4599] syz.5.361: attempt to access beyond end of device [ 58.308743][ T4599] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 58.909928][ T4652] loop5: detected capacity change from 0 to 512 [ 59.059056][ T4652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.216532][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.366313][ T4691] gretap0: entered promiscuous mode [ 59.385896][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 59.385916][ T29] audit: type=1400 audit(1770214122.492:803): avc: denied { setopt } for pid=4694 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.484320][ T29] audit: type=1400 audit(1770214122.562:804): avc: denied { read } for pid=4694 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.546333][ T4703] IPv6: sit1: Disabled Multicast RS [ 59.692557][ T4707] loop3: detected capacity change from 0 to 8192 [ 59.737031][ T29] audit: type=1400 audit(1770214122.832:805): avc: denied { name_bind } for pid=4716 comm="syz.0.394" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 59.757919][ T29] audit: type=1400 audit(1770214122.842:806): avc: denied { read } for pid=4716 comm="syz.0.394" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.890684][ T4722] team0: entered promiscuous mode [ 59.895865][ T4722] team_slave_0: entered promiscuous mode [ 59.901850][ T4722] team_slave_1: entered promiscuous mode [ 59.919600][ T4721] team0: left promiscuous mode [ 59.924471][ T4721] team_slave_0: left promiscuous mode [ 59.930009][ T4721] team_slave_1: left promiscuous mode [ 59.947505][ T29] audit: type=1400 audit(1770214123.052:807): avc: denied { setopt } for pid=4723 comm="syz.5.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.379232][ T4756] loop2: detected capacity change from 0 to 8192 [ 60.471724][ T29] audit: type=1400 audit(1770214123.562:808): avc: denied { mounton } for pid=4755 comm="syz.2.402" path="/88/file2/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 60.571018][ T3319] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 60.578945][ T3319] FAT-fs (loop2): Filesystem has been set read-only [ 60.598959][ T29] audit: type=1400 audit(1770214123.702:809): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.718235][ T4761] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 60.837772][ T4767] process 'syz.2.407' launched './file1' with NULL argv: empty string added [ 60.847754][ T4765] xt_hashlimit: size too large, truncated to 1048576 [ 60.855951][ T29] audit: type=1400 audit(1770214123.962:810): avc: denied { execute_no_trans } for pid=4766 comm="syz.2.407" path="/92/file1" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.210531][ T4778] tipc: Failed to remove unknown binding: 66,1,1/0:3113066883/3113066885 [ 61.219159][ T4778] tipc: Failed to remove unknown binding: 66,1,1/0:3113066883/3113066885 [ 61.348135][ T29] audit: type=1326 audit(1770214124.452:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.5.414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcff90aeb9 code=0x0 [ 61.401497][ T29] audit: type=1326 audit(1770214124.472:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 61.426835][ T4790] sctp: [Deprecated]: syz.0.416 (pid 4790) Use of int in max_burst socket option. [ 61.426835][ T4790] Use struct sctp_assoc_value instead [ 61.556577][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 61.580913][ T4794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.614499][ T4794] bond1: Unable to set up delay as MII monitoring is disabled [ 62.316098][ T4851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.326524][ T4851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.385945][ T4851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.396346][ T4851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.449931][ T4855] loop5: detected capacity change from 0 to 8192 [ 62.478371][ T4851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.488879][ T4851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.569608][ T4851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.580016][ T4851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.621760][ T4589] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.630328][ T4589] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.702545][ T4589] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.710857][ T4589] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.823012][ T4589] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.831433][ T4589] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.912755][ T4589] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.921065][ T4589] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.947859][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 63.208225][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.215540][ T4891] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.386382][ T4898] loop3: detected capacity change from 0 to 4096 [ 63.404099][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.450769][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.479775][ T4898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.569686][ T4897] tipc: Started in network mode [ 63.574679][ T4897] tipc: Node identity 4, cluster identity 4711 [ 63.580886][ T4897] tipc: Node number set to 4 [ 63.607342][ T372] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 63.616338][ T372] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 63.625284][ T372] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.705875][ T4914] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 63.708589][ T372] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 63.722616][ T372] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 63.731638][ T372] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.762456][ T4914] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 63.784955][ T372] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 63.794035][ T372] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 63.803061][ T372] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.822720][ T372] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 63.831766][ T372] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 63.840746][ T372] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.856164][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.975214][ T3422] kernel write not supported for file [eventfd] (pid: 3422 comm: kworker/1:3) [ 64.014738][ T4929] all: renamed from bridge_slave_0 [ 64.048173][ T4926] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 64.136805][ T4943] tipc: Started in network mode [ 64.141827][ T4943] tipc: Node identity 4, cluster identity 4711 [ 64.148075][ T4943] tipc: Node number set to 4 [ 64.869288][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 64.894126][ T4967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 65.041197][ T4980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.487'. [ 65.071324][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 65.071345][ T29] audit: type=1400 audit(1770214128.172:848): avc: denied { getopt } for pid=4981 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.104141][ T29] audit: type=1400 audit(1770214128.202:849): avc: denied { override_creds } for pid=4981 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.183861][ T29] audit: type=1400 audit(1770214128.282:850): avc: denied { read } for pid=4990 comm="syz.5.494" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.189433][ T4991] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.207827][ T29] audit: type=1400 audit(1770214128.282:851): avc: denied { open } for pid=4990 comm="syz.5.494" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.237461][ T29] audit: type=1400 audit(1770214128.282:852): avc: denied { ioctl } for pid=4990 comm="syz.5.494" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.381712][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 65.400419][ T4998] team1: entered promiscuous mode [ 65.405713][ T4998] team1: entered allmulticast mode [ 65.421218][ T4998] 8021q: adding VLAN 0 to HW filter on device team1 [ 65.590876][ T5002] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 65.640715][ T5006] smc: adding net device bond0 with user defined pnetid SYZ2 [ 65.649190][ T5006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.657421][ T5006] team0: Failed to send port change of device bond0 via netlink (err -105) [ 65.666285][ T5006] team0: Failed to send options change via netlink (err -105) [ 65.673779][ T5006] team0: Port device bond0 added [ 65.679280][ T60] team0: Failed to send port change of device bond0 via netlink (err -105) [ 65.846320][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.854168][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.861915][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.869756][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.877099][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 65.997911][ T5031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5031 comm=syz.3.512 [ 66.030662][ T5031] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 66.051042][ T5031] bond2: (slave bridge1): making interface the new active one [ 66.060113][ T5031] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 66.112312][ T29] audit: type=1400 audit(1770214129.212:853): avc: denied { getopt } for pid=5034 comm="syz.4.514" laddr=172.20.20.10 lport=4 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.161851][ T5035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.314606][ T29] audit: type=1400 audit(1770214129.412:854): avc: denied { read } for pid=5046 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.450320][ T5055] netlink: 'syz.0.521': attribute type 142 has an invalid length. [ 66.458320][ T5055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 66.986387][ T29] audit: type=1326 audit(1770214130.092:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 67.036480][ T29] audit: type=1326 audit(1770214130.122:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 67.059807][ T29] audit: type=1326 audit(1770214130.122:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 67.242407][ T5086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.534'. [ 67.305063][ T5091] geneve3: entered promiscuous mode [ 67.533437][ T5103] loop4: detected capacity change from 0 to 1024 [ 67.548617][ T5103] EXT4-fs: inline encryption not supported [ 67.574723][ T5103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.649267][ T5093] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.537: Allocating blocks 385-513 which overlap fs metadata [ 67.731214][ T5093] EXT4-fs (loop4): pa ffff8881098110e0: logic 16, phys. 129, len 24 [ 67.739362][ T5093] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 67.781092][ T5093] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 67.793618][ T5093] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.793618][ T5093] [ 67.803382][ T5093] EXT4-fs (loop4): Total free blocks count 0 [ 67.809434][ T5093] EXT4-fs (loop4): Free/Dirty block details [ 67.815386][ T5093] EXT4-fs (loop4): free_blocks=128 [ 67.820530][ T5093] EXT4-fs (loop4): dirty_blocks=0 [ 67.824944][ T5122] loop0: detected capacity change from 0 to 764 [ 67.825645][ T5093] EXT4-fs (loop4): Block reservation details [ 67.837928][ T5093] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 68.074244][ T5140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.554'. [ 68.083260][ T5140] netlink: 'syz.5.554': attribute type 12 has an invalid length. [ 68.096152][ T5140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.554'. [ 68.105307][ T5140] netlink: 'syz.5.554': attribute type 12 has an invalid length. [ 68.109116][ T4584] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.149167][ T4584] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.173919][ T4584] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.194501][ T4584] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.251442][ T5149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'. [ 68.260479][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 68.278675][ T4584] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.288596][ T5149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'. [ 68.297545][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 68.307091][ T4584] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.311613][ T5122] iso9660: Unknown parameter '0x000000000000000300000000000000000000017777777777777777777770x0000000000000000' [ 68.317533][ T4584] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.336985][ T4584] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.987362][ T5194] sch_fq: defrate 7 ignored. [ 69.044067][ T5198] loop0: detected capacity change from 0 to 2048 [ 69.145934][ T3300] loop0: p3 p4 < > [ 69.155030][ T3300] loop0: p3 start 11362048 is beyond EOD, truncated [ 69.175814][ T5198] loop0: p3 p4 < > [ 69.179816][ T5198] loop0: p3 start 11362048 is beyond EOD, truncated [ 69.336606][ T5215] loop2: detected capacity change from 0 to 128 [ 69.364083][ T5215] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.377531][ T5215] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.456894][ T5229] netlink: 104 bytes leftover after parsing attributes in process `syz.4.594'. [ 69.496103][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.688987][ T5248] netlink: 'syz.4.603': attribute type 10 has an invalid length. [ 69.852487][ T5260] bridge_slave_0: left allmulticast mode [ 69.858298][ T5260] bridge_slave_0: left promiscuous mode [ 69.864054][ T5260] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.891954][ T5268] loop5: detected capacity change from 0 to 256 [ 69.915127][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.611'. [ 69.956942][ T5260] bond0: (slave bridge_slave_1): Releasing backup interface [ 70.010239][ T5260] bond0: (slave bond_slave_0): Releasing backup interface [ 70.057671][ T5260] bond0: (slave bond_slave_1): Releasing backup interface [ 70.160343][ T5260] team0: Port device team_slave_0 removed [ 70.199461][ T5260] team0: Port device team_slave_1 removed [ 70.224916][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.232444][ T5260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.287418][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 70.287434][ T29] audit: type=1400 audit(1770214133.392:906): avc: denied { execute } for pid=5286 comm="syz.5.619" path="/130/cpu.stat" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.329099][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.336704][ T5260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.388112][ T5260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.517662][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 70.526743][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 70.961797][ T5324] loop2: detected capacity change from 0 to 1024 [ 70.978004][ T29] audit: type=1400 audit(1770214134.082:907): avc: denied { firmware_load } for pid=5329 comm="syz.0.636" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 71.018698][ T5324] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.029141][ T5324] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 71.221621][ T5342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5342 comm=syz.3.642 [ 71.246310][ T5342] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 71.271299][ T5342] bond3: (slave bridge2): making interface the new active one [ 71.295047][ T5342] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 71.573663][ T29] audit: type=1400 audit(1770214134.672:908): avc: denied { create } for pid=5365 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.633079][ T29] audit: type=1400 audit(1770214134.702:909): avc: denied { ioctl } for pid=5365 comm="syz.2.652" path="socket:[11894]" dev="sockfs" ino=11894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.151047][ T29] audit: type=1400 audit(1770214135.252:910): avc: denied { mount } for pid=5387 comm="syz.2.660" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 72.178238][ T5389] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 72.341849][ T29] audit: type=1400 audit(1770214135.442:911): avc: denied { execute_no_trans } for pid=5400 comm="syz.0.665" path="/122/file1" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.440393][ T29] audit: type=1400 audit(1770214135.542:912): avc: denied { read write } for pid=5404 comm="syz.0.667" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.494281][ T29] audit: type=1400 audit(1770214135.542:913): avc: denied { open } for pid=5404 comm="syz.0.667" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.519240][ T29] audit: type=1400 audit(1770214135.632:914): avc: denied { connect } for pid=5404 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.611041][ T5399] loop5: detected capacity change from 0 to 32768 [ 72.675711][ T5399] loop5: p1 p3 < p5 p6 > [ 72.680164][ T5399] loop5: partition table partially beyond EOD, truncated [ 72.793157][ T29] audit: type=1400 audit(1770214135.892:915): avc: denied { connect } for pid=5419 comm="syz.5.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.939228][ T5436] loop5: detected capacity change from 0 to 128 [ 72.957131][ T5436] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.992569][ T5439] loop0: detected capacity change from 0 to 512 [ 73.016532][ T5436] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.128904][ T5439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.146624][ T5439] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.165685][ T3583] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.745161][ T5480] netlink: 'syz.4.697': attribute type 29 has an invalid length. [ 73.754223][ T5480] netlink: 'syz.4.697': attribute type 29 has an invalid length. [ 73.764377][ T5480] __nla_validate_parse: 3 callbacks suppressed [ 73.770634][ T5480] netlink: 500 bytes leftover after parsing attributes in process `syz.4.697'. [ 73.779809][ T5480] unsupported nla_type 66 [ 73.918007][ T5449] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.596603][ T5499] chnl_net:caif_netlink_parms(): no params data found [ 74.750399][ T5499] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.757568][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.794781][ T5499] bridge_slave_0: entered allmulticast mode [ 74.801455][ T5499] bridge_slave_0: entered promiscuous mode [ 74.814423][ T5499] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.821539][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.829614][ T5499] bridge_slave_1: entered allmulticast mode [ 74.836495][ T5499] bridge_slave_1: entered promiscuous mode [ 74.843101][ T5531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 74.852058][ T5531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 74.886033][ T5499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.902071][ T5499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.932759][ T5499] team0: Port device team_slave_0 added [ 74.939877][ T5499] team0: Port device team_slave_1 added [ 74.960091][ T5499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.967111][ T5499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.993162][ T5499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.004901][ T5499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.011895][ T5499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.038036][ T5499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.068084][ T5499] hsr_slave_0: entered promiscuous mode [ 75.074435][ T5499] hsr_slave_1: entered promiscuous mode [ 75.081953][ T5499] debugfs: 'hsr0' already exists in 'hsr' [ 75.087801][ T5499] Cannot create hsr debugfs directory [ 75.190796][ T5553] loop4: detected capacity change from 0 to 2048 [ 75.222745][ T5553] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.243599][ T5553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.260316][ T5499] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.270145][ T5499] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.287887][ T5499] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.298814][ T5499] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.311636][ T5561] loop5: detected capacity change from 0 to 1024 [ 75.312013][ T5561] EXT4-fs: Ignoring removed orlov option [ 75.321226][ T5561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.352879][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 75.390036][ T5499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.411589][ T5499] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.420100][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.436919][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.444023][ T4584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.473426][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.480551][ T4584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.540660][ T5573] loop4: detected capacity change from 0 to 8192 [ 75.550370][ T5499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.602811][ T5583] tipc: Started in network mode [ 75.607855][ T5583] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 75.615140][ T5583] tipc: Enabled bearer , priority 18 [ 75.767316][ T5499] veth0_vlan: entered promiscuous mode [ 75.781425][ T5499] veth1_vlan: entered promiscuous mode [ 75.816194][ T5499] veth0_macvtap: entered promiscuous mode [ 75.829585][ T5499] veth1_macvtap: entered promiscuous mode [ 75.842033][ T5499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.858413][ T5499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.878335][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 75.878353][ T29] audit: type=1326 audit(1770214138.982:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 75.898474][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.907958][ T29] audit: type=1326 audit(1770214138.982:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 75.928385][ T29] audit: type=1326 audit(1770214138.992:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 75.963623][ T29] audit: type=1326 audit(1770214138.992:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 75.981718][ T5611] loop2: detected capacity change from 0 to 512 [ 75.987215][ T29] audit: type=1326 audit(1770214138.992:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 76.016822][ T29] audit: type=1326 audit(1770214138.992:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 76.023809][ T5611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.048388][ T29] audit: type=1326 audit(1770214139.052:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8a778b78e code=0x7ffc0000 [ 76.072786][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.073296][ T29] audit: type=1326 audit(1770214139.052:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8a778b78e code=0x7ffc0000 [ 76.091025][ T5611] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.105146][ T29] audit: type=1326 audit(1770214139.052:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8a778b78e code=0x7ffc0000 [ 76.123411][ T5611] EXT4-fs (loop2): 1 truncate cleaned up [ 76.141536][ T29] audit: type=1326 audit(1770214139.072:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8a778b78e code=0x7ffc0000 [ 76.148652][ T5611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.191632][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.206227][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.220667][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.273562][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'. [ 76.286612][ T5611] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 76.315123][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.360718][ T3485] IPVS: starting estimator thread 0... [ 76.406204][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 76.428284][ T4589] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.437260][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 76.469737][ T4589] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.481163][ T5624] IPVS: using max 1920 ests per chain, 96000 per kthread [ 76.499777][ T4589] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.521125][ T4589] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.533041][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.745'. [ 76.658703][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 76.667634][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 76.744512][ T918] tipc: Node number set to 10463914 [ 76.873455][ T5662] loop4: detected capacity change from 0 to 256 [ 78.046626][ T5692] xt_hashlimit: size too large, truncated to 1048576 [ 78.053383][ T5692] xt_hashlimit: max too large, truncated to 1048576 [ 78.147756][ T5697] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 78.212535][ T5699] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 78.333032][ T5708] loop4: detected capacity change from 0 to 512 [ 78.467025][ T5708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.479961][ T5708] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.504577][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.708794][ T3319] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 78.719858][ T3319] CPU: 1 UID: 0 PID: 3319 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.719937][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.719990][ T3319] Call Trace: [ 78.719996][ T3319] [ 78.720002][ T3319] __dump_stack+0x1d/0x30 [ 78.720026][ T3319] dump_stack_lvl+0x95/0xd0 [ 78.720051][ T3319] dump_stack+0x15/0x1b [ 78.720073][ T3319] dump_header+0x80/0x240 [ 78.720174][ T3319] oom_kill_process+0x295/0x350 [ 78.720205][ T3319] out_of_memory+0x97d/0xb80 [ 78.720267][ T3319] try_charge_memcg+0x62e/0xa10 [ 78.720294][ T3319] __mem_cgroup_charge+0x65/0x150 [ 78.720324][ T3319] filemap_add_folio+0x110/0x350 [ 78.720350][ T3319] __filemap_get_folio_mpol+0x326/0x680 [ 78.720407][ T3319] filemap_fault+0x473/0xbb0 [ 78.720469][ T3319] __do_fault+0xbc/0x200 [ 78.720493][ T3319] handle_mm_fault+0x11d7/0x3030 [ 78.720525][ T3319] ? vma_start_read+0x1c7/0x2c0 [ 78.720553][ T3319] do_user_addr_fault+0x62f/0x1050 [ 78.720673][ T3319] exc_page_fault+0x62/0xa0 [ 78.720740][ T3319] asm_exc_page_fault+0x26/0x30 [ 78.720764][ T3319] RIP: 0033:0x7fde54878fb4 [ 78.720824][ T3319] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 [ 78.720841][ T3319] RSP: 002b:00007ffd2174b7d0 EFLAGS: 00010202 [ 78.720860][ T3319] RAX: 0000001b33824000 RBX: 0000000000000185 RCX: 00000000000130b0 [ 78.720876][ T3319] RDX: 000000000955c66d RSI: 00007ffd2174b860 RDI: 0000000000000001 [ 78.720891][ T3319] RBP: 00007ffd2174b80c R08: 00000000239c44c0 R09: 7fffffffffffffff [ 78.720908][ T3319] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 78.720990][ T3319] R13: 00000000000927c0 R14: 0000000000012d41 R15: 00007ffd2174b860 [ 78.721009][ T3319] [ 78.721015][ T3319] memory: usage 307200kB, limit 307200kB, failcnt 5870 [ 78.909627][ T3319] memory+swap: usage 322080kB, limit 9007199254740988kB, failcnt 0 [ 78.917603][ T3319] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 78.924976][ T3319] Memory cgroup stats for /syz2: [ 78.925651][ T3319] cache 0 [ 78.933603][ T3319] rss 0 [ 78.936451][ T3319] shmem 0 [ 78.939451][ T3319] mapped_file 0 [ 78.942926][ T3319] dirty 0 [ 78.946181][ T3319] writeback 0 [ 78.949740][ T3319] workingset_refault_anon 894 [ 78.954467][ T3319] workingset_refault_file 316 [ 78.959162][ T3319] swap 15237120 [ 78.962654][ T3319] swapcached 8192 [ 78.966344][ T3319] pgpgin 45285 [ 78.969825][ T3319] pgpgout 45283 [ 78.973340][ T3319] pgfault 43104 [ 78.976969][ T3319] pgmajfault 134 [ 78.980562][ T3319] inactive_anon 4096 [ 78.984499][ T3319] active_anon 4096 [ 78.988323][ T3319] inactive_file 0 [ 78.991971][ T3319] active_file 0 [ 78.995571][ T3319] unevictable 0 [ 78.999065][ T3319] hierarchical_memory_limit 314572800 [ 79.004491][ T3319] hierarchical_memsw_limit 9223372036854771712 [ 79.010713][ T3319] total_cache 0 [ 79.014226][ T3319] total_rss 0 [ 79.017575][ T3319] total_shmem 0 [ 79.021093][ T3319] total_mapped_file 0 [ 79.025145][ T3319] total_dirty 0 [ 79.028649][ T3319] total_writeback 0 [ 79.032508][ T3319] total_workingset_refault_anon 894 [ 79.037813][ T3319] total_workingset_refault_file 316 [ 79.043020][ T3319] total_swap 15237120 [ 79.047058][ T3319] total_swapcached 8192 [ 79.051253][ T3319] total_pgpgin 45285 [ 79.055193][ T3319] total_pgpgout 45283 [ 79.059221][ T3319] total_pgfault 43104 [ 79.063214][ T3319] total_pgmajfault 134 [ 79.067398][ T3319] total_inactive_anon 4096 [ 79.071836][ T3319] total_active_anon 4096 [ 79.076203][ T3319] total_inactive_file 0 [ 79.080456][ T3319] total_active_file 0 [ 79.084479][ T3319] total_unevictable 0 [ 79.088500][ T3319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.755,pid=5657,uid=0 [ 79.103098][ T3319] Memory cgroup out of memory: Killed process 5657 (syz.2.755) total-vm:100548kB, anon-rss:1208kB, file-rss:26336kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 79.253212][ T5742] sock: sock_set_timeout: `syz.4.788' (pid 5742) tries to set negative timeout [ 79.715251][ T5779] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 79.741389][ T5779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.769149][ T5779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.776852][ T5779] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 79.788980][ T5779] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 79.908698][ T5788] loop2: detected capacity change from 0 to 512 [ 79.925430][ T5788] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.951045][ T5788] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 80.024015][ T5788] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 80.071041][ T5799] __nla_validate_parse: 2 callbacks suppressed [ 80.071057][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 80.086160][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 80.713584][ T5777] syz.3.802 (5777) used greatest stack depth: 7272 bytes left [ 80.808229][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 80.844058][ T5824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.819'. [ 80.923156][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 80.923172][ T29] audit: type=1326 audit(1770214144.022:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 80.984617][ T29] audit: type=1326 audit(1770214144.022:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 81.008023][ T29] audit: type=1326 audit(1770214144.022:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 81.031407][ T29] audit: type=1326 audit(1770214144.072:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 81.054810][ T29] audit: type=1326 audit(1770214144.072:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 81.078175][ T29] audit: type=1326 audit(1770214144.072:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 81.101764][ T29] audit: type=1400 audit(1770214144.072:1064): avc: denied { ioctl } for pid=5828 comm="syz.3.821" path="socket:[14107]" dev="sockfs" ino=14107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.126697][ T29] audit: type=1326 audit(1770214144.082:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 81.150073][ T29] audit: type=1326 audit(1770214144.082:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 81.173485][ T29] audit: type=1326 audit(1770214144.082:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fde549aaeb9 code=0x7ffc0000 [ 81.406463][ T5845] netlink: 88 bytes leftover after parsing attributes in process `syz.4.829'. [ 81.445989][ T5849] netlink: 'syz.5.831': attribute type 8 has an invalid length. [ 81.453783][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.831'. [ 81.501351][ T5849] bond0: entered promiscuous mode [ 81.506607][ T5849] bond0: left promiscuous mode [ 81.735714][ T5858] loop3: detected capacity change from 0 to 128 [ 81.886370][ T5865] bio_check_eod: 42 callbacks suppressed [ 81.886388][ T5865] syz.3.834: attempt to access beyond end of device [ 81.886388][ T5865] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 81.994931][ T5865] syz.3.834: attempt to access beyond end of device [ 81.994931][ T5865] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 82.369303][ T5880] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.379839][ T5880] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.456410][ T5880] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.466877][ T5880] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.557550][ T5880] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.568092][ T5880] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.640806][ T5880] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.651303][ T5880] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.753203][ T372] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.761548][ T372] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.787234][ T372] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.795542][ T372] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.814207][ T372] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.822562][ T372] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.866113][ T5892] capability: warning: `syz.3.846' uses deprecated v2 capabilities in a way that may be insecure [ 82.886641][ T372] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.895069][ T372] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.749190][ T5904] netlink: 'syz.5.850': attribute type 27 has an invalid length. [ 84.517450][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.524801][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.254995][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.323722][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.291742][ T5905] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.314597][ T5905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.409067][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 86.409139][ T29] audit: type=1400 audit(1770214405.513:1089): avc: denied { bind } for pid=5942 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.439970][ T29] audit: type=1400 audit(1770214405.543:1090): avc: denied { setopt } for pid=5942 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.440138][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.864'. [ 86.618370][ T4584] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.627344][ T4584] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.666212][ T4584] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.675251][ T4584] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.716985][ T372] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.726082][ T372] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.756107][ T5951] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 86.793260][ T5951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.828067][ T372] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.837280][ T372] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.887628][ T5954] bond2: (slave veth5): Enslaving as an active interface with a down link [ 86.896389][ T372] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.904848][ T372] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.926503][ T29] audit: type=1400 audit(1770214406.023:1091): avc: denied { cmd } for pid=5955 comm="syz.5.869" path="socket:[14313]" dev="sockfs" ino=14313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.954716][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 86.962038][ T5951] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 87.024628][ T372] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.033066][ T372] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.053917][ T372] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.062405][ T372] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.089540][ T372] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.098062][ T372] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.240105][ T29] audit: type=1400 audit(1770214406.343:1092): avc: denied { connect } for pid=5964 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.259726][ T29] audit: type=1400 audit(1770214406.343:1093): avc: denied { bind } for pid=5964 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.279218][ T29] audit: type=1400 audit(1770214406.343:1094): avc: denied { write } for pid=5964 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.300785][ T29] audit: type=1400 audit(1770214406.393:1095): avc: denied { watch_reads } for pid=5966 comm="syz.6.873" path="/16/file1" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.362649][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.874'. [ 87.756533][ T5994] netlink: 'syz.6.883': attribute type 21 has an invalid length. [ 87.764327][ T5994] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.807294][ T5994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.814574][ T5994] IPv6: NLM_F_CREATE should be set when creating new route [ 87.821811][ T5994] IPv6: NLM_F_CREATE should be set when creating new route [ 87.829073][ T5994] IPv6: NLM_F_CREATE should be set when creating new route [ 88.184230][ T6016] netlink: 'syz.5.889': attribute type 4 has an invalid length. [ 88.265550][ T6019] netlink: 'syz.3.894': attribute type 2 has an invalid length. [ 88.273385][ T6019] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 88.294768][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 88.374168][ T29] audit: type=1326 audit(1770214407.473:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 88.490328][ T29] audit: type=1326 audit(1770214407.503:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 88.513809][ T29] audit: type=1326 audit(1770214407.503:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a77caeb9 code=0x7ffc0000 [ 88.744142][ T6040] netlink: 'syz.6.901': attribute type 1 has an invalid length. [ 88.785278][ T6042] loop3: detected capacity change from 0 to 512 [ 88.805515][ T6042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.827807][ T6042] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.903: bg 0: block 384: padding at end of block bitmap is not set [ 88.854875][ T6042] EXT4-fs (loop3): Remounting filesystem read-only [ 88.861497][ T6042] EXT4-fs (loop3): 1 truncate cleaned up [ 88.868014][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.467542][ T6075] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 89.559252][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.111854][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.124993][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.775388][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 91.775436][ T29] audit: type=1326 audit(1770214410.883:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 91.831797][ T29] audit: type=1326 audit(1770214410.913:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 91.855213][ T29] audit: type=1326 audit(1770214410.913:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 91.878939][ T29] audit: type=1326 audit(1770214410.913:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 91.902385][ T29] audit: type=1326 audit(1770214410.913:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 91.925913][ T29] audit: type=1326 audit(1770214410.913:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 91.949291][ T29] audit: type=1326 audit(1770214410.913:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 91.972902][ T29] audit: type=1326 audit(1770214410.913:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 91.996279][ T29] audit: type=1326 audit(1770214410.913:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 92.019620][ T29] audit: type=1326 audit(1770214410.913:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f463aeb9 code=0x7ffc0000 [ 92.126626][ T6192] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.953'. [ 93.189958][ T6235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6235 comm=syz.4.967 [ 93.856037][ T6266] loop4: detected capacity change from 0 to 1024 [ 93.888809][ T6266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.915417][ T6266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.509933][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.549829][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.254665][ T6302] netlink: 'syz.6.994': attribute type 83 has an invalid length. [ 96.130097][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 96.193035][ T6321] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1000'. [ 96.655440][ T6342] SELinux: Context system_u: is not valid (left unmapped). [ 96.722541][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 96.737379][ T6348] loop5: detected capacity change from 0 to 128 [ 96.940725][ T6305] ================================================================== [ 96.948884][ T6305] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 96.955906][ T6305] [ 96.958273][ T6305] read-write to 0xffff88812b6c4d2c of 4 bytes by task 6299 on cpu 1: [ 96.966377][ T6305] fifo_open+0x86/0x5d0 [ 96.970571][ T6305] do_dentry_open+0x54b/0xa60 [ 96.975303][ T6305] vfs_open+0x37/0x1e0 [ 96.979420][ T6305] path_openat+0x1de9/0x23c0 [ 96.984065][ T6305] do_filp_open+0x15d/0x280 [ 96.988617][ T6305] do_sys_openat2+0xa6/0x150 [ 96.993269][ T6305] __x64_sys_openat+0xf2/0x120 [ 96.998092][ T6305] x64_sys_call+0x2b07/0x3000 [ 97.002821][ T6305] do_syscall_64+0xc0/0x2a0 [ 97.007467][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.013398][ T6305] [ 97.015763][ T6305] read to 0xffff88812b6c4d2c of 4 bytes by task 6305 on cpu 0: [ 97.023347][ T6305] wait_for_partner+0xd5/0x1e0 [ 97.028273][ T6305] fifo_open+0x4b1/0x5d0 [ 97.032563][ T6305] do_dentry_open+0x54b/0xa60 [ 97.037286][ T6305] vfs_open+0x37/0x1e0 [ 97.041422][ T6305] path_openat+0x1de9/0x23c0 [ 97.046072][ T6305] do_filp_open+0x15d/0x280 [ 97.050676][ T6305] do_sys_openat2+0xa6/0x150 [ 97.055324][ T6305] __x64_sys_openat+0xf2/0x120 [ 97.060132][ T6305] x64_sys_call+0x2b07/0x3000 [ 97.064859][ T6305] do_syscall_64+0xc0/0x2a0 [ 97.069434][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.075420][ T6305] [ 97.077775][ T6305] value changed: 0x00000001 -> 0x00000002 [ 97.083526][ T6305] [ 97.085884][ T6305] Reported by Kernel Concurrency Sanitizer on: [ 97.092069][ T6305] CPU: 0 UID: 0 PID: 6305 Comm: syz.3.993 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.101755][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.111846][ T6305] ==================================================================