last executing test programs: 2.620727988s ago: executing program 0 (id=3023): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff94, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 2.518602278s ago: executing program 0 (id=3027): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) 2.447910514s ago: executing program 0 (id=3029): sync_file_range(0xffffffffffffffff, 0x4, 0x1, 0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x50) syz_clone3(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) fremovexattr(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") 1.815510615s ago: executing program 2 (id=3040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) socketpair(0x26, 0x3, 0x22, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44) 1.806084546s ago: executing program 2 (id=3041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "54fcc1dbadb00b50", "f4d095d17fa5842e23149cba5969c47f", "8da40d64", "eb034ea618e777ea"}, 0x28) timer_settime(0x0, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5", 0x2f}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 1.664539909s ago: executing program 1 (id=3045): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x28, 0x5, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x1, 0x0, 0x7, 0x6, 0xffffffffffffffc0, 0xffffffffffffffff}, @exit]}, &(0x7f0000000c00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 1.596064166s ago: executing program 2 (id=3046): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 1.595798266s ago: executing program 2 (id=3047): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x400}) 1.535471522s ago: executing program 1 (id=3049): r0 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2], 0x28}}, 0x40000) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0x6e, 0x1, {{0x5, 0x8e, 0x1}, {0x5, 0xc0}}}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.510510904s ago: executing program 1 (id=3050): pipe(&(0x7f0000000080)) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) 1.403176255s ago: executing program 0 (id=3051): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x8, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 1.339941611s ago: executing program 2 (id=3052): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$inet6(0xa, 0x1, 0x0) 1.208922874s ago: executing program 4 (id=3054): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x4880) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x86}], 0x1}}], 0x1, 0x4000040) 1.135758861s ago: executing program 3 (id=3055): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 1.13467329s ago: executing program 2 (id=3056): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.110162073s ago: executing program 0 (id=3057): sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) 1.094019525s ago: executing program 3 (id=3058): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f00000000c0)={&(0x7f0000000040)="795c1bfc18401cdc290667c35c8154156c631a5d5ba28597feb50cba90e3e8736a0f34b49793200c436c9af3bba49e245674b4f5c04240940a0c0503cf6ce77f853478af540d058d58889d8b72cb45c91855564ddfd80e33de2b4ce24c60894e3709fb79c4b60321620e41c972e83de86cb06d46a62258b7e673b7becca4a3", 0x7f}) sched_getparam(r0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x200, 0x3ff, 0x7, 0x4}, {0x9, 0x7, 0x40, 0x2}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x40094) ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000003c0)={0x0}) 1.016471722s ago: executing program 3 (id=3059): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x96}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0xa, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749d, 0x4, 0x0, 0x0, 0x0) 835.858109ms ago: executing program 3 (id=3060): r0 = socket(0x10, 0x80003, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close_range(r0, 0xffffffffffffffff, 0x0) 797.141543ms ago: executing program 4 (id=3061): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000088b000850000001b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r2, r3) 739.429448ms ago: executing program 3 (id=3062): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2}, 0x8) 718.104861ms ago: executing program 4 (id=3063): syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x8) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 659.831026ms ago: executing program 3 (id=3064): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x80000, 0xa2) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 613.74051ms ago: executing program 1 (id=3065): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 326.169009ms ago: executing program 4 (id=3066): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 163.735694ms ago: executing program 0 (id=3067): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") creat(&(0x7f0000000000)='./bus\x00', 0x39) io_setup(0x2, &(0x7f0000002380)) semget$private(0x0, 0x4000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x80}, 0x18) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001d40), 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) 163.244124ms ago: executing program 4 (id=3068): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000280)=0xc) r2 = socket(0x10, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000001000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x82, 0xfffffffffffffffe, &(0x7f00000000c0)=0x95) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 69.297793ms ago: executing program 1 (id=3069): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xf) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) 64.029474ms ago: executing program 4 (id=3070): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="af", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 1 (id=3071): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) openat(0xffffffffffffff9c, 0x0, 0x18580, 0x0) unshare(0x2040400) msgsnd(0x0, &(0x7f0000000580)={0x3}, 0x8, 0x0) kernel console output (not intermixed with test programs): syzkaller0: entered allmulticast mode [ 145.272109][ T8502] syzkaller0: entered promiscuous mode [ 145.279960][ T8502] syzkaller0 (unregistering): left allmulticast mode [ 145.286705][ T8502] syzkaller0 (unregistering): left promiscuous mode [ 145.435090][ T8509] netlink: 'syz.0.1861': attribute type 142 has an invalid length. [ 145.443307][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'. [ 145.674919][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 145.674937][ T29] audit: type=1400 audit(145.654:5395): avc: denied { write } for pid=8517 comm="syz.1.1864" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 145.895728][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 145.913007][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1866'. [ 145.958194][ T8518] loop1: detected capacity change from 0 to 128 [ 146.490359][ T3560] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.501739][ T3560] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.513889][ T3560] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.525792][ T3560] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.558123][ T29] audit: type=1326 audit(146.534:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 146.594249][ T29] audit: type=1326 audit(146.534:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 146.617263][ T29] audit: type=1326 audit(146.534:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 146.640291][ T29] audit: type=1326 audit(146.534:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 146.663161][ T29] audit: type=1326 audit(146.534:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 146.686274][ T29] audit: type=1326 audit(146.534:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 146.711544][ T29] audit: type=1326 audit(146.534:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 146.734889][ T29] audit: type=1326 audit(146.534:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 146.757939][ T29] audit: type=1326 audit(146.534:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 147.068533][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 148.011022][ T8550] loop1: detected capacity change from 0 to 2048 [ 148.053912][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'. [ 148.063937][ T8550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 148.095904][ T8554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.142783][ T3560] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.182347][ T3560] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 488 with error 28 [ 148.194849][ T3560] EXT4-fs (loop1): This should not happen!! Data will be lost [ 148.194849][ T3560] [ 148.204563][ T3560] EXT4-fs (loop1): Total free blocks count 0 [ 148.210586][ T3560] EXT4-fs (loop1): Free/Dirty block details [ 148.216694][ T3560] EXT4-fs (loop1): free_blocks=2415919104 [ 148.222772][ T3560] EXT4-fs (loop1): dirty_blocks=496 [ 148.228037][ T3560] EXT4-fs (loop1): Block reservation details [ 148.234090][ T3560] EXT4-fs (loop1): i_reserved_data_blocks=31 [ 148.337665][ T8550] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 34 with error 28 [ 149.040951][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 149.052151][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.052181][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.052193][ T3317] Call Trace: [ 149.052200][ T3317] [ 149.052209][ T3317] __dump_stack+0x1d/0x30 [ 149.052233][ T3317] dump_stack_lvl+0x95/0xd0 [ 149.052258][ T3317] dump_stack+0x15/0x1b [ 149.052277][ T3317] dump_header+0x81/0x240 [ 149.052296][ T3317] oom_kill_process+0x295/0x350 [ 149.052409][ T3317] out_of_memory+0x97b/0xb80 [ 149.052492][ T3317] try_charge_memcg+0x610/0xa10 [ 149.052620][ T3317] charge_memcg+0x51/0xc0 [ 149.052655][ T3317] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 149.052694][ T3317] __read_swap_cache_async+0x17b/0x2d0 [ 149.052729][ T3317] swap_cluster_readahead+0x262/0x3c0 [ 149.052834][ T3317] swapin_readahead+0xde/0x820 [ 149.052866][ T3317] ? next_uptodate_folio+0x81c/0x890 [ 149.052891][ T3317] ? percpu_counter_add_batch+0xb6/0x130 [ 149.052958][ T3317] ? __rcu_read_unlock+0x4f/0x70 [ 149.052977][ T3317] ? swap_cache_get_folio+0x277/0x280 [ 149.053011][ T3317] do_swap_page+0x2b4/0x21e0 [ 149.053122][ T3317] ? __pfx_default_wake_function+0x10/0x10 [ 149.053153][ T3317] handle_mm_fault+0x9d8/0x2c60 [ 149.053219][ T3317] do_user_addr_fault+0x630/0x1080 [ 149.053251][ T3317] exc_page_fault+0x62/0xa0 [ 149.053302][ T3317] asm_exc_page_fault+0x26/0x30 [ 149.053321][ T3317] RIP: 0033:0x7f9c11eb5fd7 [ 149.053337][ T3317] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24 [ 149.053354][ T3317] RSP: 002b:00007ffccc5abad0 EFLAGS: 00010202 [ 149.053380][ T3317] RAX: 0000001b33f24000 RBX: 00000000000003d3 RCX: 0000000000024220 [ 149.053396][ T3317] RDX: 00000000034bcb56 RSI: 00007ffccc5abb60 RDI: 000000000000000b [ 149.053412][ T3317] RBP: 00007ffccc5abb0c R08: 000000000c92d1dc R09: 7fffffffffffffff [ 149.053446][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 149.053458][ T3317] R13: 00000000000927c0 R14: 0000000000024247 R15: 00007ffccc5abb60 [ 149.053479][ T3317] [ 149.053486][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 3238 [ 149.272613][ T3317] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 149.280859][ T3317] kmem: usage 302584kB, limit 9007199254740988kB, failcnt 0 [ 149.288316][ T3317] Memory cgroup stats for /syz4: [ 149.288629][ T3317] cache 0 [ 149.296688][ T3317] rss 4726784 [ 149.299988][ T3317] shmem 0 [ 149.302949][ T3317] mapped_file 0 [ 149.306449][ T3317] dirty 0 [ 149.309395][ T3317] writeback 0 [ 149.312754][ T3317] workingset_refault_anon 159 [ 149.317523][ T3317] workingset_refault_file 834 [ 149.322293][ T3317] swap 446464 [ 149.325612][ T3317] swapcached 0 [ 149.329031][ T3317] pgpgin 135783 [ 149.332737][ T3317] pgpgout 134629 [ 149.336441][ T3317] pgfault 145440 [ 149.340019][ T3317] pgmajfault 119 [ 149.343724][ T3317] inactive_anon 0 [ 149.347687][ T3317] active_anon 0 [ 149.351336][ T3317] inactive_file 4726784 [ 149.355730][ T3317] active_file 0 [ 149.359294][ T3317] unevictable 0 [ 149.363080][ T3317] hierarchical_memory_limit 314572800 [ 149.368692][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 149.374937][ T3317] total_cache 0 [ 149.378500][ T3317] total_rss 4726784 [ 149.382323][ T3317] total_shmem 0 [ 149.385845][ T3317] total_mapped_file 0 [ 149.389924][ T3317] total_dirty 0 [ 149.393487][ T3317] total_writeback 0 [ 149.397453][ T3317] total_workingset_refault_anon 159 [ 149.402715][ T3317] total_workingset_refault_file 834 [ 149.407946][ T3317] total_swap 446464 [ 149.411845][ T3317] total_swapcached 0 [ 149.415769][ T3317] total_pgpgin 135783 [ 149.419763][ T3317] total_pgpgout 134629 [ 149.423889][ T3317] total_pgfault 145440 [ 149.427968][ T3317] total_pgmajfault 119 [ 149.432078][ T3317] total_inactive_anon 0 [ 149.436382][ T3317] total_active_anon 0 [ 149.440368][ T3317] total_inactive_file 4726784 [ 149.445074][ T3317] total_active_file 0 [ 149.449194][ T3317] total_unevictable 0 [ 149.453198][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1868,pid=8526,uid=0 [ 149.468267][ T3317] Memory cgroup out of memory: Killed process 8526 (syz.4.1868) total-vm:96016kB, anon-rss:5852kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 149.580960][ T8584] loop2: detected capacity change from 0 to 764 [ 150.867836][ T8606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.971760][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 150.971781][ T29] audit: type=1400 audit(150.944:5600): avc: denied { connect } for pid=8617 comm="syz.0.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.043762][ T29] audit: type=1400 audit(150.964:5601): avc: denied { write } for pid=8617 comm="syz.0.1900" path="socket:[31200]" dev="sockfs" ino=31200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.144145][ T29] audit: type=1400 audit(151.124:5602): avc: denied { read } for pid=8626 comm="syz.2.1904" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.168952][ T29] audit: type=1400 audit(151.144:5603): avc: denied { ioctl } for pid=8626 comm="syz.2.1904" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.264437][ T8634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8634 comm=syz.2.1907 [ 151.298833][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1908'. [ 151.319661][ T8636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8636 comm=syz.2.1908 [ 151.334178][ T8636] netlink: 'syz.2.1908': attribute type 1 has an invalid length. [ 151.366459][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1910'. [ 151.380395][ T29] audit: type=1400 audit(151.354:5604): avc: denied { create } for pid=8639 comm="syz.3.1909" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.420160][ T8641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8641 comm=syz.2.1910 [ 151.469734][ T8644] netlink: 'syz.3.1911': attribute type 7 has an invalid length. [ 151.477636][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 151.499956][ T29] audit: type=1400 audit(151.414:5605): avc: denied { unlink } for pid=3319 comm="syz-executor" name="file0" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.578576][ T8649] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1913'. [ 151.600663][ T8649] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1913'. [ 151.627079][ T29] audit: type=1400 audit(151.604:5606): avc: denied { nlmsg_read } for pid=8650 comm="syz.3.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 151.690004][ T29] audit: type=1107 audit(151.604:5607): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 151.703121][ T29] audit: type=1400 audit(151.664:5608): avc: denied { relabelfrom } for pid=8654 comm="syz.2.1916" name="NETLINK" dev="sockfs" ino=31297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.727179][ T29] audit: type=1400 audit(151.664:5609): avc: denied { relabelto } for pid=8654 comm="syz.2.1916" name="NETLINK" dev="sockfs" ino=31297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 152.226423][ T8678] netlink: 'syz.0.1925': attribute type 7 has an invalid length. [ 152.234530][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 152.485998][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1929'. [ 152.595680][ T8692] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1932'. [ 152.629501][ T8692] bond0: (slave dummy0): Releasing backup interface [ 152.820593][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1937'. [ 152.829654][ T8703] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1937'. [ 152.983473][ T8713] loop2: detected capacity change from 0 to 512 [ 153.035968][ T8713] 9p: Bad value for 'rfdno' [ 153.132729][ T8725] hsr_slave_1 (unregistering): left promiscuous mode [ 153.182688][ T8733] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 153.189393][ T8733] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 153.197039][ T8733] vhci_hcd vhci_hcd.0: Device attached [ 153.217423][ T8734] vhci_hcd: connection closed [ 153.217548][ T3563] vhci_hcd vhci_hcd.2: stop threads [ 153.227616][ T3563] vhci_hcd vhci_hcd.2: release socket [ 153.233146][ T3563] vhci_hcd vhci_hcd.2: disconnect device [ 153.835065][ T8765] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 153.859214][ T3590] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.878369][ T3590] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.894718][ T8765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.914497][ T3590] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.947182][ T3590] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.974482][ T8774] loop2: detected capacity change from 0 to 128 [ 154.413419][ T8794] geneve2: entered promiscuous mode [ 154.418722][ T8794] geneve2: entered allmulticast mode [ 154.425181][ T3563] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.448822][ T3563] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.459149][ T3563] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.477160][ T3563] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.845992][ T8827] loop2: detected capacity change from 0 to 512 [ 154.852757][ T8827] EXT4-fs: Ignoring removed orlov option [ 154.858764][ T8827] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.869645][ T8827] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1987: corrupted in-inode xattr: e_value size too large [ 154.884191][ T8827] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1987: couldn't read orphan inode 15 (err -117) [ 154.897065][ T8827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.962807][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.043307][ T8845] syzkaller0: entered promiscuous mode [ 155.048889][ T8845] syzkaller0: entered allmulticast mode [ 155.113861][ T3404] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 156.007559][ T8882] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=8882 comm=syz.4.2009 [ 156.512904][ T8905] __nla_validate_parse: 12 callbacks suppressed [ 156.512924][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2019'. [ 156.544301][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 156.544317][ T29] audit: type=1326 audit(156.524:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.574834][ T29] audit: type=1326 audit(156.554:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.597738][ T29] audit: type=1326 audit(156.554:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.621133][ T29] audit: type=1326 audit(156.554:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.648238][ T29] audit: type=1326 audit(156.604:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.671109][ T29] audit: type=1326 audit(156.604:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.694008][ T29] audit: type=1326 audit(156.604:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.716946][ T29] audit: type=1326 audit(156.604:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.739975][ T29] audit: type=1326 audit(156.604:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.763016][ T29] audit: type=1326 audit(156.604:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 156.813456][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2022'. [ 156.870693][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 156.937251][ T8919] loop2: detected capacity change from 0 to 512 [ 156.945466][ T8919] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.965782][ T8919] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2025: Allocating blocks 41-42 which overlap fs metadata [ 156.980019][ T8919] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2025: Allocating blocks 41-42 which overlap fs metadata [ 156.994401][ T8919] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2025: Failed to acquire dquot type 1 [ 157.006413][ T8919] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 157.021672][ T8919] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2025: corrupted inode contents [ 157.034226][ T8919] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2025: mark_inode_dirty error [ 157.046221][ T8919] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2025: corrupted inode contents [ 157.060198][ T8919] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2025: mark_inode_dirty error [ 157.072286][ T8919] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2025: corrupted inode contents [ 157.085153][ T8919] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 157.094331][ T8919] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2025: corrupted inode contents [ 157.121293][ T8919] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2025: mark_inode_dirty error [ 157.153077][ T8919] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 157.162575][ T8919] EXT4-fs (loop2): 1 truncate cleaned up [ 157.178836][ T8919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.215925][ T8931] lo: entered promiscuous mode [ 157.220775][ T8931] lo: entered allmulticast mode [ 157.244927][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.255430][ T8931] tunl0: entered promiscuous mode [ 157.260879][ T8931] tunl0: entered allmulticast mode [ 157.285571][ T8931] gre0: entered promiscuous mode [ 157.290703][ T8931] gre0: entered allmulticast mode [ 157.324368][ T8931] gretap0: entered promiscuous mode [ 157.329646][ T8931] gretap0: entered allmulticast mode [ 157.343546][ T8931] erspan0: entered promiscuous mode [ 157.349092][ T8931] erspan0: entered allmulticast mode [ 157.395706][ T8931] ip_vti0: entered promiscuous mode [ 157.401090][ T8931] ip_vti0: entered allmulticast mode [ 157.434214][ T8931] ip6_vti0: entered promiscuous mode [ 157.439746][ T8931] ip6_vti0: entered allmulticast mode [ 157.464130][ T8931] sit0: entered promiscuous mode [ 157.469484][ T8931] sit0: entered allmulticast mode [ 157.479241][ T8931] ip6tnl0: entered promiscuous mode [ 157.484698][ T8931] ip6tnl0: entered allmulticast mode [ 157.490959][ T8931] ip6gre0: entered promiscuous mode [ 157.496294][ T8931] ip6gre0: entered allmulticast mode [ 157.502626][ T8931] syz_tun: entered promiscuous mode [ 157.508222][ T8931] syz_tun: entered allmulticast mode [ 157.514876][ T8931] bridge0: entered promiscuous mode [ 157.520320][ T8931] bridge0: entered allmulticast mode [ 157.543375][ T8931] vcan0: entered promiscuous mode [ 157.548962][ T8931] vcan0: entered allmulticast mode [ 157.571177][ T8931] bond0: entered promiscuous mode [ 157.576592][ T8931] bond_slave_0: entered promiscuous mode [ 157.582524][ T8931] bond_slave_1: entered promiscuous mode [ 157.590331][ T8931] dummy0: entered promiscuous mode [ 157.595981][ T8931] bond0: entered allmulticast mode [ 157.601245][ T8931] bond_slave_0: entered allmulticast mode [ 157.607425][ T8931] bond_slave_1: entered allmulticast mode [ 157.615053][ T8931] dummy0: entered allmulticast mode [ 157.620685][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.630745][ T8931] nlmon0: entered promiscuous mode [ 157.635984][ T8931] nlmon0: entered allmulticast mode [ 157.642600][ T8931] caif0: entered promiscuous mode [ 157.647796][ T8931] caif0: entered allmulticast mode [ 157.653259][ T8931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.701183][ T8946] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 157.707752][ T8946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 157.715612][ T8946] vhci_hcd vhci_hcd.0: Device attached [ 157.746283][ T8947] vhci_hcd: connection closed [ 157.746895][ T3595] vhci_hcd vhci_hcd.1: stop threads [ 157.756961][ T3595] vhci_hcd vhci_hcd.1: release socket [ 157.762476][ T3595] vhci_hcd vhci_hcd.1: disconnect device [ 158.422929][ T8971] loop2: detected capacity change from 0 to 128 [ 158.432195][ T8971] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 158.457203][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.466315][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.476719][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.485707][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.495818][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 158.734914][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 158.889351][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 159.273880][ T3404] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 60 sec [ 159.845579][ T9072] random: crng reseeded on system resumption [ 159.936256][ T9075] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2087'. [ 160.051927][ T9090] netlink: 'syz.2.2092': attribute type 4 has an invalid length. [ 160.071458][ T9090] netlink: 'syz.2.2092': attribute type 4 has an invalid length. [ 160.195106][ T9096] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 160.215229][ T9096] .`: (slave dummy0): Releasing backup interface [ 160.226095][ T9096] team0: Port device dummy0 added [ 160.231917][ T9096] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 160.244831][ T9096] team0: Port device dummy0 removed [ 160.249425][ T9100] netlink: 'syz.4.2097': attribute type 13 has an invalid length. [ 160.262412][ T9096] .`: (slave dummy0): Enslaving as an active interface with an up link [ 160.296750][ T9100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.318853][ T9104] syzkaller1: entered promiscuous mode [ 160.324582][ T9104] syzkaller1: entered allmulticast mode [ 160.694492][ T9151] loop1: detected capacity change from 0 to 1024 [ 160.718197][ T9151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.745627][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.874486][ T9168] syzkaller0: entered promiscuous mode [ 160.880076][ T9168] syzkaller0: entered allmulticast mode [ 160.941566][ T3319] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 160.952773][ T3319] CPU: 1 UID: 0 PID: 3319 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.952805][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.952817][ T3319] Call Trace: [ 160.952823][ T3319] [ 160.952831][ T3319] __dump_stack+0x1d/0x30 [ 160.952967][ T3319] dump_stack_lvl+0x95/0xd0 [ 160.952993][ T3319] dump_stack+0x15/0x1b [ 160.953089][ T3319] dump_header+0x81/0x240 [ 160.953109][ T3319] oom_kill_process+0x295/0x350 [ 160.953137][ T3319] out_of_memory+0x97b/0xb80 [ 160.953182][ T3319] try_charge_memcg+0x610/0xa10 [ 160.953213][ T3319] charge_memcg+0x51/0xc0 [ 160.953247][ T3319] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 160.953360][ T3319] __read_swap_cache_async+0x17b/0x2d0 [ 160.953392][ T3319] swap_cluster_readahead+0x362/0x3c0 [ 160.953474][ T3319] swapin_readahead+0xde/0x820 [ 160.953500][ T3319] ? perf_iterate_sb+0x62a/0x650 [ 160.953530][ T3319] ? __pfx_perf_event_switch_output+0x10/0x10 [ 160.953591][ T3319] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 160.953613][ T3319] ? __rcu_read_unlock+0x4f/0x70 [ 160.953659][ T3319] ? __rcu_read_unlock+0x4f/0x70 [ 160.953682][ T3319] ? swap_cache_get_folio+0x277/0x280 [ 160.953737][ T3319] do_swap_page+0x2b4/0x21e0 [ 160.953771][ T3319] ? ___perf_sw_event+0x2d6/0x310 [ 160.953806][ T3319] ? __schedule+0x85f/0xcd0 [ 160.953830][ T3319] ? __pfx_default_wake_function+0x10/0x10 [ 160.953861][ T3319] handle_mm_fault+0x9d8/0x2c60 [ 160.953927][ T3319] do_user_addr_fault+0x630/0x1080 [ 160.953962][ T3319] exc_page_fault+0x62/0xa0 [ 160.953989][ T3319] asm_exc_page_fault+0x26/0x30 [ 160.954027][ T3319] RIP: 0033:0x7f537b201fc5 [ 160.954109][ T3319] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 160.954175][ T3319] RSP: 002b:00007ffc942589d8 EFLAGS: 00010246 [ 160.954193][ T3319] RAX: 0000000000000000 RBX: 00000000000003f0 RCX: 00007f537b201fc3 [ 160.954206][ T3319] RDX: 00007ffc942589f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.954218][ T3319] RBP: 00007ffc94258a5c R08: 000000003492e507 R09: 0000000000000000 [ 160.954230][ T3319] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 160.954244][ T3319] R13: 00000000000927c0 R14: 0000000000027409 R15: 00007ffc94258ab0 [ 160.954267][ T3319] [ 161.185533][ T3319] memory: usage 276520kB, limit 307200kB, failcnt 1566 [ 161.192608][ T3319] memory+swap: usage 270040kB, limit 9007199254740988kB, failcnt 0 [ 161.200660][ T3319] kmem: usage 255512kB, limit 9007199254740988kB, failcnt 0 [ 161.208135][ T3319] Memory cgroup stats for /syz3: [ 161.214837][ T3319] cache 0 [ 161.223117][ T3319] rss 12288 [ 161.226357][ T3319] shmem 0 [ 161.229305][ T3319] mapped_file 0 [ 161.232770][ T3319] dirty 0 [ 161.235737][ T3319] writeback 0 [ 161.239106][ T3319] workingset_refault_anon 250 [ 161.244103][ T3319] workingset_refault_file 1401 [ 161.248877][ T3319] swap 536576 [ 161.252257][ T3319] swapcached 16384 [ 161.256095][ T3319] pgpgin 138736 [ 161.259556][ T3319] pgpgout 138731 [ 161.263104][ T3319] pgfault 172724 [ 161.266687][ T3319] pgmajfault 142 [ 161.270287][ T3319] inactive_anon 0 [ 161.274186][ T3319] active_anon 12288 [ 161.278005][ T3319] inactive_file 0 [ 161.281649][ T3319] active_file 0 [ 161.285369][ T3319] unevictable 0 [ 161.288980][ T3319] hierarchical_memory_limit 314572800 [ 161.294472][ T3319] hierarchical_memsw_limit 9223372036854771712 [ 161.300801][ T3319] total_cache 0 [ 161.304548][ T3319] total_rss 12288 [ 161.308322][ T3319] total_shmem 0 [ 161.311782][ T3319] total_mapped_file 0 [ 161.315835][ T3319] total_dirty 0 [ 161.319311][ T3319] total_writeback 0 [ 161.323209][ T3319] total_workingset_refault_anon 250 [ 161.328592][ T3319] total_workingset_refault_file 1401 [ 161.334002][ T3319] total_swap 536576 [ 161.337911][ T3319] total_swapcached 16384 [ 161.342157][ T3319] total_pgpgin 138736 [ 161.346178][ T3319] total_pgpgout 138731 [ 161.350411][ T3319] total_pgfault 172724 [ 161.354514][ T3319] total_pgmajfault 142 [ 161.357893][ T9135] 9pnet_fd: p9_fd_create_tcp (9135): problem connecting socket to 127.0.0.1 [ 161.358586][ T3319] total_inactive_anon 0 [ 161.358598][ T3319] total_active_anon 12288 [ 161.358608][ T3319] total_inactive_file 0 [ 161.380026][ T3319] total_active_file 0 [ 161.384034][ T3319] total_unevictable 0 [ 161.388022][ T3319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2118,pid=9164,uid=0 [ 161.402812][ T3319] Memory cgroup out of memory: Killed process 9164 (syz.3.2118) total-vm:95884kB, anon-rss:1136kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 161.470033][ T9175] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 161.478020][ T9175] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2124'. [ 161.487147][ T9181] netlink: 'syz.0.2125': attribute type 3 has an invalid length. [ 161.495570][ T9181] netlink: 'syz.0.2125': attribute type 1 has an invalid length. [ 161.503402][ T9181] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2125'. [ 161.522454][ T9179] netlink: '+}[@': attribute type 2 has an invalid length. [ 161.691820][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 161.691838][ T29] audit: type=1400 audit(161.664:6188): avc: denied { create } for pid=9189 comm="syz.3.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 161.718861][ T29] audit: type=1400 audit(161.664:6189): avc: denied { write } for pid=9189 comm="syz.3.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 161.739225][ T29] audit: type=1400 audit(161.664:6190): avc: denied { read } for pid=9189 comm="syz.3.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 161.785069][ T9191] 9pnet_virtio: no channels available for device syz [ 161.846986][ T9195] loop2: detected capacity change from 0 to 164 [ 161.855452][ T9195] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 162.010891][ T9201] syzkaller0: entered promiscuous mode [ 162.016516][ T9201] syzkaller0: entered allmulticast mode [ 162.027010][ T9201] tipc: Started in network mode [ 162.032079][ T9201] tipc: Node identity 9ec890ca40ab, cluster identity 4711 [ 162.039403][ T9201] tipc: Enabled bearer , priority 0 [ 162.048490][ T9200] tipc: Resetting bearer [ 162.056648][ T9200] tipc: Disabling bearer [ 162.209844][ T29] audit: type=1400 audit(162.184:6191): avc: denied { create } for pid=9204 comm="syz.2.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.320913][ T29] audit: type=1326 audit(162.214:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 162.344231][ T29] audit: type=1326 audit(162.214:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 162.367017][ T29] audit: type=1326 audit(162.214:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 162.390080][ T29] audit: type=1326 audit(162.214:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 162.413197][ T29] audit: type=1326 audit(162.214:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05488ef749 code=0x7ffc0000 [ 162.436287][ T29] audit: type=1326 audit(162.214:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05488f1667 code=0x7ffc0000 [ 162.586496][ T9208] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.651784][ T9214] netlink: 83992 bytes leftover after parsing attributes in process `+“[@'. [ 162.660764][ T9214] netlink: zone id is out of range [ 162.666002][ T9214] netlink: zone id is out of range [ 162.671359][ T9214] netlink: zone id is out of range [ 162.676697][ T9214] netlink: zone id is out of range [ 162.682425][ T9214] netlink: zone id is out of range [ 162.687772][ T9214] netlink: zone id is out of range [ 162.692938][ T9214] netlink: zone id is out of range [ 162.698347][ T9214] netlink: zone id is out of range [ 162.703559][ T9214] netlink: zone id is out of range [ 162.708740][ T9214] netlink: zone id is out of range [ 162.739310][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 162.748445][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 162.775007][ T9225] bridge0: port 3(batadv1) entered blocking state [ 162.781496][ T9225] bridge0: port 3(batadv1) entered disabled state [ 162.802609][ T9225] batadv1: entered allmulticast mode [ 162.825618][ T9225] batadv1: entered promiscuous mode [ 162.834273][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2146'. [ 162.847706][ T9234] netlink: 'syz.4.2147': attribute type 4 has an invalid length. [ 162.855659][ T9234] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2147'. [ 162.886960][ T9234] .`: renamed from bond0 (while UP) [ 163.005122][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2154'. [ 163.104217][ T9257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=9257 comm=syz.2.2153 [ 163.121295][ T9244] uprobe: syz.1.2151:9244 failed to unregister, leaking uprobe [ 163.142006][ T9259] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2156'. [ 163.273745][ T3560] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 163.283001][ T3560] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 163.314401][ T9276] batadv_slave_0: entered promiscuous mode [ 163.335892][ T9274] wireguard2: entered promiscuous mode [ 163.341668][ T9274] wireguard2: entered allmulticast mode [ 163.776080][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2168'. [ 163.804760][ T9298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2171'. [ 163.881285][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'. [ 164.665735][ T9329] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.855249][ T9329] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.996619][ T9329] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.048200][ T9329] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.184309][ T3563] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.196527][ T3563] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.209079][ T3563] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.221074][ T3563] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.420359][ T9361] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=9361 comm=syz.4.2195 [ 165.919126][ T9377] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 166.381017][ T9420] syzkaller0: entered promiscuous mode [ 166.386601][ T9420] syzkaller0: entered allmulticast mode [ 167.029456][ T9438] lo: entered promiscuous mode [ 167.034359][ T9438] lo: entered allmulticast mode [ 167.055109][ T9438] tunl0: entered promiscuous mode [ 167.060207][ T9438] tunl0: entered allmulticast mode [ 167.080974][ T9438] gre0: entered promiscuous mode [ 167.086085][ T9438] gre0: entered allmulticast mode [ 167.092097][ T9438] gretap0: entered promiscuous mode [ 167.097393][ T9438] gretap0: entered allmulticast mode [ 167.105600][ T9438] erspan0: entered promiscuous mode [ 167.110874][ T9438] erspan0: entered allmulticast mode [ 167.118019][ T9438] ip_vti0: entered promiscuous mode [ 167.123260][ T9438] ip_vti0: entered allmulticast mode [ 167.129505][ T9438] ip6_vti0: entered promiscuous mode [ 167.134848][ T9438] ip6_vti0: entered allmulticast mode [ 167.141464][ T9438] sit0: entered promiscuous mode [ 167.146625][ T9438] sit0: entered allmulticast mode [ 167.153133][ T9438] ip6tnl0: entered promiscuous mode [ 167.158530][ T9438] ip6tnl0: entered allmulticast mode [ 167.164901][ T9438] ip6gre0: entered promiscuous mode [ 167.170224][ T9438] ip6gre0: entered allmulticast mode [ 167.176616][ T9438] syz_tun: entered promiscuous mode [ 167.181865][ T9438] syz_tun: entered allmulticast mode [ 167.188830][ T9438] .`: entered promiscuous mode [ 167.193810][ T9438] bond_slave_0: entered promiscuous mode [ 167.199735][ T9438] bond_slave_1: entered promiscuous mode [ 167.205659][ T9438] .`: entered allmulticast mode [ 167.210797][ T9438] bond_slave_0: entered allmulticast mode [ 167.216679][ T9438] bond_slave_1: entered allmulticast mode [ 167.224078][ T9438] 8021q: adding VLAN 0 to HW filter on device .` [ 167.232199][ T9438] team0: entered promiscuous mode [ 167.237477][ T9438] team_slave_0: entered promiscuous mode [ 167.243540][ T9438] team_slave_1: entered promiscuous mode [ 167.249566][ T9438] team0: entered allmulticast mode [ 167.254945][ T9438] team_slave_0: entered allmulticast mode [ 167.260688][ T9438] team_slave_1: entered allmulticast mode [ 167.268279][ T9438] dummy0: entered promiscuous mode [ 167.274722][ T9438] nlmon0: entered promiscuous mode [ 167.280182][ T9438] nlmon0: entered allmulticast mode [ 167.286349][ T9438] caif0: entered promiscuous mode [ 167.291406][ T9438] caif0: entered allmulticast mode [ 167.342343][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 167.342361][ T29] audit: type=1326 audit(167.314:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.462203][ T9444] tipc: Enabling of bearer rejected, failed to enable media [ 167.483777][ T29] audit: type=1326 audit(167.354:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.507030][ T29] audit: type=1326 audit(167.354:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.530143][ T29] audit: type=1326 audit(167.354:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.553269][ T29] audit: type=1326 audit(167.354:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.576871][ T29] audit: type=1326 audit(167.354:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.599839][ T29] audit: type=1326 audit(167.354:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.623149][ T29] audit: type=1326 audit(167.354:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.646256][ T29] audit: type=1326 audit(167.354:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 167.669359][ T29] audit: type=1326 audit(167.354:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.3.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 168.030070][ T9450] __nla_validate_parse: 3 callbacks suppressed [ 168.030089][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 168.085193][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2230'. [ 168.779744][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 169.195078][ T9481] loop2: detected capacity change from 0 to 128 [ 169.279574][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.279574][ T9482] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 169.312658][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.312658][ T9482] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 169.349786][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.349786][ T9482] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 169.383735][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.383735][ T9482] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 169.407527][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.407527][ T9482] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 169.433756][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.433756][ T9482] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 169.447823][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.447823][ T9482] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 169.461345][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.461345][ T9482] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 169.475607][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.475607][ T9482] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 169.489819][ T9482] syz.2.2238: attempt to access beyond end of device [ 169.489819][ T9482] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 169.831019][ T9486] 9p: Bad value for 'rfdno' [ 169.858667][ T9489] bridge0: port 1(batadv2) entered blocking state [ 169.865357][ T9489] bridge0: port 1(batadv2) entered disabled state [ 169.886316][ T9489] batadv2: entered allmulticast mode [ 169.906504][ T9489] batadv2: entered promiscuous mode [ 170.095436][ T9498] loop2: detected capacity change from 0 to 512 [ 170.116582][ T9498] EXT4-fs: Ignoring removed i_version option [ 170.122653][ T9498] EXT4-fs: Ignoring removed i_version option [ 170.180192][ T9498] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 170.345308][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'. [ 170.363753][ T3574] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 170.373305][ T3574] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 170.582650][ T9530] bridge0: port 3(batadv2) entered blocking state [ 170.589307][ T9530] bridge0: port 3(batadv2) entered disabled state [ 170.609316][ T9530] batadv2: entered allmulticast mode [ 170.624445][ T9530] batadv2: entered promiscuous mode [ 170.967191][ T9554] netlink: 'syz.0.2261': attribute type 4 has an invalid length. [ 170.967191][ T9556] net_ratelimit: 347 callbacks suppressed [ 170.967211][ T9556] Set syz1 is full, maxelem 65536 reached [ 171.083776][ T31] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 171.093212][ T31] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 171.158547][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2266'. [ 171.193216][ T9565] veth1: entered promiscuous mode [ 171.207903][ T9565] bridge8: entered promiscuous mode [ 171.225173][ T9565] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 171.243778][ T9565] hsr1: entered promiscuous mode [ 171.320413][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.341779][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.374963][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.413980][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.428800][ T9577] loop2: detected capacity change from 0 to 1024 [ 171.467975][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 171.482130][ T9577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.499520][ T9582] netlink: 'syz.0.2274': attribute type 10 has an invalid length. [ 171.507455][ T9582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2274'. [ 171.507825][ T9577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.543798][ T9582] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 171.574344][ T9577] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 171.582470][ T9577] System zones: 0-1, 3-36 [ 171.631342][ T9577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.839893][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.840935][ T9603] netlink: 'syz.0.2278': attribute type 83 has an invalid length. [ 172.414783][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 172.414801][ T29] audit: type=1326 audit(172.394:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.525948][ T29] audit: type=1326 audit(172.434:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.549283][ T29] audit: type=1326 audit(172.434:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.572431][ T29] audit: type=1326 audit(172.434:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.595609][ T29] audit: type=1326 audit(172.434:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.618768][ T29] audit: type=1326 audit(172.434:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.641844][ T29] audit: type=1326 audit(172.434:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.664642][ T29] audit: type=1326 audit(172.434:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.687574][ T29] audit: type=1326 audit(172.434:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 172.710744][ T29] audit: type=1326 audit(172.434:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 173.050523][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 173.342861][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2307'. [ 173.928707][ T9676] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.005724][ T9676] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.086226][ T9676] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.114565][ T9686] netlink: 'syz.4.2309': attribute type 83 has an invalid length. [ 174.156538][ T9676] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.212814][ T90] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.235844][ T9702] netlink: 'syz.4.2313': attribute type 12 has an invalid length. [ 174.244570][ T90] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.263839][ T90] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.296646][ T90] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.911484][ T9734] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.946727][ T9734] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.977014][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2324'. [ 174.995480][ T9734] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.055575][ T9734] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.154672][ T90] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.166796][ T90] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.178436][ T3590] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.190334][ T3590] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.305599][ T9745] loop1: detected capacity change from 0 to 1024 [ 175.312570][ T9745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.319885][ T9745] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.330003][ T9745] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 175.339023][ T9745] System zones: 0-1, 3-36 [ 175.345106][ T9745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.373288][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.414460][ T9755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.427057][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'. [ 175.536236][ T9755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.645892][ T9755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.743465][ T9755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 176.552022][ T90] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.580656][ T90] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.612716][ T90] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.661983][ T90] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.893878][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 176.948878][ T9823] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.030712][ T9823] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.165844][ T9823] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.435306][ T9823] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.551798][ T9830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'. [ 177.585078][ T9806] Set syz1 is full, maxelem 65536 reached [ 177.662494][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 177.662513][ T29] audit: type=1400 audit(177.634:6579): avc: denied { create } for pid=9832 comm="syz.1.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 177.723807][ T29] audit: type=1400 audit(177.664:6580): avc: denied { ioctl } for pid=9832 comm="syz.1.2364" path="socket:[35783]" dev="sockfs" ino=35783 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 177.796485][ T29] audit: type=1326 audit(177.734:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 177.819856][ T29] audit: type=1326 audit(177.734:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 177.842764][ T29] audit: type=1326 audit(177.734:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 177.865999][ T29] audit: type=1326 audit(177.734:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 177.889559][ T9832] delete_channel: no stack [ 177.902561][ T9841] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2366'. [ 177.914191][ T9841] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2366'. [ 178.094094][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'. [ 178.103281][ T9852] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2370'. [ 178.112564][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'. [ 178.226781][ T3563] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.247508][ T3563] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.287797][ T3563] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.326071][ T3563] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.773306][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 179.155039][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2382'. [ 179.270374][ T29] audit: type=1326 audit(179.244:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 179.293820][ T29] audit: type=1326 audit(179.244:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 179.317180][ T29] audit: type=1326 audit(179.244:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 179.340570][ T29] audit: type=1326 audit(179.244:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 179.656447][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 180.196141][ T9903] veth1 (unregistering): left promiscuous mode [ 180.228235][ T9868] Set syz1 is full, maxelem 65536 reached [ 181.108835][ T9920] loop2: detected capacity change from 0 to 1024 [ 181.116077][ T9920] EXT4-fs: Ignoring removed orlov option [ 181.135546][ T9922] tipc: Enabling of bearer rejected, already enabled [ 181.210839][ T9920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.303436][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.322921][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 181.532431][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 181.541967][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 181.676335][ T9937] cgroup: fork rejected by pids controller in /syz1 [ 182.891683][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2415'. [ 182.963719][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 182.963739][ T29] audit: type=1400 audit(190.932:6649): avc: denied { listen } for pid=10049 comm="syz.2.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.006083][T10053] loop1: detected capacity change from 0 to 1024 [ 183.013158][T10053] EXT4-fs: Ignoring removed orlov option [ 183.061035][T10053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.085007][ T29] audit: type=1400 audit(190.972:6650): avc: denied { accept } for pid=10049 comm="syz.2.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.251308][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.341884][T10069] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 183.348516][ T29] audit: type=1400 audit(191.312:6651): avc: denied { read } for pid=10070 comm="syz.3.2428" path="socket:[36721]" dev="sockfs" ino=36721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.387786][T10067] __nla_validate_parse: 1 callbacks suppressed [ 183.387804][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2426'. [ 183.403061][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2426'. [ 183.424047][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 183.456641][T10082] netlink: 'syz.1.2431': attribute type 7 has an invalid length. [ 183.464652][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 183.605588][T10096] netlink: 'syz.1.2433': attribute type 10 has an invalid length. [ 183.890495][T10111] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2443'. [ 183.900354][T10111] netlink: zone id is out of range [ 183.905591][T10111] netlink: zone id is out of range [ 183.910815][T10111] netlink: zone id is out of range [ 183.925285][T10111] netlink: set zone limit has 8 unknown bytes [ 184.051281][ T29] audit: type=1326 audit(192.022:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 184.075776][ T29] audit: type=1326 audit(192.022:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 184.099097][ T29] audit: type=1326 audit(192.022:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 184.122283][ T29] audit: type=1326 audit(192.022:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 184.145955][ T29] audit: type=1326 audit(192.022:6656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 184.169078][ T29] audit: type=1326 audit(192.032:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 184.192337][ T29] audit: type=1326 audit(192.032:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.4.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 184.400076][T10131] cgroup: fork rejected by pids controller in /syz4 [ 186.054835][T10284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2477'. [ 186.418704][T10289] netlink: 'syz.3.2480': attribute type 30 has an invalid length. [ 187.111057][T10293] loop1: detected capacity change from 0 to 1024 [ 187.120438][T10295] loop2: detected capacity change from 0 to 1024 [ 187.168735][T10293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.182693][T10295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.262002][T10293] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 3) [ 187.301337][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.335595][T10293] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 187.348137][T10293] EXT4-fs (loop1): This should not happen!! Data will be lost [ 187.348137][T10293] [ 187.447821][T10303] loop2: detected capacity change from 0 to 2048 [ 187.455712][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.505732][T10303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.524055][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.591782][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.624744][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2484'. [ 187.634391][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.651155][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.666729][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.682016][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.708211][ T3322] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 187.722977][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.737341][ T3322] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 187.752794][T10301] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2478: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.772020][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.827146][T10316] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2498'. [ 187.843257][T10318] netlink: 'syz.2.2487': attribute type 12 has an invalid length. [ 187.972789][T10320] bond3: (slave team0): Releasing active interface [ 187.988599][T10320] .`: (slave dummy0): Releasing backup interface [ 188.074913][T10326] netlink: 'syz.3.2489': attribute type 10 has an invalid length. [ 188.082792][T10326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2489'. [ 188.228892][ T3557] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 188.241468][ T3557] EXT4-fs (loop1): This should not happen!! Data will be lost [ 188.241468][ T3557] [ 188.293384][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.955829][T10320] bridge_slave_0: left allmulticast mode [ 188.961642][T10320] bridge_slave_0: left promiscuous mode [ 188.967723][T10320] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.994931][T10320] bridge_slave_1: left allmulticast mode [ 189.000840][T10320] bridge_slave_1: left promiscuous mode [ 189.006781][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.035577][T10320] .`: (slave bond_slave_0): Releasing backup interface [ 189.045167][T10320] .`: (slave bond_slave_1): Releasing backup interface [ 189.057161][T10320] team0: Port device team_slave_0 removed [ 189.074301][T10320] team0: Port device team_slave_1 removed [ 189.080372][T10320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.094253][T10320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.176488][T10328] netlink: 'syz.2.2491': attribute type 4 has an invalid length. [ 189.249282][T10331] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.295669][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 189.295685][ T29] audit: type=1326 audit(197.272:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.384614][T10331] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.423783][ T29] audit: type=1326 audit(197.302:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.447105][ T29] audit: type=1326 audit(197.302:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.470449][ T29] audit: type=1326 audit(197.302:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.493897][ T29] audit: type=1326 audit(197.302:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.518095][ T29] audit: type=1326 audit(197.302:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.541109][ T29] audit: type=1326 audit(197.302:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.564654][ T29] audit: type=1326 audit(197.322:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.587749][ T29] audit: type=1326 audit(197.322:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.611028][ T29] audit: type=1326 audit(197.322:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537b1cf749 code=0x7ffc0000 [ 189.667325][T10331] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.797718][T10331] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 190.003948][ T3557] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.031843][ T3557] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.046322][ T3557] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.055913][ T3557] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.514337][T10363] netlink: 'syz.4.2504': attribute type 7 has an invalid length. [ 190.522206][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 190.877850][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 190.888851][T10379] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 190.987409][T10379] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.055372][T10379] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.112838][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'. [ 191.140831][T10386] team0: Port device team_slave_1 removed [ 191.150694][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2515'. [ 191.181689][T10379] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.327852][ T3589] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 191.365566][ T3589] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 191.401154][ T3589] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 191.417718][T10398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2519'. [ 191.453030][ T3589] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 192.245293][T10423] netlink: 'syz.0.2530': attribute type 12 has an invalid length. [ 192.356897][T10426] Cannot find del_set index 4 as target [ 192.459058][T10430] xt_TCPMSS: Only works on TCP SYN packets [ 192.865843][T10436] netlink: 400 bytes leftover after parsing attributes in process `syz.2.2533'. [ 193.400201][T10457] loop2: detected capacity change from 0 to 512 [ 193.425994][T10457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.447126][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 193.467277][T10457] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2543: Failed to acquire dquot type 0 [ 193.522264][T10467] netlink: 660 bytes leftover after parsing attributes in process `syz.0.2546'. [ 193.542643][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.566399][T10469] batadv_slave_0: entered promiscuous mode [ 193.663380][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.682459][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.504096][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 194.504116][ T29] audit: type=1326 audit(202.482:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.0.2555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1e183f749 code=0x0 [ 194.647784][ T29] audit: type=1400 audit(202.622:7002): avc: denied { create } for pid=10494 comm="syz.1.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 194.844292][T10500] netlink: 'syz.4.2557': attribute type 4 has an invalid length. [ 195.169233][ T29] audit: type=1326 audit(203.142:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 195.197254][ T29] audit: type=1326 audit(203.142:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 195.220688][ T29] audit: type=1326 audit(203.172:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 195.224222][T10509] loop1: detected capacity change from 0 to 2048 [ 195.243865][ T29] audit: type=1326 audit(203.172:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 195.273419][ T29] audit: type=1326 audit(203.172:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 195.296575][ T29] audit: type=1326 audit(203.172:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 195.313079][T10505] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2559'. [ 195.319719][ T29] audit: type=1326 audit(203.172:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 195.351804][ T29] audit: type=1326 audit(203.172:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.1.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 195.402865][T10509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.446044][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2563'. [ 195.669475][T10526] veth6: entered promiscuous mode [ 195.674602][T10526] veth6: entered allmulticast mode [ 195.722307][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.793596][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'. [ 196.221736][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2584'. [ 196.438000][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2589'. [ 196.661624][T10607] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 196.718129][T10614] loop1: detected capacity change from 0 to 512 [ 196.719169][T10607] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 196.746324][T10614] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 196.754625][T10614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 196.773205][T10614] System zones: 0-1, 15-15, 18-18, 34-34 [ 196.782735][T10607] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 196.793449][T10614] EXT4-fs (loop1): orphan cleanup on readonly fs [ 196.801533][T10614] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 196.816218][T10614] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 196.902315][T10614] EXT4-fs (loop1): 1 truncate cleaned up [ 196.908663][T10614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.924160][T10607] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 196.960807][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.042174][ T2298] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.078805][ T2298] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.097241][ T2298] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.125236][ T2298] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.146493][T10637] loop1: detected capacity change from 0 to 1764 [ 197.246061][T10644] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.667652][T10658] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 197.673278][T10659] bridge0: port 2(gretap0) entered blocking state [ 197.683095][T10659] bridge0: port 2(gretap0) entered disabled state [ 197.699973][T10659] bridge0: port 2(gretap0) entered blocking state [ 197.706612][T10659] bridge0: port 2(gretap0) entered forwarding state [ 197.744034][T10658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.786823][T10664] bond5: (slave veth9): Enslaving as an active interface with a down link [ 197.799638][T10659] bridge0: port 2(gretap0) entered disabled state [ 197.820369][T10658] vlan0: entered allmulticast mode [ 197.825589][T10658] veth1: entered allmulticast mode [ 197.831569][T10658] bond5: (slave vlan0): Opening slave failed [ 197.857669][T10669] netlink: 'syz.4.2622': attribute type 1 has an invalid length. [ 197.875021][T10669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.903502][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2622'. [ 197.916950][T10669] bond0 (unregistering): Released all slaves [ 199.530212][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 199.530231][ T29] audit: type=1326 audit(463.500:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.622233][ T29] audit: type=1326 audit(463.540:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.645486][ T29] audit: type=1326 audit(463.570:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.668917][ T29] audit: type=1326 audit(463.570:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.692786][ T29] audit: type=1326 audit(463.570:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.715829][ T29] audit: type=1326 audit(463.570:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.738990][ T29] audit: type=1326 audit(463.570:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.762298][ T29] audit: type=1326 audit(463.570:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.785304][ T29] audit: type=1326 audit(463.570:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.808448][ T29] audit: type=1326 audit(463.570:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 199.896670][T10750] 8021q: VLANs not supported on vxcan1 [ 200.230261][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2650'. [ 201.467686][T10827] loop1: detected capacity change from 0 to 4096 [ 201.520621][T10827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.605582][T10827] 8021q: VLANs not supported on vxcan1 [ 201.765519][T10840] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 201.813814][T10840] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.920549][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2674'. [ 201.985058][T10840] bond6 (unregistering): Released all slaves [ 202.546192][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2682'. [ 202.714340][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.816287][T10868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2684'. [ 202.926028][T10874] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 202.926028][T10874] program syz.1.2686 not setting count and/or reply_len properly [ 203.151890][T10880] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 203.225833][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 203.247069][T10880] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.307530][T10884] bond5 (unregistering): Released all slaves [ 203.768782][T10889] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 203.909894][T10901] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2692'. [ 203.944354][T10901] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2692'. [ 204.064456][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 204.073394][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 204.133282][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 204.175409][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 204.616551][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 204.616569][ T29] audit: type=1326 audit(468.590:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.645897][ T29] audit: type=1326 audit(468.590:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.753880][ T29] audit: type=1326 audit(468.650:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.777146][ T29] audit: type=1326 audit(468.650:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.800455][ T29] audit: type=1326 audit(468.650:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.823443][ T29] audit: type=1326 audit(468.650:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.846427][ T29] audit: type=1326 audit(468.650:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.869481][ T29] audit: type=1326 audit(468.650:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.892553][ T29] audit: type=1326 audit(468.650:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 204.915665][ T29] audit: type=1326 audit(468.650:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 205.037376][T10937] netlink: 'syz.4.2706': attribute type 1 has an invalid length. [ 205.040831][T10936] loop1: detected capacity change from 0 to 128 [ 205.065853][T10936] EXT4-fs: Ignoring removed nobh option [ 205.085536][T10936] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.096739][T10937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.172072][ T3324] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.193453][T10943] bond0: (slave veth9): Enslaving as an active interface with a down link [ 205.215847][T10937] vlan2: entered allmulticast mode [ 205.221029][T10937] veth1: entered allmulticast mode [ 205.264033][T10937] bond0: (slave vlan2): Opening slave failed [ 205.348431][T10952] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 205.436985][T10952] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 205.498770][T10952] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 205.554694][T10952] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 205.611410][T10966] tipc: Started in network mode [ 205.616614][T10966] tipc: Node identity ac14140f, cluster identity 4711 [ 205.624513][T10966] tipc: New replicast peer: 10.1.1.0 [ 205.629873][T10966] tipc: Enabled bearer , priority 10 [ 205.657522][ T3557] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 205.684231][ T3557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 205.692825][ T3557] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 205.705588][ T3557] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.426162][T10986] netlink: 'syz.1.2723': attribute type 1 has an invalid length. [ 206.457991][T10986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.529768][T10986] bond5: (slave veth7): Enslaving as an active interface with a down link [ 206.574555][T10991] vlan0: entered allmulticast mode [ 206.579818][T10991] veth1: entered allmulticast mode [ 206.604209][T10991] bond5: (slave vlan0): Opening slave failed [ 206.676220][T10996] syz_tun: entered allmulticast mode [ 206.703880][T10996] dvmrp6: entered allmulticast mode [ 206.743792][ T2969] tipc: Node number set to 2886997007 [ 207.017748][T11009] __nla_validate_parse: 13 callbacks suppressed [ 207.017766][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'. [ 207.076950][T11009] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 207.610365][T11024] tipc: Enabling of bearer rejected, failed to enable media [ 207.988981][T11034] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 209.280585][T11048] loop1: detected capacity change from 0 to 4096 [ 209.313908][T11048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.386822][T11055] netlink: 'syz.2.2741': attribute type 10 has an invalid length. [ 209.458946][T11055] bond3: (slave dummy0): Releasing active interface [ 209.543743][T11055] dummy0: left allmulticast mode [ 209.645805][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.655241][T11055] team0: Port device dummy0 added [ 210.131131][T11062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2743'. [ 210.193400][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2754'. [ 210.218349][T11064] loop2: detected capacity change from 0 to 512 [ 210.273839][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2745'. [ 210.274852][T11036] Set syz1 is full, maxelem 65536 reached [ 210.294778][T11060] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.308908][T11064] EXT4-fs (loop2): 1 orphan inode deleted [ 210.315566][T11064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.351108][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2744'. [ 210.384946][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.398789][T11069] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11069 comm=syz.0.2745 [ 210.415352][T11060] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.483552][T11079] lo speed is unknown, defaulting to 1000 [ 210.552914][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 210.552934][ T29] audit: type=1400 audit(474.520:8005): avc: denied { map } for pid=11089 comm="syz.1.2752" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 210.954625][T11060] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.977172][T11079] lo speed is unknown, defaulting to 1000 [ 210.985361][T11079] lo speed is unknown, defaulting to 1000 [ 211.040656][T11060] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.080420][T11079] infiniband syz1: set down [ 211.085065][T11079] infiniband syz1: added lo [ 211.089703][ T3425] lo speed is unknown, defaulting to 1000 [ 211.131725][T11079] RDS/IB: syz1: added [ 211.136621][ T90] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.136798][T11079] smc: adding ib device syz1 with port count 1 [ 211.151233][T11079] smc: ib device syz1 port 1 has no pnetid [ 211.152437][T11108] netlink: 'syz.0.2756': attribute type 7 has an invalid length. [ 211.165200][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2756'. [ 211.175510][ T90] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.183939][ T3404] lo speed is unknown, defaulting to 1000 [ 211.193706][T11079] lo speed is unknown, defaulting to 1000 [ 211.198525][ T90] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.233058][T11079] lo speed is unknown, defaulting to 1000 [ 211.234983][ T90] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.278356][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 211.323075][T11079] lo speed is unknown, defaulting to 1000 [ 211.397097][T11079] lo speed is unknown, defaulting to 1000 [ 211.446005][T11079] lo speed is unknown, defaulting to 1000 [ 211.497414][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2760'. [ 211.536746][T11079] lo speed is unknown, defaulting to 1000 [ 211.586649][ T29] audit: type=1326 audit(475.560:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 211.609749][ T29] audit: type=1326 audit(475.560:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 211.732058][ T29] audit: type=1326 audit(475.610:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 211.755112][ T29] audit: type=1326 audit(475.610:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 211.778239][ T29] audit: type=1326 audit(475.610:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 211.801440][ T29] audit: type=1326 audit(475.610:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 211.824682][ T29] audit: type=1326 audit(475.610:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 211.847908][ T29] audit: type=1326 audit(475.620:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 211.871020][ T29] audit: type=1326 audit(475.620:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.4.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 212.045474][T11133] SET target dimension over the limit! [ 212.380207][T11149] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 212.386870][T11149] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.394861][T11149] vhci_hcd vhci_hcd.0: Device attached [ 212.428474][T11150] vhci_hcd: connection closed [ 212.428629][ T3557] vhci_hcd vhci_hcd.2: stop threads [ 212.438980][ T3557] vhci_hcd vhci_hcd.2: release socket [ 212.444620][ T3557] vhci_hcd vhci_hcd.2: disconnect device [ 212.479922][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2770'. [ 212.978163][T11167] all: renamed from team_slave_0 [ 212.994608][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2773'. [ 213.166031][T11174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2774'. [ 213.462202][T11182] gretap0: left allmulticast mode [ 213.467339][T11182] gretap0: left promiscuous mode [ 213.472547][T11182] bridge0: port 3(gretap0) entered disabled state [ 213.481942][T11182] bond2: (slave team0): Releasing active interface [ 213.492534][T11182] team0: Port device dummy0 removed [ 213.498489][T11182] bridge_slave_0: left allmulticast mode [ 213.504213][T11182] bridge_slave_0: left promiscuous mode [ 213.510160][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.520501][T11182] bridge_slave_1: left allmulticast mode [ 213.526650][T11182] bridge_slave_1: left promiscuous mode [ 213.532407][T11182] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.541356][T11186] netlink: 'syz.2.2791': attribute type 10 has an invalid length. [ 213.549255][T11186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2791'. [ 213.568587][T11182] .`: (slave bond_slave_0): Releasing backup interface [ 213.580551][T11182] .`: (slave bond_slave_1): Releasing backup interface [ 213.606608][T11182] team0: Port device team_slave_0 removed [ 213.613894][T11182] bond0: (slave ip6gretap1): Releasing active interface [ 213.636891][T11182] bond5: (slave geneve2): Releasing backup interface [ 213.661987][T11186] veth1_vlan: left promiscuous mode [ 213.679153][T11186] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 213.696194][ T2298] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 213.706344][ T2298] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 213.717435][ T2298] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 213.752447][ T2298] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 213.784020][T11190] syzkaller0: entered allmulticast mode [ 213.797782][T11190] syzkaller0 (unregistering): left allmulticast mode [ 213.842352][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2782'. [ 213.960186][T11195] loop1: detected capacity change from 0 to 512 [ 213.973324][T11200] rdma_rxe: rxe_newlink: failed to add lo [ 213.987555][T11195] EXT4-fs (loop1): 1 orphan inode deleted [ 213.993981][T11197] lo speed is unknown, defaulting to 1000 [ 214.004748][T11195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.034857][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2783'. [ 214.073072][T11206] Cannot find add_set index 0 as target [ 214.082553][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.166974][T11212] bond1: (slave dummy0): Releasing active interface [ 214.196109][T11212] .`: (slave bond_slave_0): Releasing backup interface [ 214.200286][T11220] netlink: 'syz.4.2794': attribute type 10 has an invalid length. [ 214.211633][T11220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2794'. [ 214.232418][T11212] bond_slave_0: left promiscuous mode [ 214.238470][T11212] bond_slave_0: left allmulticast mode [ 214.271785][T11212] .`: (slave bond_slave_1): Releasing backup interface [ 214.301219][T11212] bond_slave_1: left promiscuous mode [ 214.307606][T11212] bond_slave_1: left allmulticast mode [ 214.328693][T11212] team_slave_0: left promiscuous mode [ 214.335711][T11212] team_slave_0: left allmulticast mode [ 214.358512][T11212] team0: Port device team_slave_0 removed [ 214.367521][T11212] team_slave_1: left promiscuous mode [ 214.373101][T11212] team_slave_1: left allmulticast mode [ 214.384541][T11230] loop2: detected capacity change from 0 to 1024 [ 214.391995][T11230] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.426089][T11212] team0: Port device team_slave_1 removed [ 214.444568][T11212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.490147][T11212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.517684][T11212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.536579][T11220] veth1_vlan: left promiscuous mode [ 214.549812][T11220] batman_adv: batadv0: Adding interface: veth1_vlan [ 214.556761][T11220] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.609033][T11220] batman_adv: batadv0: Interface activated: veth1_vlan [ 215.071146][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 215.119893][T11262] Cannot find add_set index 0 as target [ 215.508481][T11276] bond0: (slave bond_slave_0): Releasing backup interface [ 215.542973][T11276] bond0: (slave bond_slave_1): Releasing backup interface [ 215.556033][T11279] netlink: 'syz.1.2814': attribute type 10 has an invalid length. [ 215.564026][T11279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2814'. [ 215.575006][T11276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.591251][T11276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.608517][T11276] bond1: (slave wireguard0): Releasing backup interface [ 215.620060][T11276] bond1: (slave wireguard1): making interface the new active one [ 215.629755][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 215.629815][ T29] audit: type=1326 audit(479.600:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.659734][ T29] audit: type=1326 audit(479.600:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.692634][T11276] bond1: (slave wireguard1): Releasing backup interface [ 215.718883][T11276] bond2: (slave ip6gretap1): Releasing active interface [ 215.749918][T11276] bond5: (slave veth7): Releasing active interface [ 215.753908][ T29] audit: type=1326 audit(479.600:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.779767][ T29] audit: type=1326 audit(479.600:8184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.803583][ T29] audit: type=1326 audit(479.600:8185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.826560][ T29] audit: type=1326 audit(479.600:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.849516][ T29] audit: type=1326 audit(479.600:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.872716][ T29] audit: type=1326 audit(479.600:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.896084][ T29] audit: type=1326 audit(479.600:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.919422][ T29] audit: type=1326 audit(479.600:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e183f749 code=0x7ffc0000 [ 215.978961][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2818'. [ 215.994319][T11287] loop2: detected capacity change from 0 to 1024 [ 216.001490][T11287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.022580][T11287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.038059][T11278] lo speed is unknown, defaulting to 1000 [ 216.534447][T11302] lo speed is unknown, defaulting to 1000 [ 216.939695][T11319] netlink: zone id is out of range [ 216.945116][T11319] netlink: zone id is out of range [ 216.962637][T11319] netlink: zone id is out of range [ 216.973544][T11319] netlink: zone id is out of range [ 216.986524][T11319] netlink: zone id is out of range [ 216.998206][T11306] SET target dimension over the limit! [ 217.007456][T11319] netlink: zone id is out of range [ 217.089591][T11319] netlink: set zone limit has 8 unknown bytes [ 217.174658][T11324] rdma_rxe: rxe_newlink: failed to add lo [ 217.186478][T11297] syz.2.2819 (11297) used greatest stack depth: 6192 bytes left [ 217.215710][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.346643][T11334] loop2: detected capacity change from 0 to 128 [ 217.382696][T11338] lo speed is unknown, defaulting to 1000 [ 217.388725][T11334] EXT4-fs: Ignoring removed nobh option [ 217.400950][T11336] bond0: (slave dummy0): Releasing backup interface [ 217.416275][T11334] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.454690][T11341] netlink: 'syz.0.2832': attribute type 10 has an invalid length. [ 217.457896][T11336] bridge_slave_0: left allmulticast mode [ 217.468319][T11336] bridge_slave_0: left promiscuous mode [ 217.474085][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.510037][T11336] bridge_slave_1: left allmulticast mode [ 217.516018][T11336] bridge_slave_1: left promiscuous mode [ 217.521905][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.590668][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.618154][T11336] bond0: (slave bond_slave_0): Releasing backup interface [ 217.638017][T11336] bond_slave_0: left promiscuous mode [ 217.643632][T11336] bond_slave_0: left allmulticast mode [ 217.673361][T11336] bond0: (slave bond_slave_1): Releasing backup interface [ 217.693716][T11336] bond_slave_1: left promiscuous mode [ 217.699417][T11336] bond_slave_1: left allmulticast mode [ 217.731695][T11336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.752425][T11336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.769649][T11336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.331226][T11370] loop2: detected capacity change from 0 to 512 [ 218.419039][T11370] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2845: EA inode hash validation failed [ 218.483489][T11370] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2845: corrupted inode contents [ 218.525985][T11386] netlink: 'syz.3.2850': attribute type 10 has an invalid length. [ 218.534172][T11386] __nla_validate_parse: 3 callbacks suppressed [ 218.534190][T11386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2850'. [ 218.550356][T11370] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.2845: mark_inode_dirty error [ 218.588596][T11370] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2845: corrupted inode contents [ 218.601882][T11370] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.2845: mark_inode_dirty error [ 218.644004][T11370] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.2845: mark inode dirty (error -117) [ 218.674339][T11370] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 218.683547][T11370] EXT4-fs (loop2): 1 orphan inode deleted [ 218.704532][T11370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.750981][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.982508][T11406] netlink: 'syz.3.2858': attribute type 12 has an invalid length. [ 219.110929][T11408] loop1: detected capacity change from 0 to 8192 [ 219.398702][T11416] lo speed is unknown, defaulting to 1000 [ 219.744091][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2863'. [ 220.054584][T11445] loop1: detected capacity change from 0 to 512 [ 220.623221][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'. [ 220.633706][ T29] kauditd_printk_skb: 734 callbacks suppressed [ 220.633725][ T29] audit: type=1326 audit(484.590:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c11fd65e7 code=0x7ffc0000 [ 220.663243][ T29] audit: type=1326 audit(484.590:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c11f7b829 code=0x7ffc0000 [ 220.686349][ T29] audit: type=1326 audit(484.590:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 220.709472][ T29] audit: type=1326 audit(484.590:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c11fd65e7 code=0x7ffc0000 [ 220.732551][ T29] audit: type=1326 audit(484.590:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c11f7b829 code=0x7ffc0000 [ 220.737250][T11467] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 220.756068][ T29] audit: type=1326 audit(484.590:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c11fd65e7 code=0x7ffc0000 [ 220.764323][T11467] dummy0: left promiscuous mode [ 220.787108][ T29] audit: type=1326 audit(484.590:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c11f7b829 code=0x7ffc0000 [ 220.792011][T11467] dummy0: left allmulticast mode [ 220.815055][ T29] audit: type=1326 audit(484.590:8932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c11fd65e7 code=0x7ffc0000 [ 220.834995][T11467] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 220.842956][ T29] audit: type=1326 audit(484.590:8933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c11f7b829 code=0x7ffc0000 [ 220.853271][T11467] dummy0: entered promiscuous mode [ 220.874106][ T29] audit: type=1326 audit(484.610:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c11fd65e7 code=0x7ffc0000 [ 220.879792][T11467] dummy0: entered allmulticast mode [ 220.910691][T11467] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 221.030622][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2887'. [ 221.110178][T11482] syzkaller0: entered promiscuous mode [ 221.111796][T11489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2892'. [ 221.115749][T11482] syzkaller0: entered allmulticast mode [ 221.134462][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 221.142177][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2891'. [ 221.153822][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2893'. [ 221.192286][T11490] vlan0: entered promiscuous mode [ 221.197614][T11490] bridge9: entered promiscuous mode [ 221.203147][T11490] vlan0: entered allmulticast mode [ 221.208534][T11490] bridge9: entered allmulticast mode [ 221.233748][T11497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2896'. [ 221.290673][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2897'. [ 221.350596][T11505] loop1: detected capacity change from 0 to 512 [ 221.370992][T11505] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2898: EA inode hash validation failed [ 221.402283][T11505] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2898: corrupted inode contents [ 221.434860][T11505] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2898: mark_inode_dirty error [ 221.455741][T11518] 8021q: VLANs not supported on ip6tnl0 [ 221.461789][T11505] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2898: corrupted inode contents [ 221.482082][T11505] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.2898: mark_inode_dirty error [ 221.509654][T11505] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.2898: mark inode dirty (error -117) [ 221.523025][T11505] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 221.543593][T11505] EXT4-fs (loop1): 1 orphan inode deleted [ 221.550342][T11505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.596588][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.692996][T11527] lo speed is unknown, defaulting to 1000 [ 221.948093][T11542] loop1: detected capacity change from 0 to 2048 [ 222.006972][T11542] Alternate GPT is invalid, using primary GPT. [ 222.013544][T11542] loop1: p2 p3 p7 [ 222.574921][T11552] ip6gre1: entered allmulticast mode [ 223.036033][T11564] loop1: detected capacity change from 0 to 1024 [ 223.045825][T11564] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 223.056774][T11564] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 223.095061][T11564] JBD2: no valid journal superblock found [ 223.100860][T11564] EXT4-fs (loop1): Could not load journal inode [ 223.133842][T11564] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 224.038780][T11608] __nla_validate_parse: 13 callbacks suppressed [ 224.038799][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 224.119470][T11611] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 224.202766][T11608] macvlan0: entered promiscuous mode [ 224.208166][T11608] macvlan0: entered allmulticast mode [ 224.256967][T11608] bond1: entered promiscuous mode [ 224.257115][T11618] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 224.262288][T11608] bridge6: entered promiscuous mode [ 224.269421][T11608] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 224.316401][T11608] bond1: left promiscuous mode [ 224.321238][T11608] bridge6: left promiscuous mode [ 224.353939][T11618] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2940'. [ 224.423313][T11618] 0ªX¹¦À: renamed from caif0 [ 224.424465][T11624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11624 comm=syz.4.2942 [ 224.443143][T11618] 0ªX¹¦À: entered allmulticast mode [ 224.448487][T11618] net_ratelimit: 1 callbacks suppressed [ 224.448509][T11618] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 224.813367][T11641] geneve3: entered promiscuous mode [ 224.818866][T11641] geneve3: entered allmulticast mode [ 224.830533][T11644] netlink: 'syz.0.2951': attribute type 4 has an invalid length. [ 224.877124][T11645] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 224.919160][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'. [ 224.937336][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'. [ 225.029448][T11645] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.043240][T11649] netlink: 'syz.2.2953': attribute type 13 has an invalid length. [ 225.057319][T11649] gretap0: refused to change device tx_queue_len [ 225.079370][T11649] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 225.153055][T11645] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.168952][T11656] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2956'. [ 225.207424][T11645] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.382905][ T3560] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.426564][ T3560] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.453907][ T3560] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.462565][ T3560] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.607061][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2968'. [ 225.616264][T11686] batadv2: left allmulticast mode [ 225.621524][T11686] batadv2: left promiscuous mode [ 225.626966][T11686] bridge0: port 3(batadv2) entered disabled state [ 226.257213][T11706] bridge_slave_0: default FDB implementation only supports local addresses [ 226.295519][T11707] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.610013][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 227.610045][ T29] audit: type=1107 audit(491.580:9141): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 227.736298][T11720] lo speed is unknown, defaulting to 1000 [ 227.742151][T11720] lo speed is unknown, defaulting to 1000 [ 227.761361][T11720] lo speed is unknown, defaulting to 1000 [ 227.783035][T11720] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 227.801638][ T29] audit: type=1326 audit(491.770:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 227.825093][ T29] audit: type=1326 audit(491.770:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 227.848931][ T29] audit: type=1326 audit(491.770:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 227.872233][ T29] audit: type=1326 audit(491.770:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 227.895530][ T29] audit: type=1326 audit(491.770:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.1.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a28f749 code=0x7ffc0000 [ 227.936718][T11720] lo speed is unknown, defaulting to 1000 [ 227.942911][T11720] lo speed is unknown, defaulting to 1000 [ 227.949388][T11720] lo speed is unknown, defaulting to 1000 [ 227.959281][T11720] lo speed is unknown, defaulting to 1000 [ 227.970105][T11720] lo speed is unknown, defaulting to 1000 [ 228.058854][T11728] netlink: 'syz.2.2983': attribute type 12 has an invalid length. [ 228.114840][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 228.221553][ T29] audit: type=1400 audit(492.190:9147): avc: denied { mount } for pid=11738 comm="syz.2.2989" name="/" dev="rpc_pipefs" ino=44050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 228.302132][ T29] audit: type=1326 audit(492.270:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 228.325488][ T29] audit: type=1326 audit(492.270:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 228.348492][ T29] audit: type=1326 audit(492.270:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c11fdf749 code=0x7ffc0000 [ 228.460889][T11751] bridge4: entered promiscuous mode [ 228.466564][T11751] bridge4: entered allmulticast mode [ 228.725970][T11779] lo speed is unknown, defaulting to 1000 [ 228.824645][T11779] lo speed is unknown, defaulting to 1000 [ 229.181330][T11802] netlink: 'syz.1.3012': attribute type 10 has an invalid length. [ 229.198207][T11805] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3013'. [ 229.317879][T11814] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 229.351134][T11817] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 229.528953][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3024'. [ 229.538195][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3024'. [ 229.557464][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3024'. [ 229.566808][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3024'. [ 229.619184][T11841] loop2: detected capacity change from 0 to 512 [ 229.626775][T11841] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.670095][T11841] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 229.712129][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 229.752415][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 230.369544][T11878] netlink: 'syz.2.3041': attribute type 39 has an invalid length. [ 230.555287][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3049'. [ 230.581839][T11891] lo speed is unknown, defaulting to 1000 [ 230.664919][T11891] lo speed is unknown, defaulting to 1000 [ 231.010190][T11909] lo speed is unknown, defaulting to 1000 [ 231.108639][T11909] lo speed is unknown, defaulting to 1000 [ 231.352819][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 232.224181][T11939] ================================================================== [ 232.232854][T11939] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 232.241585][T11939] [ 232.243931][T11939] write to 0xffff888104dc76a8 of 8 bytes by task 11941 on cpu 1: [ 232.251667][T11939] shmem_file_splice_read+0x470/0x600 [ 232.257430][T11939] splice_direct_to_actor+0x26f/0x680 [ 232.262837][T11939] do_splice_direct+0xda/0x150 [ 232.268335][T11939] do_sendfile+0x380/0x650 [ 232.272879][T11939] __x64_sys_sendfile64+0x105/0x150 [ 232.278199][T11939] x64_sys_call+0x2db1/0x3000 [ 232.282919][T11939] do_syscall_64+0xca/0x2b0 [ 232.287462][T11939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.293542][T11939] [ 232.295886][T11939] write to 0xffff888104dc76a8 of 8 bytes by task 11939 on cpu 0: [ 232.303866][T11939] shmem_file_splice_read+0x470/0x600 [ 232.309437][T11939] splice_direct_to_actor+0x26f/0x680 [ 232.314851][T11939] do_splice_direct+0xda/0x150 [ 232.319818][T11939] do_sendfile+0x380/0x650 [ 232.324337][T11939] __x64_sys_sendfile64+0x105/0x150 [ 232.329638][T11939] x64_sys_call+0x2db1/0x3000 [ 232.334327][T11939] do_syscall_64+0xca/0x2b0 [ 232.338849][T11939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.344836][T11939] [ 232.347163][T11939] value changed: 0x000000000000480d -> 0x000000000000480e [ 232.354357][T11939] [ 232.356686][T11939] Reported by Kernel Concurrency Sanitizer on: [ 232.362922][T11939] CPU: 0 UID: 0 PID: 11939 Comm: syz.3.3064 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.372851][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.383000][T11939] ================================================================== [ 233.113719][ T5515] Bluetooth: hci0: command 0x1003 tx timeout [ 233.113716][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110