last executing test programs: 2m54.795375718s ago: executing program 1 (id=100): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 2m54.705364197s ago: executing program 1 (id=105): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x7, 0x4) 2m54.245508432s ago: executing program 1 (id=120): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r0) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 2m54.214374215s ago: executing program 1 (id=121): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file7\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfc, 0x2b0, &(0x7f0000000280)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 2m54.120939055s ago: executing program 1 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) 2m53.888608718s ago: executing program 1 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 2m53.888491488s ago: executing program 32 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 2.355838978s ago: executing program 0 (id=4637): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.012347102s ago: executing program 0 (id=4643): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.809695322s ago: executing program 5 (id=4650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.73242124s ago: executing program 5 (id=4652): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 1.685383144s ago: executing program 0 (id=4654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1.685183604s ago: executing program 5 (id=4655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 1.671136096s ago: executing program 0 (id=4657): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='tlb_flush\x00', r0, 0x0, 0x2}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.566167676s ago: executing program 4 (id=4659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) 1.565929786s ago: executing program 5 (id=4660): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 1.431790389s ago: executing program 3 (id=4662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.395754713s ago: executing program 3 (id=4663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x224a, &(0x7f00000002c0)={0x0, 0x1670, 0x40, 0x2, 0x3d3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) close_range(r1, 0xffffffffffffffff, 0x0) 1.32136604s ago: executing program 3 (id=4664): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000100)='./file0\x00', 0x0) 1.301194422s ago: executing program 3 (id=4665): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, 0x0, 0x40) fdatasync(r1) mmap(&(0x7f0000a34000/0x4000)=nil, 0x4000, 0xb, 0x11, r0, 0xe7d7d000) 824.615849ms ago: executing program 3 (id=4666): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 720.028939ms ago: executing program 4 (id=4667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 665.409145ms ago: executing program 3 (id=4668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) 665.170555ms ago: executing program 4 (id=4669): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) 664.672705ms ago: executing program 5 (id=4670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 581.295793ms ago: executing program 4 (id=4673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 580.310373ms ago: executing program 4 (id=4675): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 525.367608ms ago: executing program 5 (id=4676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f0000005d00), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000180)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@mblk_io_submit}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f000001fa80), 0x8}, 0x94) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 520.281269ms ago: executing program 4 (id=4677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x2) read$usbfs(r1, &(0x7f0000000240)=""/183, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) 454.434745ms ago: executing program 2 (id=4678): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x1856, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x200000b, 0x1ae}, &(0x7f00000005c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, 0xfffffffffffffffe, 0x0) 420.308039ms ago: executing program 0 (id=4679): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) accept4(r0, 0x0, 0x0, 0x400000000000000) 373.342853ms ago: executing program 2 (id=4680): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 364.750344ms ago: executing program 0 (id=4681): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 202.17788ms ago: executing program 2 (id=4682): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 78.096112ms ago: executing program 2 (id=4683): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 77.579832ms ago: executing program 2 (id=4684): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x7fffffff, 0x60005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000010) fcntl$setlease(r1, 0x400, 0x2) 0s ago: executing program 2 (id=4685): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): nk: 24 bytes leftover after parsing attributes in process `syz.0.2331'. [ 117.252100][ T29] audit: type=1326 audit(2000000004.030:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.3.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71dceefc9 code=0x7ffc0000 [ 117.275937][ T29] audit: type=1326 audit(2000000004.030:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.3.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71dceefc9 code=0x7ffc0000 [ 117.299448][ T29] audit: type=1326 audit(2000000004.030:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.3.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd71dceefc9 code=0x7ffc0000 [ 117.322939][ T29] audit: type=1326 audit(2000000004.030:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.3.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71dceefc9 code=0x7ffc0000 [ 117.346449][ T29] audit: type=1326 audit(2000000004.030:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.3.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd71dceefc9 code=0x7ffc0000 [ 117.369964][ T29] audit: type=1326 audit(2000000004.030:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.3.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71dceefc9 code=0x7ffc0000 [ 117.393528][ T29] audit: type=1326 audit(2000000004.030:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.3.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd71dceefc9 code=0x7ffc0000 [ 117.417074][ T29] audit: type=1326 audit(2000000004.030:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.3.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71dceefc9 code=0x7ffc0000 [ 117.448261][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 117.474150][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 117.591646][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 117.660893][ T9740] veth6: entered promiscuous mode [ 117.665997][ T9740] veth6: entered allmulticast mode [ 117.786022][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 117.956260][ T9774] vlan3: entered allmulticast mode [ 117.961520][ T9774] bridge_slave_0: entered allmulticast mode [ 118.447084][ T9798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9798 comm=syz.2.2368 [ 118.478555][ T9800] netlink: 'syz.2.2369': attribute type 4 has an invalid length. [ 118.507829][ T9800] netlink: 'syz.2.2369': attribute type 4 has an invalid length. [ 118.713728][ T9808] pimreg: entered allmulticast mode [ 118.730877][ T9808] pimreg: left allmulticast mode [ 118.893274][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.901221][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.867750][ T9871] netlink: 'syz.3.2400': attribute type 10 has an invalid length. [ 119.875747][ T9871] __nla_validate_parse: 4 callbacks suppressed [ 119.875765][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2400'. [ 119.902311][ T9871] team0: Port device geneve1 added [ 119.912402][ T4077] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.923430][ T4077] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.943523][ T9875] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.953427][ T9875] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.972435][ T4077] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.981021][ T4077] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.017280][ T9875] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.027305][ T9875] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.127857][ T9875] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.137795][ T9875] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.158608][ T9893] wg2: entered promiscuous mode [ 120.163615][ T9893] wg2: entered allmulticast mode [ 120.187221][ T9875] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.197169][ T9875] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.265148][ T4077] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.273579][ T4077] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.293483][ T4077] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.301784][ T4077] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.325647][ T4077] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.333930][ T4077] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.352285][ T4077] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.360573][ T4077] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.542007][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2420'. [ 120.656009][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 120.664972][ T9927] netlink: 'syz.4.2426': attribute type 30 has an invalid length. [ 121.188999][ T9955] loop0: detected capacity change from 0 to 2048 [ 121.257390][ T9955] loop0: p2 p3 p7 [ 121.514226][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2441'. [ 121.789412][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 121.789430][ T29] audit: type=1400 audit(2000000008.570:2528): avc: denied { mounton } for pid=10056 comm="syz.0.2446" path="/469/file0" dev="tmpfs" ino=2436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.890946][ T29] audit: type=1326 audit(2000000008.670:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 121.944650][ T29] audit: type=1326 audit(2000000008.700:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 121.968346][ T29] audit: type=1326 audit(2000000008.700:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 121.970032][T10085] loop0: detected capacity change from 0 to 512 [ 121.992074][ T29] audit: type=1326 audit(2000000008.700:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 121.999876][T10085] EXT4-fs: Ignoring removed orlov option [ 122.022041][ T29] audit: type=1326 audit(2000000008.700:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 122.051295][ T29] audit: type=1326 audit(2000000008.700:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 122.075114][ T29] audit: type=1326 audit(2000000008.700:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 122.098716][ T29] audit: type=1326 audit(2000000008.700:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 122.122328][ T29] audit: type=1326 audit(2000000008.700:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 122.150986][T10085] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2451: inode has both inline data and extents flags [ 122.165016][T10085] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2451: couldn't read orphan inode 15 (err -117) [ 122.178241][T10085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.227005][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.426452][T10130] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2458'. [ 122.467241][T10139] netlink: 176 bytes leftover after parsing attributes in process `GPL'. [ 122.521985][T10149] netlink: 'syz.2.2465': attribute type 3 has an invalid length. [ 122.584188][T10155] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2469'. [ 122.651705][T10161] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 123.356382][T10237] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2503'. [ 123.378428][T10240] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 124.049668][T10335] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 124.135101][T10346] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2548'. [ 124.443490][T10387] vlan3: entered allmulticast mode [ 124.560999][T10395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10395 comm=syz.2.2567 [ 124.672659][T10402] ref_ctr_offset mismatch. inode: 0xa99 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 124.789478][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 124.798736][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.806321][T10406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.850262][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.857715][T10406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.459197][T10448] loop0: detected capacity change from 0 to 512 [ 125.474226][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2589'. [ 125.507980][T10448] journal_path: Lookup failure for './file0/../file0' [ 125.514802][T10448] EXT4-fs: error: could not find journal device path [ 125.960924][T10493] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2608'. [ 125.969984][T10493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2608'. [ 125.979008][T10493] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2608'. [ 126.018778][T10493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2608'. [ 126.203389][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'. [ 126.222896][T10514] veth0_macvtap: left promiscuous mode [ 126.733607][T10564] vlan2: entered allmulticast mode [ 126.869445][ T4063] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.106139][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2647'. [ 127.116967][T10580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.124386][T10580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.135652][T10580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.143059][T10580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.344512][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 127.344526][ T29] audit: type=1400 audit(2000000014.120:2807): avc: denied { mounton } for pid=10597 comm="syz.4.2655" path="/536/file0" dev="tmpfs" ino=2779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 127.376127][ T29] audit: type=1326 audit(2000000014.130:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.399418][ T29] audit: type=1326 audit(2000000014.130:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.423154][ T29] audit: type=1326 audit(2000000014.130:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.446664][ T29] audit: type=1326 audit(2000000014.130:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.469984][ T29] audit: type=1326 audit(2000000014.130:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.493273][ T29] audit: type=1326 audit(2000000014.130:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.516604][ T29] audit: type=1326 audit(2000000014.130:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.539874][ T29] audit: type=1326 audit(2000000014.130:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.563145][ T29] audit: type=1326 audit(2000000014.130:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10599 comm="syz.5.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x50000 [ 127.782197][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2663'. [ 127.831195][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2665'. [ 128.324123][T10640] netlink: 23 bytes leftover after parsing attributes in process `syz.5.2674'. [ 128.465889][T10651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10651 comm=syz.5.2679 [ 128.478600][T10651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10651 comm=syz.5.2679 [ 128.925143][ T3542] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.925153][ T4704] Bluetooth: hci0: command 0x1003 tx timeout [ 130.037011][T10793] netlink: 'syz.0.2739': attribute type 10 has an invalid length. [ 130.074107][T10793] team0: Port device dummy0 added [ 130.406991][T10813] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.418672][T10813] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 130.578308][T10824] __nla_validate_parse: 2 callbacks suppressed [ 130.578327][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2751'. [ 130.605793][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 131.257459][T10857] netlink: 'syz.4.2768': attribute type 27 has an invalid length. [ 131.427560][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.435035][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.733802][T10857] team1: left promiscuous mode [ 131.738799][T10857] team1: left allmulticast mode [ 131.745342][T10857] veth4: left promiscuous mode [ 131.750155][T10857] veth4: left allmulticast mode [ 131.869085][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 131.888664][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 131.911565][T10861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.008614][T10861] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.040188][T10861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.066258][ T4100] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.074773][ T4100] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.089142][ T4100] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.097610][ T4100] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.108805][ T4100] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.117233][ T4100] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.126411][ T4100] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.134794][ T4100] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.662607][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 133.662624][ T29] audit: type=1326 audit(2000000533.443:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 133.722997][ T29] audit: type=1326 audit(2000000533.473:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 133.746620][ T29] audit: type=1326 audit(2000000533.473:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 133.770241][ T29] audit: type=1326 audit(2000000533.473:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.4.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 133.814963][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2807'. [ 134.061455][ T29] audit: type=1326 audit(2000000533.843:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.4.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 134.085023][ T29] audit: type=1326 audit(2000000533.843:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.4.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 134.108861][ T29] audit: type=1326 audit(2000000533.873:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.4.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 134.132494][ T29] audit: type=1326 audit(2000000533.873:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.4.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 134.156146][ T29] audit: type=1326 audit(2000000533.873:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.4.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 134.179850][ T29] audit: type=1326 audit(2000000533.873:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.4.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 134.425768][T11019] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2830'. [ 134.471717][T11026] lo: entered allmulticast mode [ 134.477613][T11024] lo: left allmulticast mode [ 134.780325][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.799162][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.041811][T11083] loop5: detected capacity change from 0 to 7 [ 135.094373][ T48] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.103697][ T48] Buffer I/O error on dev loop5, logical block 0, async page read [ 135.111637][T11083] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.121090][T11083] Buffer I/O error on dev loop5, logical block 0, async page read [ 135.128966][T11083] loop5: unable to read partition table [ 135.134687][T11083] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 135.394647][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 135.405561][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'. [ 135.663643][T11153] sch_fq: defrate 4294967295 ignored. [ 137.266937][T11221] loop0: detected capacity change from 0 to 256 [ 137.274935][T11221] msdos: Bad value for 'tz' [ 137.318626][T11225] Bluetooth: hci0: Frame reassembly failed (-90) [ 137.341668][ T4084] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.388493][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'. [ 137.411368][T11232] bridge_slave_1: left allmulticast mode [ 137.417155][T11232] bridge_slave_1: left promiscuous mode [ 137.422816][T11232] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.444036][T11232] bridge_slave_0: left promiscuous mode [ 137.449756][T11232] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.949900][T11164] syz.3.2898 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 137.963931][T11164] CPU: 0 UID: 0 PID: 11164 Comm: syz.3.2898 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.963964][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.963980][T11164] Call Trace: [ 137.963989][T11164] [ 137.963999][T11164] __dump_stack+0x1d/0x30 [ 137.964043][T11164] dump_stack_lvl+0xe8/0x140 [ 137.964072][T11164] dump_stack+0x15/0x1b [ 137.964154][T11164] dump_header+0x81/0x220 [ 137.964247][T11164] oom_kill_process+0x342/0x400 [ 137.964272][T11164] out_of_memory+0x979/0xb80 [ 137.964296][T11164] try_charge_memcg+0x610/0xa10 [ 137.964386][T11164] obj_cgroup_charge_pages+0xa6/0x150 [ 137.964424][T11164] __memcg_kmem_charge_page+0x9f/0x170 [ 137.964460][T11164] __alloc_frozen_pages_noprof+0x188/0x360 [ 137.964498][T11164] alloc_pages_mpol+0xb3/0x260 [ 137.964602][T11164] ? alloc_pages_noprof+0x61/0x130 [ 137.964647][T11164] alloc_pages_noprof+0x90/0x130 [ 137.964684][T11164] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 137.964794][T11164] __kvmalloc_node_noprof+0x483/0x670 [ 137.964824][T11164] ? ip_set_alloc+0x24/0x30 [ 137.964873][T11164] ? ip_set_alloc+0x24/0x30 [ 137.964903][T11164] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 137.964927][T11164] ip_set_alloc+0x24/0x30 [ 137.964959][T11164] hash_netiface_create+0x282/0x740 [ 137.965018][T11164] ? __pfx_hash_netiface_create+0x10/0x10 [ 137.965051][T11164] ip_set_create+0x3cc/0x970 [ 137.965176][T11164] ? __nla_parse+0x40/0x60 [ 137.965283][T11164] nfnetlink_rcv_msg+0x4c6/0x590 [ 137.965332][T11164] netlink_rcv_skb+0x123/0x220 [ 137.965420][T11164] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 137.965471][T11164] nfnetlink_rcv+0x167/0x16c0 [ 137.965501][T11164] ? genl_op_iter_next+0x44a/0x820 [ 137.965542][T11164] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 137.965644][T11164] ? skb_put+0xa9/0xf0 [ 137.965674][T11164] ? selinux_socket_sock_rcv_skb+0x219/0x620 [ 137.965789][T11164] ? __rcu_read_unlock+0x4f/0x70 [ 137.965888][T11164] ? sk_filter_trim_cap+0x4b8/0x5e0 [ 137.965957][T11164] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 137.965982][T11164] ? __rcu_read_unlock+0x4f/0x70 [ 137.966114][T11164] ? sock_def_readable+0xaf/0x190 [ 137.966139][T11164] ? netlink_sendskb+0x104/0x150 [ 137.966171][T11164] ? perf_callchain_user+0xae0/0xb50 [ 137.966197][T11164] ? __bpf_get_stackid+0x2bf/0x800 [ 137.966354][T11164] ? should_fail_ex+0x30/0x280 [ 137.966399][T11164] ? selinux_nlmsg_lookup+0x99/0x890 [ 137.966453][T11164] ? __rcu_read_unlock+0x34/0x70 [ 137.966527][T11164] ? __netlink_lookup+0x266/0x2a0 [ 137.966569][T11164] netlink_unicast+0x5c0/0x690 [ 137.966640][T11164] netlink_sendmsg+0x58b/0x6b0 [ 137.966730][T11164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.966774][T11164] __sock_sendmsg+0x145/0x180 [ 137.966863][T11164] ____sys_sendmsg+0x31e/0x4e0 [ 137.966904][T11164] ___sys_sendmsg+0x17b/0x1d0 [ 137.966952][T11164] __x64_sys_sendmsg+0xd4/0x160 [ 137.967057][T11164] x64_sys_call+0x191e/0x3000 [ 137.967092][T11164] do_syscall_64+0xd2/0x200 [ 137.967128][T11164] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.967198][T11164] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.967225][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.967250][T11164] RIP: 0033:0x7fd71dceefc9 [ 137.967270][T11164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.967292][T11164] RSP: 002b:00007fd71c74f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.967316][T11164] RAX: ffffffffffffffda RBX: 00007fd71df45fa0 RCX: 00007fd71dceefc9 [ 137.967372][T11164] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 137.967389][T11164] RBP: 00007fd71dd71f91 R08: 0000000000000000 R09: 0000000000000000 [ 137.967404][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.967415][T11164] R13: 00007fd71df46038 R14: 00007fd71df45fa0 R15: 00007ffe795dfbe8 [ 137.967434][T11164] [ 138.345114][T11164] memory: usage 307200kB, limit 307200kB, failcnt 520 [ 138.351895][T11164] memory+swap: usage 308076kB, limit 9007199254740988kB, failcnt 0 [ 138.360038][T11164] kmem: usage 297372kB, limit 9007199254740988kB, failcnt 0 [ 138.367388][T11164] Memory cgroup stats for /syz3: [ 138.371920][T11164] cache 0 [ 138.379850][T11164] rss 10063872 [ 138.383231][T11164] shmem 0 [ 138.386213][T11164] mapped_file 0 [ 138.389678][T11164] dirty 0 [ 138.392623][T11164] writeback 0 [ 138.396029][T11164] workingset_refault_anon 1053 [ 138.400797][T11164] workingset_refault_file 1589 [ 138.405603][T11164] swap 897024 [ 138.408899][T11164] swapcached 0 [ 138.412306][T11164] pgpgin 169604 [ 138.415833][T11164] pgpgout 167147 [ 138.419396][T11164] pgfault 207261 [ 138.423053][T11164] pgmajfault 258 [ 138.426664][T11164] inactive_anon 0 [ 138.430355][T11164] active_anon 0 [ 138.433828][T11164] inactive_file 10063872 [ 138.438106][T11164] active_file 0 [ 138.441600][T11164] unevictable 0 [ 138.445117][T11164] hierarchical_memory_limit 314572800 [ 138.450525][T11164] hierarchical_memsw_limit 9223372036854771712 [ 138.456780][T11164] total_cache 0 [ 138.460249][T11164] total_rss 10063872 [ 138.464148][T11164] total_shmem 0 [ 138.467778][T11164] total_mapped_file 0 [ 138.471767][T11164] total_dirty 0 [ 138.475282][T11164] total_writeback 0 [ 138.479096][T11164] total_workingset_refault_anon 1053 [ 138.484410][T11164] total_workingset_refault_file 1589 [ 138.489807][T11164] total_swap 897024 [ 138.493629][T11164] total_swapcached 0 [ 138.497559][T11164] total_pgpgin 169604 [ 138.501547][T11164] total_pgpgout 167147 [ 138.505665][T11164] total_pgfault 207261 [ 138.509760][T11164] total_pgmajfault 258 [ 138.513837][T11164] total_inactive_anon 0 [ 138.518142][T11164] total_active_anon 0 [ 138.522158][T11164] total_inactive_file 10063872 [ 138.527015][T11164] total_active_file 0 [ 138.531110][T11164] total_unevictable 0 [ 138.535279][T11164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2898,pid=11163,uid=0 [ 138.550093][T11164] Memory cgroup out of memory: Killed process 11163 (syz.3.2898) total-vm:96004kB, anon-rss:10992kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 139.313215][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 139.324766][ T4704] Bluetooth: hci0: command 0x1003 tx timeout [ 139.330827][ T3542] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.364535][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 139.364552][ T29] audit: type=1326 audit(2000000539.144:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.394192][ T29] audit: type=1326 audit(2000000539.144:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.417711][ T29] audit: type=1326 audit(2000000539.144:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.441213][ T29] audit: type=1326 audit(2000000539.144:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.464737][ T29] audit: type=1326 audit(2000000539.144:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.488300][ T29] audit: type=1326 audit(2000000539.144:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.511889][ T29] audit: type=1326 audit(2000000539.144:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.566474][ T29] audit: type=1326 audit(2000000539.324:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.590083][ T29] audit: type=1326 audit(2000000539.324:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.629027][ T29] audit: type=1326 audit(2000000539.414:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.0.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 139.814255][T11294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.824390][T11294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.833470][T11294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.842148][T11294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.927220][T11303] tipc: Enabling of bearer rejected, failed to enable media [ 140.101907][T11318] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 140.109757][T11318] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2965'. [ 140.142429][T11320] netlink: 'syz.2.2966': attribute type 1 has an invalid length. [ 140.156185][T11320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.169440][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 140.181761][T11320] bond2 (unregistering): Released all slaves [ 140.322717][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'. [ 140.331838][T11334] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2972'. [ 140.341014][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'. [ 140.341786][T11339] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2975'. [ 140.349925][T11334] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2972'. [ 140.368424][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'. [ 140.431768][T11348] bridge: RTM_NEWNEIGH with invalid ether address [ 140.542342][T11366] netlink: 'syz.3.2984': attribute type 1 has an invalid length. [ 140.556848][T11366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.580847][T11366] bond1 (unregistering): Released all slaves [ 142.131947][T11464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11464 comm=syz.2.3023 [ 142.144654][T11464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11464 comm=syz.2.3023 [ 143.497600][T11519] netlink: 'syz.0.3046': attribute type 1 has an invalid length. [ 143.513350][T11519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.529659][T11519] __nla_validate_parse: 2 callbacks suppressed [ 143.529757][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 143.684918][T11511] Set syz1 is full, maxelem 65536 reached [ 143.697580][T11519] bond2 (unregistering): Released all slaves [ 143.782113][T11527] netlink: '+}[@': attribute type 30 has an invalid length. [ 144.012269][T11552] tipc: Enabling of bearer rejected, already enabled [ 144.156700][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3068'. [ 144.165802][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3068'. [ 144.267649][T11577] netlink: 'syz.3.3069': attribute type 12 has an invalid length. [ 144.547739][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 144.561335][T11600] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3079'. [ 144.692363][T11609] loop0: detected capacity change from 0 to 128 [ 144.713312][T11609] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.734216][T11609] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.777040][ T4084] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.949174][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 144.949189][ T29] audit: type=1326 audit(2000000544.724:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 144.985673][ T29] audit: type=1326 audit(2000000544.724:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 145.009223][ T29] audit: type=1326 audit(2000000544.754:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 145.032696][ T29] audit: type=1326 audit(2000000544.754:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 145.056281][ T29] audit: type=1326 audit(2000000544.754:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 145.079890][ T29] audit: type=1326 audit(2000000544.764:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f631b30d810 code=0x7ffc0000 [ 145.103728][ T29] audit: type=1326 audit(2000000544.764:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 145.127312][ T29] audit: type=1326 audit(2000000544.764:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 145.150866][ T29] audit: type=1326 audit(2000000544.764:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 145.174497][ T29] audit: type=1326 audit(2000000544.764:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631b30efc9 code=0x7ffc0000 [ 145.202363][T11639] netlink: '+}[@': attribute type 30 has an invalid length. [ 145.228777][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'. [ 145.980597][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3105'. [ 145.989627][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3105'. [ 146.946088][T11743] vlan0: entered allmulticast mode [ 147.106747][T11751] netlink: 'syz.5.3136': attribute type 1 has an invalid length. [ 147.147404][T11751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.174241][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3136'. [ 147.192068][T11759] bond1 (unregistering): Released all slaves [ 147.615311][T11763] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 147.641463][T11763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.664512][T11763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.684787][T11763] bond2: (slave batadv0): making interface the new active one [ 147.699257][T11763] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 147.937653][T11783] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3148'. [ 148.547297][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3169'. [ 148.574719][T11828] team0 (unregistering): Port device geneve1 removed [ 148.596054][ T4084] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.604762][ T4084] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.613404][ T4084] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.639870][ T4084] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.769054][T11839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11839 comm=syz.0.3174 [ 149.370706][T11872] bond1: entered allmulticast mode [ 149.378628][T11872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.402167][T11872] bond1: (slave ip6gretap1): making interface the new active one [ 149.410064][T11872] ip6gretap1: entered allmulticast mode [ 149.417432][T11872] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 149.572472][T11893] vlan2: entered allmulticast mode [ 149.580704][T11893] dummy0: entered allmulticast mode [ 149.608011][T11896] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.764059][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3207'. [ 149.832908][T11896] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.910197][T11896] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.945827][T11896] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.959241][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 149.959256][ T29] audit: type=1326 audit(2000000549.744:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.2.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 149.989572][ T29] audit: type=1326 audit(2000000549.744:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.2.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 150.013263][ T29] audit: type=1326 audit(2000000549.744:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.2.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 150.036883][ T29] audit: type=1326 audit(2000000549.744:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.2.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 150.112686][ T4068] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.130174][ T4068] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.157402][ T4068] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.166440][ T4068] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.216298][ T29] audit: type=1326 audit(2000000549.994:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 150.217599][T11959] binfmt_misc: register: failed to install interpreter file ./file0 [ 150.283892][ T29] audit: type=1326 audit(2000000549.994:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 150.290562][T11961] vlan3: entered allmulticast mode [ 150.307824][ T29] audit: type=1326 audit(2000000549.994:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 150.336182][ T29] audit: type=1326 audit(2000000549.994:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 150.359868][ T29] audit: type=1326 audit(2000000549.994:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 150.383384][ T29] audit: type=1326 audit(2000000549.994:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 151.388486][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3239'. [ 151.438029][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3239'. [ 151.553054][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3241'. [ 151.591463][T12007] loop0: detected capacity change from 0 to 128 [ 151.606639][T12007] EXT4-fs: Ignoring removed nobh option [ 151.649808][T12007] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.687182][T12007] ext4 filesystem being mounted at /625/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.740945][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.961312][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3252'. [ 152.314622][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'. [ 152.323575][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'. [ 152.967627][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3271'. [ 153.230789][T12093] netlink: 'syz.3.3277': attribute type 21 has an invalid length. [ 153.252834][T12093] netlink: 'syz.3.3277': attribute type 1 has an invalid length. [ 153.260683][T12093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3277'. [ 153.281271][T12087] vlan2: entered allmulticast mode [ 153.303106][T12096] netlink: 'syz.4.3280': attribute type 1 has an invalid length. [ 153.315893][T12099] serio: Serial port ptm0 [ 153.335178][T12096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.445938][T12096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.464664][T12096] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.486432][T12096] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 153.728430][T12121] netlink: 'syz.0.3300': attribute type 10 has an invalid length. [ 153.748426][T12121] netlink: 'syz.0.3300': attribute type 10 has an invalid length. [ 153.767266][T12121] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 153.776592][T12121] team0: Port device dummy0 removed [ 153.789354][T12121] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.807598][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3291'. [ 153.826933][T12125] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.836851][T12125] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.901001][T12137] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.933921][T12125] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.943912][T12125] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.373025][T12125] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.382840][T12125] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.447418][T12125] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.457329][T12125] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.500241][T12188] veth8: entered promiscuous mode [ 154.505410][T12188] veth8: entered allmulticast mode [ 154.520944][T12190] tipc: Enabled bearer , priority 0 [ 154.529562][T12190] tipc: Disabling bearer [ 154.546061][T12192] loop0: detected capacity change from 0 to 512 [ 154.547013][ T4092] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.552749][T12192] EXT4-fs: Ignoring removed oldalloc option [ 154.560563][ T4092] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.566672][T12192] journal_path: Non-blockdev passed as './bus' [ 154.581054][T12192] EXT4-fs: error: could not find journal device path [ 154.588231][ T4092] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.596479][ T4092] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.614549][ T4092] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.622987][ T4092] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.631332][ T4092] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.639581][ T4092] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.971746][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 154.971761][ T29] audit: type=1400 audit(2000000554.745:3750): avc: denied { bind } for pid=12214 comm="syz.5.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 154.997834][T12214] delete_channel: no stack [ 155.326737][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3343'. [ 155.338992][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3343'. [ 155.387226][ T29] audit: type=1326 audit(2000000555.165:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.410806][ T29] audit: type=1326 audit(2000000555.165:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.435327][ T29] audit: type=1326 audit(2000000555.215:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.458910][ T29] audit: type=1326 audit(2000000555.215:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.482471][ T29] audit: type=1326 audit(2000000555.215:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.506818][ T29] audit: type=1326 audit(2000000555.215:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.530547][ T29] audit: type=1326 audit(2000000555.215:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.554090][ T29] audit: type=1326 audit(2000000555.215:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.577645][ T29] audit: type=1326 audit(2000000555.215:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.5.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 155.673322][T12251] netlink: 'syz.5.3357': attribute type 10 has an invalid length. [ 155.686158][T12251] netlink: 'syz.5.3357': attribute type 10 has an invalid length. [ 155.696800][T12251] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.159854][T12281] ip6gre1: entered allmulticast mode [ 156.449170][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3368'. [ 156.644831][T12312] veth12: entered promiscuous mode [ 156.650013][T12312] veth12: entered allmulticast mode [ 156.873774][T12336] loop0: detected capacity change from 0 to 2048 [ 157.070287][T12336] loop0: unable to read partition table [ 157.079508][T12336] loop0: partition table beyond EOD, truncated [ 157.085808][T12336] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 157.121410][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.133003][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.728866][T12372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12372 comm=syz.2.3394 [ 158.134320][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3397'. [ 158.467491][T12408] bridge: RTM_NEWNEIGH with invalid ether address [ 158.476217][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 158.502873][T12412] loop0: detected capacity change from 0 to 2048 [ 158.514052][T12412] ext4: Unknown parameter 'smackfsdef' [ 158.515105][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 158.544954][T12412] vlan0: entered allmulticast mode [ 158.557720][T12417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12417 comm=syz.4.3415 [ 158.800041][T12429] bridge: RTM_NEWNEIGH with invalid ether address [ 158.950364][T12436] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 158.995653][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3425'. [ 159.005196][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3425'. [ 159.403889][T12454] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3429'. [ 159.533728][T12465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3434'. [ 159.574464][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3437'. [ 159.583570][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3437'. [ 159.718095][T12484] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3443'. [ 159.814044][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3445'. [ 160.000618][T12495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.171766][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3450'. [ 160.705904][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 160.705921][ T29] audit: type=1400 audit(2000000560.485:4247): avc: denied { create } for pid=12522 comm="syz.3.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 160.871925][ T29] audit: type=1326 audit(2000000560.645:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 160.947740][ T29] audit: type=1326 audit(2000000560.685:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 160.971472][ T29] audit: type=1326 audit(2000000560.685:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 160.995272][ T29] audit: type=1326 audit(2000000560.685:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 161.018858][ T29] audit: type=1326 audit(2000000560.685:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 161.042684][ T29] audit: type=1326 audit(2000000560.685:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 161.066479][ T29] audit: type=1326 audit(2000000560.685:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 161.090448][ T29] audit: type=1326 audit(2000000560.685:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 161.113991][ T29] audit: type=1326 audit(2000000560.685:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 161.193431][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3470'. [ 162.300404][T12643] batadv_slave_1: entered promiscuous mode [ 162.318887][T12643] batadv_slave_1 (unregistering): left promiscuous mode [ 162.956321][T12652] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 163.030897][T12659] netlink: 'syz.4.3514': attribute type 7 has an invalid length. [ 163.268576][T12672] tipc: New replicast peer: 255.255.255.83 [ 163.274585][T12672] tipc: Enabled bearer , priority 10 [ 163.313551][T12677] team0: entered promiscuous mode [ 163.318723][T12677] team0: entered allmulticast mode [ 163.327762][T12677] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.392426][T12687] netlink: 'syz.5.3526': attribute type 1 has an invalid length. [ 163.446312][T12687] bond2: entered promiscuous mode [ 163.455317][T12687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.506703][T12687] bond2: (slave bridge4): making interface the new active one [ 163.514453][T12687] bridge4: entered promiscuous mode [ 163.521239][T12687] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 163.598824][T12704] netlink: 'syz.5.3534': attribute type 13 has an invalid length. [ 163.606823][T12704] netlink: 'syz.5.3534': attribute type 27 has an invalid length. [ 163.785799][ T4069] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.794342][ T4069] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.805275][ T4069] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.813748][ T4069] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.842125][ T4069] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.850560][ T4069] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.884743][ T4069] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.893269][ T4069] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.544819][T12755] xt_connbytes: Forcing CT accounting to be enabled [ 166.098811][T12785] VFS: Mount too revealing [ 166.156381][T12788] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 166.223623][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 166.223640][ T29] audit: type=1326 audit(2000000566.005:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="syz.2.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.253474][ T29] audit: type=1326 audit(2000000566.005:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="syz.2.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.304120][ T29] audit: type=1326 audit(2000000566.055:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="syz.2.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.327703][ T29] audit: type=1326 audit(2000000566.055:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.350702][ T29] audit: type=1326 audit(2000000566.055:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.373781][ T29] audit: type=1326 audit(2000000566.055:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.396867][ T29] audit: type=1326 audit(2000000566.055:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.419828][ T29] audit: type=1326 audit(2000000566.055:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.442823][ T29] audit: type=1326 audit(2000000566.055:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.465760][ T29] audit: type=1326 audit(2000000566.055:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 166.669357][T12808] tipc: New replicast peer: 255.255.255.255 [ 166.675659][T12808] tipc: Enabled bearer , priority 10 [ 167.128192][T12843] __nla_validate_parse: 9 callbacks suppressed [ 167.128211][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3590'. [ 167.313838][T12851] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 167.391074][T12861] netlink: 'syz.0.3596': attribute type 3 has an invalid length. [ 167.447559][T12865] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.504572][T12865] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.565076][T12865] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.593300][T12872] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 167.634926][T12865] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.694188][ T4069] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.704363][T12876] netlink: 'syz.2.3603': attribute type 1 has an invalid length. [ 167.722640][ T4069] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.742132][ T4069] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.754207][ T4069] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.787814][T12876] macvlan2: entered promiscuous mode [ 167.793316][T12876] macvlan2: entered allmulticast mode [ 167.822725][T12876] bond3: entered promiscuous mode [ 167.843779][T12876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.853221][T12876] bond3: left promiscuous mode [ 168.008396][T12900] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3614'. [ 168.029852][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3615'. [ 168.242468][T12929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12929 comm=syz.3.3626 [ 168.366826][T12943] loop0: detected capacity change from 0 to 1024 [ 168.383175][T12943] EXT4-fs: Mount option(s) incompatible with ext2 [ 168.405273][T12943] syz.0.3629 (12943): attempted to duplicate a private mapping with mremap. This is not supported. [ 168.433241][T12943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3629'. [ 168.575457][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3639'. [ 168.586766][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3639'. [ 169.004875][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3648'. [ 169.143819][T12994] netlink: 'syz.5.3652': attribute type 3 has an invalid length. [ 169.306485][T13009] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3657'. [ 169.323120][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3659'. [ 169.335179][T13013] netlink: 'syz.4.3660': attribute type 1 has an invalid length. [ 169.336466][T13011] ip6gretap0: entered promiscuous mode [ 169.348961][T13011] gretap0: entered promiscuous mode [ 169.370741][T13013] macvlan2: entered promiscuous mode [ 169.376259][T13013] macvlan2: entered allmulticast mode [ 169.382661][T13013] bond4: entered promiscuous mode [ 169.388388][T13013] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.397400][T13013] bond4: left promiscuous mode [ 169.406635][T13018] ref_ctr increment failed for inode: 0x104b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881029fa280 [ 169.418426][T13017] uprobe: syz.3.3662:13017 failed to unregister, leaking uprobe [ 170.424902][T13097] netlink: 'syz.4.3699': attribute type 1 has an invalid length. [ 170.451519][T13097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.480593][T13103] macvlan2: entered promiscuous mode [ 170.491332][T13103] bond5: entered promiscuous mode [ 170.496818][T13103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.505797][T13103] bond5: left promiscuous mode [ 170.632020][T13112] bridge: RTM_NEWNEIGH with invalid ether address [ 170.825643][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3711'. [ 170.954953][T13133] netlink: 'syz.3.3715': attribute type 1 has an invalid length. [ 170.993572][T13133] macvlan0: entered promiscuous mode [ 170.999011][T13133] macvlan0: entered allmulticast mode [ 171.035604][T13133] bond2: entered promiscuous mode [ 171.059368][T13133] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 171.086854][T13133] bond2: left promiscuous mode [ 171.403168][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 171.403182][ T29] audit: type=1326 audit(2000000571.176:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.472757][ T29] audit: type=1326 audit(2000000571.186:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.496383][ T29] audit: type=1326 audit(2000000571.186:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.519955][ T29] audit: type=1326 audit(2000000571.186:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.543536][ T29] audit: type=1326 audit(2000000571.186:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.567197][ T29] audit: type=1326 audit(2000000571.186:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.590761][ T29] audit: type=1326 audit(2000000571.186:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.614315][ T29] audit: type=1326 audit(2000000571.186:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.637933][ T29] audit: type=1326 audit(2000000571.186:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.661484][ T29] audit: type=1326 audit(2000000571.186:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.5.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 171.746064][T13170] syzkaller0: entered allmulticast mode [ 171.763847][T13170] syzkaller0: entered promiscuous mode [ 171.786606][T13170] syzkaller0 (unregistering): left allmulticast mode [ 171.793383][T13170] syzkaller0 (unregistering): left promiscuous mode [ 172.747926][T13225] __nla_validate_parse: 1 callbacks suppressed [ 172.747944][T13225] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3751'. [ 172.855468][T13228] syz.3.3752: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 172.870152][T13228] CPU: 0 UID: 0 PID: 13228 Comm: syz.3.3752 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.870209][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.870226][T13228] Call Trace: [ 172.870234][T13228] [ 172.870243][T13228] __dump_stack+0x1d/0x30 [ 172.870396][T13228] dump_stack_lvl+0xe8/0x140 [ 172.870426][T13228] dump_stack+0x15/0x1b [ 172.870488][T13228] warn_alloc+0x12b/0x1a0 [ 172.870522][T13228] __vmalloc_node_range_noprof+0x9d/0xed0 [ 172.870550][T13228] ? probe_sched_wakeup+0x85/0xa0 [ 172.870577][T13228] ? ttwu_do_activate+0x1d0/0x210 [ 172.870640][T13228] ? __rcu_read_unlock+0x4f/0x70 [ 172.870675][T13228] ? avc_has_perm_noaudit+0x1b1/0x200 [ 172.870751][T13228] ? should_fail_ex+0x30/0x280 [ 172.870781][T13228] ? xskq_create+0x36/0xe0 [ 172.870892][T13228] vmalloc_user_noprof+0x7d/0xb0 [ 172.870976][T13228] ? xskq_create+0x80/0xe0 [ 172.871008][T13228] xskq_create+0x80/0xe0 [ 172.871065][T13228] xsk_init_queue+0x95/0xf0 [ 172.871097][T13228] xsk_setsockopt+0x477/0x640 [ 172.871183][T13228] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.871219][T13228] __sys_setsockopt+0x184/0x200 [ 172.871254][T13228] __x64_sys_setsockopt+0x64/0x80 [ 172.871284][T13228] x64_sys_call+0x20ec/0x3000 [ 172.871316][T13228] do_syscall_64+0xd2/0x200 [ 172.871346][T13228] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.871385][T13228] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.871413][T13228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.871436][T13228] RIP: 0033:0x7fd71dceefc9 [ 172.871456][T13228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.871489][T13228] RSP: 002b:00007fd71c74f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.871508][T13228] RAX: ffffffffffffffda RBX: 00007fd71df45fa0 RCX: 00007fd71dceefc9 [ 172.871597][T13228] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 172.871609][T13228] RBP: 00007fd71dd71f91 R08: 0000000000000004 R09: 0000000000000000 [ 172.871622][T13228] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 172.871635][T13228] R13: 00007fd71df46038 R14: 00007fd71df45fa0 R15: 00007ffe795dfbe8 [ 172.871655][T13228] [ 172.871797][T13228] Mem-Info: [ 173.095379][T13228] active_anon:20769 inactive_anon:15 isolated_anon:0 [ 173.095379][T13228] active_file:13001 inactive_file:14233 isolated_file:0 [ 173.095379][T13228] unevictable:16901 dirty:335 writeback:0 [ 173.095379][T13228] slab_reclaimable:3716 slab_unreclaimable:37933 [ 173.095379][T13228] mapped:28786 shmem:17359 pagetables:1261 [ 173.095379][T13228] sec_pagetables:0 bounce:0 [ 173.095379][T13228] kernel_misc_reclaimable:0 [ 173.095379][T13228] free:1810244 free_pcp:21104 free_cma:0 [ 173.141306][T13228] Node 0 active_anon:83076kB inactive_anon:60kB active_file:52004kB inactive_file:56932kB unevictable:67604kB isolated(anon):0kB isolated(file):0kB mapped:115144kB dirty:1340kB writeback:0kB shmem:69436kB kernel_stack:4688kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.169422][T13228] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.199257][T13228] lowmem_reserve[]: 0 2879 7858 7858 [ 173.204654][T13228] Node 0 DMA32 free:2945524kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949052kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 173.236111][T13228] lowmem_reserve[]: 0 0 4978 4978 [ 173.241229][T13228] Node 0 Normal free:4280092kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:83076kB inactive_anon:60kB active_file:52004kB inactive_file:56932kB unevictable:67604kB writepending:1340kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:80928kB local_pcp:58992kB free_cma:0kB [ 173.274898][T13228] lowmem_reserve[]: 0 0 0 0 [ 173.279501][T13228] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.292295][T13228] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945524kB [ 173.308441][T13228] Node 0 Normal: 703*4kB (UM) 112*8kB (UME) 772*16kB (UME) 604*32kB (UM) 1071*64kB (UM) 680*128kB (UME) 287*256kB (UM) 203*512kB (UM) 120*1024kB (UM) 58*2048kB (UM) 896*4096kB (UM) = 4280060kB [ 173.327887][T13228] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 173.337223][T13228] 61582 total pagecache pages [ 173.341894][T13228] 92 pages in swap cache [ 173.346283][T13228] Free swap = 107560kB [ 173.350524][T13228] Total swap = 124996kB [ 173.354713][T13228] 2097051 pages RAM [ 173.358529][T13228] 0 pages HighMem/MovableOnly [ 173.363219][T13228] 81388 pages reserved [ 173.458104][T13243] loop0: detected capacity change from 0 to 512 [ 173.487979][T13243] EXT4-fs: Ignoring removed bh option [ 173.526214][T13243] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.535376][T13243] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 173.559776][T13243] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 173.584761][T13243] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 173.618799][T13243] System zones: 0-2, 18-18, 34-35 [ 173.636627][T13243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.690368][T13260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.713301][T13243] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 173.724367][T13243] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.3758: path /696/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 173.783994][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.965759][T13282] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 173.977793][T13282] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 174.334050][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3783'. [ 174.653385][T13327] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 174.935889][T13348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13348 comm=syz.4.3799 [ 175.595505][T13372] loop0: detected capacity change from 0 to 128 [ 175.697724][T13373] syz.0.3808: attempt to access beyond end of device [ 175.697724][T13373] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 175.774717][T13373] syz.0.3808: attempt to access beyond end of device [ 175.774717][T13373] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 175.832656][T13373] syz.0.3808: attempt to access beyond end of device [ 175.832656][T13373] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 175.872557][T13373] syz.0.3808: attempt to access beyond end of device [ 175.872557][T13373] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 175.904147][T13373] syz.0.3808: attempt to access beyond end of device [ 175.904147][T13373] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 175.945159][T13379] netlink: 'syz.5.3811': attribute type 17 has an invalid length. [ 175.953611][T13373] syz.0.3808: attempt to access beyond end of device [ 175.953611][T13373] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 175.972962][T13373] syz.0.3808: attempt to access beyond end of device [ 175.972962][T13373] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 176.002641][T13373] syz.0.3808: attempt to access beyond end of device [ 176.002641][T13373] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 176.023502][T13373] syz.0.3808: attempt to access beyond end of device [ 176.023502][T13373] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 176.042135][T13373] syz.0.3808: attempt to access beyond end of device [ 176.042135][T13373] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 176.748154][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3825'. [ 177.406658][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3842'. [ 177.583735][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 177.583761][ T29] audit: type=1400 audit(2000000577.366:4934): avc: denied { watch watch_reads } for pid=13572 comm="syz.0.3845" path="/" dev="configfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.974507][ T29] audit: type=1326 audit(2000000577.756:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7954ab5e67 code=0x7ffc0000 [ 177.983743][T13586] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 178.065151][ T29] audit: type=1326 audit(2000000577.756:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7954a5b099 code=0x7ffc0000 [ 178.088715][ T29] audit: type=1326 audit(2000000577.756:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7954ab5e67 code=0x7ffc0000 [ 178.112227][ T29] audit: type=1326 audit(2000000577.756:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7954a5b099 code=0x7ffc0000 [ 178.135862][ T29] audit: type=1326 audit(2000000577.756:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 178.159475][ T29] audit: type=1326 audit(2000000577.756:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 178.183918][ T29] audit: type=1326 audit(2000000577.756:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7954abefc9 code=0x7ffc0000 [ 178.207581][ T29] audit: type=1326 audit(2000000577.756:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7954ab5e67 code=0x7ffc0000 [ 178.231012][ T29] audit: type=1326 audit(2000000577.756:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7954a5b099 code=0x7ffc0000 [ 178.307239][T13616] sch_fq: defrate 0 ignored. [ 179.203750][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3871'. [ 179.254810][T13658] netlink: 'syz.5.3873': attribute type 13 has an invalid length. [ 179.277472][T13661] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.3874'. [ 179.299490][T13664] tipc: Enabling of bearer rejected, failed to enable media [ 179.319473][T13666] rdma_op ffff888133ed3580 conn xmit_rdma 0000000000000000 [ 179.435164][T13686] ÿÿÿÿÿÿ: renamed from vlan1 [ 179.466530][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3890'. [ 179.589640][T13711] ªªªªªª: renamed from lo [ 179.627866][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'. [ 179.955047][T13759] loop0: detected capacity change from 0 to 512 [ 179.979127][T13759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.995627][T13759] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.3918: No space for directory leaf checksum. Please run e2fsck -D. [ 180.010962][T13759] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.3918: checksumming directory block 0 [ 180.035431][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.264387][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3926'. [ 180.345816][T13791] netlink: 'syz.0.3931': attribute type 12 has an invalid length. [ 180.371132][T13793] netlink: 'syz.0.3932': attribute type 4 has an invalid length. [ 180.408539][T13793] netlink: 'syz.0.3932': attribute type 4 has an invalid length. [ 180.516665][T13801] geneve2: entered promiscuous mode [ 180.522014][T13801] geneve2: entered allmulticast mode [ 180.634876][T13815] hub 2-0:1.0: USB hub found [ 180.639530][T13815] hub 2-0:1.0: 8 ports detected [ 180.846835][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3948'. [ 181.349425][T13866] ref_ctr increment failed for inode: 0x101f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888109febf40 [ 181.419511][T13871] loop0: detected capacity change from 0 to 512 [ 181.442172][T13871] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.499100][T13871] EXT4-fs (loop0): 1 truncate cleaned up [ 181.513860][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'. [ 181.525476][T13871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.555843][T13887] netlink: 'syz.3.3973': attribute type 4 has an invalid length. [ 181.596647][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.613021][T13887] netlink: 'syz.3.3973': attribute type 4 has an invalid length. [ 181.874238][T13907] netlink: 'syz.0.3977': attribute type 13 has an invalid length. [ 181.995867][T13907] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.003151][T13907] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.249944][T13921] SELinux: failed to load policy [ 182.478406][ T4078] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.498673][ T4078] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.522341][ T4078] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.562446][ T4078] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.643117][T13944] netlink: 'syz.0.3995': attribute type 10 has an invalid length. [ 182.845338][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 182.845355][ T29] audit: type=1400 audit(2000000582.626:5150): avc: denied { ioctl } for pid=13960 comm="syz.3.4001" path="socket:[41226]" dev="sockfs" ino=41226 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 182.891434][T13968] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 182.903352][T13968] macsec1: entered promiscuous mode [ 182.908683][T13968] gretap0: entered promiscuous mode [ 182.914382][T13968] macsec1: entered allmulticast mode [ 182.919711][T13968] gretap0: entered allmulticast mode [ 182.935139][T13968] gretap0: left allmulticast mode [ 182.940350][T13968] gretap0: left promiscuous mode [ 183.053507][T13978] pimreg: entered allmulticast mode [ 183.060496][T13978] pimreg: left allmulticast mode [ 183.230698][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4015'. [ 183.269641][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4015'. [ 183.370685][ T29] audit: type=1400 audit(2000000583.146:5151): avc: denied { create } for pid=14005 comm="syz.4.4018" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 183.926078][ T29] audit: type=1326 audit(2000000583.706:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 183.949766][ T29] audit: type=1326 audit(2000000583.706:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 184.032020][ T29] audit: type=1326 audit(2000000583.766:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 184.055592][ T29] audit: type=1326 audit(2000000583.766:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 184.079254][ T29] audit: type=1326 audit(2000000583.766:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 184.102809][ T29] audit: type=1326 audit(2000000583.766:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 184.126403][ T29] audit: type=1326 audit(2000000583.766:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 184.149955][ T29] audit: type=1326 audit(2000000583.766:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 184.924234][T14051] netlink: 'syz.0.4037': attribute type 1 has an invalid length. [ 184.996088][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4041'. [ 185.025128][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'. [ 185.033375][T14051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.131852][T14062] bond2 (unregistering): Released all slaves [ 186.114932][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4059'. [ 186.240201][ T4083] bridge_slave_1: left allmulticast mode [ 186.246101][ T4083] bridge_slave_1: left promiscuous mode [ 186.251877][ T4083] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.271994][ T4083] bridge_slave_0: left promiscuous mode [ 186.277864][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.314928][ T4083] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 186.602198][ T4083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.637609][ T4083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.669516][ T4083] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 186.699278][ T4083] bond0 (unregistering): Released all slaves [ 186.726138][ T4083] bond1 (unregistering): Released all slaves [ 186.762858][T14078] chnl_net:caif_netlink_parms(): no params data found [ 186.923510][T14078] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.930589][T14078] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.954232][T14078] bridge_slave_0: entered allmulticast mode [ 186.960966][T14078] bridge_slave_0: entered promiscuous mode [ 187.027162][ T4083] team0 (unregistering): Port device team_slave_1 removed [ 187.044561][ T4083] team0 (unregistering): Port device team_slave_0 removed [ 187.059904][ T4051] smc: removing ib device syz! [ 187.136990][T14078] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.144125][T14078] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.169036][T14078] bridge_slave_1: entered allmulticast mode [ 187.182698][T14078] bridge_slave_1: entered promiscuous mode [ 187.228775][T14078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.255998][T14078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.323829][T14078] team0: Port device team_slave_0 added [ 187.340957][T14078] team0: Port device team_slave_1 added [ 187.378860][T14078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.385919][T14078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.412175][T14078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.480540][T14078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.487570][T14078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.514051][T14078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.527674][T14175] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4083'. [ 187.543680][T14175] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4083'. [ 187.625174][ T4083] IPVS: stop unused estimator thread 0... [ 187.633699][T14078] hsr_slave_0: entered promiscuous mode [ 187.640039][T14078] hsr_slave_1: entered promiscuous mode [ 187.657468][T14078] debugfs: 'hsr0' already exists in 'hsr' [ 187.663273][T14078] Cannot create hsr debugfs directory [ 187.748399][ T4083] ------------[ cut here ]------------ [ 187.753977][ T4083] WARNING: CPU: 1 PID: 4083 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 187.763595][ T4083] Modules linked in: [ 187.767516][ T4083] CPU: 1 UID: 0 PID: 4083 Comm: kworker/u8:48 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.777541][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.787706][ T4083] Workqueue: netns cleanup_net [ 187.792535][ T4083] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 187.798184][ T4083] Code: 48 8d bb 70 0e 00 00 e8 35 6b b4 fc 48 8b bb 70 0e 00 00 e8 e9 17 c1 fc 5b 41 5e 41 5f 5d e9 be 53 b5 00 cc e8 e8 11 99 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 da 11 99 fc 90 0f 0b 90 4c 89 f7 e8 fe [ 187.818059][ T4083] RSP: 0018:ffffc90000ee7c60 EFLAGS: 00010293 [ 187.824207][ T4083] RAX: ffffffff84be5628 RBX: ffff88810385c800 RCX: ffff8881125f2100 [ 187.832249][ T4083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810385d640 [ 187.840328][ T4083] RBP: ffffffff86e91ec0 R08: 0001ffff86a4802f R09: 0000000000000000 [ 187.848474][ T4083] R10: ffffc90000ee7be8 R11: 0001c90000ee7be8 R12: ffffffff86e91ee0 [ 187.856488][ T4083] R13: ffff88810385c828 R14: ffff88810385d640 R15: ffff88810385c800 [ 187.864663][ T4083] FS: 0000000000000000(0000) GS:ffff8882aecfa000(0000) knlGS:0000000000000000 [ 187.873645][ T4083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.880266][ T4083] CR2: 0000001b3401bff8 CR3: 0000000006a34000 CR4: 00000000003506f0 [ 187.888269][ T4083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.896275][ T4083] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 187.904269][ T4083] Call Trace: [ 187.907549][ T4083] [ 187.910477][ T4083] xfrm_net_exit+0x2d/0x60 [ 187.915085][ T4083] ops_undo_list+0x27b/0x410 [ 187.919701][ T4083] cleanup_net+0x2f4/0x4f0 [ 187.924170][ T4083] process_scheduled_works+0x4ce/0x9d0 [ 187.929670][ T4083] worker_thread+0x582/0x770 [ 187.934322][ T4083] kthread+0x489/0x510 [ 187.938499][ T4083] ? finish_task_switch+0xad/0x2b0 [ 187.943742][ T4083] ? __pfx_worker_thread+0x10/0x10 [ 187.949014][ T4083] ? __pfx_kthread+0x10/0x10 [ 187.953648][ T4083] ret_from_fork+0x122/0x1b0 [ 187.958343][ T4083] ? __pfx_kthread+0x10/0x10 [ 187.963740][ T4083] ret_from_fork_asm+0x1a/0x30 [ 187.968541][ T4083] [ 187.971567][ T4083] ---[ end trace 0000000000000000 ]--- [ 187.983228][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4090'. [ 187.992235][T14193] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4090'. [ 188.002073][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4090'. [ 188.021865][T14193] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4090'. [ 188.030950][T14193] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4090'. [ 188.188562][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 188.188579][ T29] audit: type=1400 audit(2000000587.966:5268): avc: denied { write } for pid=14210 comm="syz.5.4097" path="socket:[41717]" dev="sockfs" ino=41717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.280913][T14078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.296166][T14078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.308917][T14078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.327080][T14218] syzkaller0: entered allmulticast mode [ 188.335344][T14078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.350233][T14218] syzkaller0: entered promiscuous mode [ 188.370243][T14218] syzkaller0 (unregistering): left allmulticast mode [ 188.377032][T14218] syzkaller0 (unregistering): left promiscuous mode [ 188.503848][T14078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.549476][T14078] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.568218][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.575320][ T4078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.605314][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.612433][ T4078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.745078][T14078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.821498][T14261] syzkaller0: entered allmulticast mode [ 188.852214][T14261] syzkaller0: entered promiscuous mode [ 188.864726][T14261] syzkaller0 (unregistering): left allmulticast mode [ 188.871462][T14261] syzkaller0 (unregistering): left promiscuous mode [ 188.949394][T14078] veth0_vlan: entered promiscuous mode [ 188.980832][T14078] veth1_vlan: entered promiscuous mode [ 189.005491][T14078] veth0_macvtap: entered promiscuous mode [ 189.026701][T14078] veth1_macvtap: entered promiscuous mode [ 189.037899][T14078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.115016][T14078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.126987][ T4083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.136448][ T4083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.150097][ T4083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.162830][ T4083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.180398][ T29] audit: type=1400 audit(2000000588.957:5269): avc: denied { mount } for pid=14078 comm="syz-executor" name="/" dev="gadgetfs" ino=4657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 189.232257][T14285] vlan0: entered allmulticast mode [ 189.330202][ T29] audit: type=1400 audit(2000000589.107:5270): avc: denied { bind } for pid=14300 comm="syz.4.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.211101][ T29] audit: type=1326 audit(2000000589.987:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 190.234714][ T29] audit: type=1326 audit(2000000589.987:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 190.258379][ T29] audit: type=1326 audit(2000000589.987:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 190.282026][ T29] audit: type=1326 audit(2000000589.987:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 190.318515][ T29] audit: type=1326 audit(2000000589.987:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 190.342116][ T29] audit: type=1326 audit(2000000589.997:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 190.365716][ T29] audit: type=1326 audit(2000000589.997:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 190.516315][T14299] syz.2.4128 (14299) used greatest stack depth: 6024 bytes left [ 190.603176][T14351] bond1: invalid ARP target 0.0.0.0 specified for addition [ 190.610463][T14351] bond1: option arp_ip_target: invalid value (0) [ 190.622567][T14351] bond1 (unregistering): Released all slaves [ 190.636799][T14354] bridge0: port 1(batadv1) entered blocking state [ 190.638818][T14356] __nla_validate_parse: 4 callbacks suppressed [ 190.638837][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4152'. [ 190.643368][T14354] bridge0: port 1(batadv1) entered disabled state [ 190.665117][T14354] batadv1: entered allmulticast mode [ 190.671060][T14354] batadv1: entered promiscuous mode [ 190.779808][T14366] loop0: detected capacity change from 0 to 512 [ 190.804871][T14366] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 190.814310][T14366] EXT4-fs (loop0): orphan cleanup on readonly fs [ 190.831287][T14366] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.4157: corrupted inode contents [ 190.849215][T14366] EXT4-fs (loop0): Remounting filesystem read-only [ 190.856068][T14366] EXT4-fs (loop0): 1 truncate cleaned up [ 190.863051][ T4078] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 190.873722][ T4078] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 190.909854][ T4078] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 190.961947][T14366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.031373][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4165'. [ 191.040545][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4165'. [ 191.114736][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.151618][ T4078] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 191.160890][ T4078] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 191.215690][T14407] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4174'. [ 191.239984][T14407] 0ªî{X¹¦: renamed from gretap0 [ 191.260994][T14407] 0ªî{X¹¦: entered allmulticast mode [ 191.282786][T14407] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 191.365512][T14420] vlan2: entered allmulticast mode [ 191.652206][T14447] veth0: entered promiscuous mode [ 191.730054][T14447] veth0: left promiscuous mode [ 192.318312][T14477] veth12: entered promiscuous mode [ 192.323682][T14477] veth12: entered allmulticast mode [ 192.403166][T14481] vlan0: entered allmulticast mode [ 192.455985][T14485] veth0: entered promiscuous mode [ 192.461351][T14485] veth0: left promiscuous mode [ 192.563022][T14498] bond4: invalid ARP target 0.0.0.0 specified for addition [ 192.570413][T14498] bond4: option arp_ip_target: invalid value (0) [ 192.577683][T14498] bond4 (unregistering): Released all slaves [ 192.929584][T14504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4210'. [ 193.194011][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 193.194034][ T29] audit: type=1326 audit(2000000592.977:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67a85a5e67 code=0x7ffc0000 [ 193.223691][ T29] audit: type=1326 audit(2000000592.977:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67a854b099 code=0x7ffc0000 [ 193.247370][ T29] audit: type=1326 audit(2000000592.977:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 193.370863][ T29] audit: type=1326 audit(2000000593.057:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67a85a5e67 code=0x7ffc0000 [ 193.394378][ T29] audit: type=1326 audit(2000000593.057:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67a854b099 code=0x7ffc0000 [ 193.417914][ T29] audit: type=1326 audit(2000000593.057:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 193.441488][ T29] audit: type=1326 audit(2000000593.077:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67a85a5e67 code=0x7ffc0000 [ 193.465230][ T29] audit: type=1326 audit(2000000593.077:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67a854b099 code=0x7ffc0000 [ 193.488697][ T29] audit: type=1326 audit(2000000593.077:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f67a85aefc9 code=0x7ffc0000 [ 193.512320][ T29] audit: type=1326 audit(2000000593.077:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67a85a5e67 code=0x7ffc0000 [ 193.555458][T14515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14515 comm=syz.4.4216 [ 193.670009][T14523] vlan2: entered allmulticast mode [ 193.757718][T14534] netlink: 'syz.4.4224': attribute type 21 has an invalid length. [ 193.806322][T14544] netlink: 'syz.4.4227': attribute type 4 has an invalid length. [ 194.526900][T14600] veth10: entered promiscuous mode [ 194.532123][T14600] veth10: entered allmulticast mode [ 194.629773][T14608] team0: Port device vlan2 added [ 194.638304][T14607] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4256'. [ 194.746269][T14622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14622 comm=syz.2.4263 [ 194.852940][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4254'. [ 194.970368][T14647] veth0: entered promiscuous mode [ 194.983378][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4274'. [ 195.073466][T14659] macvtap0: entered promiscuous mode [ 195.081835][T14659] macvtap0: left promiscuous mode [ 195.102984][T14662] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 195.111496][T14662] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 195.146034][T14667] netlink: 'syz.2.4282': attribute type 4 has an invalid length. [ 195.755759][T14703] loop0: detected capacity change from 0 to 1024 [ 195.759306][T14704] __nla_validate_parse: 1 callbacks suppressed [ 195.759324][T14704] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4295'. [ 195.872712][T14703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.032650][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.257503][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4304'. [ 197.010199][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4314'. [ 197.067883][T14761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4317'. [ 197.077042][T14761] netlink: 'syz.2.4317': attribute type 7 has an invalid length. [ 197.084870][T14761] netlink: 'syz.2.4317': attribute type 8 has an invalid length. [ 197.092687][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4317'. [ 197.167859][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4321'. [ 197.203676][T14769] team1: entered promiscuous mode [ 197.208791][T14769] team1: entered allmulticast mode [ 197.228962][T14769] 8021q: adding VLAN 0 to HW filter on device team1 [ 197.335910][T14789] netlink: 'syz.5.4329': attribute type 7 has an invalid length. [ 197.442732][T14800] ref_ctr_offset mismatch. inode: 0xf2f offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x200000000300 [ 197.601999][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4339'. [ 197.613232][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4341'. [ 197.859876][T14841] netlink: 'syz.2.4353': attribute type 30 has an invalid length. [ 197.871671][ T4054] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.880202][ T4054] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.888921][ T4054] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.906867][ T4054] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.932594][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4354'. [ 197.995213][T14851] loop0: detected capacity change from 0 to 164 [ 198.184952][T14881] netlink: 'syz.0.4370': attribute type 30 has an invalid length. [ 198.213328][T14883] netlink: 'syz.4.4371': attribute type 13 has an invalid length. [ 198.221267][T14883] netlink: 'syz.4.4371': attribute type 17 has an invalid length. [ 198.249889][T14883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.299432][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 198.299448][ T29] audit: type=1400 audit(2000000598.077:5764): avc: denied { getopt } for pid=14884 comm="syz.0.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.875102][T14940] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 198.893448][T14944] netlink: 'gtp': attribute type 1 has an invalid length. [ 198.910466][T14944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.932457][T14944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.940184][T14944] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.952233][T14944] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 198.991218][ T29] audit: type=1400 audit(2000000598.767:5765): avc: denied { name_bind } for pid=14951 comm="syz.4.4401" src=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 199.059296][T14954] SELinux: failed to load policy [ 199.242297][ T29] audit: type=1326 audit(2000000599.027:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.4413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 199.294971][ T29] audit: type=1326 audit(2000000599.057:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.4413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 199.318575][ T29] audit: type=1326 audit(2000000599.057:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.2.4413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c722efc9 code=0x7ffc0000 [ 199.432141][T14988] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4417'. [ 199.490125][ T29] audit: type=1326 audit(2000000599.247:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.4.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 199.513676][ T29] audit: type=1326 audit(2000000599.247:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.4.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 199.537213][ T29] audit: type=1326 audit(2000000599.247:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.4.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 199.560708][ T29] audit: type=1326 audit(2000000599.247:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.4.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 199.584230][ T29] audit: type=1326 audit(2000000599.247:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.4.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a8dfdf003 code=0x7ffc0000 [ 200.124505][T15058] netlink: 'syz.0.4446': attribute type 13 has an invalid length. [ 200.132418][T15058] netlink: 'syz.0.4446': attribute type 17 has an invalid length. [ 200.181607][T15058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.518428][T15087] netlink: 'syz.0.4459': attribute type 7 has an invalid length. [ 200.598159][T15094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.708212][T15094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.765409][T15099] __nla_validate_parse: 2 callbacks suppressed [ 200.765428][T15099] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4464'. [ 200.823359][T15094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.876784][T15094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.950465][ T4078] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.970306][ T4078] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.007902][ T4078] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.036710][ T4078] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.429389][T15111] Set syz1 is full, maxelem 65536 reached [ 201.683379][T15125] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.4474'. [ 202.686747][T15176] netlink: 'syz.3.4495': attribute type 13 has an invalid length. [ 202.695200][T15176] netlink: 'syz.3.4495': attribute type 17 has an invalid length. [ 202.708877][T15176] 0ªî{X¹¦: left allmulticast mode [ 202.738770][T15176] $Hÿ: left promiscuous mode [ 202.743629][T15176] bridge0: left promiscuous mode [ 202.749587][T15176] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 202.759846][T15176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.883103][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4496'. [ 203.241592][T15215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4512'. [ 203.309910][ T29] kauditd_printk_skb: 786 callbacks suppressed [ 203.309925][ T29] audit: type=1326 audit(2000000603.087:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a8dfd5e67 code=0x7ffc0000 [ 203.340091][ T29] audit: type=1326 audit(2000000603.087:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8df7b099 code=0x7ffc0000 [ 203.363451][ T29] audit: type=1326 audit(2000000603.087:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 203.386490][ T29] audit: type=1326 audit(2000000603.107:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a8dfd5e67 code=0x7ffc0000 [ 203.409621][ T29] audit: type=1326 audit(2000000603.107:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8df7b099 code=0x7ffc0000 [ 203.432662][ T29] audit: type=1326 audit(2000000603.107:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 203.455743][ T29] audit: type=1326 audit(2000000603.127:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a8dfd5e67 code=0x7ffc0000 [ 203.478887][ T29] audit: type=1326 audit(2000000603.127:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8df7b099 code=0x7ffc0000 [ 203.502231][ T29] audit: type=1326 audit(2000000603.127:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 203.525324][ T29] audit: type=1326 audit(2000000603.127:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15169 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a8dfd5e67 code=0x7ffc0000 [ 204.683656][T15264] netlink: '+}[@': attribute type 10 has an invalid length. [ 204.693041][T15264] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 205.026848][T15280] tipc: Enabled bearer , priority 0 [ 205.037852][T15280] tipc: Disabling bearer [ 205.180676][T15285] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 205.340002][T15291] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.382721][T15291] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.443286][T15291] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.492429][T15291] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.505229][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 205.570058][ T4086] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.582636][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4550'. [ 205.596335][ T4086] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.635095][ T4086] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.659685][ T4086] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.726618][T15327] netlink: 'syz.3.4559': attribute type 1 has an invalid length. [ 205.734475][T15327] netlink: 'syz.3.4559': attribute type 4 has an invalid length. [ 205.742288][T15327] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4559'. [ 205.763495][T15327] netlink: 'syz.3.4559': attribute type 1 has an invalid length. [ 205.771338][T15327] netlink: 'syz.3.4559': attribute type 4 has an invalid length. [ 205.779100][T15327] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4559'. [ 206.150106][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4565'. [ 206.161787][T15361] bridge_slave_1: left allmulticast mode [ 206.167625][T15361] bridge_slave_1: left promiscuous mode [ 206.173605][T15361] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.184750][T15361] bridge_slave_0: left promiscuous mode [ 206.190501][T15361] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.913704][T15396] bond0: (slave bond_slave_0): Releasing backup interface [ 207.115301][T15396] bond0: (slave bond_slave_1): Releasing backup interface [ 207.238354][T15396] team0: Port device team_slave_0 removed [ 207.336247][T15396] team0: Port device team_slave_1 removed [ 207.370835][T15396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.379617][T15396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.430137][T15396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.439209][T15396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.541331][T15396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 207.864689][T15435] netlink: 'syz.2.4596': attribute type 10 has an invalid length. [ 207.885492][T15435] bond0: (slave dummy0): Releasing backup interface [ 207.902427][T15435] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 207.913995][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4597'. [ 207.922099][T15435] team0: Failed to send options change via netlink (err -105) [ 207.930381][T15435] team0: Port device dummy0 added [ 207.953019][T15439] netlink: 'syz.2.4596': attribute type 10 has an invalid length. [ 207.966189][T15439] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 207.987605][T15439] team0: Failed to send options change via netlink (err -105) [ 207.995647][T15439] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 208.005278][T15439] team0: Port device dummy0 removed [ 208.011977][T15439] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 208.318161][ T29] kauditd_printk_skb: 866 callbacks suppressed [ 208.318180][ T29] audit: type=1326 audit(2000000608.098:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a8dfd5e67 code=0x7ffc0000 [ 208.360628][ T29] audit: type=1326 audit(2000000608.098:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8df7b099 code=0x7ffc0000 [ 208.384154][ T29] audit: type=1326 audit(2000000608.098:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 208.407691][ T29] audit: type=1326 audit(2000000608.118:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a8dfd5e67 code=0x7ffc0000 [ 208.431207][ T29] audit: type=1326 audit(2000000608.118:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8df7b099 code=0x7ffc0000 [ 208.454710][ T29] audit: type=1326 audit(2000000608.118:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 208.478323][ T29] audit: type=1326 audit(2000000608.118:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a8dfd5e67 code=0x7ffc0000 [ 208.502077][ T29] audit: type=1326 audit(2000000608.118:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8df7b099 code=0x7ffc0000 [ 208.525613][ T29] audit: type=1326 audit(2000000608.118:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6a8dfdefc9 code=0x7ffc0000 [ 208.549228][ T29] audit: type=1326 audit(2000000608.138:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.4.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a8dfd5e67 code=0x7ffc0000 [ 208.575869][T15470] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4610'. [ 208.645442][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4611'. [ 208.654396][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4611'. [ 208.663376][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4611'. [ 208.883687][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4621'. [ 208.926065][T15495] bridge_slave_1: left allmulticast mode [ 208.931912][T15495] bridge_slave_1: left promiscuous mode [ 208.937718][T15495] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.948769][T15495] bridge_slave_0: left promiscuous mode [ 208.954637][T15495] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.015443][T15505] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.073003][T15505] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.132785][T15505] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.238630][T15505] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.400031][ T4078] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.408614][ T4078] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.416918][ T4078] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.425492][ T4078] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.637632][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4647'. [ 209.660807][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4647'. [ 209.837209][T15563] pim6reg1: entered promiscuous mode [ 209.842645][T15563] pim6reg1: entered allmulticast mode [ 211.020828][T15618] wg2: entered promiscuous mode [ 211.025827][T15618] wg2: entered allmulticast mode [ 211.050762][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4674'. [ 211.062570][T15615] team0: Port device team_slave_1 removed [ 211.221700][T15627] syzkaller0: entered promiscuous mode [ 211.227290][T15627] syzkaller0: entered allmulticast mode [ 211.680597][T15604] ================================================================== [ 211.688763][T15604] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 211.696160][T15604] [ 211.698489][T15604] read to 0xffff888109461548 of 4 bytes by task 15616 on cpu 0: [ 211.706135][T15604] atime_needs_update+0x25f/0x3e0 [ 211.711200][T15604] touch_atime+0x4a/0x340 [ 211.715644][T15604] shmem_file_read_iter+0x477/0x540 [ 211.720904][T15604] copy_splice_read+0x442/0x660 [ 211.725788][T15604] splice_direct_to_actor+0x290/0x680 [ 211.731200][T15604] do_splice_direct+0xda/0x150 [ 211.736002][T15604] do_sendfile+0x380/0x650 [ 211.740436][T15604] __x64_sys_sendfile64+0x105/0x150 [ 211.745658][T15604] x64_sys_call+0x2bb4/0x3000 [ 211.750372][T15604] do_syscall_64+0xd2/0x200 [ 211.754912][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.760859][T15604] [ 211.763199][T15604] write to 0xffff888109461548 of 4 bytes by task 15604 on cpu 1: [ 211.770934][T15604] touch_atime+0x1e8/0x340 [ 211.775379][T15604] shmem_file_read_iter+0x477/0x540 [ 211.780613][T15604] copy_splice_read+0x442/0x660 [ 211.785504][T15604] splice_direct_to_actor+0x290/0x680 [ 211.790987][T15604] do_splice_direct+0xda/0x150 [ 211.795773][T15604] do_sendfile+0x380/0x650 [ 211.800212][T15604] __x64_sys_sendfile64+0x105/0x150 [ 211.805434][T15604] x64_sys_call+0x2bb4/0x3000 [ 211.810141][T15604] do_syscall_64+0xd2/0x200 [ 211.814661][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.820564][T15604] [ 211.823155][T15604] value changed: 0x1b51393e -> 0x1be9d1ee [ 211.828882][T15604] [ 211.831208][T15604] Reported by Kernel Concurrency Sanitizer on: [ 211.837385][T15604] CPU: 1 UID: 0 PID: 15604 Comm: syz.3.4668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.848780][T15604] Tainted: [W]=WARN [ 211.852595][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.862672][T15604] ==================================================================