last executing test programs: 45.467862502s ago: executing program 1 (id=857): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r4, r3, 0x0, 0x3ffff) 44.511082787s ago: executing program 1 (id=870): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f0000000100)={[{@fat=@fmask={'fmask', 0x3d, 0x1}}, {@fat=@errors_continue}, {@fat=@debug}, {@nodots}, {}, {@fat=@flush}]}, 0x1, 0x11d9, &(0x7f0000001240)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) 44.383908749s ago: executing program 1 (id=872): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 43.457294814s ago: executing program 1 (id=879): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 43.158395738s ago: executing program 1 (id=884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0xe, 0x1000) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000480)) socket(0x2, 0x80805, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)}, {&(0x7f0000000000)='0', 0x1}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 43.127882169s ago: executing program 1 (id=885): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="023b86dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 43.09376697s ago: executing program 32 (id=885): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="023b86dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 3.326427097s ago: executing program 0 (id=1631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_clone3(&(0x7f0000000580)={0x800000, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000280), {0x16}, &(0x7f00000002c0)=""/160, 0xa0, &(0x7f00000004c0)=""/151, 0x0}, 0x58) 2.318886723s ago: executing program 0 (id=1670): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x52f}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x0, 0xf, 0x1}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) 1.737938092s ago: executing program 0 (id=1674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 1.646652714s ago: executing program 4 (id=1678): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0x306c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0xeb64d656001f6f32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 1.495848066s ago: executing program 4 (id=1680): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 1.433599317s ago: executing program 2 (id=1681): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.433057667s ago: executing program 4 (id=1682): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1.29160744s ago: executing program 4 (id=1684): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x74, 0x24, 0x400, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.124596492s ago: executing program 5 (id=1685): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) 1.107837312s ago: executing program 2 (id=1686): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x50}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.009206124s ago: executing program 2 (id=1687): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) 887.168596ms ago: executing program 5 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x10c}}, 0x0) 761.998668ms ago: executing program 3 (id=1693): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x6488, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 703.198739ms ago: executing program 5 (id=1694): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 702.983989ms ago: executing program 3 (id=1695): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001"], 0x118}}, 0x0) 632.44348ms ago: executing program 0 (id=1696): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) clock_settime(0x0, 0x0) 430.589173ms ago: executing program 4 (id=1697): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 429.960393ms ago: executing program 5 (id=1707): syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x40, 0x20000007ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0xfffffffffffffffe, {0x24, 0x4, 0x1, 0x2, 0xbe}}) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x2, 0x0, 0x0}) semop(0x0, &(0x7f0000000380), 0x0) 374.456464ms ago: executing program 4 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 367.198114ms ago: executing program 5 (id=1699): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 354.102464ms ago: executing program 3 (id=1700): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x68}}, 0x0) 246.370406ms ago: executing program 3 (id=1701): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 218.860356ms ago: executing program 0 (id=1702): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c060000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2c020400) 151.163997ms ago: executing program 3 (id=1703): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 118.198068ms ago: executing program 0 (id=1704): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035", 0x18}, {&(0x7f0000000800)="0036d551861e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81", 0x57}], 0x2}}], 0x1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[], 0x240}}, 0x0) 88.920018ms ago: executing program 2 (id=1705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x22, 0x6, 0x8001, 0x9a01, 0x7, 0x5514, 0xd, 0x100}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 85.479289ms ago: executing program 3 (id=1706): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCGETA(r2, 0x5405, 0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x3ffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) sendfile(r1, r0, 0x0, 0x7fffeffd) 31.070479ms ago: executing program 5 (id=1708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) memfd_create(&(0x7f0000000000)='\xff\x01\x00\x00r\a]{\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000010c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x4, 0x1}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x360}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f0000006140)="dc3d9f1fa8006c73d2aab62515573429b04a48e8e9429e8ec01f24fb0063600251bca0f0a3b0c05443d93ab05936b4ef8e90364f337b6283e9c6a1f3f2ba69122ad46635515220503a28061b488bb87e202c5a7911722f76caaa2723998ecc7524c5242fded742dca34f6ef83e5228f70a715a5221e9a5ee05f0e204158ec7a31a1a", 0x82}, {&(0x7f0000006200)="767d97d5615ccaa1869cfc67b66dc9c5baae07b0af9adc8c5dd3139c2b74bcaa9782e3c31a01d58f0e0670489bc1582296723402a15ad9073230f213bba40a3243c9fc2f26a88b54fe98c890704f1c8f7c963c3228136fc352486f0eff308f946eb53488d8496f0ca8978f14da5ef96c2c1d8335a8637371effcaa7365a1d0ff8d5f97b7649e85743731dfd3d8df3987437092dd281043bf", 0x98}, {&(0x7f00000062c0)="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", 0x4c3}], 0x3}}], 0x6, 0x20004095) 19.119599ms ago: executing program 2 (id=1709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 0s ago: executing program 2 (id=1710): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) kernel console output (not intermixed with test programs): 1.561160][ T3929] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.772056][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 42.201482][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.430585][ T3987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.473541][ T3987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.974476][ T4018] pim6reg1: entered promiscuous mode [ 42.980719][ T4018] pim6reg1: entered allmulticast mode [ 43.086308][ T4024] bond_slave_1: mtu less than device minimum [ 43.531182][ T4041] IPv6: addrconf: prefix option has invalid lifetime [ 43.631689][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 43.631704][ T29] audit: type=1326 audit(1753506932.877:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3d6ee9a9 code=0x7ffc0000 [ 43.669981][ T29] audit: type=1326 audit(1753506932.917:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a3d6ee9a9 code=0x7ffc0000 [ 43.695942][ T29] audit: type=1326 audit(1753506932.917:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3d6ee9a9 code=0x7ffc0000 [ 43.722420][ T29] audit: type=1326 audit(1753506932.917:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f0a3d6ee9a9 code=0x7ffc0000 [ 43.752764][ T29] audit: type=1326 audit(1753506932.917:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3d6ee9a9 code=0x7ffc0000 [ 43.778982][ T29] audit: type=1326 audit(1753506932.917:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3d6ee9a9 code=0x7ffc0000 [ 43.870585][ T29] audit: type=1400 audit(1753506933.107:518): avc: denied { name_bind } for pid=4055 comm="syz.0.226" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.934878][ T29] audit: type=1326 audit(1753506933.187:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 44.005647][ T29] audit: type=1326 audit(1753506933.187:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 44.037112][ T29] audit: type=1326 audit(1753506933.217:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 44.726063][ T4101] netlink: 96 bytes leftover after parsing attributes in process `syz.0.245'. [ 44.786448][ T4106] netlink: 75 bytes leftover after parsing attributes in process `syz.3.248'. [ 44.822879][ T4109] ref_ctr increment failed for inode: 0x106 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005e300 [ 44.842025][ T4108] uprobe: syz.3.249:4108 failed to unregister, leaking uprobe [ 45.070715][ T4123] loop3: detected capacity change from 0 to 128 [ 45.170122][ T4123] syz.3.256: attempt to access beyond end of device [ 45.170122][ T4123] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 45.255622][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.264743][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.323650][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.338747][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.358047][ T4127] syz.3.258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.425338][ T4125] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.435177][ T4125] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.444792][ T4125] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.454650][ T4125] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.478602][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 45.522354][ T4135] process 'syz.4.262' launched '/dev/fd/6' with NULL argv: empty string added [ 45.557847][ T4138] netlink: 44 bytes leftover after parsing attributes in process `syz.4.265'. [ 45.836856][ T4159] loop3: detected capacity change from 0 to 128 [ 45.848568][ T4159] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.868297][ T4159] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.913671][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.045032][ T4172] loop3: detected capacity change from 0 to 256 [ 46.333771][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 46.360364][ T4201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.410144][ T4201] macvlan2: entered promiscuous mode [ 46.417591][ T4201] macvlan2: entered allmulticast mode [ 46.453819][ T4201] bond1: entered promiscuous mode [ 46.459534][ T4201] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.492213][ T4201] bond1: left promiscuous mode [ 46.613525][ T4215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.688768][ T4215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.762692][ T4215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.790656][ T4224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.296'. [ 46.886250][ T4215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.892135][ T4232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 46.972785][ T4215] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.011949][ T4215] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.074038][ T4215] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.104503][ T4247] loop1: detected capacity change from 0 to 164 [ 47.117561][ T4215] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.150398][ T4247] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.174335][ T4247] SELinux: Context system_u:object_r:scsi_generic_device_t:s0 is not valid (left unmapped). [ 47.304517][ T4265] IPv6: Can't replace route, no match found [ 47.361774][ T4272] SELinux: Context system_u:object_r:sysfs_t:s0 is not valid (left unmapped). [ 47.414930][ T4272] loop1: detected capacity change from 0 to 512 [ 47.448426][ T4272] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.318: Failed to acquire dquot type 1 [ 47.502808][ T4272] EXT4-fs (loop1): 1 truncate cleaned up [ 47.541568][ T4291] xt_hashlimit: size too large, truncated to 1048576 [ 47.555611][ T4272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.663380][ T4272] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.676423][ T4287] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 47.720668][ T4272] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.751692][ T4299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 48.014342][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 48.024222][ T4364] netlink: 'syz.1.331': attribute type 30 has an invalid length. [ 48.067837][ T4364] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.077446][ T4364] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.086205][ T4364] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.095477][ T4364] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.120097][ T4362] loop2: detected capacity change from 0 to 128 [ 48.140604][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 48.150233][ T4364] netlink: 'syz.1.331': attribute type 30 has an invalid length. [ 48.634865][ T4384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4384 comm=syz.4.338 [ 48.718453][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 48.718530][ T29] audit: type=1400 audit(1753506937.967:689): avc: denied { map } for pid=4389 comm="syz.2.340" path="socket:[7387]" dev="sockfs" ino=7387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 48.788181][ T3399] Process accounting resumed [ 48.813421][ T29] audit: type=1326 audit(1753506938.057:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 48.839763][ T29] audit: type=1326 audit(1753506938.057:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 48.867552][ T29] audit: type=1326 audit(1753506938.057:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 48.869748][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 48.894255][ T29] audit: type=1326 audit(1753506938.057:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 48.894328][ T29] audit: type=1326 audit(1753506938.057:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 48.904472][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 48.932256][ T29] audit: type=1326 audit(1753506938.057:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 48.992980][ T29] audit: type=1326 audit(1753506938.207:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 49.018052][ T29] audit: type=1326 audit(1753506938.207:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 49.083977][ T29] audit: type=1326 audit(1753506938.267:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 49.248076][ T4424] loop1: detected capacity change from 0 to 512 [ 49.406049][ T4424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.464515][ T4424] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.531691][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.968402][ T4474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.087436][ T4474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.156999][ T4474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.247926][ T4474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.373737][ T4474] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396122][ T4474] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.411983][ T4474] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.428362][ T4474] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.507271][ T4524] loop2: detected capacity change from 0 to 128 [ 50.518867][ T4524] EXT4-fs: Ignoring removed nobh option [ 50.532310][ T4524] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.549072][ T4531] __nla_validate_parse: 3 callbacks suppressed [ 50.549088][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 50.572515][ T4524] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.597371][ T4534] loop4: detected capacity change from 0 to 512 [ 50.633805][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.641872][ T4534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.658529][ T4534] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.773953][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.817645][ T4560] 9pnet: p9_errstr2errno: server reported unknown error [ 50.890582][ T4563] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 50.899536][ T4563] netlink: 'syz.3.403': attribute type 4 has an invalid length. [ 50.908274][ T4563] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.403'. [ 50.920427][ T4563] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 50.929605][ T4563] netlink: 'syz.3.403': attribute type 4 has an invalid length. [ 50.938899][ T4563] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.403'. [ 51.092077][ T4579] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 51.117969][ T4581] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.165418][ T4581] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.265572][ T4581] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.315375][ T4581] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.320509][ T4607] loop2: detected capacity change from 0 to 512 [ 51.344728][ T4607] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.421: Failed to acquire dquot type 1 [ 51.357725][ T4607] EXT4-fs (loop2): 1 truncate cleaned up [ 51.364513][ T4607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.379808][ T4607] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.396820][ T4581] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.403559][ T4607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.411426][ T4581] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.434052][ T4581] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.448815][ T4581] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.557621][ T4628] loop2: detected capacity change from 0 to 512 [ 51.567375][ T4628] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.429: iget: bad i_size value: 38620345925642 [ 51.581774][ T4628] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.429: couldn't read orphan inode 15 (err -117) [ 51.602366][ T4628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.629982][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.678468][ T4633] loop1: detected capacity change from 0 to 128 [ 51.815799][ T4650] netlink: 'syz.0.439': attribute type 13 has an invalid length. [ 51.855501][ T4652] loop2: detected capacity change from 0 to 512 [ 51.876242][ T2959] Process accounting resumed [ 51.886447][ T4652] ext4: Unknown parameter 'permit_directio' [ 51.937030][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 51.946685][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 52.378703][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.386613][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.389108][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 52.439374][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.449925][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.481936][ T4677] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.497722][ T4677] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.507913][ T4677] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.518222][ T4677] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.593999][ T4690] vlan2: entered allmulticast mode [ 52.599963][ T4690] dummy0: entered allmulticast mode [ 52.620036][ T4694] loop4: detected capacity change from 0 to 1024 [ 52.628308][ T4694] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.644852][ T4694] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.455: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.662930][ T4694] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.455: Failed to acquire dquot type 0 [ 52.696569][ T4694] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.455: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.712582][ T4694] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.455: Invalid inode bitmap blk 0 in block_group 0 [ 52.728651][ T4328] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.730774][ T3399] Process accounting resumed [ 52.744936][ T4694] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 52.754866][ T4328] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0 [ 52.776252][ T4694] EXT4-fs (loop4): 1 orphan inode deleted [ 52.783406][ T4694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.810016][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 52.821119][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 52.831174][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 52.856307][ T4694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.944171][ T4718] loop1: detected capacity change from 0 to 512 [ 52.966059][ T4718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.984417][ T4718] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.072708][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.735599][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 54.003885][ T4755] loop4: detected capacity change from 0 to 512 [ 54.025507][ T4755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.062953][ T4755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.087696][ T4755] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.202605][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 54.202620][ T29] audit: type=1326 audit(1753506943.447:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 54.267481][ T29] audit: type=1326 audit(1753506943.517:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 54.310198][ T29] audit: type=1326 audit(1753506943.517:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 54.352258][ T29] audit: type=1326 audit(1753506943.517:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 54.470838][ T4764] loop2: detected capacity change from 0 to 1024 [ 54.477942][ T29] audit: type=1326 audit(1753506943.517:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 54.507368][ T4764] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.520285][ T29] audit: type=1326 audit(1753506943.517:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 54.569019][ T29] audit: type=1326 audit(1753506943.517:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 54.601605][ T29] audit: type=1326 audit(1753506943.517:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 54.627461][ T29] audit: type=1326 audit(1753506943.517:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 54.654460][ T29] audit: type=1326 audit(1753506943.517:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 54.755151][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.778345][ T4764] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.483: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.814691][ T4764] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.483: Failed to acquire dquot type 0 [ 54.833063][ T4764] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.483: Freeing blocks not in datazone - block = 0, count = 4096 [ 54.861117][ T4764] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.483: Invalid inode bitmap blk 0 in block_group 0 [ 54.884203][ T4764] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 54.884606][ T4328] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.903313][ T4764] EXT4-fs (loop2): 1 orphan inode deleted [ 54.921935][ T4328] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0 [ 54.929646][ T4764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.984910][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.998024][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.036203][ T4764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.091446][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.109831][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.201169][ T4784] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.214528][ T4784] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.225399][ T4784] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.237219][ T4784] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.294083][ T4784] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.306146][ T4784] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.317759][ T4784] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.329600][ T4784] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.265929][ T4826] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.315018][ T4826] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.395652][ T4826] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.455334][ T4826] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.526085][ T4826] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.545973][ T4826] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.574732][ T4826] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.597987][ T4826] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.737345][ T4856] loop4: detected capacity change from 0 to 512 [ 56.772307][ T4856] ext4: Unknown parameter 'permit_directio' [ 56.852228][ T4852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.867698][ T4852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.912710][ T4852] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.922103][ T4852] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.932612][ T4852] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.941786][ T4852] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.074619][ T4869] wg2: left promiscuous mode [ 57.080195][ T4869] wg2: left allmulticast mode [ 57.195271][ T4879] loop1: detected capacity change from 0 to 128 [ 57.216414][ T4877] loop4: detected capacity change from 0 to 2048 [ 57.233598][ T4879] EXT4-fs: Ignoring removed nobh option [ 57.253409][ T4877] EXT4-fs: Ignoring removed nobh option [ 57.273947][ T4879] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.310913][ T4877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.334258][ T4879] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.417659][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.584570][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.626383][ T4900] loop4: detected capacity change from 0 to 1024 [ 57.637568][ T4898] loop1: detected capacity change from 0 to 512 [ 57.647641][ T4900] EXT4-fs: Ignoring removed orlov option [ 57.654150][ T4898] ext4: Unknown parameter 'permit_directio' [ 57.665960][ T4900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.769886][ T4907] program syz.1.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.945813][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.965853][ T4910] loop4: detected capacity change from 0 to 164 [ 57.974573][ T4910] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.311818][ T4883] syz.0.530 (4883) used greatest stack depth: 6784 bytes left [ 58.376518][ T4926] loop1: detected capacity change from 0 to 512 [ 58.385230][ T4926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.415891][ T4926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.430629][ T4926] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.557728][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.421183][ T4977] wg2: entered promiscuous mode [ 59.422125][ T4979] loop2: detected capacity change from 0 to 512 [ 59.426917][ T4977] wg2: entered allmulticast mode [ 59.441570][ T4979] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.461205][ T4979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.477879][ T4979] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.606292][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.866048][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 59.876240][ T4994] bridge_slave_1: left allmulticast mode [ 59.882525][ T4994] bridge_slave_1: left promiscuous mode [ 59.888591][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.897258][ T4994] bridge_slave_0: left allmulticast mode [ 59.903755][ T4994] bridge_slave_0: left promiscuous mode [ 59.909790][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.212152][ T4999] netlink: 'syz.4.571': attribute type 12 has an invalid length. [ 60.258746][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 60.258759][ T29] audit: type=1400 audit(1753506949.507:1100): avc: denied { mount } for pid=5002 comm="syz.2.573" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.321947][ T29] audit: type=1400 audit(1753506949.567:1101): avc: denied { read write } for pid=5004 comm="syz.4.576" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.348462][ T29] audit: type=1400 audit(1753506949.567:1102): avc: denied { open } for pid=5004 comm="syz.4.576" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.392073][ T29] audit: type=1400 audit(1753506949.637:1103): avc: denied { bind } for pid=5009 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.574171][ T29] audit: type=1400 audit(1753506949.817:1104): avc: denied { getopt } for pid=5012 comm="syz.1.579" lport=36649 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 60.614308][ T29] audit: type=1326 audit(1753506949.867:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 60.642586][ T5017] loop1: detected capacity change from 0 to 128 [ 60.651994][ T5017] FAT-fs (loop1): invalid media value (0x00) [ 60.659087][ T5017] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 60.669007][ T5017] FAT-fs (loop1): Can't find a valid FAT filesystem [ 60.676017][ T29] audit: type=1326 audit(1753506949.867:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 60.700822][ T29] audit: type=1326 audit(1753506949.887:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 60.727495][ T29] audit: type=1326 audit(1753506949.887:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6654cbe9e3 code=0x7ffc0000 [ 60.752548][ T29] audit: type=1326 audit(1753506949.887:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6654cbd45f code=0x7ffc0000 [ 60.901641][ T5023] $Hÿ: renamed from bond0 [ 60.908530][ T5023] $Hÿ: entered promiscuous mode [ 60.914412][ T5023] bond_slave_0: entered promiscuous mode [ 60.921007][ T5023] bond_slave_1: entered promiscuous mode [ 62.726708][ T5088] netlink: 'syz.2.606': attribute type 4 has an invalid length. [ 62.752668][ T5081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=5081 comm=syz.2.606 [ 62.926463][ T5110] loop4: detected capacity change from 0 to 8192 [ 63.109176][ T5143] loop1: detected capacity change from 0 to 512 [ 63.116464][ T5144] capability: warning: `syz.4.631' uses 32-bit capabilities (legacy support in use) [ 63.137750][ T5143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.152031][ T5143] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.166120][ T5143] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 63.190404][ T5143] EXT4-fs (loop1): Remounting filesystem read-only [ 63.213747][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.355514][ T5175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.648'. [ 63.365159][ T5176] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 63.365159][ T5176] The task syz.0.642 (5176) triggered the difference, watch for misbehavior. [ 63.511088][ T5194] wg2: entered promiscuous mode [ 63.516354][ T5194] wg2: entered allmulticast mode [ 64.219847][ T5234] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 64.276525][ T5239] bond0: entered promiscuous mode [ 64.289730][ T5239] bond0: entered allmulticast mode [ 64.303315][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.375188][ T5234] bridge1: entered promiscuous mode [ 64.381124][ T5234] bridge1: entered allmulticast mode [ 64.390590][ T5234] bond0: (slave bridge1): Enslaving as a backup interface with an up link [ 64.403516][ T4334] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 64.523270][ T4310] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 64.567819][ T5265] netlink: 'syz.3.686': attribute type 4 has an invalid length. [ 64.731947][ T5287] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 64.744100][ T5288] loop4: detected capacity change from 0 to 256 [ 64.766841][ T5288] FAT-fs (loop4): bogus number of FAT sectors [ 64.775768][ T5288] FAT-fs (loop4): Can't find a valid FAT filesystem [ 64.795138][ T5287] bond1: entered promiscuous mode [ 64.854206][ T5287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.871267][ T5292] netlink: 3 bytes leftover after parsing attributes in process `syz.0.696'. [ 64.927683][ T5292] batadv1: entered promiscuous mode [ 64.935714][ T5292] batadv1: entered allmulticast mode [ 64.944208][ T5292] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 64.954863][ T5292] bond1: (slave batadv1): making interface the new active one [ 64.964990][ T5287] netlink: 3 bytes leftover after parsing attributes in process `syz.0.696'. [ 64.981255][ T5292] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 64.998983][ T5287] batadv2: entered promiscuous mode [ 65.005625][ T5287] batadv2: entered allmulticast mode [ 65.018744][ T5287] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 65.030771][ T5287] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 65.045874][ T5287] netlink: 3 bytes leftover after parsing attributes in process `syz.0.696'. [ 65.079756][ T5287] batadv3: entered promiscuous mode [ 65.086365][ T5287] batadv3: entered allmulticast mode [ 65.095441][ T5287] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 65.105699][ T5287] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 65.250876][ T9] IPVS: starting estimator thread 0... [ 65.343382][ T5312] IPVS: using max 2880 ests per chain, 144000 per kthread [ 65.517015][ T5336] unsupported nla_type 52263 [ 65.524940][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 65.524955][ T29] audit: type=1326 audit(1753506954.777:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.583546][ T29] audit: type=1326 audit(1753506954.777:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.609759][ T29] audit: type=1326 audit(1753506954.817:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.640477][ T29] audit: type=1326 audit(1753506954.817:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.668051][ T29] audit: type=1326 audit(1753506954.817:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.697066][ T29] audit: type=1326 audit(1753506954.817:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.724079][ T29] audit: type=1326 audit(1753506954.817:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.752877][ T29] audit: type=1326 audit(1753506954.817:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.779156][ T29] audit: type=1326 audit(1753506954.817:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.819708][ T29] audit: type=1326 audit(1753506954.977:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 65.851196][ T5352] netlink: 14 bytes leftover after parsing attributes in process `syz.2.720'. [ 65.899478][ T5352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.919163][ T5352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.939941][ T5352] bond0 (unregistering): Released all slaves [ 66.010606][ T5368] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.726'. [ 66.028501][ T5362] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.726'. [ 66.174518][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 66.356176][ T5399] netlink: 112 bytes leftover after parsing attributes in process `syz.2.742'. [ 66.516389][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 66.547167][ T5416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.567473][ T5416] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 66.585163][ T5416] macvlan2: entered promiscuous mode [ 66.592368][ T5416] macvlan2: entered allmulticast mode [ 66.605338][ T5416] bond2: entered promiscuous mode [ 66.614027][ T5416] bridge1: entered promiscuous mode [ 66.626648][ T5422] 9pnet: p9_errstr2errno: server reported unknown error [ 66.636407][ T5416] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.645616][ T5416] bond2: left promiscuous mode [ 66.651220][ T5416] bridge1: left promiscuous mode [ 67.037485][ T5447] A6±ÿ: renamed from team_slave_1 [ 67.612319][ T5469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 67.626350][ T5469] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.635869][ T5469] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.644825][ T5469] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.654166][ T5469] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.664249][ T5469] vxlan0: entered promiscuous mode [ 67.866372][ T5493] netlink: 'syz.2.780': attribute type 10 has an invalid length. [ 67.875151][ T5493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.780'. [ 67.888218][ T5493] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.907460][ T5493] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.921836][ T5493] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 67.934535][ T5493] team0: Failed to send options change via netlink (err -105) [ 67.946550][ T5493] team0: Port device geneve1 added [ 67.971891][ T5490] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.025392][ T5490] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.107587][ T5490] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.131175][ T5490] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.146361][ T5490] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.168103][ T5490] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.240398][ T5511] veth0_vlan: entered allmulticast mode [ 68.248904][ T5511] veth0_vlan: left promiscuous mode [ 68.255122][ T5511] veth0_vlan: entered promiscuous mode [ 68.572350][ T5532] loop1: detected capacity change from 0 to 2048 [ 68.609206][ T5532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.630873][ T5532] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.648239][ T5532] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 68.662182][ T5532] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.662182][ T5532] [ 68.672718][ T5532] EXT4-fs (loop1): Total free blocks count 0 [ 68.679594][ T5532] EXT4-fs (loop1): Free/Dirty block details [ 68.686780][ T5532] EXT4-fs (loop1): free_blocks=2415919104 [ 68.692972][ T5532] EXT4-fs (loop1): dirty_blocks=16 [ 68.700792][ T5532] EXT4-fs (loop1): Block reservation details [ 68.707851][ T5532] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 68.731194][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.747229][ T5541] team1: entered promiscuous mode [ 68.764680][ T5541] team1: entered allmulticast mode [ 69.012090][ T5561] loop1: detected capacity change from 0 to 512 [ 69.041878][ T5561] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 69.056457][ T5561] System zones: 0-2, 18-18, 34-34 [ 69.064102][ T5561] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.071501][ T5561] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.810: bad orphan inode 13 [ 69.082825][ T5561] ext4_test_bit(bit=12, block=18) = 1 [ 69.088794][ T5561] is_bad_inode(inode)=0 [ 69.093269][ T5561] NEXT_ORPHAN(inode)=2130706432 [ 69.099023][ T5561] max_ino=32 [ 69.102848][ T5561] i_nlink=1 [ 69.107047][ T5561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.128955][ T5561] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 69.143593][ T5561] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 69.174550][ T5561] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 69.240414][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.285459][ T5587] bond2: (slave veth3): Enslaving as an active interface with an up link [ 69.323734][ T5587] bond2: entered promiscuous mode [ 69.330778][ T5587] veth3: entered promiscuous mode [ 69.336963][ T5587] bond2: entered allmulticast mode [ 69.342979][ T5587] veth3: entered allmulticast mode [ 69.352688][ T5587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.390161][ T5595] ip6gre1: entered allmulticast mode [ 69.619017][ T5622] loop4: detected capacity change from 0 to 2048 [ 69.784285][ T5622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.882490][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.072610][ T5654] netlink: 'syz.0.846': attribute type 25 has an invalid length. [ 70.080993][ T5654] netlink: 'syz.0.846': attribute type 8 has an invalid length. [ 70.092055][ T5654] __nla_validate_parse: 3 callbacks suppressed [ 70.092069][ T5654] netlink: 44 bytes leftover after parsing attributes in process `syz.0.846'. [ 70.123341][ T5654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.846'. [ 70.480247][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.488504][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.489796][ T5664] Set syz1 is full, maxelem 65536 reached [ 70.497381][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.511577][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.521693][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.530139][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.531545][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 70.538083][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.556378][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.556425][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 70.564251][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.564347][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.592680][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.601297][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.609677][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.617462][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.625400][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.633498][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.641063][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.649168][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.657704][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.666779][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.676367][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.684918][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.693241][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.702433][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.710871][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.719084][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.728345][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.739048][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.746967][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.754941][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.762703][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.771812][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.779874][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.782832][ T5690] loop1: detected capacity change from 0 to 512 [ 70.789264][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.789334][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.806387][ T5690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.812767][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.812796][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.844317][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.853148][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.861487][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.869970][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.877694][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.885451][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.895917][ T3386] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 70.958060][ T3386] hid-generic 0000:0000:0008.0001: hidraw0: HID vc.87 Device [syz0] on syz1 [ 71.007151][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 71.007176][ T29] audit: type=1400 audit(1753506960.257:1624): avc: denied { ioctl } for pid=5700 comm="syz.3.860" path="socket:[12154]" dev="sockfs" ino=12154 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.330049][ T5705] all: renamed from lo [ 71.373988][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.866'. [ 71.735655][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.830249][ T5721] loop1: detected capacity change from 0 to 8192 [ 71.885035][ T29] audit: type=1326 audit(1753506961.137:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 71.910502][ T29] audit: type=1326 audit(1753506961.137:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 71.936385][ T29] audit: type=1326 audit(1753506961.137:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 71.999857][ T5727] loop1: detected capacity change from 0 to 1024 [ 72.009853][ T5727] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.095567][ T5727] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.872: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.263309][ T5727] Quota error (device loop1): write_blk: dquota write failed [ 72.271204][ T5727] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 72.303304][ T5727] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.872: Failed to acquire dquot type 0 [ 72.316017][ T29] audit: type=1326 audit(1753506961.137:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 72.342856][ T29] audit: type=1326 audit(1753506961.137:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 72.369216][ T29] audit: type=1326 audit(1753506961.227:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 72.395342][ T29] audit: type=1326 audit(1753506961.227:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6654cbe9a9 code=0x7ffc0000 [ 72.425068][ T5727] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.872: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.446653][ T5727] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.872: Invalid inode bitmap blk 0 in block_group 0 [ 72.482560][ T3702] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.518962][ T5727] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 72.533669][ T3702] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 72.543413][ T5727] EXT4-fs (loop1): 1 orphan inode deleted [ 72.573724][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.616781][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 72.657037][ T5727] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.692275][ T5744] bond0: (slave veth3): Enslaving as an active interface with an up link [ 72.793896][ T5751] bond0: entered promiscuous mode [ 72.799936][ T5751] veth3: entered promiscuous mode [ 72.805858][ T5751] bond0: entered allmulticast mode [ 72.811462][ T5751] veth3: entered allmulticast mode [ 72.855202][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.997566][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 73.303113][ T5787] netlink: 'syz.2.901': attribute type 39 has an invalid length. [ 73.391966][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 73.439228][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.448066][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.460103][ T5772] bridge_slave_0: entered allmulticast mode [ 73.467484][ T5772] bridge_slave_0: entered promiscuous mode [ 73.480602][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.489362][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.498713][ T5772] bridge_slave_1: entered allmulticast mode [ 73.507166][ T5772] bridge_slave_1: entered promiscuous mode [ 73.532092][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.545428][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.570212][ T5772] team0: Port device team_slave_0 added [ 73.579165][ T5772] team0: Port device team_slave_1 added [ 73.599447][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.607700][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.641383][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.654122][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.662699][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.692997][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.729690][ T5772] hsr_slave_0: entered promiscuous mode [ 73.739337][ T5772] hsr_slave_1: entered promiscuous mode [ 73.747886][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.758781][ T5772] Cannot create hsr debugfs directory [ 73.823005][ T5772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.833612][ T5772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.843596][ T5772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.853922][ T5772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.891999][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.906390][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.917793][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.925399][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.938462][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.946354][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.979428][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.006450][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 74.051866][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'. [ 74.111271][ T5816] bond3: (slave veth3): Enslaving as an active interface with an up link [ 74.131319][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.150150][ T5816] bond3: entered promiscuous mode [ 74.155994][ T5816] veth3: entered promiscuous mode [ 74.162797][ T5816] bond3: entered allmulticast mode [ 74.168174][ T5816] veth3: entered allmulticast mode [ 74.181841][ T5816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.190029][ T5826] : renamed from bond0 (while UP) [ 74.386649][ T5772] veth0_vlan: entered promiscuous mode [ 74.406408][ T5772] veth1_vlan: entered promiscuous mode [ 74.445864][ T5849] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.479891][ T5772] veth0_macvtap: entered promiscuous mode [ 74.499535][ T5772] veth1_macvtap: entered promiscuous mode [ 74.518072][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.532392][ T5849] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.553372][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.566341][ T5772] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.578771][ T5772] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.589619][ T5772] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.601104][ T5772] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616417][ T5849] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.707868][ T5849] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.750668][ T5858] loop5: detected capacity change from 0 to 128 [ 74.759867][ T5858] EXT4-fs: Ignoring removed nobh option [ 74.775710][ T5849] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.789643][ T5858] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.790867][ T5849] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.818621][ T5858] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.821212][ T5849] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.844312][ T5849] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.860212][ T5862] $Hÿ: renamed from bond0 [ 74.886162][ T5862] $Hÿ: entered promiscuous mode [ 74.892384][ T5862] bond_slave_0: entered promiscuous mode [ 74.898784][ T5862] bond_slave_1: entered promiscuous mode [ 74.937289][ T5866] bridge: RTM_NEWNEIGH with invalid ether address [ 74.950039][ T5772] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.312963][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 75.604967][ T5915] loop5: detected capacity change from 0 to 1024 [ 75.641583][ T5915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.691766][ T5920] netlink: 5 bytes leftover after parsing attributes in process `syz.4.934'. [ 75.702022][ T5920] 0ªî{X¹¦: renamed from gretap0 [ 75.709510][ T5920] 0ªî{X¹¦: entered allmulticast mode [ 75.716779][ T5920] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 75.944569][ T5772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.021909][ T5930] loop5: detected capacity change from 0 to 1024 [ 76.029480][ T5930] EXT4-fs: Ignoring removed orlov option [ 76.044850][ T5930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.470245][ T5772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.519413][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.942'. [ 76.731747][ T5977] batman_adv: batadv0: Adding interface: dummy0 [ 76.738949][ T5977] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.766736][ T5977] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 77.018032][ T6003] mmap: syz.5.959 (6003) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.194833][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 77.194850][ T29] audit: type=1326 audit(1753506966.407:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.227191][ T29] audit: type=1326 audit(1753506966.407:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.253554][ T29] audit: type=1326 audit(1753506966.417:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.279152][ T29] audit: type=1326 audit(1753506966.417:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.304302][ T29] audit: type=1326 audit(1753506966.417:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.328893][ T29] audit: type=1326 audit(1753506966.417:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.355021][ T29] audit: type=1326 audit(1753506966.417:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.380330][ T29] audit: type=1326 audit(1753506966.417:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.407003][ T29] audit: type=1326 audit(1753506966.417:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.434113][ T29] audit: type=1326 audit(1753506966.417:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 77.562737][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.572547][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.023633][ T6036] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 78.064362][ T6036] bond0: entered promiscuous mode [ 78.069925][ T6036] bond0: entered allmulticast mode [ 78.081129][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.974'. [ 78.093002][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.177725][ T6042] bridge0: entered promiscuous mode [ 78.183870][ T6042] bridge0: entered allmulticast mode [ 78.190337][ T4321] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.213930][ T6042] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 78.248583][ T6047] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.295915][ T6052] netlink: 'syz.5.976': attribute type 10 has an invalid length. [ 78.304141][ T6052] netlink: 40 bytes leftover after parsing attributes in process `syz.5.976'. [ 78.324859][ T4342] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.337656][ T6047] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.367538][ T6052] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 78.379406][ T6052] team0: Failed to send options change via netlink (err -105) [ 78.387875][ T6052] team0: Port device geneve1 added [ 78.411986][ T6047] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.432617][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 78.450152][ T6059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.471196][ T6059] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 78.493163][ T6059] macvlan2: entered promiscuous mode [ 78.498808][ T6059] macvlan2: entered allmulticast mode [ 78.519697][ T6059] bond3: entered promiscuous mode [ 78.525656][ T6059] bridge1: entered promiscuous mode [ 78.537151][ T3386] IPVS: starting estimator thread 0... [ 78.547671][ T6059] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.556802][ T6059] bond3: left promiscuous mode [ 78.562440][ T6059] bridge1: left promiscuous mode [ 78.575096][ T6047] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.634068][ T6047] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.644296][ T6066] IPVS: using max 2928 ests per chain, 146400 per kthread [ 78.647346][ T6047] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.686949][ T6047] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.707615][ T6047] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.817270][ T6073] loop5: detected capacity change from 0 to 1024 [ 78.825284][ T6073] EXT4-fs: Ignoring removed orlov option [ 78.837573][ T6073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.207257][ T5772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.278740][ T6087] netlink: 'syz.0.991': attribute type 1 has an invalid length. [ 79.293369][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 79.327409][ T6087] bond4: entered promiscuous mode [ 79.332884][ T6087] bond4: entered allmulticast mode [ 79.340564][ T6087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 79.366118][ T6087] bridge2: entered promiscuous mode [ 79.372200][ T6087] bridge2: entered allmulticast mode [ 79.380433][ T6087] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 79.449128][ T4334] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 79.563788][ T4342] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 79.657352][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 80.483557][ T6139] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.536124][ T6139] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.605968][ T6139] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.665005][ T6139] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.708313][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 80.738790][ T6151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.746577][ T6156] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 80.778431][ T6151] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 80.787930][ T6157] netlink: 'syz.0.1028': attribute type 10 has an invalid length. [ 80.796998][ T6157] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1028'. [ 80.800529][ T6151] macvlan2: entered promiscuous mode [ 80.813464][ T6151] macvlan2: entered allmulticast mode [ 80.822674][ T6151] bond1: entered promiscuous mode [ 80.828248][ T6151] bridge1: entered promiscuous mode [ 80.834087][ T6151] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.842263][ T6151] bond1: left promiscuous mode [ 80.847184][ T6151] bridge1: left promiscuous mode [ 80.868158][ T6157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.877225][ T6157] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.885952][ T6157] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.896128][ T6157] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 80.905499][ T6157] team0: Failed to send options change via netlink (err -105) [ 80.913571][ T6157] team0: Port device geneve1 added [ 80.935454][ T6155] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.985284][ T6155] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.045116][ T6155] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.459384][ T6155] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.474253][ T6155] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.487710][ T6155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.510569][ T6155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.054971][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1038'. [ 82.219282][ T6139] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.237502][ T6139] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.259082][ T6139] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.281012][ T6139] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.436685][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 82.552670][ T6217] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 82.896464][ T6178] syz.3.1031 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 82.908839][ T6178] CPU: 0 UID: 0 PID: 6178 Comm: syz.3.1031 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 82.908865][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.908877][ T6178] Call Trace: [ 82.908885][ T6178] [ 82.908958][ T6178] __dump_stack+0x1d/0x30 [ 82.908980][ T6178] dump_stack_lvl+0xe8/0x140 [ 82.908999][ T6178] dump_stack+0x15/0x1b [ 82.909016][ T6178] dump_header+0x81/0x220 [ 82.909074][ T6178] oom_kill_process+0x334/0x3f0 [ 82.909184][ T6178] out_of_memory+0x979/0xb80 [ 82.909268][ T6178] try_charge_memcg+0x5e6/0x9e0 [ 82.909348][ T6178] charge_memcg+0x51/0xc0 [ 82.909381][ T6178] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 82.909419][ T6178] __read_swap_cache_async+0x1df/0x350 [ 82.909456][ T6178] swap_cluster_readahead+0x277/0x3e0 [ 82.909507][ T6178] swapin_readahead+0xde/0x6f0 [ 82.909537][ T6178] ? __filemap_get_folio+0x4f7/0x6b0 [ 82.910309][ T6178] ? __htab_map_lookup_elem+0x148/0x150 [ 82.910336][ T6178] ? swap_cache_get_folio+0x77/0x200 [ 82.910363][ T6178] do_swap_page+0x301/0x2430 [ 82.910392][ T6178] ? finish_task_switch+0xad/0x2b0 [ 82.910414][ T6178] ? __pfx_default_wake_function+0x10/0x10 [ 82.910440][ T6178] handle_mm_fault+0x9a5/0x2be0 [ 82.910462][ T6178] ? mas_walk+0xf2/0x120 [ 82.910500][ T6178] do_user_addr_fault+0x636/0x1090 [ 82.910823][ T6178] ? fpregs_restore_userregs+0xe2/0x1d0 [ 82.910854][ T6178] ? switch_fpu_return+0xe/0x20 [ 82.910882][ T6178] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.910914][ T6178] exc_page_fault+0x62/0xa0 [ 82.910976][ T6178] asm_exc_page_fault+0x26/0x30 [ 82.910997][ T6178] RIP: 0033:0x7fafe7fd0cce [ 82.911026][ T6178] Code: e9 67 c7 12 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 2b 13 35 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 [ 82.911045][ T6178] RSP: 002b:00007ffc1edc6680 EFLAGS: 00010202 [ 82.911113][ T6178] RAX: 00007fafe8325fa0 RBX: 00007fafe8325fa0 RCX: 0000000000000026 [ 82.911125][ T6178] RDX: 0000000000000001 RSI: 00007fafe8326038 RDI: 0000000000000006 [ 82.911195][ T6178] RBP: 00007fafe8327ba0 R08: 0000000000000001 R09: 0000000000000026 [ 82.911207][ T6178] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000014036 [ 82.911300][ T6178] R13: 00007ffc1edc67e0 R14: ffffffffffffffff R15: 00007ffc1edc6800 [ 82.911319][ T6178] [ 82.911327][ T6178] memory: usage 307200kB, limit 307200kB, failcnt 229 [ 83.202337][ T6178] memory+swap: usage 307520kB, limit 9007199254740988kB, failcnt 0 [ 83.212524][ T6178] kmem: usage 302840kB, limit 9007199254740988kB, failcnt 0 [ 83.221076][ T6178] Memory cgroup stats for /syz3: [ 83.226143][ T6178] cache 4464640 [ 83.237222][ T6178] rss 0 [ 83.241407][ T6178] shmem 4464640 [ 83.245341][ T6178] mapped_file 0 [ 83.249169][ T6178] dirty 0 [ 83.253129][ T6178] writeback 0 [ 83.258014][ T6178] workingset_refault_anon 0 [ 83.263774][ T6178] workingset_refault_file 483 [ 83.271735][ T6178] swap 327680 [ 83.275342][ T6178] swapcached 0 [ 83.279144][ T6178] pgpgin 43011 [ 83.282896][ T6178] pgpgout 41921 [ 83.288917][ T6178] pgfault 62140 [ 83.294003][ T6178] pgmajfault 22 [ 83.298904][ T6178] inactive_anon 4202496 [ 83.304855][ T6178] active_anon 262144 [ 83.309058][ T6178] inactive_file 0 [ 83.314192][ T6178] active_file 0 [ 83.319003][ T6178] unevictable 0 [ 83.322707][ T6178] hierarchical_memory_limit 314572800 [ 83.328402][ T6178] hierarchical_memsw_limit 9223372036854771712 [ 83.336644][ T6178] total_cache 4464640 [ 83.341927][ T6178] total_rss 0 [ 83.345805][ T6178] total_shmem 4464640 [ 83.350468][ T6178] total_mapped_file 0 [ 83.356144][ T6178] total_dirty 0 [ 83.360794][ T6178] total_writeback 0 [ 83.364774][ T6178] total_workingset_refault_anon 0 [ 83.370472][ T6178] total_workingset_refault_file 483 [ 83.376019][ T6178] total_swap 327680 [ 83.381004][ T6178] total_swapcached 0 [ 83.386074][ T6178] total_pgpgin 43011 [ 83.391051][ T6178] total_pgpgout 41921 [ 83.397191][ T6178] total_pgfault 62140 [ 83.402766][ T6178] total_pgmajfault 22 [ 83.407342][ T6178] total_inactive_anon 4202496 [ 83.413356][ T6178] total_active_anon 262144 [ 83.418759][ T6178] total_inactive_file 0 [ 83.423325][ T6178] total_active_file 0 [ 83.428685][ T6178] total_unevictable 0 [ 83.434182][ T6178] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1031,pid=6178,uid=0 [ 83.450927][ T6178] Memory cgroup out of memory: Killed process 6178 (syz.3.1031) total-vm:95808kB, anon-rss:1072kB, file-rss:22324kB, shmem-rss:128kB, UID:0 pgtables:132kB oom_score_adj:0 [ 84.155726][ T6374] netlink: 'syz.0.1053': attribute type 13 has an invalid length. [ 84.179941][ T6374] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.189796][ T6374] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.199357][ T6374] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.209686][ T6374] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.227950][ T6377] syzkaller0: entered allmulticast mode [ 84.235986][ T6379] syzkaller0: entered promiscuous mode [ 84.252073][ T6377] syzkaller0 (unregistering): left allmulticast mode [ 84.261988][ T6377] syzkaller0 (unregistering): left promiscuous mode [ 84.308452][ T6383] netlink: 'syz.0.1056': attribute type 83 has an invalid length. [ 84.368589][ T6386] netlink: 'syz.0.1056': attribute type 83 has an invalid length. [ 84.733271][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 84.733288][ T29] audit: type=1400 audit(1753506973.967:2491): avc: denied { unlink } for pid=5772 comm="syz-executor" name="file2" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.931241][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.946954][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.043394][ T29] audit: type=1400 audit(1753506974.297:2492): avc: denied { write } for pid=6434 comm="syz.2.1079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.114068][ T6443] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 85.138912][ T6443] bond4: entered promiscuous mode [ 85.145289][ T6443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.160839][ T6443] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1083'. [ 85.176001][ T6443] batadv0: entered promiscuous mode [ 85.182126][ T6443] batadv0: entered allmulticast mode [ 85.189227][ T6443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.197904][ T6443] bond4: (slave batadv0): making interface the new active one [ 85.207174][ T6443] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 85.217911][ T6448] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1083'. [ 85.248483][ T6448] batadv1: entered promiscuous mode [ 85.254537][ T6448] batadv1: entered allmulticast mode [ 85.280993][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 85.304814][ T6448] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 85.313778][ T6448] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1083'. [ 85.325769][ T6448] batadv2: entered promiscuous mode [ 85.331113][ T6448] batadv2: entered allmulticast mode [ 85.336990][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 85.345423][ T6448] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 85.422814][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1095'. [ 85.435905][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1085'. [ 85.469193][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.508019][ T6455] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 85.599097][ T6455] macvlan2: entered promiscuous mode [ 85.604916][ T6455] macvlan2: entered allmulticast mode [ 85.656987][ T6455] bond0: entered promiscuous mode [ 85.662160][ T6455] bridge1: entered promiscuous mode [ 85.722276][ T6455] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.768693][ T6455] bond0: left promiscuous mode [ 85.773901][ T6455] bridge1: left promiscuous mode [ 85.809521][ T29] audit: type=1400 audit(1753506975.057:2493): avc: denied { connect } for pid=6468 comm="syz.0.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.083164][ T29] audit: type=1400 audit(1753506975.327:2494): avc: denied { append } for pid=6488 comm="syz.0.1101" name="file0" dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.151848][ T29] audit: type=1400 audit(1753506975.367:2495): avc: denied { cmd } for pid=6488 comm="syz.0.1101" path="/224/file0" dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 86.577943][ T6507] $Hÿ: left promiscuous mode [ 86.583638][ T6507] bond_slave_0: left promiscuous mode [ 86.589479][ T6507] bond_slave_1: left promiscuous mode [ 86.623470][ T6507] wg2: left promiscuous mode [ 86.628678][ T6507] wg2: left allmulticast mode [ 86.685826][ T6507] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.695353][ T6507] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.706196][ T6507] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.716220][ T6507] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.745068][ T6507] vxlan0: left promiscuous mode [ 86.751506][ T6507] bond2: left promiscuous mode [ 86.757745][ T6507] veth3: left promiscuous mode [ 86.763990][ T6507] bond2: left allmulticast mode [ 86.769785][ T6507] veth3: left allmulticast mode [ 86.786957][ T6507] bond0: left promiscuous mode [ 86.792750][ T6507] bridge0: left promiscuous mode [ 86.798505][ T6507] bond0: left allmulticast mode [ 86.804381][ T6507] bridge0: left allmulticast mode [ 86.829800][ T6507] bond4: left promiscuous mode [ 86.835557][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 86.845683][ T6507] batadv0: left promiscuous mode [ 86.851399][ T6507] batadv0: left allmulticast mode [ 86.869999][ T6507] batadv1: left promiscuous mode [ 86.875563][ T6507] batadv1: left allmulticast mode [ 86.891293][ T6507] batadv2: left promiscuous mode [ 86.896810][ T6507] batadv2: left allmulticast mode [ 86.987362][ T29] audit: type=1400 audit(1753506976.237:2496): avc: denied { setattr } for pid=6514 comm="syz.3.1108" name="" dev="pipefs" ino=16602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 87.645537][ T6538] 0ªî{X¹¦: left allmulticast mode [ 87.647631][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1119'. [ 87.661743][ T6538] wg2: left promiscuous mode [ 87.666994][ T6538] wg2: left allmulticast mode [ 87.676782][ T6538] team1: left promiscuous mode [ 87.682499][ T6538] team1: left allmulticast mode [ 87.707089][ T6545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.729183][ T6551] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 87.760274][ T6545] macvlan2: entered promiscuous mode [ 87.765895][ T6545] macvlan2: entered allmulticast mode [ 87.771936][ T6545] bond1: entered promiscuous mode [ 87.777055][ T6545] bridge2: entered promiscuous mode [ 87.782714][ T6545] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.791723][ T6545] bond1: left promiscuous mode [ 87.796681][ T6545] bridge2: left promiscuous mode [ 87.835850][ T29] audit: type=1326 audit(1753506977.087:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 87.860248][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 87.892451][ T29] audit: type=1326 audit(1753506977.107:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 87.916204][ T29] audit: type=1326 audit(1753506977.107:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 87.940159][ T29] audit: type=1326 audit(1753506977.107:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 88.218289][ T6600] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 88.239339][ T6600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 88.264201][ T6600] bond5: (slave gretap1): making interface the new active one [ 88.277938][ T6600] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 88.302804][ T6600] vlan2: entered allmulticast mode [ 88.308048][ T6600] bond5: entered allmulticast mode [ 88.313170][ T6600] gretap1: entered allmulticast mode [ 88.319140][ T6600] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 88.383892][ T6608] syzkaller0: entered allmulticast mode [ 88.390236][ T6608] syzkaller0: entered promiscuous mode [ 88.407544][ T6608] syzkaller0 (unregistering): left allmulticast mode [ 88.415630][ T6608] syzkaller0 (unregistering): left promiscuous mode [ 88.938721][ T6676] wg2: entered promiscuous mode [ 88.944388][ T6676] wg2: entered allmulticast mode [ 89.021911][ T6690] sd 0:0:1:0: device reset [ 90.067547][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 90.067563][ T29] audit: type=1326 audit(1753506979.317:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.120482][ T29] audit: type=1326 audit(1753506979.347:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.147362][ T29] audit: type=1326 audit(1753506979.347:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.175085][ T29] audit: type=1326 audit(1753506979.347:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.200141][ T29] audit: type=1326 audit(1753506979.357:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.226564][ T29] audit: type=1326 audit(1753506979.357:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.252868][ T29] audit: type=1326 audit(1753506979.357:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.278517][ T29] audit: type=1326 audit(1753506979.357:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.305049][ T29] audit: type=1326 audit(1753506979.357:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.333355][ T29] audit: type=1326 audit(1753506979.357:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 90.382873][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 90.432046][ T6840] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1191'. [ 90.487253][ T6846] loop5: detected capacity change from 0 to 2048 [ 90.525363][ T6854] tipc: Enabling of bearer rejected, failed to enable media [ 90.540223][ T6846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.585421][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'. [ 90.687690][ T6869] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 90.748425][ T5772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.795879][ T6876] bond1: left promiscuous mode [ 90.802016][ T6876] batadv1: left promiscuous mode [ 90.808301][ T6876] batadv1: left allmulticast mode [ 90.813621][ T6876] batadv2: left promiscuous mode [ 90.818907][ T6876] batadv2: left allmulticast mode [ 90.824544][ T6876] batadv3: left promiscuous mode [ 90.829990][ T6876] batadv3: left allmulticast mode [ 90.835833][ T6876] bond3: left promiscuous mode [ 90.841302][ T6876] veth3: left promiscuous mode [ 90.847796][ T6876] bond3: left allmulticast mode [ 90.853143][ T6876] veth3: left allmulticast mode [ 90.858824][ T6876] bond4: left promiscuous mode [ 90.864068][ T6876] bridge2: left promiscuous mode [ 90.870291][ T6876] bond4: left allmulticast mode [ 90.877077][ T6876] bridge2: left allmulticast mode [ 90.885371][ T6882] loop5: detected capacity change from 0 to 512 [ 90.886486][ T6883] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 90.892260][ T6882] EXT4-fs: test_dummy_encryption option not supported [ 90.900969][ T6883] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1207'. [ 90.931366][ T6882] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 90.957055][ T6883] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.966334][ T6883] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.977422][ T6883] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997771][ T6883] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 91.007908][ T6883] team0: Failed to send options change via netlink (err -105) [ 91.017334][ T6883] team0: Port device geneve1 added [ 91.035133][ T6881] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.124448][ T6881] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.184591][ T6881] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.239952][ T6881] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.252602][ T6881] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.266980][ T6881] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.284988][ T6881] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563811][ T6920] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1222'. [ 91.843394][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'. [ 91.862332][ T6930] team1: entered promiscuous mode [ 91.869273][ T6930] team1: entered allmulticast mode [ 91.910244][ T6940] netlink: 'syz.3.1226': attribute type 10 has an invalid length. [ 91.919035][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1226'. [ 91.940136][ T6940] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.949716][ T6940] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.964423][ T6940] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 91.977424][ T6940] team0: Failed to send options change via netlink (err -105) [ 91.987186][ T6940] team0: Port device geneve1 added [ 92.006250][ T6933] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.097073][ T6933] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.099093][ T6950] netlink: 'syz.5.1234': attribute type 1 has an invalid length. [ 92.124280][ T6950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.158523][ T6950] bond2: (slave gretap1): making interface the new active one [ 92.171088][ T6950] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 92.192577][ T6950] vlan2: entered allmulticast mode [ 92.199616][ T6950] bond2: entered allmulticast mode [ 92.205490][ T6950] gretap1: entered allmulticast mode [ 92.230701][ T6950] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 92.617622][ T6985] netlink: 'syz.4.1250': attribute type 1 has an invalid length. [ 92.631931][ T6985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.660720][ T6985] bond2: (slave gretap0): making interface the new active one [ 92.671325][ T6985] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 92.693757][ T6985] vlan2: entered allmulticast mode [ 92.699111][ T6985] bond2: entered allmulticast mode [ 92.704460][ T6985] gretap0: entered allmulticast mode [ 92.712166][ T6985] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 92.809616][ T6997] vlan0: entered allmulticast mode [ 93.302653][ T6933] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.326977][ T6933] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.339908][ T6933] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.356371][ T6933] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.392907][ T7043] veth1_to_bond: entered allmulticast mode [ 93.402618][ T7043] veth1_to_bond: left allmulticast mode [ 94.216398][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 94.415394][ T7181] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 94.825221][ T7133] 9pnet_fd: p9_fd_create_tcp (7133): problem connecting socket to 127.0.0.1 [ 95.274638][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 95.274655][ T29] audit: type=1326 audit(1753506984.527:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 95.308463][ T29] audit: type=1326 audit(1753506984.527:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 95.337383][ T7256] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1311'. [ 95.359035][ T29] audit: type=1326 audit(1753506984.597:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc687d5d310 code=0x7ffc0000 [ 95.383840][ T29] audit: type=1326 audit(1753506984.597:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc687d5d310 code=0x7ffc0000 [ 95.409237][ T29] audit: type=1326 audit(1753506984.597:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 95.436980][ T29] audit: type=1326 audit(1753506984.597:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 95.487348][ T29] audit: type=1326 audit(1753506984.607:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 95.514877][ T29] audit: type=1326 audit(1753506984.737:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 95.541310][ T29] audit: type=1326 audit(1753506984.737:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc687d5e9a9 code=0x7ffc0000 [ 95.578488][ T29] audit: type=1400 audit(1753506984.827:2810): avc: denied { watch } for pid=7266 comm="syz.3.1313" path="/253/file0" dev="tmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.622622][ T7263] wg2: entered promiscuous mode [ 95.627814][ T7263] wg2: entered allmulticast mode [ 95.710561][ T7273] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.790256][ T7273] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.878060][ T7273] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.944572][ T7273] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.020131][ T7273] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.047391][ T7273] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.086009][ T7273] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.116372][ T7273] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.202652][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1348'. [ 97.212402][ T7429] netlink: 'syz.5.1348': attribute type 5 has an invalid length. [ 97.292190][ T7429] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.301264][ T7429] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.309803][ T7429] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.318451][ T7429] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.416741][ T7450] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1353'. [ 99.291877][ T7550] netlink: 'syz.5.1376': attribute type 10 has an invalid length. [ 99.300373][ T7550] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1376'. [ 99.314529][ T7550] dummy0: entered promiscuous mode [ 99.322341][ T7550] bridge0: port 3(dummy0) entered blocking state [ 99.329397][ T7550] bridge0: port 3(dummy0) entered disabled state [ 99.336766][ T7550] dummy0: entered allmulticast mode [ 99.343360][ T7550] bridge0: port 3(dummy0) entered blocking state [ 99.350209][ T7550] bridge0: port 3(dummy0) entered forwarding state [ 99.601165][ T7538] Set syz1 is full, maxelem 65536 reached [ 99.664253][ T7556] infiniband syz!: set active [ 99.669093][ T7556] infiniband syz!: added team_slave_0 [ 99.699914][ T7556] RDS/IB: syz!: added [ 99.711611][ T7556] smc: adding ib device syz! with port count 1 [ 99.719737][ T7556] smc: ib device syz! port 1 has pnetid [ 100.030409][ T7580] netlink: 'syz.3.1388': attribute type 27 has an invalid length. [ 100.223769][ T7597] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 100.238829][ T7597] team1: entered promiscuous mode [ 100.246410][ T7597] team1: entered allmulticast mode [ 100.307428][ T7606] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 100.319806][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 100.319819][ T29] audit: type=1400 audit(1753506989.567:2858): avc: denied { write } for pid=7607 comm="syz.5.1402" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.379160][ T7610] netlink: 'syz.0.1403': attribute type 27 has an invalid length. [ 100.406829][ T7613] netlink: 'syz.2.1400': attribute type 27 has an invalid length. [ 100.422069][ T7613] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.431050][ T7613] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.440798][ T7613] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.450070][ T7613] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.464109][ T7613] ip6gre1: left allmulticast mode [ 100.481477][ T7613] : left promiscuous mode [ 100.486609][ T7613] veth3: left promiscuous mode [ 100.492740][ T7613] : left allmulticast mode [ 100.498280][ T7613] veth3: left allmulticast mode [ 100.561499][ T7617] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.575948][ T7617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.602799][ T7621] bridge0: port 3(macsec1) entered blocking state [ 100.609850][ T7621] bridge0: port 3(macsec1) entered disabled state [ 100.618059][ T7621] macsec1: entered allmulticast mode [ 100.623698][ T7621] bridge0: entered allmulticast mode [ 100.637502][ T7621] macsec1: left allmulticast mode [ 100.643112][ T7621] bridge0: left allmulticast mode [ 100.721333][ T7625] 9pnet: p9_errstr2errno: server reported unknown error [ 100.976629][ T7639] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.055012][ T7647] wg2: left promiscuous mode [ 101.059998][ T7647] wg2: left allmulticast mode [ 101.125912][ T7647] wg2: entered promiscuous mode [ 101.131185][ T7647] wg2: entered allmulticast mode [ 101.206155][ T29] audit: type=1326 audit(1753506990.457:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 101.232295][ T29] audit: type=1326 audit(1753506990.457:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 101.386041][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1425'. [ 101.429009][ T29] audit: type=1326 audit(1753506990.507:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 101.430051][ T7666] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 101.455920][ T29] audit: type=1326 audit(1753506990.507:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 101.455979][ T29] audit: type=1326 audit(1753506990.507:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 101.456028][ T29] audit: type=1326 audit(1753506990.517:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 101.538426][ T29] audit: type=1326 audit(101.226:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 101.562540][ T29] audit: type=1326 audit(101.226:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870306e9a9 code=0x7ffc0000 [ 101.597588][ T29] audit: type=1400 audit(101.546:2867): avc: denied { read } for pid=3412 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19008 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.765744][ T7676] tipc: Enabling of bearer rejected, failed to enable media [ 102.002751][ T7701] ref_ctr_offset mismatch. inode: 0x1e8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 102.082613][ T7703] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.137770][ T7707] netlink: zone id is out of range [ 102.143048][ T7707] netlink: zone id is out of range [ 102.163561][ T7707] netlink: zone id is out of range [ 102.168836][ T7707] netlink: zone id is out of range [ 102.183875][ T7703] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.194160][ T7707] netlink: zone id is out of range [ 102.199461][ T7707] netlink: zone id is out of range [ 102.208253][ T7707] netlink: zone id is out of range [ 102.213790][ T7707] netlink: zone id is out of range [ 102.234871][ T7703] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.314551][ T7703] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.367907][ T7717] loop5: detected capacity change from 0 to 1024 [ 102.372088][ T7703] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.393734][ T7717] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 102.406305][ T7703] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.438764][ T7703] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.476089][ T7703] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.770700][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1445'. [ 102.910826][ T7743] Cannot find set identified by id 0 to match [ 103.039771][ T7754] ref_ctr_offset mismatch. inode: 0x64b offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 103.427931][ T7766] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1463'. [ 103.557243][ T7774] netlink: 'syz.0.1466': attribute type 27 has an invalid length. [ 103.571987][ T7774] team1: left promiscuous mode [ 103.577460][ T7774] team1: left allmulticast mode [ 103.595600][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.605402][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.615424][ T7774] batman_adv: batadv0: Interface activated: dummy0 [ 103.997652][ T7791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7791 comm=syz.5.1473 [ 104.675727][ T7836] netlink: 'syz.5.1492': attribute type 27 has an invalid length. [ 104.723239][ T7836] bridge0: port 3(dummy0) entered disabled state [ 104.730025][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.738138][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.815326][ T7836] wg2: left promiscuous mode [ 104.820623][ T7836] wg2: left allmulticast mode [ 104.843013][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.861013][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.892677][ T7836] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.901445][ T7836] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.910389][ T7836] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.919449][ T7836] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.934167][ T7836] team1: left promiscuous mode [ 104.939417][ T7836] team1: left allmulticast mode [ 104.948755][ T7836] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.959417][ T7836] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.969577][ T7836] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.979264][ T7836] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.058482][ T7839] team0 (unregistering): Port device team_slave_0 removed [ 105.083592][ T7839] team0 (unregistering): Port device team_slave_1 removed [ 105.110211][ T7839] team0 (unregistering): Port device geneve1 removed [ 105.140241][ T7840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.151420][ T7840] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.170688][ T7840] bridge0: port 3(dummy0) entered blocking state [ 105.179171][ T7840] bridge0: port 3(dummy0) entered forwarding state [ 105.228415][ T7840] net_ratelimit: 24 callbacks suppressed [ 105.228424][ T7840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.393361][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1501'. [ 105.523894][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1501'. [ 105.806609][ T7870] IPVS: Error connecting to the multicast addr [ 105.935912][ T7875] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1505'. [ 105.987474][ T7882] set match dimension is over the limit! [ 106.077059][ T7891] batadv_slave_0: entered promiscuous mode [ 106.090427][ T7891] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 106.102426][ T7891] batadv_slave_0 (unregistering): left promiscuous mode [ 106.300893][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 106.301017][ T29] audit: type=1326 audit(106.246:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.343343][ T29] audit: type=1326 audit(106.296:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.368480][ T29] audit: type=1326 audit(106.296:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.395383][ T29] audit: type=1326 audit(106.296:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.420189][ T29] audit: type=1326 audit(106.296:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.445046][ T29] audit: type=1326 audit(106.296:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.461673][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 106.471148][ T29] audit: type=1326 audit(106.296:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.471182][ T29] audit: type=1326 audit(106.296:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.471206][ T29] audit: type=1326 audit(106.296:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.471234][ T29] audit: type=1326 audit(106.296:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07ea0e9a9 code=0x7ffc0000 [ 106.476379][ T7911] set match dimension is over the limit! [ 106.533083][ T7905] team0: entered promiscuous mode [ 106.599896][ T7905] team0: entered allmulticast mode [ 106.750173][ T7920] bridge0: port 1(batadv3) entered blocking state [ 106.758493][ T7920] bridge0: port 1(batadv3) entered disabled state [ 106.770090][ T7920] batadv3: entered allmulticast mode [ 106.778422][ T7920] batadv3: entered promiscuous mode [ 106.950907][ T7946] Cannot find add_set index 0 as target [ 107.253366][ T4321] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 107.263714][ T4321] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 107.748703][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1539'. [ 107.989841][ T7987] netlink: 'syz.5.1549': attribute type 1 has an invalid length. [ 108.027591][ T7987] bond3: entered promiscuous mode [ 108.034705][ T7987] bond3: entered allmulticast mode [ 108.060558][ T7991] geneve2: entered allmulticast mode [ 108.098341][ T7991] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.107266][ T7991] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.117420][ T7991] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.126829][ T7991] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.138803][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1549'. [ 108.152000][ T7991] bond3: (slave geneve2): making interface the new active one [ 108.160976][ T7991] geneve2: entered promiscuous mode [ 108.177288][ T7991] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 108.209124][ T7987] bond3: left promiscuous mode [ 108.214318][ T7987] geneve2: left promiscuous mode [ 108.219350][ T7987] bond3: left allmulticast mode [ 108.235677][ T7987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.582319][ T8008] infiniband syz1: set active [ 108.588206][ T8008] infiniband syz1: added bond0 [ 108.623196][ T8008] RDS/IB: syz1: added [ 108.634247][ T8008] smc: adding ib device syz1 with port count 1 [ 108.642439][ T8008] smc: ib device syz1 port 1 has pnetid [ 108.673297][ T2959] page_pool_release_retry() stalled pool shutdown: id 26, 2 inflight 60 sec [ 108.865059][ T8025] bridge: RTM_NEWNEIGH with invalid ether address [ 109.077310][ T8034] lo speed is unknown, defaulting to 1000 [ 109.087156][ T8034] lo speed is unknown, defaulting to 1000 [ 109.109424][ T8034] lo speed is unknown, defaulting to 1000 [ 109.124228][ T8034] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.132936][ T8034] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.151578][ T8034] lo speed is unknown, defaulting to 1000 [ 109.158755][ T8034] lo speed is unknown, defaulting to 1000 [ 109.166258][ T8034] lo speed is unknown, defaulting to 1000 [ 109.179715][ T8034] lo speed is unknown, defaulting to 1000 [ 109.186772][ T8034] lo speed is unknown, defaulting to 1000 [ 109.193156][ T8034] lo speed is unknown, defaulting to 1000 [ 109.646927][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1580'. [ 109.830180][ T8086] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 109.843521][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 109.923975][ T8047] lo speed is unknown, defaulting to 1000 [ 109.941735][ T8091] wg2: left promiscuous mode [ 109.946606][ T8091] wg2: left allmulticast mode [ 109.987817][ T8091] wg2: entered promiscuous mode [ 109.993650][ T8091] wg2: entered allmulticast mode [ 110.000017][ T8061] lo speed is unknown, defaulting to 1000 [ 110.728259][ T8111] vlan0: entered allmulticast mode [ 110.902679][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1598'. [ 110.929397][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.938889][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.115753][ T8093] wÞ£ÿ (8093) used greatest stack depth: 5880 bytes left [ 111.129304][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1603'. [ 111.155696][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1603'. [ 111.402787][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1614'. [ 111.477543][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 111.516034][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 111.516047][ T29] audit: type=1326 audit(111.466:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.547992][ T29] audit: type=1326 audit(111.466:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.573181][ T29] audit: type=1326 audit(111.476:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.597809][ T29] audit: type=1326 audit(111.476:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.621857][ T29] audit: type=1326 audit(111.476:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.646256][ T29] audit: type=1326 audit(111.476:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.670373][ T29] audit: type=1326 audit(111.486:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.696188][ T29] audit: type=1326 audit(111.486:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.721697][ T29] audit: type=1326 audit(111.496:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.728776][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1619'. [ 111.746975][ T29] audit: type=1326 audit(111.496:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe80fe9a9 code=0x7ffc0000 [ 111.813806][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 111.834999][ T8171] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.907196][ T8171] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.957891][ T8171] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.019489][ T8171] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.045600][ T8179] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.054939][ T8179] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.063621][ T8179] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.072416][ T8179] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.081738][ T8179] vxlan0: entered promiscuous mode [ 112.093510][ T8171] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.105120][ T8171] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.117345][ T8171] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.129467][ T8171] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.816895][ T8192] tipc: Started in network mode [ 112.822208][ T8192] tipc: Node identity ac141413, cluster identity 4711 [ 112.855155][ T8192] tipc: New replicast peer: 10.1.1.2 [ 112.861912][ T8192] tipc: Enabled bearer , priority 10 [ 113.037893][ T8213] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.046567][ T8213] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.055601][ T8213] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.064076][ T8213] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.167154][ T8223] rdma_rxe: rxe_newlink: failed to add bond0 [ 113.220993][ T8242] __nla_validate_parse: 4 callbacks suppressed [ 113.221010][ T8242] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1647'. [ 113.255670][ T8245] siw: device registration error -23 [ 113.336122][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 113.371405][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 113.411620][ T8262] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 113.450248][ T8264] rdma_rxe: rxe_newlink: failed to add bond0 [ 113.700384][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1665'. [ 113.996521][ T3412] tipc: Node number set to 2886997011 [ 114.887579][ T8324] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.896476][ T8324] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.905222][ T8324] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.914122][ T8324] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.011617][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1684'. [ 115.053993][ T8330] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.063023][ T8330] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.071851][ T8330] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.080901][ T8330] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.151831][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 115.179331][ T8330] vxlan0: entered promiscuous mode [ 115.225412][ T8334] serio: Serial port ttyS3 [ 115.721117][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1695'. [ 115.730599][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1695'. [ 115.740451][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1695'. [ 115.765713][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1695'. [ 115.895824][ T8371] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 115.915189][ T8371] bond5: entered promiscuous mode [ 115.920521][ T8371] bond5: entered allmulticast mode [ 115.932625][ T8371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 115.957492][ T8371] ip6gretap1: entered promiscuous mode [ 115.963307][ T8371] ip6gretap1: entered allmulticast mode [ 115.969442][ T8371] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 116.023532][ T4344] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 116.083926][ T8369] ip6t_rpfilter: unknown options [ 116.163578][ T4321] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 116.254760][ T8399] ================================================================== [ 116.263329][ T8399] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 116.273070][ T8399] [ 116.275436][ T8399] write to 0xffff8881045efee8 of 8 bytes by task 8387 on cpu 0: [ 116.283363][ T8399] shmem_file_splice_read+0x470/0x600 [ 116.288741][ T8399] splice_direct_to_actor+0x26f/0x680 [ 116.294139][ T8399] do_splice_direct+0xda/0x150 [ 116.299086][ T8399] do_sendfile+0x380/0x650 [ 116.303511][ T8399] __x64_sys_sendfile64+0x105/0x150 [ 116.308731][ T8399] x64_sys_call+0xb39/0x2fb0 [ 116.313427][ T8399] do_syscall_64+0xd2/0x200 [ 116.317938][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.323854][ T8399] [ 116.326194][ T8399] write to 0xffff8881045efee8 of 8 bytes by task 8399 on cpu 1: [ 116.333831][ T8399] shmem_file_splice_read+0x470/0x600 [ 116.339203][ T8399] splice_direct_to_actor+0x26f/0x680 [ 116.344594][ T8399] do_splice_direct+0xda/0x150 [ 116.349384][ T8399] do_sendfile+0x380/0x650 [ 116.353826][ T8399] __x64_sys_sendfile64+0x105/0x150 [ 116.359478][ T8399] x64_sys_call+0xb39/0x2fb0 [ 116.364357][ T8399] do_syscall_64+0xd2/0x200 [ 116.369080][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.375291][ T8399] [ 116.377647][ T8399] value changed: 0x0000000000000c08 -> 0x0000000000000c13 [ 116.385161][ T8399] [ 116.387829][ T8399] Reported by Kernel Concurrency Sanitizer on: [ 116.395469][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.3.1706 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 116.411488][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.422859][ T8399] ==================================================================