last executing test programs: 10.516200797s ago: executing program 3 (id=5959): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 10.358167347s ago: executing program 3 (id=5961): unshare(0x2040400) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 9.991395728s ago: executing program 3 (id=5963): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x8}, 0x2c) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) memfd_secret(0x80000) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 9.9519426s ago: executing program 3 (id=5964): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x40) 9.900708953s ago: executing program 3 (id=5965): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfe0, &(0x7f0000001300)=ANY=[], 0x0) 9.829007008s ago: executing program 3 (id=5967): openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r3, r1, 0xb, 0x20}, 0x20) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 1.504144282s ago: executing program 4 (id=6180): perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x1000}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 1.340635102s ago: executing program 0 (id=6185): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) socket$l2tp(0x2, 0x2, 0x73) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20002, 0x26) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r1, 0x0, &(0x7f0000000a40)) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 1.322827693s ago: executing program 1 (id=6186): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x40000021, 0x0) 1.278141466s ago: executing program 4 (id=6187): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x119) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) r1 = syz_io_uring_setup(0xd89, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x0, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) pread64(r0, &(0x7f0000000180)=""/222, 0xde, 0x80) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 1.161195013s ago: executing program 0 (id=6189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0xec0}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @sack_perm], 0x20000000000000a1) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 1.156169223s ago: executing program 0 (id=6190): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) 1.081382927s ago: executing program 0 (id=6193): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 988.254542ms ago: executing program 4 (id=6196): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) close(0x3) openat(0xffffffffffffff9c, 0x0, 0x100, 0x52) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 823.806302ms ago: executing program 2 (id=6197): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e0000000001"], 0x20) 823.311812ms ago: executing program 1 (id=6199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x810) 688.6677ms ago: executing program 2 (id=6200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x24000034) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x1e8, 0x0, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @multicast2, @port, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x141}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x3a}, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @icmp_id=0x60}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) setsockopt(r1, 0x1, 0x9, &(0x7f0000000040), 0x29) 640.977423ms ago: executing program 0 (id=6201): mkdir(0x0, 0x40) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 640.423553ms ago: executing program 1 (id=6202): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x3, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0xffffa000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$inet(0x2, 0x1, 0xd) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x129202, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 626.926074ms ago: executing program 2 (id=6203): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xc4, 0x0, 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x52, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) setns(r0, 0x10000000) 559.441307ms ago: executing program 0 (id=6204): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) readv(r0, &(0x7f0000000fc0)=[{&(0x7f0000003880)=""/4102, 0x1006}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 559.137257ms ago: executing program 4 (id=6205): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x80802, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x2, 0x0, 0x0, 0x9}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0xffffffffffffffff}) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x1000000, 0x200}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) write$qrtrtun(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") 416.118725ms ago: executing program 1 (id=6206): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x3ff, 0x0) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) 162.88554ms ago: executing program 2 (id=6207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0), 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 110.099783ms ago: executing program 1 (id=6208): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8c, 0xec}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 104.927374ms ago: executing program 2 (id=6209): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 73.124485ms ago: executing program 4 (id=6210): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="2cdd8d0112ad2fa212bf", @ANYRES64], 0x5, 0x261, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000005c0)='{', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @local}}, 0xcde, 0x9}, &(0x7f0000000000)=0x90) 72.669005ms ago: executing program 1 (id=6211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa0900"/527], 0x610) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 992.78µs ago: executing program 4 (id=6212): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) creat(0x0, 0x42) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x102) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r2, 0x0, 0xb2) 0s ago: executing program 2 (id=6222): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu~-0\t\t\t') r0 = socket$igmp6(0xa, 0x3, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) brk(0x200000ffc000) munlock(&(0x7f000061c000/0x3000)=nil, 0x3000) kernel console output (not intermixed with test programs): entered promiscuous mode [ 194.490017][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 194.497584][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.557348][T11098] netlink: zone id is out of range [ 194.600128][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 194.611486][T11105] __nla_validate_parse: 18 callbacks suppressed [ 194.611507][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2770'. [ 194.709983][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 194.740095][T11117] tmpfs: Bad value for 'mpol' [ 194.820190][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 194.869769][T11133] bond7: entered promiscuous mode [ 195.153906][T11176] netlink: 'syz.1.2805': attribute type 1 has an invalid length. [ 195.161802][T11176] netlink: 'syz.1.2805': attribute type 2 has an invalid length. [ 195.280799][ T29] audit: type=1400 audit(1769732717.470:3448): avc: denied { read write } for pid=11192 comm="syz.4.2814" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 195.305780][ T29] audit: type=1400 audit(1769732717.470:3449): avc: denied { open } for pid=11192 comm="syz.4.2814" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 195.512372][T11232] netlink: 656 bytes leftover after parsing attributes in process `syz.0.2830'. [ 195.787466][ T29] audit: type=1400 audit(1769732717.980:3450): avc: denied { setopt } for pid=11281 comm="syz.4.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.828768][ T29] audit: type=1400 audit(1769732718.020:3451): avc: denied { lock } for pid=11284 comm="syz.3.2857" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.879780][T11296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2861'. [ 195.969261][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2866'. [ 196.024703][T11321] tmpfs: Bad value for 'mpol' [ 196.052800][T11325] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2875'. [ 196.158327][T11343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2883'. [ 196.178453][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'. [ 196.190468][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'. [ 196.271435][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'. [ 196.385914][T11383] netlink: 'syz.2.2901': attribute type 1 has an invalid length. [ 196.472219][T11401] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2910'. [ 196.821364][T11428] pimreg: entered allmulticast mode [ 196.831463][T11428] pimreg: left allmulticast mode [ 196.982410][T11470] loop4: detected capacity change from 0 to 1024 [ 197.018275][T11470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.105094][T11496] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 197.236433][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.261660][T11514] netlink: 'syz.1.2962': attribute type 1 has an invalid length. [ 197.269464][T11514] netlink: 'syz.1.2962': attribute type 2 has an invalid length. [ 197.327535][ T29] audit: type=1400 audit(1769732719.520:3452): avc: denied { read } for pid=11520 comm="syz.4.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 197.408470][ T29] audit: type=1400 audit(1769732719.580:3453): avc: denied { ioctl } for pid=11528 comm="syz.1.2969" path="socket:[32173]" dev="sockfs" ino=32173 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.792179][T11581] bond8: entered promiscuous mode [ 197.817278][T11589] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 198.053576][T11628] loop4: detected capacity change from 0 to 1024 [ 198.102887][T11628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.256031][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.328067][T11677] pimreg: entered allmulticast mode [ 198.379685][T11677] pimreg: left allmulticast mode [ 198.553207][T11722] netlink: 'syz.1.3054': attribute type 3 has an invalid length. [ 198.588693][ T29] audit: type=1326 audit(1769732720.780:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.0.3055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x0 [ 198.715178][T11730] pimreg: entered allmulticast mode [ 198.721622][T11730] pimreg: left allmulticast mode [ 198.760204][T11750] netlink: 'syz.2.3065': attribute type 2 has an invalid length. [ 198.768016][T11750] netlink: 'syz.2.3065': attribute type 1 has an invalid length. [ 198.836188][T11757] lo: entered allmulticast mode [ 198.930424][ T5259] net_ratelimit: 39 callbacks suppressed [ 198.930443][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.024370][T11775] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 199.061508][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.141917][T11786] netlink: 'syz.3.3081': attribute type 3 has an invalid length. [ 199.180215][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.302246][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.418604][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.522837][T11818] pimreg: entered allmulticast mode [ 199.545694][T11818] pimreg: left allmulticast mode [ 199.590081][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.700295][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.759616][T11859] netlink: 'syz.4.3113': attribute type 1 has an invalid length. [ 199.820119][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.883036][ T29] audit: type=1400 audit(1769732722.080:3455): avc: denied { name_bind } for pid=11878 comm="syz.0.3121" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 199.930200][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 199.940511][T11875] __nla_validate_parse: 16 callbacks suppressed [ 199.940627][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'. [ 200.026679][T11875] pimreg: entered allmulticast mode [ 200.052597][T11903] pimreg: left allmulticast mode [ 200.110576][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 200.184646][T11917] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3138'. [ 200.739377][T11985] loop4: detected capacity change from 0 to 128 [ 200.815028][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 200.880427][T11999] loop4: detected capacity change from 0 to 1024 [ 200.901588][T11999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.967046][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 201.000731][T12007] pimreg: entered allmulticast mode [ 201.012156][T12007] pimreg: left allmulticast mode [ 201.022174][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.078200][T12015] loop4: detected capacity change from 0 to 1024 [ 201.121223][T12015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.951390][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.097043][T12065] validate_nla: 1 callbacks suppressed [ 202.097058][T12065] netlink: 'syz.4.3202': attribute type 32 has an invalid length. [ 202.283437][T12099] netlink: 'syz.2.3219': attribute type 1 has an invalid length. [ 202.617362][ T29] audit: type=1400 audit(1769732724.810:3456): avc: denied { read } for pid=12154 comm="syz.1.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 202.633271][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3249'. [ 202.668014][T12159] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3249'. [ 202.761368][T12180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3259'. [ 202.966759][ T29] audit: type=1400 audit(1769732725.160:3457): avc: denied { read } for pid=12208 comm="syz.2.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.208267][T12247] netlink: 1096 bytes leftover after parsing attributes in process `syz.4.3292'. [ 203.278362][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3298'. [ 203.287606][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 203.402373][T12281] IPv6: Can't replace route, no match found [ 203.593826][ T29] audit: type=1400 audit(1769732725.790:3458): avc: denied { bind } for pid=12309 comm="syz.4.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.673503][ T29] audit: type=1400 audit(1769732725.870:3459): avc: denied { getopt } for pid=12324 comm="syz.0.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.820885][T12341] pimreg: entered allmulticast mode [ 203.828387][T12341] pimreg: left allmulticast mode [ 203.892004][ T29] audit: type=1400 audit(1769732726.090:3460): avc: denied { accept } for pid=12357 comm="syz.0.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 203.960061][ T5245] net_ratelimit: 34 callbacks suppressed [ 203.960141][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 203.997088][T12372] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 204.080123][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 204.190045][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 204.300907][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 204.409936][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 204.521205][T12433] pimreg: entered allmulticast mode [ 204.541714][T12433] pimreg: left allmulticast mode [ 204.580128][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 204.616366][ T29] audit: type=1400 audit(1769732726.810:3461): avc: denied { write } for pid=12448 comm="syz.4.3389" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 204.689985][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 204.799991][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 204.852731][ T29] audit: type=1400 audit(1769732727.040:3462): avc: denied { lock } for pid=12488 comm="syz.4.3406" path="socket:[35040]" dev="sockfs" ino=35040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 204.910047][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 204.963532][T12491] __nla_validate_parse: 11 callbacks suppressed [ 204.963554][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3404'. [ 205.015108][T12509] netlink: 'syz.0.3413': attribute type 1 has an invalid length. [ 205.028747][T12491] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3404'. [ 205.055622][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3404'. [ 205.067752][T12510] loop4: detected capacity change from 0 to 1024 [ 205.113921][T12510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.137707][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3421'. [ 205.148914][T12528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3420'. [ 205.190445][T12533] netlink: 'syz.2.3422': attribute type 2 has an invalid length. [ 205.198269][T12533] netlink: 'syz.2.3422': attribute type 1 has an invalid length. [ 205.206073][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3422'. [ 205.313770][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.467649][T12570] geneve3: entered promiscuous mode [ 205.473105][T12570] geneve3: entered allmulticast mode [ 205.549285][T12584] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3448'. [ 205.576804][T12584] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3448'. [ 205.630671][T12593] netlink: 'syz.0.3452': attribute type 3 has an invalid length. [ 205.638549][T12593] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3452'. [ 205.752624][T12616] netlink: 'syz.1.3463': attribute type 1 has an invalid length. [ 205.760569][T12616] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3463'. [ 205.864561][T12628] loop4: detected capacity change from 0 to 1024 [ 205.900913][T12628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.932396][T12635] pimreg: entered allmulticast mode [ 205.950410][T12635] pimreg: left allmulticast mode [ 206.153858][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.306298][T12697] pimreg: entered allmulticast mode [ 206.312637][T12697] pimreg: left allmulticast mode [ 206.449782][T12733] mmap: syz.4.3520 (12733): VmData 29102080 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 206.586078][ T29] audit: type=1400 audit(1769732728.780:3463): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 206.758507][ T29] audit: type=1400 audit(1769732728.950:3464): avc: denied { getopt } for pid=12788 comm="syz.4.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.921744][ T29] audit: type=1400 audit(1769732729.120:3465): avc: denied { read write } for pid=12810 comm="syz.4.3557" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 207.026438][T12828] netlink: 'syz.3.3563': attribute type 2 has an invalid length. [ 207.120611][T12839] loop4: detected capacity change from 0 to 512 [ 207.181323][T12839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.198904][T12839] ext4 filesystem being mounted at /634/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.211760][T12839] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.3567: corrupted inode contents [ 207.223799][T12839] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.3567: mark_inode_dirty error [ 207.237201][T12839] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.3567: corrupted inode contents [ 207.272300][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.314957][T12861] loop4: detected capacity change from 0 to 256 [ 207.425640][T12878] bond1: entered promiscuous mode [ 207.495457][T12886] netlink: 'syz.4.3590': attribute type 10 has an invalid length. [ 207.537680][T12884] pimreg: entered allmulticast mode [ 207.578203][T12884] pimreg: left allmulticast mode [ 207.586428][T12897] loop4: detected capacity change from 0 to 512 [ 207.616036][T12897] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 207.627741][T12897] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 207.637933][T12897] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3594: Corrupt directory, running e2fsck is recommended [ 207.721895][T12897] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 207.732862][T12897] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3594: corrupted in-inode xattr: invalid ea_ino [ 207.755800][T12897] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3594: couldn't read orphan inode 15 (err -117) [ 207.783987][T12897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.839075][T12897] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 207.850845][T12897] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 207.861232][T12897] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3594: Corrupt directory, running e2fsck is recommended [ 207.944617][T12897] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 207.956253][T12897] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 207.966681][T12897] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3594: Corrupt directory, running e2fsck is recommended [ 207.980042][T12897] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.3594: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 208.065617][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.083522][T12938] bond9: entered promiscuous mode [ 208.351281][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 208.351300][ T29] audit: type=1400 audit(1769732730.550:3469): avc: denied { bind } for pid=12963 comm="syz.3.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.548422][T12986] netlink: 'syz.4.3635': attribute type 1 has an invalid length. [ 208.884049][T13040] netlink: 'syz.2.3659': attribute type 2 has an invalid length. [ 209.050196][ T5245] net_ratelimit: 39 callbacks suppressed [ 209.050218][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 209.170451][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 209.264281][T13077] netlink: 'syz.4.3676': attribute type 3 has an invalid length. [ 209.280302][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 209.340272][T13076] pimreg: entered allmulticast mode [ 209.364527][T13076] pimreg: left allmulticast mode [ 209.420163][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 209.530469][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 209.634869][ T29] audit: type=1400 audit(1769732731.820:3470): avc: denied { bind } for pid=13103 comm="syz.3.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.654583][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 209.770136][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 209.880013][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 209.990054][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 210.100494][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 210.218192][T13188] usb usb1: usbfs: process 13188 (syz.4.3730) did not claim interface 0 before use [ 210.285312][T13191] bond2: entered promiscuous mode [ 210.340784][T13198] __nla_validate_parse: 26 callbacks suppressed [ 210.340805][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 210.532040][T13210] loop4: detected capacity change from 0 to 1024 [ 210.574548][T13210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.797908][T13233] netlink: 'syz.1.3748': attribute type 1 has an invalid length. [ 210.805823][T13233] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3748'. [ 210.932600][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.048697][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3763'. [ 211.102824][T13271] netlink: 'syz.4.3767': attribute type 1 has an invalid length. [ 211.110685][T13271] netlink: 'syz.4.3767': attribute type 2 has an invalid length. [ 211.132318][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3767'. [ 211.215867][ T29] audit: type=1400 audit(1769732733.410:3471): avc: denied { map } for pid=13285 comm="syz.3.3773" path="/760" dev="tmpfs" ino=3954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.437325][T13327] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 211.445282][T13327] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3795'. [ 211.619864][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 211.693089][T13372] netlink: 'syz.0.3815': attribute type 2 has an invalid length. [ 211.715324][ T29] audit: type=1400 audit(1769732733.910:3472): avc: denied { create } for pid=13373 comm="syz.3.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 211.746812][ T29] audit: type=1400 audit(1769732733.940:3473): avc: denied { write } for pid=13373 comm="syz.3.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 211.891302][T13401] netlink: 'syz.0.3833': attribute type 27 has an invalid length. [ 211.943931][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3837'. [ 211.949125][T13411] loop4: detected capacity change from 0 to 512 [ 211.968046][T13411] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.3836: casefold flag without casefold feature [ 211.981298][T13411] EXT4-fs (loop4): get root inode failed [ 211.986975][T13411] EXT4-fs (loop4): mount failed [ 211.994213][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3836'. [ 212.042705][T13411] loop4: detected capacity change from 0 to 1024 [ 212.107295][T13411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.135664][T13440] nft_compat: unsupported protocol 1 [ 212.156118][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 212.196790][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3854'. [ 212.202303][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.273933][T13453] pimreg: entered allmulticast mode [ 212.283149][T13453] pimreg: left allmulticast mode [ 212.317995][T13457] loop4: detected capacity change from 0 to 1024 [ 212.356691][T13457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.386834][T13476] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 212.504024][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.573100][T13509] tmpfs: Bad value for 'mpol' [ 212.951594][T13581] netlink: 'syz.3.3917': attribute type 1 has an invalid length. [ 212.959504][T13581] netlink: 'syz.3.3917': attribute type 1 has an invalid length. [ 213.402728][T13649] loop4: detected capacity change from 0 to 1024 [ 213.423438][T13649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.437061][T13660] netlink: 'syz.3.3952': attribute type 7 has an invalid length. [ 213.471915][T13662] tmpfs: Bad value for 'mpol' [ 213.593475][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.709747][T13701] netlink: 'syz.0.3970': attribute type 6 has an invalid length. [ 214.121575][ T5257] net_ratelimit: 36 callbacks suppressed [ 214.121591][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 214.240211][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 214.350571][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 214.470054][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 214.580183][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 214.661507][T13824] loop4: detected capacity change from 0 to 1024 [ 214.666848][T13826] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 214.690054][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 214.714893][T13824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.805618][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 214.881951][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.920058][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 214.978645][T13871] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 215.042060][T13887] netlink: 'syz.2.4054': attribute type 2 has an invalid length. [ 215.050069][T13887] netlink: 'syz.2.4054': attribute type 1 has an invalid length. [ 215.156592][T13902] pimreg: entered allmulticast mode [ 215.185592][T13902] pimreg: left allmulticast mode [ 215.217458][ T29] audit: type=1400 audit(1769732737.410:3474): avc: denied { connect } for pid=13915 comm="syz.4.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 215.536013][T13956] loop4: detected capacity change from 0 to 512 [ 215.542847][T13958] __nla_validate_parse: 21 callbacks suppressed [ 215.542894][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'. [ 215.565917][T13966] bond4: entered promiscuous mode [ 215.581816][T13958] pimreg: entered allmulticast mode [ 215.599862][T13956] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.4087: casefold flag without casefold feature [ 215.622214][T13971] pimreg: left allmulticast mode [ 215.626411][T13956] EXT4-fs (loop4): get root inode failed [ 215.633007][T13956] EXT4-fs (loop4): mount failed [ 215.669681][T13956] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4087'. [ 215.678809][T13956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4087'. [ 215.700349][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4087'. [ 215.724185][T13956] loop4: detected capacity change from 0 to 1024 [ 215.767316][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4097'. [ 215.783598][T13956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.834038][ T29] audit: type=1400 audit(1769732738.030:3475): avc: denied { getopt } for pid=13992 comm="syz.0.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.935424][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.993402][T14010] netlink: 824 bytes leftover after parsing attributes in process `syz.3.4109'. [ 216.096395][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4114'. [ 216.151815][T14032] bond10: entered promiscuous mode [ 216.163127][T14037] netlink: 'syz.1.4118': attribute type 1 has an invalid length. [ 216.171115][T14037] netlink: 'syz.1.4118': attribute type 2 has an invalid length. [ 216.179038][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'. [ 216.272381][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4122'. [ 216.388632][T14066] loop4: detected capacity change from 0 to 512 [ 216.440249][T14066] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.4128: casefold flag without casefold feature [ 216.478538][T14066] EXT4-fs (loop4): get root inode failed [ 216.484346][T14066] EXT4-fs (loop4): mount failed [ 216.495578][T14066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4128'. [ 216.526115][T14066] loop4: detected capacity change from 0 to 1024 [ 216.570929][T14066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.690641][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.865417][ T29] audit: type=1400 audit(1769732739.060:3476): avc: denied { bind } for pid=14132 comm="syz.3.4158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 217.027012][T14162] netlink: 'syz.0.4173': attribute type 1 has an invalid length. [ 217.657714][T14254] pimreg: entered allmulticast mode [ 217.667239][T14254] pimreg: left allmulticast mode [ 218.075392][T14313] loop4: detected capacity change from 0 to 512 [ 218.112517][T14313] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.4246: casefold flag without casefold feature [ 218.125900][T14313] EXT4-fs (loop4): get root inode failed [ 218.131655][T14313] EXT4-fs (loop4): mount failed [ 218.648915][T14387] cgroup: name respecified [ 218.707854][T14394] bond3: entered promiscuous mode [ 218.921820][T14413] loop4: detected capacity change from 0 to 8192 [ 219.130562][ T5257] net_ratelimit: 36 callbacks suppressed [ 219.130581][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 219.250062][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 219.360007][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 219.470935][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 219.520280][ T29] audit: type=1400 audit(1769732741.710:3477): avc: denied { getopt } for pid=14461 comm="syz.4.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 219.590262][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 219.696484][T14488] bond3: entered promiscuous mode [ 219.710658][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 219.820211][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 219.930354][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 220.050060][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 220.160696][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 220.173487][ T29] audit: type=1326 audit(1769732742.370:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.1.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 220.197171][ T29] audit: type=1326 audit(1769732742.370:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.1.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 220.220732][ T29] audit: type=1326 audit(1769732742.370:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.1.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 220.244264][ T29] audit: type=1326 audit(1769732742.370:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.1.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 220.267876][ T29] audit: type=1326 audit(1769732742.370:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.1.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 220.422499][ T29] audit: type=1326 audit(1769732742.620:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.3.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 220.470051][ T29] audit: type=1326 audit(1769732742.640:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.3.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 220.493848][ T29] audit: type=1326 audit(1769732742.640:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.3.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 220.559798][ T29] audit: type=1326 audit(1769732742.750:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.3.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 220.583487][ T29] audit: type=1326 audit(1769732742.750:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.3.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 220.667453][T14603] __nla_validate_parse: 36 callbacks suppressed [ 220.667482][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4370'. [ 220.720450][T14611] bridge_slave_0: default FDB implementation only supports local addresses [ 220.732615][T14613] bridge0: port 3(syz_tun) entered disabled state [ 220.753493][T14613] syz_tun (unregistering): left allmulticast mode [ 220.760073][T14613] syz_tun (unregistering): left promiscuous mode [ 220.766587][T14613] bridge0: port 3(syz_tun) entered disabled state [ 220.778677][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4378'. [ 220.787934][T14617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4377'. [ 220.834355][T14624] netlink: 'syz.1.4380': attribute type 1 has an invalid length. [ 220.848043][T14628] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.4382'. [ 220.857702][T14624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.865989][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4381'. [ 220.883521][ T29] audit: type=1326 audit(1769732743.080:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14631 comm="syz.4.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f0daeb9 code=0x7ffc0000 [ 220.953646][ T29] audit: type=1326 audit(1769732743.110:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14631 comm="syz.4.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f957f0daeb9 code=0x7ffc0000 [ 220.960265][T14640] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4386'. [ 220.995098][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 221.109793][T14665] netlink: 'syz.0.4395': attribute type 10 has an invalid length. [ 221.117726][T14665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4395'. [ 221.159462][T14662] tipc: Resetting bearer [ 221.173878][T14662] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.181090][T14662] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.190891][T14662] batman_adv: batadv0: Interface deactivated: dummy0 [ 221.198329][T14662] batman_adv: batadv0: Removing interface: dummy0 [ 221.225437][T14662] bridge_slave_0: left allmulticast mode [ 221.231360][T14662] bridge_slave_0: left promiscuous mode [ 221.237117][T14662] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.252977][T14662] bridge_slave_1: left allmulticast mode [ 221.258681][T14662] bridge_slave_1: left promiscuous mode [ 221.264890][T14662] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.285607][T14662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.296849][T14662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.306711][T14662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.315383][T14662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.349408][T14665] batadv0: entered promiscuous mode [ 221.354738][T14665] batadv0: entered allmulticast mode [ 221.371122][T14665] bridge0: port 1(batadv0) entered blocking state [ 221.377695][T14665] bridge0: port 1(batadv0) entered disabled state [ 221.402364][T14665] bridge0: port 1(batadv0) entered blocking state [ 221.408872][T14665] bridge0: port 1(batadv0) entered forwarding state [ 221.436011][ T5245] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.444719][ T5245] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.477459][ T5245] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.498646][ T5245] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.555320][T14695] bond2: entered promiscuous mode [ 221.570190][ T5256] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 221.579611][ T5256] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 221.626699][T14707] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4412'. [ 221.723771][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4416'. [ 221.940104][T14743] IPv6: Can't replace route, no match found [ 222.095107][T14757] loop4: detected capacity change from 0 to 512 [ 222.116579][T14757] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.4435: casefold flag without casefold feature [ 222.157573][T14757] EXT4-fs (loop4): get root inode failed [ 222.163423][T14757] EXT4-fs (loop4): mount failed [ 222.243530][T14757] loop4: detected capacity change from 0 to 1024 [ 222.274548][T14757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.335481][T14757] pimreg: entered allmulticast mode [ 222.347003][T14757] pimreg: left allmulticast mode [ 222.570714][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.109644][T14863] bond3: entered promiscuous mode [ 223.344856][T14896] netlink: 'syz.3.4496': attribute type 3 has an invalid length. [ 223.364448][T14896] netlink: 'syz.3.4496': attribute type 3 has an invalid length. [ 223.538129][T14914] loop4: detected capacity change from 0 to 1024 [ 223.564249][T14917] bond11: entered promiscuous mode [ 223.579725][T14914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.833403][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.055102][T14972] bond6: entered promiscuous mode [ 224.230099][ T5256] net_ratelimit: 36 callbacks suppressed [ 224.230115][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 224.352146][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 224.375657][T15012] syz.3.4544: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 224.390596][T15012] CPU: 1 UID: 0 PID: 15012 Comm: syz.3.4544 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.390635][T15012] Tainted: [W]=WARN [ 224.390643][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.390660][T15012] Call Trace: [ 224.390669][T15012] [ 224.390680][T15012] __dump_stack+0x1d/0x30 [ 224.390727][T15012] dump_stack_lvl+0x95/0xd0 [ 224.390808][T15012] dump_stack+0x15/0x1b [ 224.390838][T15012] warn_alloc+0x145/0x1c0 [ 224.390940][T15012] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 224.390981][T15012] ? __futex_wait+0x1fd/0x260 [ 224.391070][T15012] ? __pfx_futex_wake_mark+0x10/0x10 [ 224.391159][T15012] ? __rcu_read_unlock+0x4e/0x70 [ 224.391258][T15012] ? avc_has_perm_noaudit+0xab/0x130 [ 224.391301][T15012] ? should_fail_ex+0x30/0x280 [ 224.391344][T15012] ? should_failslab+0x8c/0xb0 [ 224.391378][T15012] vmalloc_user_noprof+0x7d/0xb0 [ 224.391486][T15012] ? xskq_create+0x80/0xe0 [ 224.391539][T15012] xskq_create+0x80/0xe0 [ 224.391661][T15012] xsk_init_queue+0x91/0xe0 [ 224.391741][T15012] xsk_setsockopt+0x3f5/0x640 [ 224.391782][T15012] ? __pfx_xsk_setsockopt+0x10/0x10 [ 224.391897][T15012] __sys_setsockopt+0x184/0x200 [ 224.391937][T15012] __x64_sys_setsockopt+0x64/0x80 [ 224.391979][T15012] x64_sys_call+0x21d5/0x3000 [ 224.392015][T15012] do_syscall_64+0xc0/0x2a0 [ 224.392093][T15012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.392124][T15012] RIP: 0033:0x7f79a83aaeb9 [ 224.392147][T15012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.392174][T15012] RSP: 002b:00007f79a6e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 224.392202][T15012] RAX: ffffffffffffffda RBX: 00007f79a8625fa0 RCX: 00007f79a83aaeb9 [ 224.392301][T15012] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 224.392320][T15012] RBP: 00007f79a8418c1f R08: 0000000000000004 R09: 0000000000000000 [ 224.392338][T15012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.392356][T15012] R13: 00007f79a8626038 R14: 00007f79a8625fa0 R15: 00007ffd6e4d4e68 [ 224.392442][T15012] [ 224.392452][T15012] Mem-Info: [ 224.470527][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 224.472789][T15012] active_anon:29737 inactive_anon:2665 isolated_anon:0 [ 224.472789][T15012] active_file:22406 inactive_file:2842 isolated_file:0 [ 224.472789][T15012] unevictable:0 dirty:125 writeback:0 [ 224.472789][T15012] slab_reclaimable:3682 slab_unreclaimable:21790 [ 224.472789][T15012] mapped:29094 shmem:20945 pagetables:3472 [ 224.472789][T15012] sec_pagetables:0 bounce:0 [ 224.472789][T15012] kernel_misc_reclaimable:0 [ 224.472789][T15012] free:1828675 free_pcp:10480 free_cma:0 [ 224.590064][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 224.595815][T15012] Node 0 active_anon:114192kB inactive_anon:10660kB active_file:89624kB inactive_file:11368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116492kB dirty:500kB writeback:0kB shmem:78908kB kernel_stack:6128kB pagetables:14120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 224.595869][T15012] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.636954][T15017] pimreg: entered allmulticast mode [ 224.662508][T15012] lowmem_reserve[]: 0 2879 7858 7858 [ 224.662572][T15012] Node 0 DMA32 free:2944752kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948384kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 224.678529][T15017] pimreg: left allmulticast mode [ 224.697358][T15012] lowmem_reserve[]: 0 0 4978 4978 [ 224.779171][T15012] Node 0 Normal free:4354508kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:114056kB inactive_anon:10660kB active_file:89624kB inactive_file:11368kB unevictable:0kB writepending:556kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:42696kB local_pcp:25656kB free_cma:0kB [ 224.812780][T15012] lowmem_reserve[]: 0 0 0 0 [ 224.817341][T15012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.830125][T15012] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944752kB [ 224.846249][T15012] Node 0 Normal: 241*4kB (UM) 815*8kB (UE) 465*16kB (UME) 510*32kB (UME) 685*64kB (UME) 487*128kB (UME) 315*256kB (UM) 231*512kB (UME) 182*1024kB (UM) 93*2048kB (UM) 889*4096kB (UM) = 4354508kB [ 224.865620][T15012] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 224.874954][T15012] 45119 total pagecache pages [ 224.879630][T15012] 219 pages in swap cache [ 224.884021][T15012] Free swap = 0kB [ 224.887755][T15012] Total swap = 124996kB [ 224.891966][T15012] 2097051 pages RAM [ 224.895862][T15012] 0 pages HighMem/MovableOnly [ 224.900579][T15012] 81555 pages reserved [ 224.930779][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 224.995010][T15023] bond5: entered promiscuous mode [ 225.042011][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 225.149975][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 225.272236][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 225.379956][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 225.485435][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 225.485450][ T29] audit: type=1326 audit(1769732747.680:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f0daeb9 code=0x7ffc0000 [ 225.491682][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 225.579765][ T29] audit: type=1326 audit(1769732747.680:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f0daeb9 code=0x7ffc0000 [ 225.603569][ T29] audit: type=1326 audit(1769732747.680:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f957f0daeb9 code=0x7ffc0000 [ 225.627281][ T29] audit: type=1326 audit(1769732747.680:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f0daeb9 code=0x7ffc0000 [ 225.650848][ T29] audit: type=1326 audit(1769732747.680:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f0daeb9 code=0x7ffc0000 [ 225.824528][ T29] audit: type=1400 audit(1769732748.020:3502): avc: denied { lock } for pid=15099 comm="syz.2.4582" path="socket:[40699]" dev="sockfs" ino=40699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.884638][T15107] netlink: 'syz.4.4586': attribute type 6 has an invalid length. [ 225.943225][T15112] __nla_validate_parse: 16 callbacks suppressed [ 225.943247][T15112] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4597'. [ 226.095181][T15128] macsec1: entered promiscuous mode [ 226.376549][T15171] tipc: Resetting bearer [ 226.394275][T15171] tipc: Resetting bearer [ 226.400792][T15168] SET target dimension over the limit! [ 226.472371][T15171] tipc: Resetting bearer [ 226.491980][T15171] batman_adv: batadv0: Interface deactivated: dummy0 [ 226.520871][ T3416] lo speed is unknown, defaulting to 1000 [ 226.525992][T15181] dummy0: entered promiscuous mode [ 226.526686][ T3416] syz0: Port: 1 Link DOWN [ 226.534170][T15181] macsec1: entered promiscuous mode [ 226.542902][T15181] macsec1: entered allmulticast mode [ 226.549128][T15181] dummy0: entered allmulticast mode [ 226.555818][T15181] dummy0: left allmulticast mode [ 226.563338][T15181] dummy0: left promiscuous mode [ 226.584255][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.593248][ T3394] lo speed is unknown, defaulting to 1000 [ 226.607840][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.627979][T15189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4623'. [ 226.639607][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.668472][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.694655][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4626'. [ 226.772911][ T29] audit: type=1326 audit(1769732748.970:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.3.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7fc00000 [ 226.796532][ T29] audit: type=1326 audit(1769732748.970:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.3.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7fc00000 [ 226.820325][ T29] audit: type=1326 audit(1769732748.970:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.3.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7fc00000 [ 226.843947][ T29] audit: type=1326 audit(1769732748.970:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.3.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7fc00000 [ 226.895853][T15217] 9p: Bad value for 'rfdno' [ 227.104994][T15244] loop4: detected capacity change from 0 to 512 [ 227.130395][T15244] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.4647: casefold flag without casefold feature [ 227.153776][T15244] EXT4-fs (loop4): get root inode failed [ 227.159516][T15244] EXT4-fs (loop4): mount failed [ 227.200936][T15244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4647'. [ 227.220612][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4647'. [ 227.245867][T15244] loop4: detected capacity change from 0 to 1024 [ 227.298675][T15244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.353159][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.621084][T15281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.681060][T15281] bond0: (slave bond4): Enslaving as an active interface with an up link [ 227.896948][T15292] bond6: entered promiscuous mode [ 228.372982][T15341] bond4: entered promiscuous mode [ 228.573464][T15370] netlink: 'syz.4.4700': attribute type 3 has an invalid length. [ 228.596031][T15368] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.605651][T15368] bond0: (slave bond7): Enslaving as an active interface with an up link [ 228.655292][T15373] macsec1: entered promiscuous mode [ 228.670123][T15373] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 228.748951][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 228.758931][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 228.768484][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 228.777810][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 228.848808][T15395] loop4: detected capacity change from 0 to 2048 [ 229.196361][T15406] bond8: entered promiscuous mode [ 229.210674][T15395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 229.276177][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 229.293618][ T5259] net_ratelimit: 31 callbacks suppressed [ 229.293636][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 229.410144][ T60] bond2: (slave bond0): failed to get link speed/duplex [ 229.520958][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 229.640741][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 229.667585][ T5472] kernel write not supported for file bpf-map (pid: 5472 comm: kworker/0:17) [ 229.751312][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 229.870504][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 229.882618][T15452] pimreg: entered allmulticast mode [ 229.899399][T15452] pimreg: left allmulticast mode [ 229.980080][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 230.026963][T15469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4741'. [ 230.090107][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 230.125874][T15489] delete_channel: no stack [ 230.202128][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 230.229025][T15505] loop4: detected capacity change from 0 to 1024 [ 230.257571][T15505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.294331][T15505] ext4 filesystem being mounted at /847/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.310002][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 230.392308][ T5259] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:33: lblock 0 mapped to illegal pblock 0 (length 1) [ 230.406557][ T5259] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 230.419010][ T5259] EXT4-fs (loop4): This should not happen!! Data will be lost [ 230.419010][ T5259] [ 230.431051][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.442014][T15535] tipc: Enabling of bearer rejected, failed to enable media [ 230.552979][T15550] netlink: 'syz.4.4777': attribute type 1 has an invalid length. [ 230.650208][T15561] bond5: entered promiscuous mode [ 230.754903][T15568] loop4: detected capacity change from 0 to 1024 [ 230.791877][T15568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.045268][T15597] __nla_validate_parse: 3 callbacks suppressed [ 231.045289][T15597] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4795'. [ 231.092273][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.129298][T15603] loop4: detected capacity change from 0 to 512 [ 231.135401][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4799'. [ 231.152561][T15603] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.4798: casefold flag without casefold feature [ 231.177665][T15603] EXT4-fs (loop4): get root inode failed [ 231.183552][T15603] EXT4-fs (loop4): mount failed [ 231.205304][T15603] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4798'. [ 231.215697][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4798'. [ 231.237466][T15603] loop4: detected capacity change from 0 to 1024 [ 231.241782][T15616] delete_channel: no stack [ 231.275844][T15603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.352294][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.409315][T15631] loop4: detected capacity change from 0 to 1024 [ 231.431323][T15631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.593175][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.607495][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4816'. [ 231.654392][T15651] xt_bpf: check failed: parse error [ 231.662334][T15649] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4817'. [ 231.990644][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 231.990665][ T29] audit: type=1400 audit(1769732754.170:3643): avc: denied { override_creds } for pid=15681 comm="syz.4.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.135693][ T29] audit: type=1400 audit(1769732754.330:3644): avc: denied { write } for pid=15693 comm="syz.4.4837" path="socket:[42508]" dev="sockfs" ino=42508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.388815][T15700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4839'. [ 232.398054][T15700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4839'. [ 232.532464][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4845'. [ 232.556804][ T29] audit: type=1400 audit(1769732754.750:3645): avc: denied { map } for pid=15719 comm="syz.4.4850" path="socket:[42553]" dev="sockfs" ino=42553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.580377][ T29] audit: type=1400 audit(1769732754.750:3646): avc: denied { accept } for pid=15719 comm="syz.4.4850" path="socket:[42553]" dev="sockfs" ino=42553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.689301][T15742] IPVS: Error connecting to the multicast addr [ 232.793706][T15749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4863'. [ 232.845405][T15767] loop4: detected capacity change from 0 to 512 [ 232.877641][T15767] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 233.142418][T15803] loop4: detected capacity change from 0 to 1024 [ 233.190453][T15803] EXT4-fs: Ignoring removed bh option [ 233.205241][T15803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.229258][T15803] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 233.298536][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.357953][T15827] loop4: detected capacity change from 0 to 1024 [ 233.364979][T15827] EXT4-fs: inline encryption not supported [ 233.370946][T15827] EXT4-fs: Ignoring removed oldalloc option [ 233.377696][T15827] EXT4-fs: inline encryption not supported [ 233.383906][T15827] EXT4-fs: Ignoring removed orlov option [ 233.419200][T15827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.500455][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.528717][T15847] 9p: Bad value for 'rfdno' [ 233.606334][T15854] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 233.618253][ T29] audit: type=1400 audit(1769732755.800:3647): avc: denied { mac_admin } for pid=15853 comm="syz.0.4910" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 233.639556][ T29] audit: type=1400 audit(1769732755.810:3648): avc: denied { relabelto } for pid=15853 comm="syz.0.4910" name="972" dev="tmpfs" ino=5039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 233.666740][ T29] audit: type=1400 audit(1769732755.810:3649): avc: denied { associate } for pid=15853 comm="syz.0.4910" name="972" dev="tmpfs" ino=5039 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 233.726902][T15859] loop4: detected capacity change from 0 to 1024 [ 233.752419][T15859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.874763][T15868] bond9: entered promiscuous mode [ 233.899087][ T29] audit: type=1400 audit(1769732756.090:3650): avc: denied { remove_name } for pid=3312 comm="syz-executor" name="binderfs" dev="tmpfs" ino=5043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 233.927038][ T29] audit: type=1400 audit(1769732756.090:3651): avc: denied { rmdir } for pid=3312 comm="syz-executor" name="972" dev="tmpfs" ino=5039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 234.112615][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.206745][T15894] loop4: detected capacity change from 0 to 512 [ 234.219189][T15894] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.4924: casefold flag without casefold feature [ 234.268045][T15894] EXT4-fs (loop4): get root inode failed [ 234.273868][T15894] EXT4-fs (loop4): mount failed [ 234.303711][T15894] loop4: detected capacity change from 0 to 1024 [ 234.332852][T15894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.350330][ T5257] net_ratelimit: 34 callbacks suppressed [ 234.350391][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 234.401152][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.470326][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 234.580182][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 234.594757][T15941] loop4: detected capacity change from 0 to 1024 [ 234.625200][T15941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.689933][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 234.800410][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 234.909988][ T5256] bond2: (slave bond0): failed to get link speed/duplex [ 235.026859][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 235.101866][ T29] audit: type=1400 audit(1769732757.300:3652): avc: denied { bind } for pid=16012 comm="syz.1.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.141723][ T5245] bond2: (slave bond0): failed to get link speed/duplex [ 235.260062][ T5259] bond2: (slave bond0): failed to get link speed/duplex [ 235.370031][ T5257] bond2: (slave bond0): failed to get link speed/duplex [ 235.599765][T16101] IPVS: Unknown mcast interface: vetN1_macvtap [ 235.647310][T16113] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 235.748584][T16132] 9p: Bad value for 'wfdno' [ 235.922087][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.968519][T16168] loop4: detected capacity change from 0 to 1024 [ 235.977030][T16168] EXT4-fs: Ignoring removed orlov option [ 236.018002][T16168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.053553][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.116716][T16194] loop4: detected capacity change from 0 to 1024 [ 236.124339][T16194] EXT4-fs: Ignoring removed orlov option [ 236.130271][T16194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.156380][T16194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.426572][T16218] __nla_validate_parse: 12 callbacks suppressed [ 236.426592][T16218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5013'. [ 236.444675][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.462214][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5013'. [ 236.481015][T16221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5014'. [ 236.539251][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5018'. [ 236.883099][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5046'. [ 237.036899][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5060'. [ 237.181032][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5069'. [ 237.208995][T16338] loop4: detected capacity change from 0 to 512 [ 237.222172][T16338] EXT4-fs: Ignoring removed bh option [ 237.239170][T16338] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 237.271004][T16338] EXT4-fs (loop4): 1 truncate cleaned up [ 237.277297][T16338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.364326][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.603241][T16353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5076'. [ 237.632281][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5076'. [ 237.851369][T16377] loop4: detected capacity change from 0 to 512 [ 237.897551][T16377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.926079][T16377] ext4 filesystem being mounted at /893/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.981313][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.011205][T16388] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5091'. [ 238.354784][T16433] loop4: detected capacity change from 0 to 1024 [ 238.395721][T16433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.573535][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.823738][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 238.823762][ T29] audit: type=1326 audit(1769733017.005:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 238.853580][ T29] audit: type=1326 audit(1769733017.005:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 238.877190][ T29] audit: type=1326 audit(1769733017.005:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 238.900794][ T29] audit: type=1326 audit(1769733017.005:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 238.924564][ T29] audit: type=1326 audit(1769733017.005:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 238.948303][ T29] audit: type=1326 audit(1769733017.005:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 238.971859][ T29] audit: type=1326 audit(1769733017.005:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 238.995429][ T29] audit: type=1326 audit(1769733017.005:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 239.018993][ T29] audit: type=1326 audit(1769733017.005:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 239.042688][ T29] audit: type=1326 audit(1769733017.005:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 239.272126][T16536] syz_tun: left allmulticast mode [ 239.277236][T16536] syz_tun: left promiscuous mode [ 239.282451][T16536] bridge0: port 3(syz_tun) entered disabled state [ 239.294389][T16536] bond0: (slave bridge0): Releasing backup interface [ 239.303647][T16536] bridge0: port 1(batadv0) entered disabled state [ 239.310211][T16536] bridge0: port 2(ªªªªªª) entered disabled state [ 239.319505][T16536] bond2: (slave bond0): Releasing active interface [ 239.329269][T16536] batman_adv: batadv0: Interface deactivated: dummy0 [ 239.336159][T16536] batman_adv: batadv0: Removing interface: dummy0 [ 239.344869][T16536] bridge0: port 1(batadv0) entered disabled state [ 239.369374][T16536] net_ratelimit: 35 callbacks suppressed [ 239.369477][T16536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.391391][ T5472] lo speed is unknown, defaulting to 1000 [ 239.556152][T16561] macvlan1: entered promiscuous mode [ 239.562509][T16561] macvlan1: left promiscuous mode [ 239.955046][T16602] netlink: 'syz.0.5185': attribute type 3 has an invalid length. [ 239.963444][T16602] netlink: 'syz.0.5185': attribute type 3 has an invalid length. [ 240.551110][T16660] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 241.113331][T16715] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 241.244585][T16725] support for the xor transformation has been removed. [ 241.700325][T16768] netlink: 'syz.4.5258': attribute type 11 has an invalid length. [ 241.708284][T16768] __nla_validate_parse: 26 callbacks suppressed [ 241.708303][T16768] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5258'. [ 241.765963][T16772] pimreg: entered allmulticast mode [ 241.776300][T16772] pimreg: left allmulticast mode [ 241.900339][T16785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5266'. [ 242.057019][T16804] netlink: 'syz.0.5270': attribute type 5 has an invalid length. [ 242.209182][T16814] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5275'. [ 242.301658][T16817] loop4: detected capacity change from 0 to 1024 [ 242.357245][T16817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.547626][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.847298][T16872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5300'. [ 242.886235][T16878] loop4: detected capacity change from 0 to 8192 [ 242.916194][T16878] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 242.924926][T16878] FAT-fs (loop4): Filesystem has been set read-only [ 242.991727][T16894] 9p: Bad value for 'rfdno' [ 243.181757][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5319'. [ 243.249331][T16925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5324'. [ 243.258450][T16925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5324'. [ 243.325198][T16919] loop4: detected capacity change from 0 to 1024 [ 243.346617][T16919] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.370949][T16919] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 243.382389][T16919] EXT4-fs (loop4): orphan cleanup on readonly fs [ 243.409182][T16919] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 243.423856][T16919] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 243.432605][T16919] EXT4-fs (loop4): 1 truncate cleaned up [ 243.438953][T16919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.691285][T16969] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5352'. [ 243.731641][T16979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16979 comm=syz.2.5347 [ 243.810530][T16991] 9p: Bad value for 'rfdno' [ 243.945203][T17009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5363'. [ 244.012459][T17020] 9p: Bad value for 'rfdno' [ 244.080607][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.190530][T17038] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 244.272189][ T5259] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 244.367035][T17054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17054 comm=syz.2.5381 [ 244.415487][T17071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5388'. [ 244.466997][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 244.467014][ T29] audit: type=1326 audit(1769733022.655:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="syz.0.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 244.497345][ T29] audit: type=1326 audit(1769733022.655:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="syz.0.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 244.521455][ T29] audit: type=1326 audit(1769733022.655:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="syz.0.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 244.545296][ T29] audit: type=1326 audit(1769733022.655:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="syz.0.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 244.569006][ T29] audit: type=1326 audit(1769733022.655:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="syz.0.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 244.592703][ T29] audit: type=1326 audit(1769733022.655:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="syz.0.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 244.616278][ T29] audit: type=1326 audit(1769733022.655:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="syz.0.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 245.090272][T17112] 9p: Bad value for 'wfdno' [ 245.525608][ T29] audit: type=1326 audit(1769733023.715:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 245.549344][ T29] audit: type=1326 audit(1769733023.715:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 245.573099][ T29] audit: type=1326 audit(1769733023.715:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.0.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 245.602603][T17172] loop4: detected capacity change from 0 to 164 [ 245.614952][T17172] ISOFS: unable to read i-node block [ 245.620561][T17172] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 245.636757][T17174] macsec0: entered promiscuous mode [ 245.644568][T17174] veth1_macvtap: left promiscuous mode [ 245.654159][T17174] macsec0 (unregistering): left promiscuous mode [ 245.853649][T17194] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17194 comm=syz.1.5444 [ 247.284706][T17429] 9p: Bad value for 'wfdno' [ 247.343883][T17436] loop4: detected capacity change from 0 to 512 [ 247.361343][T17436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.407473][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.437248][T17442] loop4: detected capacity change from 0 to 256 [ 247.505055][T17450] tipc: Enabling of bearer rejected, failed to enable media [ 247.559323][T17455] __nla_validate_parse: 4 callbacks suppressed [ 247.559409][T17455] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5503'. [ 247.780855][T17482] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 248.201486][T17533] SELinux: Context ñ is not valid (left unmapped). [ 248.249222][T17537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5540'. [ 248.319677][T17543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5543'. [ 248.569690][T17582] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5561'. [ 248.612270][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.623247][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.285407][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5590'. [ 249.294367][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5590'. [ 249.312674][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5590'. [ 249.436343][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 249.447384][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.447488][ T3313] Tainted: [W]=WARN [ 249.447495][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.447519][ T3313] Call Trace: [ 249.447532][ T3313] [ 249.447543][ T3313] __dump_stack+0x1d/0x30 [ 249.447610][ T3313] dump_stack_lvl+0x95/0xd0 [ 249.447632][ T3313] dump_stack+0x15/0x1b [ 249.447656][ T3313] dump_header+0x80/0x240 [ 249.447689][ T3313] oom_kill_process+0x295/0x350 [ 249.447718][ T3313] out_of_memory+0x97d/0xb80 [ 249.447753][ T3313] try_charge_memcg+0x62e/0xa10 [ 249.447788][ T3313] __mem_cgroup_charge+0x65/0x150 [ 249.447834][ T3313] filemap_add_folio+0x110/0x350 [ 249.447867][ T3313] __filemap_get_folio_mpol+0x326/0x680 [ 249.447905][ T3313] filemap_fault+0x473/0xbb0 [ 249.447981][ T3313] __do_fault+0xbc/0x200 [ 249.448004][ T3313] handle_mm_fault+0x11d7/0x3030 [ 249.448051][ T3313] ? vma_start_read+0x1c7/0x2c0 [ 249.448145][ T3313] do_user_addr_fault+0x62f/0x1050 [ 249.448180][ T3313] exc_page_fault+0x62/0xa0 [ 249.448208][ T3313] asm_exc_page_fault+0x26/0x30 [ 249.448230][ T3313] RIP: 0033:0x7f2f75468fb4 [ 249.448298][ T3313] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 [ 249.448319][ T3313] RSP: 002b:00007fff203fcbb0 EFLAGS: 00010202 [ 249.448387][ T3313] RAX: 0000001b33724000 RBX: 0000000000000a15 RCX: 000000000003cca8 [ 249.448405][ T3313] RDX: 000000000651fa5d RSI: 00007fff203fcc40 RDI: 0000000000000001 [ 249.448418][ T3313] RBP: 00007fff203fcbec R08: 00000000181c18a1 R09: 7fffffffffffffff [ 249.448432][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 249.448446][ T3313] R13: 00000000000927c0 R14: 000000000003cc01 R15: 00007fff203fcc40 [ 249.448520][ T3313] [ 249.448663][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 15034 [ 249.641283][ T3313] memory+swap: usage 373396kB, limit 9007199254740988kB, failcnt 0 [ 249.649217][ T3313] kmem: usage 303972kB, limit 9007199254740988kB, failcnt 0 [ 249.656566][ T3313] Memory cgroup stats for /syz1: [ 249.656901][ T3313] cache 8192 [ 249.665108][ T3313] rss 3276800 [ 249.668445][ T3313] shmem 8192 [ 249.671752][ T3313] mapped_file 0 [ 249.675234][ T3313] dirty 0 [ 249.678196][ T3313] writeback 0 [ 249.681592][ T3313] workingset_refault_anon 184 [ 249.686289][ T3313] workingset_refault_file 13837 [ 249.691189][ T3313] swap 67784704 [ 249.694703][ T3313] swapcached 24576 [ 249.698446][ T3313] pgpgin 356956 [ 249.701960][ T3313] pgpgout 356149 [ 249.705530][ T3313] pgfault 284289 [ 249.709104][ T3313] pgmajfault 82 [ 249.712600][ T3313] inactive_anon 368640 [ 249.716684][ T3313] active_anon 2936832 [ 249.720780][ T3313] inactive_file 0 [ 249.724429][ T3313] active_file 0 [ 249.727950][ T3313] unevictable 0 [ 249.731480][ T3313] hierarchical_memory_limit 314572800 [ 249.736878][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 249.743095][ T3313] total_cache 8192 [ 249.746852][ T3313] total_rss 3276800 [ 249.750725][ T3313] total_shmem 8192 [ 249.754459][ T3313] total_mapped_file 0 [ 249.758442][ T3313] total_dirty 0 [ 249.761971][ T3313] total_writeback 0 [ 249.765873][ T3313] total_workingset_refault_anon 184 [ 249.771134][ T3313] total_workingset_refault_file 13837 [ 249.776524][ T3313] total_swap 67784704 [ 249.780567][ T3313] total_swapcached 24576 [ 249.784879][ T3313] total_pgpgin 356956 [ 249.788927][ T3313] total_pgpgout 356149 [ 249.793038][ T3313] total_pgfault 284289 [ 249.797123][ T3313] total_pgmajfault 82 [ 249.801221][ T3313] total_inactive_anon 368640 [ 249.805829][ T3313] total_active_anon 2936832 [ 249.810393][ T3313] total_inactive_file 0 [ 249.814588][ T3313] total_active_file 0 [ 249.818570][ T3313] total_unevictable 0 [ 249.822620][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.182,pid=4000,uid=0 [ 249.837477][ T3313] Memory cgroup out of memory: Killed process 4000 (syz.1.182) total-vm:96048kB, anon-rss:1240kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 249.926751][T17608] syz.1.5581 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 249.940697][T17608] CPU: 0 UID: 0 PID: 17608 Comm: syz.1.5581 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.940736][T17608] Tainted: [W]=WARN [ 249.940744][T17608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.940769][T17608] Call Trace: [ 249.940776][T17608] [ 249.940785][T17608] __dump_stack+0x1d/0x30 [ 249.940812][T17608] dump_stack_lvl+0x95/0xd0 [ 249.940901][T17608] dump_stack+0x15/0x1b [ 249.940922][T17608] dump_header+0x80/0x240 [ 249.941046][T17608] oom_kill_process+0x295/0x350 [ 249.941074][T17608] out_of_memory+0x97d/0xb80 [ 249.941138][T17608] try_charge_memcg+0x62e/0xa10 [ 249.941168][T17608] obj_cgroup_charge_pages+0x23/0xc0 [ 249.941202][T17608] __memcg_kmem_charge_page+0x9e/0x170 [ 249.941278][T17608] __alloc_frozen_pages_noprof+0x18a/0x350 [ 249.941315][T17608] alloc_pages_mpol+0xb3/0x260 [ 249.941351][T17608] alloc_pages_noprof+0x8f/0x130 [ 249.941464][T17608] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 249.941509][T17608] __kvmalloc_node_noprof+0x471/0x680 [ 249.941539][T17608] ? ip_set_alloc+0x24/0x30 [ 249.941668][T17608] ? ip_set_alloc+0x24/0x30 [ 249.941701][T17608] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 249.941731][T17608] ip_set_alloc+0x24/0x30 [ 249.941763][T17608] hash_netiface_create+0x282/0x740 [ 249.941798][T17608] ? __pfx_hash_netiface_create+0x10/0x10 [ 249.941839][T17608] ip_set_create+0x3cf/0x970 [ 249.941899][T17608] ? __nla_parse+0x40/0x60 [ 249.941998][T17608] nfnetlink_rcv_msg+0x509/0x5d0 [ 249.942050][T17608] netlink_rcv_skb+0x123/0x220 [ 249.942087][T17608] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 249.942322][T17608] nfnetlink_rcv+0x167/0x1720 [ 249.942354][T17608] ? __kfree_skb+0x109/0x150 [ 249.942406][T17608] ? nlmon_xmit+0x4f/0x60 [ 249.942475][T17608] ? consume_skb+0x49/0x140 [ 249.942510][T17608] ? nlmon_xmit+0x4f/0x60 [ 249.942552][T17608] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 249.942654][T17608] ? __dev_queue_xmit+0x139a/0x1f20 [ 249.942727][T17608] ? __dev_queue_xmit+0x148/0x1f20 [ 249.942839][T17608] ? ref_tracker_free+0x37d/0x3e0 [ 249.942912][T17608] ? __netlink_deliver_tap+0x4dc/0x500 [ 249.942955][T17608] netlink_unicast+0x5c0/0x690 [ 249.943062][T17608] netlink_sendmsg+0x5c8/0x6f0 [ 249.943086][T17608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.943107][T17608] ____sys_sendmsg+0x5af/0x600 [ 249.943144][T17608] ___sys_sendmsg+0x195/0x1e0 [ 249.943181][T17608] __x64_sys_sendmsg+0xd4/0x160 [ 249.943207][T17608] x64_sys_call+0x17ba/0x3000 [ 249.943242][T17608] do_syscall_64+0xc0/0x2a0 [ 249.943301][T17608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.943325][T17608] RIP: 0033:0x7f2f7559aeb9 [ 249.943344][T17608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.943365][T17608] RSP: 002b:00007f2f73ff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.943387][T17608] RAX: ffffffffffffffda RBX: 00007f2f75815fa0 RCX: 00007f2f7559aeb9 [ 249.943403][T17608] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 249.943498][T17608] RBP: 00007f2f75608c1f R08: 0000000000000000 R09: 0000000000000000 [ 249.943513][T17608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.943526][T17608] R13: 00007f2f75816038 R14: 00007f2f75815fa0 R15: 00007fff203fc848 [ 249.943549][T17608] [ 249.943558][T17608] memory: usage 307200kB, limit 307200kB, failcnt 15241 [ 250.120441][T17668] netlink: 'syz.4.5601': attribute type 3 has an invalid length. [ 250.122618][T17608] memory+swap: usage 373200kB, limit 9007199254740988kB, failcnt 0 [ 250.122695][T17608] kmem: usage 303940kB, limit 9007199254740988kB, failcnt 0 [ 250.122714][T17608] Memory cgroup stats for /syz1: [ 250.131571][T17608] cache 16384 [ 250.133687][T17668] netlink: 'syz.4.5601': attribute type 4 has an invalid length. [ 250.138435][T17608] rss 3276800 [ 250.143458][T17668] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.5601'. [ 250.148962][T17608] shmem 8192 [ 250.148974][T17608] mapped_file 8192 [ 250.334416][T17608] dirty 0 [ 250.337370][T17608] writeback 0 [ 250.340704][T17608] workingset_refault_anon 184 [ 250.345577][T17608] workingset_refault_file 13845 [ 250.350513][T17608] swap 67604480 [ 250.353987][T17608] swapcached 24576 [ 250.357706][T17608] pgpgin 356965 [ 250.361237][T17608] pgpgout 356156 [ 250.364836][T17608] pgfault 284292 [ 250.368377][T17608] pgmajfault 84 [ 250.371911][T17608] inactive_anon 368640 [ 250.376033][T17608] active_anon 2936832 [ 250.380066][T17608] inactive_file 0 [ 250.383791][T17608] active_file 8192 [ 250.387529][T17608] unevictable 0 [ 250.391046][T17608] hierarchical_memory_limit 314572800 [ 250.396469][T17608] hierarchical_memsw_limit 9223372036854771712 [ 250.402753][T17608] total_cache 16384 [ 250.406578][T17608] total_rss 3276800 [ 250.410450][T17608] total_shmem 8192 [ 250.414226][T17608] total_mapped_file 8192 [ 250.418494][T17608] total_dirty 0 [ 250.421989][T17608] total_writeback 0 [ 250.425803][T17608] total_workingset_refault_anon 184 [ 250.431047][T17608] total_workingset_refault_file 13845 [ 250.436433][T17608] total_swap 67604480 [ 250.440447][T17608] total_swapcached 24576 [ 250.444731][T17608] total_pgpgin 356965 [ 250.448724][T17608] total_pgpgout 356156 [ 250.452847][T17608] total_pgfault 284292 [ 250.456965][T17608] total_pgmajfault 84 [ 250.461032][T17608] total_inactive_anon 368640 [ 250.465661][T17608] total_active_anon 2936832 [ 250.470242][T17608] total_inactive_file 0 [ 250.474412][T17608] total_active_file 8192 [ 250.478650][T17608] total_unevictable 0 [ 250.482685][T17608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5581,pid=17606,uid=0 [ 250.497691][T17608] Memory cgroup out of memory: Killed process 17606 (syz.1.5581) total-vm:94000kB, anon-rss:1204kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 250.652834][T17684] tipc: Enabling of bearer rejected, failed to enable media [ 250.980790][T17719] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5619'. [ 251.003260][T17721] batadv_slave_0: entered promiscuous mode [ 251.009159][T17721] batadv_slave_0: entered allmulticast mode [ 251.167987][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5631'. [ 251.314766][T17773] batadv_slave_1: entered promiscuous mode [ 251.321322][T17772] batadv_slave_1: left promiscuous mode [ 251.709946][T17792] syz.0.5650: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 251.724876][T17792] CPU: 1 UID: 0 PID: 17792 Comm: syz.0.5650 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.724914][T17792] Tainted: [W]=WARN [ 251.724923][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.724939][T17792] Call Trace: [ 251.724946][T17792] [ 251.725013][T17792] __dump_stack+0x1d/0x30 [ 251.725047][T17792] dump_stack_lvl+0x95/0xd0 [ 251.725078][T17792] dump_stack+0x15/0x1b [ 251.725104][T17792] warn_alloc+0x145/0x1c0 [ 251.725150][T17792] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 251.725217][T17792] ? __futex_wait+0x1fd/0x260 [ 251.725254][T17792] ? __pfx_futex_wake_mark+0x10/0x10 [ 251.725328][T17792] ? __rcu_read_unlock+0x4e/0x70 [ 251.725370][T17792] ? avc_has_perm_noaudit+0xab/0x130 [ 251.725415][T17792] ? should_fail_ex+0x30/0x280 [ 251.725521][T17792] ? should_failslab+0x8c/0xb0 [ 251.725554][T17792] vmalloc_user_noprof+0x7d/0xb0 [ 251.725593][T17792] ? xskq_create+0x80/0xe0 [ 251.725636][T17792] xskq_create+0x80/0xe0 [ 251.725683][T17792] xsk_init_queue+0x91/0xe0 [ 251.725723][T17792] xsk_setsockopt+0x477/0x640 [ 251.725841][T17792] ? __pfx_xsk_setsockopt+0x10/0x10 [ 251.725883][T17792] __sys_setsockopt+0x184/0x200 [ 251.725929][T17792] __x64_sys_setsockopt+0x64/0x80 [ 251.726058][T17792] x64_sys_call+0x21d5/0x3000 [ 251.726094][T17792] do_syscall_64+0xc0/0x2a0 [ 251.726145][T17792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.726247][T17792] RIP: 0033:0x7f74a300aeb9 [ 251.726270][T17792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.726347][T17792] RSP: 002b:00007f74a1a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 251.726440][T17792] RAX: ffffffffffffffda RBX: 00007f74a3285fa0 RCX: 00007f74a300aeb9 [ 251.726460][T17792] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 251.726478][T17792] RBP: 00007f74a3078c1f R08: 0000000000000004 R09: 0000000000000000 [ 251.726507][T17792] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 251.726525][T17792] R13: 00007f74a3286038 R14: 00007f74a3285fa0 R15: 00007ffce3e430a8 [ 251.726629][T17792] [ 251.726636][T17792] Mem-Info: [ 251.943534][T17792] active_anon:29701 inactive_anon:2665 isolated_anon:0 [ 251.943534][T17792] active_file:22395 inactive_file:2807 isolated_file:0 [ 251.943534][T17792] unevictable:0 dirty:90 writeback:0 [ 251.943534][T17792] slab_reclaimable:3733 slab_unreclaimable:22795 [ 251.943534][T17792] mapped:29125 shmem:19781 pagetables:4317 [ 251.943534][T17792] sec_pagetables:0 bounce:0 [ 251.943534][T17792] kernel_misc_reclaimable:0 [ 251.943534][T17792] free:1781589 free_pcp:38891 free_cma:0 [ 251.988957][T17792] Node 0 active_anon:118804kB inactive_anon:10660kB active_file:89580kB inactive_file:11228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116500kB dirty:360kB writeback:0kB shmem:79124kB kernel_stack:6592kB pagetables:17268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 252.016905][T17792] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.046572][T17792] lowmem_reserve[]: 0 2879 7858 7858 [ 252.051950][T17792] Node 0 DMA32 free:2944752kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948384kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 252.083391][T17792] lowmem_reserve[]: 0 0 4978 4978 [ 252.088513][T17792] Node 0 Normal free:4166244kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:118804kB inactive_anon:10660kB active_file:89580kB inactive_file:11228kB unevictable:0kB writepending:360kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:151932kB local_pcp:19592kB free_cma:0kB [ 252.122222][T17792] lowmem_reserve[]: 0 0 0 0 [ 252.126784][T17792] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.139678][T17792] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944752kB [ 252.156143][T17792] Node 0 Normal: 511*4kB (UME) 1199*8kB (UME) 578*16kB (UME) 441*32kB (UME) 278*64kB (UME) 249*128kB (UME) 282*256kB (UM) 129*512kB (UME) 187*1024kB (UM) 98*2048kB (UM) 867*4096kB (UM) = 4166324kB [ 252.175980][T17792] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 252.185337][T17792] 45222 total pagecache pages [ 252.190076][T17792] 222 pages in swap cache [ 252.194428][T17792] Free swap = 176kB [ 252.198391][T17792] Total swap = 124996kB [ 252.200921][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 252.200964][ T29] audit: type=1326 audit(1769733286.387:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17793 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 252.202615][T17792] 2097051 pages RAM [ 252.202624][T17792] 0 pages HighMem/MovableOnly [ 252.202631][T17792] 81555 pages reserved [ 252.253332][ T29] audit: type=1326 audit(1769733286.427:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17793 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 252.276974][ T29] audit: type=1326 audit(1769733286.427:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17793 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 252.301220][ T29] audit: type=1326 audit(1769733286.427:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17793 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 252.324763][ T29] audit: type=1326 audit(1769733286.447:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17793 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 252.348323][ T29] audit: type=1326 audit(1769733286.447:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17793 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 252.372148][ T29] audit: type=1326 audit(1769733286.447:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17793 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 252.395762][ T29] audit: type=1326 audit(1769733286.447:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17793 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 252.430951][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881046ec000: rx timeout, send abort [ 252.439239][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881046ed600: rx timeout, send abort [ 252.447621][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881046ec000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.461996][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881046ed600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.575998][ T29] audit: type=1400 audit(1769733286.767:3831): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 252.598236][ T29] audit: type=1400 audit(1769733286.767:3832): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.644528][T17811] __nla_validate_parse: 4 callbacks suppressed [ 252.644548][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5658'. [ 252.903455][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5669'. [ 253.011584][ T5256] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.024327][ T5256] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.039953][ T5256] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.069691][ T5256] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.111911][T17850] loop4: detected capacity change from 0 to 512 [ 253.242741][T17860] syz_tun: entered allmulticast mode [ 253.269072][T17859] syz_tun: left allmulticast mode [ 253.349379][T17867] loop4: detected capacity change from 0 to 512 [ 253.400250][T17867] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.411864][T17867] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 253.422022][T17867] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5685: Corrupt directory, running e2fsck is recommended [ 253.440883][T17867] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 253.464045][T17867] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.5685: corrupted in-inode xattr: e_name out of bounds [ 253.480366][T17867] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5685: couldn't read orphan inode 15 (err -117) [ 253.493271][T17867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.514364][T17867] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.525952][T17867] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 253.536133][T17867] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5685: Corrupt directory, running e2fsck is recommended [ 253.565826][T17879] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.577448][T17879] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 253.587565][T17879] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5685: Corrupt directory, running e2fsck is recommended [ 253.606059][T17879] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.617776][T17879] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 253.627939][T17879] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5685: Corrupt directory, running e2fsck is recommended [ 253.643673][T17879] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.655955][T17879] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.5685: path /995/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 253.677621][T17879] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 8: comm syz.4.5685: path /995/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 253.711559][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.758660][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 253.767755][T17889] netlink: 'syz.2.5703': attribute type 12 has an invalid length. [ 253.791322][T17891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5693'. [ 253.806832][ T5253] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.811348][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 253.824653][T17889] netlink: 'syz.2.5703': attribute type 12 has an invalid length. [ 253.835941][T17891] geneve2: entered promiscuous mode [ 253.842508][ T5253] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.852657][ T5253] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.861502][ T5253] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.870755][ T5253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.879654][ T5253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.888564][ T5253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.897431][ T5253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.226068][T17925] netlink: 'syz.1.5708': attribute type 4 has an invalid length. [ 254.445486][T17939] batman_adv: batadv0: Interface deactivated: dummy0 [ 254.452408][T17939] batman_adv: batadv0: Removing interface: dummy0 [ 254.702136][T17959] loop4: detected capacity change from 0 to 1024 [ 254.714395][T17959] EXT4-fs: Ignoring removed orlov option [ 254.756120][T17959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.881049][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.961534][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5734'. [ 255.070244][T17998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5738'. [ 255.342048][T18030] loop4: detected capacity change from 0 to 2048 [ 255.416996][T18030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 255.431560][T18030] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 255.446900][T18030] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 255.459402][T18030] EXT4-fs (loop4): This should not happen!! Data will be lost [ 255.459402][T18030] [ 255.469129][T18030] EXT4-fs (loop4): Total free blocks count 0 [ 255.475189][T18030] EXT4-fs (loop4): Free/Dirty block details [ 255.481175][T18030] EXT4-fs (loop4): free_blocks=2415919104 [ 255.486940][T18030] EXT4-fs (loop4): dirty_blocks=32 [ 255.491705][T18041] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 255.492154][T18030] EXT4-fs (loop4): Block reservation details [ 255.504432][T18041] EXT4-fs (loop4): This should not happen!! Data will be lost [ 255.504432][T18041] [ 255.610074][T18048] geneve3: entered promiscuous mode [ 255.709304][T18061] loop4: detected capacity change from 0 to 128 [ 255.735279][T18061] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.750896][T18061] ext4 filesystem being mounted at /1005/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.828776][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5751'. [ 255.871674][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.976522][T18106] 9p: Bad value for 'wfdno' [ 256.019518][T18106] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 256.246293][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5766'. [ 256.335581][T18156] all: renamed from bridge_slave_0 [ 256.412677][T18161] geneve3: entered promiscuous mode [ 256.559833][T18180] blktrace: Concurrent blktraces are not allowed on loop8 [ 256.657589][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5783'. [ 257.103702][T18227] loop4: detected capacity change from 0 to 512 [ 257.167988][T18227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5802: bg 0: block 248: padding at end of block bitmap is not set [ 257.197215][T18227] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.5802: Failed to acquire dquot type 1 [ 257.240223][T18227] EXT4-fs (loop4): 1 truncate cleaned up [ 257.246445][T18227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.271678][T18238] netlink: 'syz.0.5805': attribute type 10 has an invalid length. [ 257.279186][T18227] ext4 filesystem being mounted at /1014/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.362247][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.374180][ T5245] __quota_error: 99 callbacks suppressed [ 257.374198][ T5245] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 257.388928][ T5245] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 1 [ 257.579943][ T29] audit: type=1400 audit(1769733291.767:3930): avc: denied { relabelfrom } for pid=18248 comm="syz.4.5809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 257.600122][ T29] audit: type=1400 audit(1769733291.767:3931): avc: denied { relabelto } for pid=18248 comm="syz.4.5809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 258.072748][T18278] loop4: detected capacity change from 0 to 512 [ 258.101796][ T29] audit: type=1400 audit(1769733292.287:3932): avc: denied { associate } for pid=18279 comm="syz.0.5816" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 258.161522][T18278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.179128][T18278] ext4 filesystem being mounted at /1022/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.191588][T18278] EXT4-fs (loop4): shut down requested (1) [ 258.210137][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.406909][T18303] __nla_validate_parse: 1 callbacks suppressed [ 258.406956][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5830'. [ 259.059084][T18331] bond1: (slave bond0): Releasing active interface [ 259.264891][T18209] cgroup: fork rejected by pids controller in /syz3 [ 259.644680][T18354] cgroup: fork rejected by pids controller in /syz0 [ 259.676643][ T29] audit: type=1326 audit(1769733293.867:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2fc2caeb9 code=0x0 [ 259.749149][T18362] tipc: Started in network mode [ 259.754254][T18362] tipc: Node identity ac14140f, cluster identity 4711 [ 259.830177][T18362] tipc: New replicast peer: 255.255.255.255 [ 259.836326][T18362] tipc: Enabled bearer , priority 10 [ 259.875093][ T29] audit: type=1326 audit(1769733294.067:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18363 comm="syz.2.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fc2caeb9 code=0x7ffc0000 [ 259.898786][ T29] audit: type=1326 audit(1769733294.067:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18363 comm="syz.2.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fc2caeb9 code=0x7ffc0000 [ 259.937598][ T29] audit: type=1326 audit(1769733294.117:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18363 comm="syz.2.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb2fc2caeb9 code=0x7ffc0000 [ 259.961185][ T29] audit: type=1326 audit(1769733294.117:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18363 comm="syz.2.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fc2caeb9 code=0x7ffc0000 [ 259.984894][ T29] audit: type=1326 audit(1769733294.117:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18363 comm="syz.2.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2fc2caeb9 code=0x7ffc0000 [ 260.051987][T18370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5856'. [ 260.156145][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5859'. [ 260.410305][T18387] 9p: Bad value for 'rfdno' [ 260.419200][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5864'. [ 260.705887][T18407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5871'. [ 260.879915][ T5472] tipc: Node number set to 2886997007 [ 260.926647][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5885'. [ 260.942328][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'. [ 261.157967][T18451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5892'. [ 261.497279][T18477] ip6_vti0: MTU too low for tipc bearer [ 261.503128][T18477] tipc: Disabling bearer [ 261.745146][T18495] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 261.898094][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5912'. [ 261.907100][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5912'. [ 261.919399][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.936883][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.959922][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.989232][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.190186][T18615] loop4: detected capacity change from 0 to 764 [ 262.284348][T18622] loop4: detected capacity change from 0 to 1024 [ 262.312379][T18622] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.5924: Failed to acquire dquot type 0 [ 262.343689][T18622] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 262.415763][T18622] EXT4-fs (loop4): 1 truncate cleaned up [ 262.430432][T18622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.501454][T18622] __quota_error: 19 callbacks suppressed [ 262.501536][T18622] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 262.516522][T18622] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 262.526070][T18622] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.5924: Failed to acquire dquot type 0 [ 262.560992][T18672] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 262.570288][T18672] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 262.579689][T18672] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.5924: Failed to acquire dquot type 0 [ 262.619231][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.702165][T18748] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 262.834900][ T29] audit: type=1326 audit(1769733297.027:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18856 comm="syz.3.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 262.898210][ T29] audit: type=1326 audit(1769733297.057:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18856 comm="syz.3.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 262.921854][ T29] audit: type=1326 audit(1769733297.057:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18856 comm="syz.3.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 262.945536][ T29] audit: type=1326 audit(1769733297.057:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18856 comm="syz.3.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 262.969239][ T29] audit: type=1326 audit(1769733297.067:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18856 comm="syz.3.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a83aaeb9 code=0x7ffc0000 [ 263.054997][ T29] audit: type=1326 audit(1769733297.167:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18856 comm="syz.3.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79a836b78e code=0x7ffc0000 [ 264.176808][T19016] __nla_validate_parse: 3 callbacks suppressed [ 264.176830][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5962'. [ 264.252303][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5964'. [ 264.415488][T19033] xt_hashlimit: max too large, truncated to 1048576 [ 264.632320][T19152] netlink: 'syz.2.5977': attribute type 4 has an invalid length. [ 264.862791][T19268] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 265.398732][T19304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5997'. [ 265.515981][T19310] 9p: Bad value for 'wfdno' [ 265.600343][T19318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6012'. [ 266.132493][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6015'. [ 266.142747][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6015'. [ 266.525477][T19470] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6020'. [ 266.552038][T19474] xt_nat: multiple ranges no longer supported [ 266.850096][T19501] tipc: Enabling of bearer rejected, failed to enable media [ 267.186961][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6053'. [ 267.198811][ T5244] smc: removing ib device syz1 [ 267.204690][ T3414] syz1: Port: 1 Link DOWN [ 267.209958][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.342804][T19543] loop4: detected capacity change from 0 to 128 [ 268.060730][T19576] loop4: detected capacity change from 0 to 512 [ 268.080271][T19576] EXT4-fs: Ignoring removed i_version option [ 268.086420][T19576] EXT4-fs: Ignoring removed bh option [ 268.116118][T19576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.131561][T19576] ext4 filesystem being mounted at /1059/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.198197][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.274718][T19589] loop4: detected capacity change from 0 to 1024 [ 268.302117][T19589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 268.319768][T19589] ext4 filesystem being mounted at /1060/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.335724][T19589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6077: bg 0: block 112: padding at end of block bitmap is not set [ 268.356236][T19589] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.6077: lblock 0 mapped to illegal pblock 0 (length 1) [ 268.356787][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 268.356829][ T29] audit: type=1400 audit(1769733302.547:4052): avc: denied { append } for pid=19588 comm="syz.4.6077" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 268.406463][T19589] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.6077: lblock 0 mapped to illegal pblock 0 (length 1) [ 268.420580][T19589] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.6077: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 268.438827][ T29] audit: type=1400 audit(1769733302.627:4053): avc: denied { execute } for pid=19588 comm="syz.4.6077" path="/1060/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 268.464854][T19596] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.6077: lblock 0 mapped to illegal pblock 0 (length 1) [ 268.478799][T19596] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.6077: lblock 0 mapped to illegal pblock 0 (length 1) [ 268.500500][T19588] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.6077: lblock 0 mapped to illegal pblock 0 (length 1) [ 268.525493][T19596] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.6077: lblock 0 mapped to illegal pblock 0 (length 1) [ 268.547602][T19596] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.6077: lblock 0 mapped to illegal pblock 0 (length 1) [ 268.572024][T19596] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.6077: lblock 0 mapped to illegal pblock 0 (length 1) [ 268.634951][ T29] audit: type=1326 audit(1769733302.827:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.1.6087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x0 [ 269.096070][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.118597][T19618] loop4: detected capacity change from 0 to 1024 [ 269.312178][T19623] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 269.322381][ T29] audit: type=1400 audit(1769733303.517:4055): avc: denied { relabelto } for pid=19622 comm="syz.4.6090" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 269.352778][ T29] audit: type=1400 audit(1769733303.517:4056): avc: denied { associate } for pid=19622 comm="syz.4.6090" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 269.441188][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6095'. [ 269.467911][T19635] loop4: detected capacity change from 0 to 256 [ 269.508170][T19635] FAT-fs (loop4): Directory bread(block 64) failed [ 269.522406][T19635] FAT-fs (loop4): Directory bread(block 65) failed [ 269.529091][T19635] FAT-fs (loop4): Directory bread(block 66) failed [ 269.550182][T19635] FAT-fs (loop4): Directory bread(block 67) failed [ 269.556847][T19635] FAT-fs (loop4): Directory bread(block 68) failed [ 269.569432][T19635] FAT-fs (loop4): Directory bread(block 69) failed [ 269.576223][T19635] FAT-fs (loop4): Directory bread(block 70) failed [ 269.583094][T19635] FAT-fs (loop4): Directory bread(block 71) failed [ 269.588945][T19647] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 269.590456][T19635] FAT-fs (loop4): Directory bread(block 72) failed [ 269.604977][T19635] FAT-fs (loop4): Directory bread(block 73) failed [ 269.901606][T19674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6109'. [ 269.946410][T19679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6111'. [ 270.006468][ T29] audit: type=1326 audit(1769733304.197:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fc2caeb9 code=0x7ffc0000 [ 270.030387][ T29] audit: type=1326 audit(1769733304.197:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fb2fc2caeb9 code=0x7ffc0000 [ 270.261277][T19719] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 270.781474][ T29] audit: type=1326 audit(1769733304.977:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19948 comm="syz.0.6139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74a300aeb9 code=0x0 [ 271.453571][T19984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.464593][T19984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.694353][ T29] audit: type=1326 audit(1769733305.887:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 271.717961][ T29] audit: type=1326 audit(1769733305.887:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a300aeb9 code=0x7ffc0000 [ 271.745299][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6159'. [ 272.174866][T20029] loop4: detected capacity change from 0 to 512 [ 272.192353][T20029] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.211064][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6168'. [ 272.719146][T20051] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 272.820148][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6182'. [ 272.926195][T20070] loop4: detected capacity change from 0 to 256 [ 273.685803][T20119] loop4: detected capacity change from 0 to 512 [ 273.734106][T20119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.749281][T20119] ext4 filesystem being mounted at /1096/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.782178][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 273.782192][ T29] audit: type=1326 audit(1769733307.977:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 273.821474][T20119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.838882][ T29] audit: type=1326 audit(1769733308.007:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 273.862590][ T29] audit: type=1326 audit(1769733308.007:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 273.886302][ T29] audit: type=1326 audit(1769733308.007:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 273.909816][ T29] audit: type=1326 audit(1769733308.007:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 273.933523][ T29] audit: type=1326 audit(1769733308.007:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 273.957226][ T29] audit: type=1326 audit(1769733308.007:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 273.980876][ T29] audit: type=1326 audit(1769733308.007:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 274.004448][ T29] audit: type=1326 audit(1769733308.007:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 274.028296][ T29] audit: type=1326 audit(1769733308.007:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f2f7559aeb9 code=0x7ffc0000 [ 274.088960][T20132] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 274.125198][T20136] loop4: detected capacity change from 0 to 128 [ 274.188980][T20138] ================================================================== [ 274.197132][T20138] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 274.205076][T20138] [ 274.207422][T20138] write to 0xffff88811a380780 of 8 bytes by task 20141 on cpu 0: [ 274.215166][T20138] cpu_map_kthread_run+0x4e7/0x1650 [ 274.220406][T20138] kthread+0x488/0x510 [ 274.224503][T20138] ret_from_fork+0x148/0x280 [ 274.229125][T20138] ret_from_fork_asm+0x1a/0x30 [ 274.233920][T20138] [ 274.236257][T20138] read to 0xffff88811a380780 of 8 bytes by task 20138 on cpu 1: [ 274.243934][T20138] bq_flush_to_queue+0x124/0x350 [ 274.248902][T20138] __cpu_map_flush+0x38/0x80 [ 274.253520][T20138] xdp_do_flush+0xf8/0x160 [ 274.257971][T20138] bpf_test_run_xdp_live+0xe8a/0x1360 [ 274.263389][T20138] bpf_prog_test_run_xdp+0x57b/0xa10 [ 274.268800][T20138] bpf_prog_test_run+0x204/0x340 [ 274.273774][T20138] __sys_bpf+0x4c0/0x7b0 [ 274.278045][T20138] __x64_sys_bpf+0x41/0x50 [ 274.282484][T20138] x64_sys_call+0x28e1/0x3000 [ 274.287197][T20138] do_syscall_64+0xc0/0x2a0 [ 274.291739][T20138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.297658][T20138] [ 274.299995][T20138] value changed: 0xffff8881393be070 -> 0x0000000000000000 [ 274.307115][T20138] [ 274.309449][T20138] Reported by Kernel Concurrency Sanitizer on: [ 274.315614][T20138] CPU: 1 UID: 0 PID: 20138 Comm: syz.1.6211 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 274.327017][T20138] Tainted: [W]=WARN [ 274.330837][T20138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.340913][T20138] ==================================================================