last executing test programs: 3.427822794s ago: executing program 3 (id=2018): setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x6c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd9"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3.419859694s ago: executing program 3 (id=2020): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r6, 0x1, 0xffffffff, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340832a4f040d8c560aff820fffff5bab003a0000002058000b4824ca945f0500940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001004e114c70b4869a0215280862", 0x58}], 0x1) 3.349391446s ago: executing program 3 (id=2021): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010027bd7000000000000a002040000000070000000014000200fe88000000000000000000000000010108000d000800000009000e"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 2.768208676s ago: executing program 1 (id=2027): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000340)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x84) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/mcfilter6\x00') writev(r5, &(0x7f0000000740), 0x0) write$cgroup_devices(r5, &(0x7f0000000080)={'b', ' *:* ', 'r\x00'}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x1, 0x32}, 0xa, @in=@private=0xa010100, 0x1502, 0x4, 0x0, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_usb_disconnect(r0) 2.457284772s ago: executing program 0 (id=2030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 2.393988264s ago: executing program 0 (id=2032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 1.919615853s ago: executing program 3 (id=2034): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) 1.809435335s ago: executing program 0 (id=2036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x2f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x0, 0x147646c9b447a9a8, 0x0, 0xc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @alu={0x7, 0x0, 0x1, 0xa, 0x8, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0xfffffff0, 0xc7, &(0x7f0000000580)=""/199, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x10, 0x400, 0x10000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x4f) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 1.53684616s ago: executing program 1 (id=2040): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x100, 0x10000, 0x8, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x28, 0xe000}, 0x5}], 0x1, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x4, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.415078942s ago: executing program 4 (id=2041): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.353904754s ago: executing program 4 (id=2042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{0x0}], 0x1, &(0x7f0000002180)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x9, 0xfd9}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x76f8}}], 0x38, 0x40010}], 0x1, 0x240000c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.307271444s ago: executing program 1 (id=2043): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.306552965s ago: executing program 2 (id=2044): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.264675986s ago: executing program 1 (id=2045): signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x4) vmsplice(r1, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02e0", 0x3}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 1.216318816s ago: executing program 2 (id=2046): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) unshare(0x22020600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r4, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r5}, 0x20) 1.179937037s ago: executing program 2 (id=2047): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/exec\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r4) add_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, &(0x7f0000000040)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r5) openat$cgroup_ro(r0, &(0x7f0000000340)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@local, {0x3, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x61, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207"}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.072462449s ago: executing program 4 (id=2048): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x8c, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffff4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1.001360851s ago: executing program 1 (id=2049): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) cachestat(r3, &(0x7f0000000040), 0x0, 0x0) 941.728382ms ago: executing program 0 (id=2050): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e88000085000000", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 828.877924ms ago: executing program 0 (id=2051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da603fa09a", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="ac", 0x1}], 0x1) 775.528625ms ago: executing program 3 (id=2052): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 755.826355ms ago: executing program 0 (id=2053): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2}]) 449.907801ms ago: executing program 4 (id=2054): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xa55c}, 0x18) mq_unlink(0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) removexattr(0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) 433.088962ms ago: executing program 4 (id=2055): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x169c, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = io_uring_setup(0x13451, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200000d4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 326.213424ms ago: executing program 2 (id=2056): close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xf7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 285.085764ms ago: executing program 2 (id=2057): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r1, 0xfffffffc}, 0x63) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 217.648415ms ago: executing program 4 (id=2058): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10d00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 122.413238ms ago: executing program 3 (id=2059): syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x63) inotify_init1(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 886.84µs ago: executing program 2 (id=2060): signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x4) vmsplice(r1, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02e0", 0x3}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 0s ago: executing program 1 (id=2070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x6, 0x6}}]}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20018804}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x6, 0x6}}]}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20018804}, 0x0) kernel console output (not intermixed with test programs): s than device minimum [ 64.681124][ T29] audit: type=1326 audit(1757887249.421:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c893feba9 code=0x7ffc0000 [ 64.704447][ T29] audit: type=1326 audit(1757887249.421:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c893feba9 code=0x7ffc0000 [ 64.727802][ T29] audit: type=1326 audit(1757887249.431:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4c893feba9 code=0x7ffc0000 [ 64.751095][ T29] audit: type=1326 audit(1757887249.431:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c893feba9 code=0x7ffc0000 [ 64.774402][ T29] audit: type=1326 audit(1757887249.431:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c893feba9 code=0x7ffc0000 [ 64.797998][ T29] audit: type=1326 audit(1757887249.431:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f4c893feba9 code=0x7ffc0000 [ 64.882336][ T4840] @ÿ: renamed from bond_slave_0 [ 65.275581][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 65.570576][ T4886] loop4: detected capacity change from 0 to 1024 [ 65.611694][ T4886] EXT4-fs: Ignoring removed bh option [ 65.619163][ T4886] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 65.632367][ T4896] vhci_hcd: invalid port number 96 [ 65.637575][ T4896] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 65.650922][ T4896] loop0: detected capacity change from 0 to 512 [ 65.660621][ T4886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.676201][ T4896] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.739741][ T4901] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 65.744545][ T4896] EXT4-fs (loop0): 1 truncate cleaned up [ 65.748478][ T4901] SELinux: failed to load policy [ 65.766750][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.859532][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.960050][ T4911] loop0: detected capacity change from 0 to 512 [ 65.985828][ T4911] EXT4-fs: Mount option(s) incompatible with ext3 [ 66.065727][ T4915] syzkaller0: entered promiscuous mode [ 66.071254][ T4915] syzkaller0: entered allmulticast mode [ 66.206431][ T4929] loop1: detected capacity change from 0 to 512 [ 66.219907][ T4929] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.232646][ T4929] EXT4-fs (loop1): mount failed [ 66.270442][ T4932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.533'. [ 66.280036][ T4932] netem: change failed [ 66.313403][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.342473][ T4938] loop4: detected capacity change from 0 to 764 [ 66.368970][ T4938] rock: directory entry would overflow storage [ 66.375277][ T4938] rock: sig=0x4f50, size=4, remaining=3 [ 66.381023][ T4938] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 66.381577][ T4946] netlink: 14 bytes leftover after parsing attributes in process `syz.0.540'. [ 66.399604][ T4946] hsr_slave_0: left promiscuous mode [ 66.405961][ T4946] hsr_slave_1: left promiscuous mode [ 66.575433][ T4958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=4958 comm=syz.0.544 [ 66.939852][ T4966] loop3: detected capacity change from 0 to 1024 [ 66.947400][ T4966] EXT4-fs: Ignoring removed bh option [ 66.955451][ T4966] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 66.977786][ T4966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.081775][ T4975] pim6reg1: entered promiscuous mode [ 67.087255][ T4975] pim6reg1: entered allmulticast mode [ 67.187046][ T4981] loop4: detected capacity change from 0 to 1024 [ 67.199481][ T4981] EXT4-fs: Ignoring removed orlov option [ 67.211601][ T4981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.233622][ T4983] __nla_validate_parse: 2 callbacks suppressed [ 67.233639][ T4983] netlink: 96 bytes leftover after parsing attributes in process `syz.2.555'. [ 67.309229][ T2957] kernel write not supported for file bpf-prog (pid: 2957 comm: kworker/1:2) [ 67.327951][ T4990] netlink: 14 bytes leftover after parsing attributes in process `syz.1.558'. [ 67.338360][ T4990] hsr_slave_0: left promiscuous mode [ 67.345926][ T4990] hsr_slave_1: left promiscuous mode [ 67.569656][ T5003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'. [ 67.630042][ T5006] loop0: detected capacity change from 0 to 512 [ 67.656467][ T5006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.696601][ T5006] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.760751][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.871271][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 67.912833][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.032088][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.073410][ T5037] pim6reg1: entered promiscuous mode [ 68.078892][ T5037] pim6reg1: entered allmulticast mode [ 68.100140][ T5038] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 68.117188][ T5035] loop4: detected capacity change from 0 to 512 [ 68.126973][ T5035] EXT4-fs: Ignoring removed nobh option [ 68.150087][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.575: corrupted inode contents [ 68.165789][ T5035] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.575: mark_inode_dirty error [ 68.183180][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.575: corrupted inode contents [ 68.198019][ T5035] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.575: mark_inode_dirty error [ 68.209329][ T5043] loop0: detected capacity change from 0 to 512 [ 68.216709][ T5043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.216787][ T5043] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.278590][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.283357][ T5035] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.575: Failed to acquire dquot type 0 [ 68.305409][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.575: corrupted inode contents [ 68.322069][ T5035] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.575: mark_inode_dirty error [ 68.336587][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.575: corrupted inode contents [ 68.352185][ T5035] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.575: mark_inode_dirty error [ 68.352297][ T5047] SELinux: failed to load policy [ 68.372131][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.575: corrupted inode contents [ 68.392477][ T5035] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 68.403285][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.575: corrupted inode contents [ 68.419604][ T5035] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.575: mark_inode_dirty error [ 68.433197][ T5035] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 68.448152][ T5035] EXT4-fs (loop4): 1 truncate cleaned up [ 68.470160][ T5035] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.488983][ T5053] loop1: detected capacity change from 0 to 1024 [ 68.500133][ T5053] EXT4-fs: Ignoring removed bh option [ 68.506562][ T5053] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.734325][ T5064] loop0: detected capacity change from 0 to 1024 [ 68.920546][ T5077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.589'. [ 69.024439][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 69.024455][ T29] audit: type=1326 audit(1757887253.771:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.053958][ T29] audit: type=1326 audit(1757887253.771:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.060856][ T5087] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 69.113892][ T5087] SELinux: failed to load policy [ 69.119469][ T29] audit: type=1326 audit(1757887253.781:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.142849][ T29] audit: type=1326 audit(1757887253.841:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.166339][ T29] audit: type=1326 audit(1757887253.841:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.189603][ T29] audit: type=1326 audit(1757887253.871:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.212958][ T29] audit: type=1326 audit(1757887253.871:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.236268][ T29] audit: type=1326 audit(1757887253.871:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.259560][ T29] audit: type=1326 audit(1757887253.871:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.282871][ T29] audit: type=1326 audit(1757887253.871:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 69.329875][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 69.346577][ T5092] syz_tun: entered promiscuous mode [ 69.405711][ T5096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.597'. [ 69.486192][ T5101] loop3: detected capacity change from 0 to 512 [ 69.526804][ T5101] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.559094][ T5101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.602885][ T5101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 69.631341][ T5101] System zones: 1-12 [ 69.644542][ T5101] EXT4-fs (loop3): 1 truncate cleaned up [ 69.672577][ T5101] EXT4-fs mount: 5 callbacks suppressed [ 69.672595][ T5101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.708677][ T5106] syzkaller0: entered promiscuous mode [ 69.714252][ T5106] syzkaller0: entered allmulticast mode [ 69.743581][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.191665][ T5199] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 70.235839][ T5203] netlink: 96 bytes leftover after parsing attributes in process `syz.0.618'. [ 70.423390][ T5213] netlink: 80 bytes leftover after parsing attributes in process `syz.2.623'. [ 70.425892][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 70.526383][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.688997][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.703556][ T1036] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.049997][ T5238] pim6reg1: entered promiscuous mode [ 71.055440][ T5238] pim6reg1: entered allmulticast mode [ 71.203363][ T5247] ªªªªªª: renamed from vlan0 [ 71.332681][ T5259] pim6reg1: entered promiscuous mode [ 71.338243][ T5259] pim6reg1: entered allmulticast mode [ 71.391688][ T5263] netlink: 'syz.2.643': attribute type 4 has an invalid length. [ 71.440205][ T5267] netlink: 'syz.0.655': attribute type 4 has an invalid length. [ 71.463647][ T5269] serio: Serial port ptm0 [ 71.832674][ T5292] loop2: detected capacity change from 0 to 1024 [ 71.853046][ T5292] EXT4-fs: Ignoring removed bh option [ 71.859574][ T5292] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 71.876400][ T5292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.032351][ T5301] loop0: detected capacity change from 0 to 512 [ 72.098039][ T5301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.154350][ T5305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.170465][ T5301] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.187972][ T5305] bond2: (slave ip6gretap1): making interface the new active one [ 72.246574][ T5305] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 72.679327][ T5314] __nla_validate_parse: 3 callbacks suppressed [ 72.679372][ T5314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 72.800876][ T5315] loop3: detected capacity change from 0 to 512 [ 72.821641][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.911700][ T5315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.912199][ T5315] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.935265][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.947728][ T5321] infiniband syz!: set active [ 72.947749][ T5321] infiniband syz!: added team_slave_0 [ 72.976952][ T5321] RDS/IB: syz!: added [ 72.976972][ T5321] smc: adding ib device syz! with port count 1 [ 72.977053][ T5321] smc: ib device syz! port 1 has pnetid [ 73.010563][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.146485][ T5333] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 73.146556][ T5333] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 73.146611][ T5333] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 73.246167][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 73.246189][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 73.260028][ T5333] loop0: detected capacity change from 0 to 8192 [ 73.441053][ T5351] -1: renamed from syzkaller0 [ 73.478152][ T5348] loop0: detected capacity change from 0 to 128 [ 73.485449][ T5348] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.510871][ T5348] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.547572][ T5355] netlink: 80 bytes leftover after parsing attributes in process `syz.4.676'. [ 73.560599][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 73.570747][ T5355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.578209][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.587068][ T5355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.594585][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.625357][ T5361] netlink: 14 bytes leftover after parsing attributes in process `syz.2.679'. [ 73.637665][ T5361] bond0 (unregistering): Released all slaves [ 73.799087][ T5376] syzkaller0: entered allmulticast mode [ 73.813836][ T5376] syzkaller0: entered promiscuous mode [ 73.821595][ T5376] syzkaller0 (unregistering): left allmulticast mode [ 73.828594][ T5376] syzkaller0 (unregistering): left promiscuous mode [ 73.974693][ T5381] loop4: detected capacity change from 0 to 512 [ 73.999742][ T5381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.014359][ T5381] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.059454][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.085225][ T5389] loop4: detected capacity change from 0 to 1024 [ 74.105503][ T5389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.150717][ T5389] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.688: Allocating blocks 449-513 which overlap fs metadata [ 74.293030][ T5387] EXT4-fs (loop4): pa ffff8881072665b0: logic 48, phys. 177, len 21 [ 74.301162][ T5387] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 74.323583][ T5161] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.335499][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.376187][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 74.376245][ T29] audit: type=1400 audit(1757887259.131:1019): avc: denied { read } for pid=5395 comm="syz.3.692" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.404956][ T29] audit: type=1400 audit(1757887259.131:1020): avc: denied { open } for pid=5395 comm="syz.3.692" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.436418][ T29] audit: type=1400 audit(1757887259.191:1021): avc: denied { append } for pid=5400 comm="syz.4.693" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.524921][ T5406] loop4: detected capacity change from 0 to 1024 [ 74.532237][ T5406] EXT4-fs: Ignoring removed bh option [ 74.538044][ T5408] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 74.538044][ T5408] The task syz.0.690 (5408) triggered the difference, watch for misbehavior. [ 74.556077][ T5406] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 74.592917][ T5406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.684046][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 74.720519][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.729392][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 74.738880][ T5161] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.748972][ T5161] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.758695][ T5418] 9pnet_fd: Insufficient options for proto=fd [ 74.784869][ T5161] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.917927][ T29] audit: type=1400 audit(1757887259.651:1022): avc: denied { mount } for pid=5429 comm="syz.2.702" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.956507][ T29] audit: type=1326 audit(1757887259.691:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50113eba9 code=0x7ffc0000 [ 74.979897][ T29] audit: type=1326 audit(1757887259.691:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50113eba9 code=0x7ffc0000 [ 75.003311][ T29] audit: type=1326 audit(1757887259.691:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50113eba9 code=0x7ffc0000 [ 75.026726][ T29] audit: type=1326 audit(1757887259.691:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50113eba9 code=0x7ffc0000 [ 75.050532][ T29] audit: type=1326 audit(1757887259.741:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50113eba9 code=0x7ffc0000 [ 75.073867][ T29] audit: type=1326 audit(1757887259.741:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5429 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50113eba9 code=0x7ffc0000 [ 75.255870][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 75.357100][ T5446] loop2: detected capacity change from 0 to 164 [ 75.396023][ T5446] bio_check_eod: 156 callbacks suppressed [ 75.396041][ T5446] syz.2.710: attempt to access beyond end of device [ 75.396041][ T5446] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 75.447372][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 75.464545][ T5446] syz.2.710: attempt to access beyond end of device [ 75.464545][ T5446] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 75.580194][ T5462] loop3: detected capacity change from 0 to 2048 [ 75.634325][ T5462] loop3: p1 < > p4 [ 75.638697][ T5462] loop3: p4 size 8388608 extends beyond EOD, truncated [ 75.654111][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.722511][ T5480] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 75.762950][ T5485] netlink: 'syz.4.730': attribute type 7 has an invalid length. [ 75.899976][ T5501] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 76.018213][ T5516] pim6reg1: entered promiscuous mode [ 76.023589][ T5516] pim6reg1: entered allmulticast mode [ 76.389615][ T5539] loop2: detected capacity change from 0 to 512 [ 76.398750][ T5539] EXT4-fs: Ignoring removed nobh option [ 76.415646][ T5539] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.754: corrupted inode contents [ 76.428845][ T5539] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.754: mark_inode_dirty error [ 76.441321][ T5539] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.754: corrupted inode contents [ 76.455289][ T5539] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.754: mark_inode_dirty error [ 76.467235][ T5539] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.754: Failed to acquire dquot type 0 [ 76.480016][ T5539] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.754: corrupted inode contents [ 76.492615][ T5539] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.754: mark_inode_dirty error [ 76.505976][ T5539] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.754: corrupted inode contents [ 76.518416][ T5539] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.754: mark_inode_dirty error [ 76.531417][ T5539] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.754: corrupted inode contents [ 76.545508][ T5539] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 76.554384][ T5539] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.754: corrupted inode contents [ 76.567070][ T5539] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.754: mark_inode_dirty error [ 76.578361][ T5539] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 76.588881][ T5539] EXT4-fs (loop2): 1 truncate cleaned up [ 76.595072][ T5539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.608577][ T5539] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.626643][ T5539] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.658124][ T5545] loop2: detected capacity change from 0 to 512 [ 76.706592][ T5549] loop3: detected capacity change from 0 to 256 [ 76.714023][ T5549] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.792465][ T5557] loop2: detected capacity change from 0 to 1024 [ 76.830416][ T5557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.866828][ T5557] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.762: Allocating blocks 449-513 which overlap fs metadata [ 76.890796][ T5557] EXT4-fs (loop2): pa ffff888107266620: logic 48, phys. 177, len 21 [ 76.898953][ T5557] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 76.934114][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.957512][ T5569] loop2: detected capacity change from 0 to 512 [ 76.960029][ T5570] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 76.974611][ T5569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.987680][ T5569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.002066][ T5569] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.015728][ T5569] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.765: corrupted xattr block 19: overlapping e_value [ 77.030288][ T5569] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 77.039416][ T5569] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.765: corrupted xattr block 19: overlapping e_value [ 77.055831][ T5569] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 77.064991][ T5569] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.765: corrupted xattr block 19: overlapping e_value [ 77.135282][ T5581] capability: warning: `syz.0.769' uses deprecated v2 capabilities in a way that may be insecure [ 77.148477][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.214742][ T5595] loop4: detected capacity change from 0 to 512 [ 77.226070][ T5595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.238823][ T5595] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.285501][ T5602] loop2: detected capacity change from 0 to 256 [ 77.292607][ T5602] vfat: Unknown parameter 'u_xlate' [ 77.299111][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.308720][ T5602] loop2: detected capacity change from 0 to 1024 [ 77.315589][ T5602] EXT4-fs: Ignoring removed bh option [ 77.321084][ T5602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.330428][ T5602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.366816][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.572120][ T5621] loop4: detected capacity change from 0 to 164 [ 77.579950][ T5621] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.590624][ T5621] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.599495][ T5621] rock: directory entry would overflow storage [ 77.605776][ T5621] rock: sig=0x4f50, size=4, remaining=3 [ 77.611397][ T5621] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 78.022470][ T5627] __nla_validate_parse: 7 callbacks suppressed [ 78.022489][ T5627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 78.103365][ T5637] geneve2: entered promiscuous mode [ 78.108683][ T5637] geneve2: entered allmulticast mode [ 78.116657][ T5138] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.125998][ T5138] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.136462][ T5138] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.145564][ T5138] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.187801][ T5645] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 78.236292][ T5651] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 78.250002][ T5651] bond2: entered promiscuous mode [ 78.255552][ T5651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.283861][ T5651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.296216][ T5651] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 78.306910][ T5651] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 78.317549][ T5658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.324886][ T5658] IPv6: NLM_F_CREATE should be set when creating new route [ 78.332129][ T5658] IPv6: NLM_F_CREATE should be set when creating new route [ 78.340696][ T5658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.356223][ T5651] bond2: (slave wireguard0): making interface the new active one [ 78.364051][ T5651] wireguard0: entered promiscuous mode [ 78.401275][ T5651] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 78.408169][ T5664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.805'. [ 78.426551][ T5658] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 78.447447][ T5658] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 78.480820][ T5668] loop0: detected capacity change from 0 to 4096 [ 78.499565][ T5668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.516713][ T5670] vhci_hcd: invalid port number 96 [ 78.521887][ T5670] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 78.534979][ T5675] loop4: detected capacity change from 0 to 2048 [ 78.549025][ T5673] vxcan2: entered promiscuous mode [ 78.554270][ T5673] vxcan2: entered allmulticast mode [ 78.576618][ T5675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.590665][ T5675] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.612208][ T5681] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.626191][ T5685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.813'. [ 78.636495][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.647931][ T5685] netem: change failed [ 78.656503][ T5146] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:33: bg 0: block 345: padding at end of block bitmap is not set [ 78.674911][ T5146] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 78.687398][ T5146] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.687398][ T5146] [ 78.707898][ T5681] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.719942][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.758083][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 78.833353][ T5707] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.823'. [ 78.844062][ T5681] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.905533][ T5681] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.918121][ T5720] ref_ctr increment failed for inode: 0x318 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881045ea280 [ 78.918550][ T5718] uprobe: syz.1.827:5718 failed to unregister, leaking uprobe [ 78.961415][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.982634][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.991751][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.991792][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.088280][ T5726] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 79.221962][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 79.250177][ T5750] loop3: detected capacity change from 0 to 1024 [ 79.263558][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 79.306325][ T5750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.401697][ T5762] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.839: Allocating blocks 257-513 which overlap fs metadata [ 79.423090][ T29] kauditd_printk_skb: 836 callbacks suppressed [ 79.423105][ T29] audit: type=1326 audit(1757887264.181:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.456375][ T3398] Process accounting resumed [ 79.500938][ T29] audit: type=1326 audit(1757887264.211:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.524359][ T29] audit: type=1326 audit(1757887264.211:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.547745][ T29] audit: type=1326 audit(1757887264.211:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.571295][ T29] audit: type=1326 audit(1757887264.211:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.594770][ T29] audit: type=1326 audit(1757887264.211:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.618301][ T29] audit: type=1326 audit(1757887264.211:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.622189][ T5771] siw: device registration error -23 [ 79.641824][ T29] audit: type=1326 audit(1757887264.211:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.641863][ T29] audit: type=1326 audit(1757887264.211:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.693906][ T29] audit: type=1326 audit(1757887264.211:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb30eba9 code=0x7ffc0000 [ 79.718386][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.741598][ T5761] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 79.741598][ T5761] program syz.4.841 not setting count and/or reply_len properly [ 80.007360][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 80.012654][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 80.024622][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.042505][ T5811] vlan2: entered allmulticast mode [ 80.048014][ T5811] bond0: entered allmulticast mode [ 80.061285][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 80.188223][ T5823] loop2: detected capacity change from 0 to 4096 [ 80.200132][ T5823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.216680][ T5821] hub 9-0:1.0: USB hub found [ 80.222861][ T5821] hub 9-0:1.0: 8 ports detected [ 80.287096][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.461867][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.479652][ T5840] vlan1: entered allmulticast mode [ 80.484993][ T5840] bond0: entered allmulticast mode [ 81.160461][ T5879] bond3: entered promiscuous mode [ 81.165620][ T5879] bond3: entered allmulticast mode [ 81.181368][ T5879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.196210][ T5879] bond3 (unregistering): Released all slaves [ 81.297397][ T5892] loop4: detected capacity change from 0 to 256 [ 81.304345][ T5892] vfat: Unknown parameter 'u_xlate' [ 81.316041][ T5892] loop4: detected capacity change from 0 to 1024 [ 81.322601][ T5892] EXT4-fs: Ignoring removed bh option [ 81.328129][ T5892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.328261][ T5894] loop3: detected capacity change from 0 to 164 [ 81.338190][ T5892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.353902][ T5894] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 81.368838][ T5894] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 81.377590][ T5894] rock: directory entry would overflow storage [ 81.383852][ T5894] rock: sig=0x4f50, size=4, remaining=3 [ 81.389467][ T5894] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 81.397519][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.422742][ T5897] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 81.430558][ T5897] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 81.441380][ T5899] loop2: detected capacity change from 0 to 1024 [ 81.448180][ T5897] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 81.455975][ T5897] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 81.474769][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.493160][ T5899] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.568009][ T5906] hub 9-0:1.0: USB hub found [ 81.583887][ T5906] hub 9-0:1.0: 8 ports detected [ 81.593021][ T5907] syzkaller0: entered promiscuous mode [ 81.598737][ T5907] syzkaller0: entered allmulticast mode [ 81.662203][ T5140] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:27: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.679400][ T5140] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 81.691919][ T5140] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.691919][ T5140] [ 81.703220][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.858951][ T5931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.874100][ T5931] vlan3: entered allmulticast mode [ 81.879301][ T5931] bond3: entered allmulticast mode [ 81.995621][ T5941] syzkaller0: entered promiscuous mode [ 82.001199][ T5941] syzkaller0: entered allmulticast mode [ 82.042636][ T5943] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 82.146170][ T5948] hub 9-0:1.0: USB hub found [ 82.163058][ T5948] hub 9-0:1.0: 8 ports detected [ 83.328282][ T5985] loop4: detected capacity change from 0 to 512 [ 83.335001][ T5985] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.341764][ T5985] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.352549][ T5985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 83.361561][ T5985] System zones: 1-12 [ 83.366551][ T5985] EXT4-fs (loop4): 1 truncate cleaned up [ 83.372901][ T5985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.446343][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.457882][ T5993] __nla_validate_parse: 14 callbacks suppressed [ 83.457923][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 83.457982][ T5989] syzkaller0: entered promiscuous mode [ 83.478674][ T5989] syzkaller0: entered allmulticast mode [ 83.494401][ T5993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.521777][ T5993] vlan0: entered allmulticast mode [ 83.527007][ T5993] bond3: entered allmulticast mode [ 83.599143][ T6005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.666831][ T6005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.727549][ T6005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.743977][ T6017] netlink: 104 bytes leftover after parsing attributes in process `syz.2.935'. [ 83.756426][ T6017] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.787037][ T6005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.823146][ T6019] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 83.832283][ T6017] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.882385][ T5146] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.894450][ T5140] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.908098][ T6017] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.919589][ T5140] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.930852][ T5140] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.958889][ T6017] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.009304][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.021299][ T5140] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.032493][ T5140] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.043819][ T5140] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.076784][ T6021] loop2: detected capacity change from 0 to 164 [ 84.084519][ T6021] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.095276][ T6021] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.103973][ T6021] rock: directory entry would overflow storage [ 84.110136][ T6021] rock: sig=0x4f50, size=4, remaining=3 [ 84.115847][ T6021] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 84.432638][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 84.432730][ T29] audit: type=1326 audit(1757887269.181:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f034f985b67 code=0x7ffc0000 [ 84.467034][ T29] audit: type=1326 audit(1757887269.181:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f034f92ada9 code=0x7ffc0000 [ 84.490491][ T29] audit: type=1326 audit(1757887269.181:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 84.514026][ T29] audit: type=1326 audit(1757887269.191:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f034f985b67 code=0x7ffc0000 [ 84.537481][ T29] audit: type=1326 audit(1757887269.191:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f034f92ada9 code=0x7ffc0000 [ 84.560743][ T29] audit: type=1326 audit(1757887269.191:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 84.584169][ T29] audit: type=1326 audit(1757887269.201:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f034f985b67 code=0x7ffc0000 [ 84.607516][ T29] audit: type=1326 audit(1757887269.201:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f034f92ada9 code=0x7ffc0000 [ 84.631059][ T29] audit: type=1326 audit(1757887269.201:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 84.654396][ T29] audit: type=1326 audit(1757887269.211:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f034f985b67 code=0x7ffc0000 [ 84.736550][ T6042] bond4: entered promiscuous mode [ 84.741676][ T6042] bond4: entered allmulticast mode [ 84.760659][ T6039] loop2: detected capacity change from 0 to 8192 [ 84.768189][ T6042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 84.823105][ T6042] bond4 (unregistering): Released all slaves [ 84.845986][ T6045] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.925394][ T6045] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.996008][ T6045] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.046698][ T6045] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.146797][ T6059] loop2: detected capacity change from 0 to 1024 [ 85.181184][ T6059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.222951][ T6059] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.953: Allocating blocks 449-513 which overlap fs metadata [ 85.244433][ T5138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.300608][ T5138] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.310188][ T6058] EXT4-fs (loop2): pa ffff888107266770: logic 48, phys. 177, len 21 [ 85.313735][ T5138] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.318290][ T6058] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 85.372987][ T5138] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.390465][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.424318][ T6069] 9pnet_fd: Insufficient options for proto=fd [ 85.671192][ T6090] netlink: 80 bytes leftover after parsing attributes in process `syz.1.964'. [ 85.682456][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 85.692039][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.699618][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.707813][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.715253][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.831990][ T6096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.842573][ T6096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 85.897195][ T6096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.907760][ T6096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 85.977380][ T6096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.987794][ T6096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 86.017469][ T6096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.027847][ T6096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 86.081153][ T5161] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 86.089515][ T5161] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 86.101347][ T5161] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 86.109795][ T5161] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 86.121757][ T5161] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 86.130226][ T5161] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 86.141706][ T5161] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 86.150156][ T5161] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 86.182744][ T6103] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 86.220020][ T6103] bond1: entered promiscuous mode [ 86.225586][ T6103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.266240][ T6103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.273573][ T6103] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 86.284308][ T6103] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 86.298421][ T6103] bond1: (slave wireguard0): making interface the new active one [ 86.303605][ T6112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.306236][ T6103] wireguard0: entered promiscuous mode [ 86.313434][ T6112] IPv6: NLM_F_CREATE should be set when creating new route [ 86.326194][ T6112] IPv6: NLM_F_CREATE should be set when creating new route [ 86.335290][ T6103] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 86.356937][ T6112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.368466][ T6112] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 86.405230][ T6112] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 86.503903][ T6120] loop2: detected capacity change from 0 to 512 [ 86.545463][ T6120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.561229][ T6120] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.366845][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.560901][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 87.584255][ T6140] tipc: Started in network mode [ 87.584865][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 87.589253][ T6140] tipc: Node identity ac14140f, cluster identity 4711 [ 87.610316][ T6140] tipc: New replicast peer: 255.255.255.255 [ 87.616885][ T6140] tipc: Enabled bearer , priority 10 [ 87.634600][ T6143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.655724][ T6143] vlan0: entered allmulticast mode [ 87.660895][ T6143] bond1: entered allmulticast mode [ 87.664635][ T6149] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 87.686757][ T6149] bond1: entered promiscuous mode [ 87.692224][ T6149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.712618][ T6149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.720094][ T6149] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 87.730738][ T6149] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 87.743874][ T6149] bond1: (slave wireguard0): making interface the new active one [ 87.751632][ T6149] wireguard0: entered promiscuous mode [ 87.759628][ T6149] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 87.764605][ T6156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.776199][ T6156] IPv6: NLM_F_CREATE should be set when creating new route [ 87.783420][ T6156] IPv6: NLM_F_CREATE should be set when creating new route [ 87.807607][ T6156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.832972][ T6156] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 87.845495][ T6163] ref_ctr increment failed for inode: 0x3f8 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888103757300 [ 87.861403][ T6156] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 87.870249][ T6163] ref_ctr increment failed for inode: 0x3f8 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888103757300 [ 87.882444][ T6161] uprobe: syz.3.991:6161 failed to unregister, leaking uprobe [ 87.950385][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 87.959448][ T6161] uprobe: syz.3.991:6161 failed to unregister, leaking uprobe [ 88.074458][ T6183] loop3: detected capacity change from 0 to 512 [ 88.087114][ T6183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.097829][ T6185] netlink: 'syz.0.999': attribute type 4 has an invalid length. [ 88.106262][ T6185] netlink: 'syz.0.999': attribute type 4 has an invalid length. [ 88.118273][ T6183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.147477][ T6183] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.165017][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 88.181584][ T6192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.191733][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.199584][ T6192] vlan1: entered allmulticast mode [ 88.205919][ T6192] bond2: entered allmulticast mode [ 88.227862][ T6190] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1000'. [ 88.312533][ T6202] loop4: detected capacity change from 0 to 512 [ 88.319259][ T6202] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.326078][ T6202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.335465][ T6202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.343974][ T6202] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.354852][ T6204] geneve0: entered allmulticast mode [ 88.384536][ T6202] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1006: Allocating blocks 41-42 which overlap fs metadata [ 88.424697][ T6202] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1006: Allocating blocks 41-42 which overlap fs metadata [ 88.459785][ T6202] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1006: Failed to acquire dquot type 1 [ 88.474196][ T6202] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 88.489594][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1006: corrupted inode contents [ 88.503916][ T6202] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.1006: mark_inode_dirty error [ 88.508053][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 88.516676][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1006: corrupted inode contents [ 88.536574][ T6202] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1006: mark_inode_dirty error [ 88.548186][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1006: corrupted inode contents [ 88.560315][ T6202] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 88.569081][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1006: corrupted inode contents [ 88.581661][ T6202] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.1006: mark_inode_dirty error [ 88.593220][ T6202] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 88.621435][ T6202] EXT4-fs (loop4): 1 truncate cleaned up [ 88.627697][ T6202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.642659][ T6202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.755958][ T36] tipc: Node number set to 2886997007 [ 88.791048][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 88.808729][ T6255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 88.823273][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 88.846250][ T6255] bond4 (unregistering): Released all slaves [ 88.869432][ T6262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.876731][ T6262] IPv6: NLM_F_CREATE should be set when creating new route [ 88.884057][ T6262] IPv6: NLM_F_CREATE should be set when creating new route [ 88.892295][ T6262] ------------[ cut here ]------------ [ 88.897831][ T6262] WARNING: CPU: 1 PID: 6262 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xc41/0xcb0 [ 88.908078][ T6262] Modules linked in: [ 88.912300][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.1.1032 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.922217][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.932656][ T6262] RIP: 0010:nsim_fib_event_nb+0xc41/0xcb0 [ 88.938564][ T6262] Code: a7 12 fe be 01 00 00 00 4c 8b 74 24 18 49 8d 7e 2c e8 f3 75 a8 fe 4c 8b 2c 24 48 8b 6c 24 10 e9 93 f6 ff ff e8 10 a7 12 fe 90 <0f> 0b 90 e9 5a fc ff ff e8 02 a7 12 fe e9 a5 f9 ff ff e8 f8 a6 12 [ 88.958268][ T6262] RSP: 0018:ffffc90011c4f618 EFLAGS: 00010283 [ 88.964535][ T6262] RAX: ffffffff83455220 RBX: 0000000000000001 RCX: 0000000000080000 [ 88.972534][ T6262] RDX: ffffc90002431000 RSI: 0000000000001d1b RDI: 0000000000001d1c [ 88.980627][ T6262] RBP: 0000000000000001 R08: 0001c90011c4f733 R09: 0000000000000000 [ 88.988737][ T6262] R10: ffff8881196747c0 R11: 0000000000800000 R12: ffffc90011c4f718 [ 88.996819][ T6262] R13: ffff88812c83f400 R14: ffffc90011c4f730 R15: 0000000000000002 [ 89.004967][ T6262] FS: 00007fd8f9d6f6c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 89.013963][ T6262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.020580][ T6262] CR2: 0000200000002000 CR3: 000000012d72a000 CR4: 00000000003506f0 [ 89.028683][ T6262] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.036706][ T6262] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 89.044736][ T6262] Call Trace: [ 89.048031][ T6262] [ 89.050993][ T6262] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 89.056519][ T6262] atomic_notifier_call_chain+0x73/0x1c0 [ 89.062282][ T6262] call_fib_notifiers+0x65/0xa0 [ 89.067272][ T6262] call_fib6_notifiers+0x30/0x40 [ 89.072331][ T6262] call_fib6_multipath_entry_notifiers+0x94/0xc0 [ 89.078725][ T6262] inet6_rtm_newroute+0xaf1/0x1020 [ 89.083968][ T6262] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 89.089706][ T6262] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 89.094717][ T6262] netlink_rcv_skb+0x120/0x220 [ 89.099566][ T6262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.105249][ T6262] rtnetlink_rcv+0x1c/0x30 [ 89.109776][ T6262] netlink_unicast+0x5c0/0x690 [ 89.114699][ T6262] netlink_sendmsg+0x58b/0x6b0 [ 89.119553][ T6262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.125006][ T6262] __sock_sendmsg+0x142/0x180 [ 89.129740][ T6262] ____sys_sendmsg+0x31e/0x4e0 [ 89.134581][ T6262] ___sys_sendmsg+0x17b/0x1d0 [ 89.139305][ T6262] __x64_sys_sendmsg+0xd4/0x160 [ 89.144363][ T6262] x64_sys_call+0x191e/0x2ff0 [ 89.149102][ T6262] do_syscall_64+0xd2/0x200 [ 89.153835][ T6262] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.159942][ T6262] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.165841][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.171772][ T6262] RIP: 0033:0x7fd8fb30eba9 [ 89.176250][ T6262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.195935][ T6262] RSP: 002b:00007fd8f9d6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.204406][ T6262] RAX: ffffffffffffffda RBX: 00007fd8fb555fa0 RCX: 00007fd8fb30eba9 [ 89.212412][ T6262] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 89.220511][ T6262] RBP: 00007fd8fb391e19 R08: 0000000000000000 R09: 0000000000000000 [ 89.228537][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.236612][ T6262] R13: 00007fd8fb556038 R14: 00007fd8fb555fa0 R15: 00007ffe58978a88 [ 89.244651][ T6262] [ 89.247694][ T6262] ---[ end trace 0000000000000000 ]--- [ 89.310772][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 89.344253][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'. [ 89.440067][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 89.440086][ T29] audit: type=1400 audit(1757887530.199:2460): avc: denied { map_create } for pid=6285 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.473620][ T29] audit: type=1400 audit(1757887530.199:2461): avc: denied { prog_load } for pid=6285 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.492864][ T29] audit: type=1400 audit(1757887530.199:2462): avc: denied { prog_load } for pid=6285 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.511978][ T29] audit: type=1400 audit(1757887530.199:2463): avc: denied { prog_load } for pid=6285 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.531147][ T29] audit: type=1400 audit(1757887530.199:2464): avc: denied { prog_load } for pid=6285 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.550307][ T29] audit: type=1326 audit(1757887530.199:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 89.573859][ T29] audit: type=1326 audit(1757887530.199:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 89.597356][ T29] audit: type=1326 audit(1757887530.199:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 89.620791][ T29] audit: type=1326 audit(1757887530.199:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 89.644229][ T29] audit: type=1326 audit(1757887530.199:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 89.674699][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 89.699126][ T6301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.712623][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 89.723738][ T6301] bond3 (unregistering): Released all slaves [ 89.775522][ T6306] wg2: entered promiscuous mode [ 89.780449][ T6306] wg2: entered allmulticast mode [ 89.949557][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 90.580033][ T6373] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 90.595568][ T6373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.716762][ T6373] veth7: entered promiscuous mode [ 90.730035][ T6373] bond2: (slave veth7): Enslaving as an active interface with a down link [ 90.749032][ T6373] bond2: entered allmulticast mode [ 91.857108][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 92.026701][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 92.345866][ T6438] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 92.371572][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.390930][ T6438] team0: Port device bond0 added [ 92.719413][ T6457] netlink: 'syz.3.1112': attribute type 13 has an invalid length. [ 93.215993][ T6478] netlink: 'syz.0.1118': attribute type 10 has an invalid length. [ 93.677893][ T6464] pim6reg1: entered promiscuous mode [ 93.683298][ T6464] pim6reg1: entered allmulticast mode [ 93.708213][ T6475] pim6reg1: entered promiscuous mode [ 93.713644][ T6475] pim6reg1: entered allmulticast mode [ 93.728373][ T6478] bridge0: port 1(dummy0) entered blocking state [ 93.734854][ T6478] bridge0: port 1(dummy0) entered disabled state [ 93.741456][ T6478] dummy0: entered allmulticast mode [ 93.748515][ T6478] bridge0: port 1(dummy0) entered blocking state [ 93.754951][ T6478] bridge0: port 1(dummy0) entered forwarding state [ 93.764655][ T5160] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.798837][ T6496] netlink: 'syz.1.1120': attribute type 4 has an invalid length. [ 93.821507][ T5160] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.840551][ T6494] netlink: 'syz.1.1120': attribute type 4 has an invalid length. [ 93.849142][ T5160] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.879372][ T6502] __nla_validate_parse: 3 callbacks suppressed [ 93.879392][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 93.885777][ T5160] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.948434][ T6502] ip6gre1: entered allmulticast mode [ 94.043095][ T6523] veth1_macvtap: left promiscuous mode [ 94.053143][ T6523] macsec0: entered allmulticast mode [ 94.102116][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 94.324021][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 94.447516][ T29] kauditd_printk_skb: 550 callbacks suppressed [ 94.447532][ T29] audit: type=1400 audit(1757887791.201:3020): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.494194][ T29] audit: type=1400 audit(1757887791.241:3021): avc: denied { prog_load } for pid=6561 comm="syz.2.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.567717][ T29] audit: type=1400 audit(1757887791.321:3022): avc: denied { read write } for pid=6561 comm="syz.2.1151" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.713528][ T29] audit: type=1400 audit(1757887791.461:3023): avc: denied { module_request } for pid=6564 comm="syz.0.1152" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 94.735909][ T29] audit: type=1400 audit(1757887791.461:3024): avc: denied { sys_module } for pid=6564 comm="syz.0.1152" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 94.794166][ T29] audit: type=1400 audit(1757887791.461:3025): avc: denied { module_request } for pid=6564 comm="syz.0.1152" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 94.816618][ T29] audit: type=1400 audit(1757887791.461:3026): avc: denied { sys_module } for pid=6564 comm="syz.0.1152" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 94.837756][ T29] audit: type=1400 audit(1757887791.501:3027): avc: denied { map_create } for pid=6566 comm="syz.0.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.856938][ T29] audit: type=1400 audit(1757887791.501:3028): avc: denied { prog_load } for pid=6566 comm="syz.0.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.876066][ T29] audit: type=1400 audit(1757887791.521:3029): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.719412][ T6621] sch_fq: defrate 4294967295 ignored. [ 95.765976][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.773313][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.781040][ T6625] bridge0: entered allmulticast mode [ 95.792278][ T6625] bridge_slave_1: left allmulticast mode [ 95.798042][ T6625] bridge_slave_1: left promiscuous mode [ 95.803813][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.812552][ T6625] bridge_slave_0: left allmulticast mode [ 95.818305][ T6625] bridge_slave_0: left promiscuous mode [ 95.824075][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.992350][ T6644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1186'. [ 96.020077][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 96.033559][ T6647] ip6gre1: entered allmulticast mode [ 96.158636][ T6666] pim6reg1: entered promiscuous mode [ 96.164071][ T6666] pim6reg1: entered allmulticast mode [ 96.280300][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1197'. [ 96.299664][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 96.687173][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1212'. [ 96.714161][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 97.697674][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1237'. [ 98.236143][ T6805] netlink: 'syz.1.1256': attribute type 4 has an invalid length. [ 98.247657][ T6805] netlink: 'syz.1.1256': attribute type 4 has an invalid length. [ 98.455852][ T6825] sit0: entered promiscuous mode [ 98.460884][ T6825] sit0: entered allmulticast mode [ 99.162166][ T6882] netlink: 'syz.4.1290': attribute type 27 has an invalid length. [ 99.293956][ T6882] vlan1: left promiscuous mode [ 99.298922][ T6882] vlan1: left allmulticast mode [ 99.304187][ T6882] veth0_vlan: left allmulticast mode [ 99.324834][ T6882] vlan2: left promiscuous mode [ 99.329847][ T6882] bond1: left promiscuous mode [ 99.335075][ T6882] dummy0: left promiscuous mode [ 99.377908][ T6886] syz_tun: left promiscuous mode [ 99.392242][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.406825][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.423211][ T6886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.453975][ T5146] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.462547][ T5146] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.471637][ T5146] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.485439][ T5146] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.539322][ T29] kauditd_printk_skb: 1028 callbacks suppressed [ 99.539337][ T29] audit: type=1400 audit(1757887796.291:4058): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.585833][ T29] audit: type=1400 audit(1757887796.301:4059): avc: denied { prog_load } for pid=6889 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.605024][ T29] audit: type=1400 audit(1757887796.311:4060): avc: denied { create } for pid=6889 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 99.625696][ T29] audit: type=1400 audit(1757887796.311:4061): avc: denied { read write } for pid=6889 comm="syz.4.1294" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.649857][ T29] audit: type=1400 audit(1757887796.321:4062): avc: denied { prog_load } for pid=6889 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.669166][ T29] audit: type=1400 audit(1757887796.321:4063): avc: denied { prog_load } for pid=6889 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.688459][ T29] audit: type=1400 audit(1757887796.321:4064): avc: denied { create } for pid=6889 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 99.707942][ T29] audit: type=1400 audit(1757887796.321:4065): avc: denied { create } for pid=6889 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 99.729401][ T29] audit: type=1400 audit(1757887796.351:4066): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.753705][ T29] audit: type=1400 audit(1757887796.411:4067): avc: denied { read write } for pid=6891 comm="syz.4.1295" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.929505][ T6922] __nla_validate_parse: 3 callbacks suppressed [ 99.929523][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 99.987270][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 99.996371][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 100.605823][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 100.711118][ T6961] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 101.334599][ T5876] Process accounting resumed [ 101.591543][ T7021] netlink: 'syz.0.1354': attribute type 12 has an invalid length. [ 101.904801][ T7058] netlink: 'syz.1.1371': attribute type 30 has an invalid length. [ 102.148749][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1381'. [ 102.157856][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1381'. [ 102.220020][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1384'. [ 102.975748][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1414'. [ 102.985053][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1414'. [ 103.054078][ T7173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.074599][ T7173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.087858][ T7173] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 103.113529][ T7173] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 103.159495][ T7181] macvlan2: entered promiscuous mode [ 103.164890][ T7181] macvlan2: entered allmulticast mode [ 103.172472][ T7181] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 103.634380][ T7217] netlink: 'syz.3.1442': attribute type 27 has an invalid length. [ 103.642757][ T7217] 0ªX¹¦D: left allmulticast mode [ 103.648447][ T7217] sit0: left promiscuous mode [ 103.653183][ T7217] sit0: left allmulticast mode [ 103.661061][ T7217] bond2: left promiscuous mode [ 103.665921][ T7217] wireguard0: left promiscuous mode [ 103.671711][ T7217] ip6gre1: left allmulticast mode [ 103.701628][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.709743][ T7217] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.719504][ T7217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.915279][ T7232] ip6tnl0: entered promiscuous mode [ 103.920582][ T7232] ip6tnl0: entered allmulticast mode [ 104.065195][ T7251] netlink: 'syz.4.1459': attribute type 10 has an invalid length. [ 104.080546][ T7251] bond1: (slave dummy0): Releasing active interface [ 104.090045][ T7251] team0: Port device dummy0 added [ 104.197992][ T7268] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 104.225997][ T7268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.598310][ T29] kauditd_printk_skb: 1413 callbacks suppressed [ 104.598328][ T29] audit: type=1400 audit(1757887801.351:5481): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.674777][ T29] audit: type=1400 audit(1757887801.381:5482): avc: denied { prog_load } for pid=7307 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.693959][ T29] audit: type=1400 audit(1757887801.391:5483): avc: denied { map_create } for pid=7307 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.713275][ T29] audit: type=1400 audit(1757887801.391:5484): avc: denied { prog_load } for pid=7307 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.732515][ T29] audit: type=1400 audit(1757887801.391:5485): avc: denied { open } for pid=7307 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 104.751793][ T29] audit: type=1400 audit(1757887801.391:5486): avc: denied { prog_load } for pid=7307 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.771113][ T29] audit: type=1400 audit(1757887801.411:5487): avc: denied { create } for pid=7310 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 104.790960][ T29] audit: type=1400 audit(1757887801.411:5488): avc: denied { create } for pid=7310 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.811600][ T29] audit: type=1400 audit(1757887801.411:5489): avc: denied { create } for pid=7310 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.832335][ T29] audit: type=1400 audit(1757887801.411:5490): avc: denied { create } for pid=7310 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.861232][ T7313] dummy0: left allmulticast mode [ 104.866652][ T7313] bridge0: port 1(dummy0) entered disabled state [ 104.909769][ T7313] bond1: (slave wireguard0): Releasing backup interface [ 104.934315][ T7313] wireguard0: left promiscuous mode [ 104.939827][ T7313] bond1: (slave wireguard1): making interface the new active one [ 104.947715][ T7313] wireguard1: entered promiscuous mode [ 104.971046][ T7313] bond1: (slave wireguard1): Releasing backup interface [ 104.978509][ T7313] wireguard1: left promiscuous mode [ 105.129153][ T7336] __nla_validate_parse: 6 callbacks suppressed [ 105.129172][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 106.864670][ T7481] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 106.875213][ T7485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7485 comm=syz.3.1557 [ 106.890740][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1557'. [ 106.900804][ T7485] macvtap0: refused to change device tx_queue_len [ 107.151225][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1574'. [ 107.272249][ T7537] ±ÿ: renamed from team_slave_1 [ 107.288862][ T7541] sch_fq: defrate 4294967295 ignored. [ 107.368058][ T7550] ÿÿÿÿÿÿ: renamed from vlan1 [ 107.464028][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 107.473022][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1590'. [ 107.627109][ T7574] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 107.657789][ T7576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.745735][ T7585] netlink: 'syz.3.1602': attribute type 5 has an invalid length. [ 108.135212][ T7619] netlink: 'syz.3.1616': attribute type 13 has an invalid length. [ 109.154990][ T7667] netlink: 'syz.0.1636': attribute type 4 has an invalid length. [ 109.199743][ T7667] netlink: 'syz.0.1636': attribute type 4 has an invalid length. [ 109.263807][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1639'. [ 109.272935][ T7676] hsr_slave_0: left promiscuous mode [ 109.278974][ T7676] hsr_slave_1: left promiscuous mode [ 109.389890][ T7684] netlink: 'syz.0.1642': attribute type 13 has an invalid length. [ 109.615840][ T29] kauditd_printk_skb: 1030 callbacks suppressed [ 109.615857][ T29] audit: type=1400 audit(1757888318.373:6521): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.661580][ T29] audit: type=1400 audit(1757888318.413:6522): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.686340][ T29] audit: type=1400 audit(1757888318.413:6523): avc: denied { map_create } for pid=7690 comm="syz.4.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.705590][ T29] audit: type=1400 audit(1757888318.413:6524): avc: denied { prog_load } for pid=7690 comm="syz.4.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.724675][ T29] audit: type=1400 audit(1757888318.413:6525): avc: denied { prog_load } for pid=7690 comm="syz.4.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.747246][ T29] audit: type=1400 audit(1757888318.413:6526): avc: denied { create } for pid=7692 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 109.767064][ T29] audit: type=1400 audit(1757888318.413:6527): avc: denied { prog_load } for pid=7692 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.786398][ T29] audit: type=1400 audit(1757888318.413:6528): avc: denied { create } for pid=7692 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 109.806119][ T29] audit: type=1326 audit(1757888318.413:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50113eba9 code=0x7ffc0000 [ 109.830140][ T29] audit: type=1326 audit(1757888318.413:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50113eba9 code=0x7ffc0000 [ 110.256279][ T5146] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.290074][ T7722] pim6reg1: entered promiscuous mode [ 110.295505][ T7722] pim6reg1: entered allmulticast mode [ 110.323776][ T5146] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.341337][ T5146] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.360169][ T5146] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.451932][ T7751] netlink: 'syz.3.1666': attribute type 4 has an invalid length. [ 110.466371][ T7751] netlink: 'syz.3.1666': attribute type 4 has an invalid length. [ 110.476761][ T7753] netlink: 'syz.4.1667': attribute type 5 has an invalid length. [ 110.617330][ T7772] wg2: entered promiscuous mode [ 110.622283][ T7772] wg2: entered allmulticast mode [ 110.740149][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 110.749264][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 110.806601][ T7801] netlink: 'syz.3.1688': attribute type 3 has an invalid length. [ 110.873256][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 111.495853][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1716'. [ 111.639976][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 111.958837][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1727'. [ 112.010650][ T7896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7896 comm=syz.3.1727 [ 112.512501][ T7917] netlink: 'syz.2.1737': attribute type 1 has an invalid length. [ 112.528819][ T7917] bond3: entered promiscuous mode [ 112.534350][ T7917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.559940][ T7917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.570109][ T7917] bond3: (slave bond4): making interface the new active one [ 112.577513][ T7917] bond4: entered promiscuous mode [ 112.584318][ T7917] bond3: (slave bond4): Enslaving as an active interface with an up link [ 112.755860][ T7923] syzkaller0: entered promiscuous mode [ 112.761408][ T7923] syzkaller0: entered allmulticast mode [ 113.047285][ T7936] netlink: 'syz.2.1745': attribute type 4 has an invalid length. [ 113.055661][ T7936] netlink: 'syz.2.1745': attribute type 4 has an invalid length. [ 114.195007][ T7980] bridge4: entered allmulticast mode [ 114.246691][ T7981] validate_nla: 1 callbacks suppressed [ 114.246733][ T7981] netlink: 'syz.3.1762': attribute type 6 has an invalid length. [ 114.639173][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 114.639192][ T29] audit: type=1400 audit(1757888323.393:7200): avc: denied { open } for pid=7992 comm="syz.3.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 114.709943][ T29] audit: type=1400 audit(1757888323.413:7201): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.734211][ T29] audit: type=1326 audit(1757888323.443:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 114.757737][ T29] audit: type=1326 audit(1757888323.443:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 114.781374][ T29] audit: type=1400 audit(1757888323.453:7204): avc: denied { prog_load } for pid=7997 comm="syz.1.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.800472][ T29] audit: type=1326 audit(1757888323.453:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 114.824473][ T29] audit: type=1326 audit(1757888323.453:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 114.825257][ T8003] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 114.848065][ T29] audit: type=1326 audit(1757888323.453:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 114.879416][ T29] audit: type=1326 audit(1757888323.453:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 114.902916][ T29] audit: type=1326 audit(1757888323.453:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f98eba9 code=0x7ffc0000 [ 114.994884][ T8006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=8006 comm=syz.1.1774 [ 115.026277][ T8011] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 115.124133][ T8003] veth5: entered promiscuous mode [ 115.146644][ T8003] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 115.397564][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1783'. [ 115.551129][ T8038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8038 comm=syz.2.1787 [ 115.701915][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 115.730410][ T8052] ip6tnl0: entered promiscuous mode [ 115.735740][ T8052] ip6tnl0: entered allmulticast mode [ 115.745875][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 115.896226][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1799'. [ 115.943288][ T8067] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 115.997781][ T8067] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.006089][ T8067] bond3: (slave bond4): making interface the new active one [ 116.014809][ T8067] bond3: (slave bond4): Enslaving as an active interface with an up link [ 116.082244][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1800'. [ 116.094208][ T8075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.994925][ T8104] netlink: 'syz.2.1814': attribute type 1 has an invalid length. [ 117.008489][ T8104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 117.020275][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1814'. [ 117.030896][ T8104] bond6 (unregistering): Released all slaves [ 117.194868][ T8127] syzkaller0: entered promiscuous mode [ 117.200406][ T8127] syzkaller0: entered allmulticast mode [ 117.327083][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1826'. [ 117.395482][ T8142] bridge_slave_1: left allmulticast mode [ 117.401265][ T8142] bridge_slave_1: left promiscuous mode [ 117.406970][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.414800][ T8142] bridge_slave_0: left allmulticast mode [ 117.420467][ T8142] bridge_slave_0: left promiscuous mode [ 117.426274][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.468049][ T8144] batadv1: entered promiscuous mode [ 117.567677][ T8147] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 117.576324][ T6472] IPVS: starting estimator thread 0... [ 117.663766][ T8161] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1835'. [ 117.673913][ T8153] IPVS: using max 2016 ests per chain, 100800 per kthread [ 118.158775][ T8188] futex_wake_op: syz.2.1847 tries to shift op by -1; fix this program [ 118.364587][ T8209] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 118.372380][ T8209] netlink: 'syz.0.1857': attribute type 4 has an invalid length. [ 118.380175][ T8209] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1857'. [ 118.389866][ T8209] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 118.397707][ T8209] netlink: 'syz.0.1857': attribute type 4 has an invalid length. [ 118.405811][ T8209] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1857'. [ 118.444805][ T8213] pim6reg1: entered promiscuous mode [ 118.450237][ T8213] pim6reg1: entered allmulticast mode [ 118.898041][ T8226] vlan1: entered promiscuous mode [ 118.903169][ T8226] ip6gretap0: entered promiscuous mode [ 119.184830][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1878'. [ 119.205631][ T8253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8253 comm=syz.2.1878 [ 119.495561][ T8256] loop3: detected capacity change from 0 to 1024 [ 119.502409][ T8256] EXT4-fs: Ignoring removed orlov option [ 119.509263][ T8256] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 119.557286][ T8269] netlink: 'syz.0.1883': attribute type 4 has an invalid length. [ 119.567070][ T8269] netlink: 'syz.0.1883': attribute type 4 has an invalid length. [ 119.655964][ T29] kauditd_printk_skb: 760 callbacks suppressed [ 119.655988][ T29] audit: type=1400 audit(1757888328.413:7970): avc: denied { create } for pid=8271 comm="syz.0.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.663146][ T8275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1885'. [ 119.709803][ T29] audit: type=1400 audit(1757888328.413:7971): avc: denied { ioctl } for pid=8271 comm="syz.0.1884" path="socket:[21693]" dev="sockfs" ino=21693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.734925][ T29] audit: type=1400 audit(1757888328.413:7972): avc: denied { write } for pid=8271 comm="syz.0.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.754601][ T29] audit: type=1400 audit(1757888328.443:7973): avc: denied { create } for pid=8276 comm="syz.3.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.775242][ T29] audit: type=1400 audit(1757888328.443:7974): avc: denied { write } for pid=8276 comm="syz.3.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.973869][ T29] audit: type=1400 audit(1757888328.683:7975): avc: denied { read write } for pid=8281 comm="syz.2.1887" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.998176][ T29] audit: type=1400 audit(1757888328.683:7976): avc: denied { open } for pid=8281 comm="syz.2.1887" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.027021][ T8285] loop4: detected capacity change from 0 to 512 [ 120.055354][ T8285] ext4: Unknown parameter 'permit_directio' [ 120.129952][ T8277] Set syz1 is full, maxelem 65536 reached [ 120.169901][ T8287] batman_adv: batadv0: Adding interface: dummy0 [ 120.176314][ T8287] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.201669][ T8287] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 120.280082][ T29] audit: type=1400 audit(1757888329.023:7977): avc: denied { create } for pid=8286 comm="syz.0.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.299820][ T29] audit: type=1400 audit(1757888329.023:7978): avc: denied { ioctl } for pid=8286 comm="syz.0.1889" path="socket:[21725]" dev="sockfs" ino=21725 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.325689][ T29] audit: type=1400 audit(1757888329.063:7979): avc: denied { allowed } for pid=8284 comm="syz.4.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.392322][ T8290] netlink: 'syz.3.1891': attribute type 30 has an invalid length. [ 120.567886][ T8312] netlink: 'syz.3.1900': attribute type 4 has an invalid length. [ 121.539350][ T8345] netlink: 'syz.1.1912': attribute type 4 has an invalid length. [ 121.619193][ T8353] __nla_validate_parse: 6 callbacks suppressed [ 121.619213][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 121.646297][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1916'. [ 121.655394][ T8355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1916'. [ 121.758665][ T8360] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 121.785246][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.796216][ T8360] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 122.127262][ T8373] vxcan1: entered allmulticast mode [ 122.161975][ T8379] netlink: 'syz.3.1926': attribute type 1 has an invalid length. [ 122.184346][ T8379] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 122.196187][ T5138] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 122.207639][ T8379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.314300][ T5130] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 122.693858][ T8396] random: crng reseeded on system resumption [ 122.835305][ T8377] syz.2.1925 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 122.849588][ T8377] CPU: 0 UID: 0 PID: 8377 Comm: syz.2.1925 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.849627][ T8377] Tainted: [W]=WARN [ 122.849634][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.849706][ T8377] Call Trace: [ 122.849713][ T8377] [ 122.849722][ T8377] __dump_stack+0x1d/0x30 [ 122.849751][ T8377] dump_stack_lvl+0xe8/0x140 [ 122.849850][ T8377] dump_stack+0x15/0x1b [ 122.849872][ T8377] dump_header+0x81/0x220 [ 122.849947][ T8377] oom_kill_process+0x342/0x400 [ 122.849992][ T8377] out_of_memory+0x979/0xb80 [ 122.850040][ T8377] try_charge_memcg+0x5e6/0x9e0 [ 122.850075][ T8377] obj_cgroup_charge_pages+0xa6/0x150 [ 122.850119][ T8377] __memcg_kmem_charge_page+0x9f/0x170 [ 122.850165][ T8377] __alloc_frozen_pages_noprof+0x188/0x360 [ 122.850238][ T8377] alloc_pages_mpol+0xb3/0x250 [ 122.850281][ T8377] alloc_pages_noprof+0x90/0x130 [ 122.850323][ T8377] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 122.850423][ T8377] __kvmalloc_node_noprof+0x30f/0x4e0 [ 122.850506][ T8377] ? ip_set_alloc+0x1f/0x30 [ 122.850535][ T8377] ? ip_set_alloc+0x1f/0x30 [ 122.850640][ T8377] ? __kmalloc_cache_noprof+0x189/0x320 [ 122.850709][ T8377] ip_set_alloc+0x1f/0x30 [ 122.850736][ T8377] hash_netiface_create+0x282/0x740 [ 122.850792][ T8377] ? __pfx_hash_netiface_create+0x10/0x10 [ 122.850823][ T8377] ip_set_create+0x3cc/0x960 [ 122.850856][ T8377] ? save_fpregs_to_fpstate+0x100/0x160 [ 122.850951][ T8377] nfnetlink_rcv_msg+0x4c6/0x590 [ 122.851076][ T8377] netlink_rcv_skb+0x120/0x220 [ 122.851110][ T8377] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.851137][ T8377] nfnetlink_rcv+0x16b/0x1690 [ 122.851157][ T8377] ? __rcu_read_unlock+0x4f/0x70 [ 122.851186][ T8377] ? xa_load+0xb1/0xe0 [ 122.851347][ T8377] ? __account_obj_stock+0x211/0x350 [ 122.851464][ T8377] ? obj_cgroup_charge_account+0x122/0x1a0 [ 122.851507][ T8377] ? __rcu_read_unlock+0x4f/0x70 [ 122.851541][ T8377] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 122.851586][ T8377] ? __account_obj_stock+0x211/0x350 [ 122.851649][ T8377] ? refill_obj_stock+0x254/0x2e0 [ 122.851692][ T8377] ? rcu_segcblist_enqueue+0x92/0xb0 [ 122.851727][ T8377] ? __rcu_read_unlock+0x4f/0x70 [ 122.851822][ T8377] ? should_fail_ex+0x30/0x280 [ 122.851849][ T8377] ? selinux_nlmsg_lookup+0x99/0x890 [ 122.851884][ T8377] ? __rcu_read_unlock+0x34/0x70 [ 122.851981][ T8377] ? __netlink_lookup+0x266/0x2a0 [ 122.852021][ T8377] netlink_unicast+0x5c0/0x690 [ 122.852050][ T8377] netlink_sendmsg+0x58b/0x6b0 [ 122.852158][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.852194][ T8377] __sock_sendmsg+0x142/0x180 [ 122.852304][ T8377] ____sys_sendmsg+0x31e/0x4e0 [ 122.852402][ T8377] ___sys_sendmsg+0x17b/0x1d0 [ 122.852452][ T8377] __x64_sys_sendmsg+0xd4/0x160 [ 122.852572][ T8377] x64_sys_call+0x191e/0x2ff0 [ 122.852675][ T8377] do_syscall_64+0xd2/0x200 [ 122.852718][ T8377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.852751][ T8377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.852801][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.852837][ T8377] RIP: 0033:0x7fd50113eba9 [ 122.852864][ T8377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.852888][ T8377] RSP: 002b:00007fd4ffba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.852923][ T8377] RAX: ffffffffffffffda RBX: 00007fd501385fa0 RCX: 00007fd50113eba9 [ 122.853083][ T8377] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 122.853105][ T8377] RBP: 00007fd5011c1e19 R08: 0000000000000000 R09: 0000000000000000 [ 122.853120][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.853136][ T8377] R13: 00007fd501386038 R14: 00007fd501385fa0 R15: 00007fff1860a128 [ 122.853182][ T8377] [ 122.853190][ T8377] memory: usage 307200kB, limit 307200kB, failcnt 189 [ 123.230353][ T8377] memory+swap: usage 307540kB, limit 9007199254740988kB, failcnt 0 [ 123.238368][ T8377] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 123.245719][ T8377] Memory cgroup stats for /syz2: [ 123.246302][ T8377] cache 0 [ 123.254244][ T8377] rss 0 [ 123.257081][ T8377] shmem 0 [ 123.260038][ T8377] mapped_file 0 [ 123.263520][ T8377] dirty 0 [ 123.266506][ T8377] writeback 0 [ 123.269808][ T8377] workingset_refault_anon 20 [ 123.274429][ T8377] workingset_refault_file 98 [ 123.279034][ T8377] swap 348160 [ 123.282336][ T8377] swapcached 8192 [ 123.286023][ T8377] pgpgin 114468 [ 123.289494][ T8377] pgpgout 114465 [ 123.293060][ T8377] pgfault 102759 [ 123.296645][ T8377] pgmajfault 16 [ 123.300111][ T8377] inactive_anon 8192 [ 123.304076][ T8377] active_anon 0 [ 123.307544][ T8377] inactive_file 4096 [ 123.311520][ T8377] active_file 0 [ 123.315043][ T8377] unevictable 0 [ 123.318602][ T8377] hierarchical_memory_limit 314572800 [ 123.324028][ T8377] hierarchical_memsw_limit 9223372036854771712 [ 123.330251][ T8377] total_cache 0 [ 123.333761][ T8377] total_rss 0 [ 123.337072][ T8377] total_shmem 0 [ 123.340576][ T8377] total_mapped_file 0 [ 123.344610][ T8377] total_dirty 0 [ 123.348145][ T8377] total_writeback 0 [ 123.351965][ T8377] total_workingset_refault_anon 20 [ 123.357209][ T8377] total_workingset_refault_file 98 [ 123.362366][ T8377] total_swap 348160 [ 123.366340][ T8377] total_swapcached 8192 [ 123.370523][ T8377] total_pgpgin 114468 [ 123.374538][ T8377] total_pgpgout 114465 [ 123.378617][ T8377] total_pgfault 102759 [ 123.382817][ T8377] total_pgmajfault 16 [ 123.386961][ T8377] total_inactive_anon 8192 [ 123.391396][ T8377] total_active_anon 0 [ 123.395418][ T8377] total_inactive_file 4096 [ 123.399903][ T8377] total_active_file 0 [ 123.404019][ T8377] total_unevictable 0 [ 123.408027][ T8377] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1925,pid=8376,uid=0 [ 123.422674][ T8377] Memory cgroup out of memory: Killed process 8376 (syz.2.1925) total-vm:95940kB, anon-rss:1072kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 123.473409][ T8407] netlink: 'syz.4.1936': attribute type 5 has an invalid length. [ 123.509298][ T8382] syz.2.1925 (8382) used greatest stack depth: 8984 bytes left [ 123.586405][ T8410] IPVS: set_ctl: invalid protocol: 58 172.20.20.24:20004 [ 123.766777][ T8377] syz.2.1925 (8377) used greatest stack depth: 7528 bytes left [ 123.833531][ T8407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 123.848715][ T8423] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 123.858736][ T8423] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 123.966958][ T8423] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 123.976896][ T8423] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 124.028358][ T8423] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.038565][ T8423] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 124.073404][ T8434] macvlan1: entered promiscuous mode [ 124.079425][ T8434] ipvlan0: entered promiscuous mode [ 124.085500][ T8434] ipvlan0: left promiscuous mode [ 124.090652][ T8434] macvlan1: left promiscuous mode [ 124.117024][ T8423] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.126985][ T8423] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 124.194003][ T5146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.202443][ T5146] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.261084][ T5146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.269468][ T5146] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.295652][ T5146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.304076][ T5146] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.322522][ T5146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.330923][ T5146] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.419119][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 124.685380][ T8466] loop3: detected capacity change from 0 to 1024 [ 124.692314][ T8466] EXT4-fs: inline encryption not supported [ 124.698184][ T8466] EXT4-fs: Ignoring removed i_version option [ 124.744431][ T8466] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.769090][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 124.769109][ T29] audit: type=1326 audit(1757888333.523:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 124.811685][ T8470] netlink: 'syz.2.1960': attribute type 4 has an invalid length. [ 124.819522][ T8470] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1960'. [ 124.831534][ T8466] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1957: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.847732][ T8466] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 124.855966][ T8466] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1957: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.870832][ T8466] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 124.879721][ T8466] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1957: Failed to acquire dquot type 0 [ 124.891428][ T8466] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 124.901292][ T8466] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1957: mark_inode_dirty error [ 124.913206][ T8466] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 124.923465][ T8466] EXT4-fs (loop3): 1 orphan inode deleted [ 124.930336][ T8466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.036189][ T29] audit: type=1326 audit(1757888333.553:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 125.059684][ T29] audit: type=1326 audit(1757888333.553:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 125.083096][ T29] audit: type=1326 audit(1757888333.553:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 125.106570][ T29] audit: type=1326 audit(1757888333.553:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 125.130012][ T29] audit: type=1326 audit(1757888333.563:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 125.153523][ T29] audit: type=1326 audit(1757888333.563:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 125.177054][ T29] audit: type=1326 audit(1757888333.563:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42e04eba9 code=0x7ffc0000 [ 125.564278][ T8482] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 125.642503][ T8482] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 125.675212][ T8482] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 125.706416][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 125.731110][ T8488] gretap1: entered promiscuous mode [ 125.751934][ T8488] bond5: (slave gretap1): making interface the new active one [ 125.771224][ T8488] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 125.937606][ T5146] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.965637][ T5146] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:33: Failed to release dquot type 0 [ 125.980006][ T8489] macvlan2: entered promiscuous mode [ 125.985403][ T8489] macvlan2: entered allmulticast mode [ 126.039204][ T8493] random: crng reseeded on system resumption [ 126.263425][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.273856][ T3312] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.322578][ T8489] bond5: entered promiscuous mode [ 126.362964][ T8489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.385970][ T3312] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 126.413401][ T3312] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 126.430120][ T8489] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 126.442740][ T8489] bond5: left promiscuous mode [ 126.551380][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 126.656370][ T8518] syzkaller0: entered promiscuous mode [ 126.661929][ T8518] syzkaller0: entered allmulticast mode [ 126.873808][ T8532] loop2: detected capacity change from 0 to 1024 [ 126.906435][ T8532] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 126.916315][ T8532] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 127.033761][ T8532] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 127.057414][ T8532] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #5: comm syz.2.1976: unexpected bad inode w/o EXT4_IGET_BAD [ 127.105001][ T8532] EXT4-fs (loop2): no journal found [ 127.110672][ T8532] EXT4-fs (loop2): can't get journal size [ 127.154385][ T8532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.574052][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1987'. [ 128.043406][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 128.316002][ T8572] loop3: detected capacity change from 0 to 8192 [ 128.386993][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 128.804451][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.297327][ T8610] loop4: detected capacity change from 0 to 1024 [ 129.304270][ T8610] EXT4-fs: Ignoring removed orlov option [ 129.444433][ T8610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.967536][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.010718][ T8617] team0: Port device dummy0 removed [ 130.024922][ T8617] batman_adv: batadv0: Adding interface: dummy0 [ 130.031245][ T8617] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.056674][ T8617] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 130.099570][ T8619] bond0: (slave batadv0): Releasing backup interface [ 130.146318][ T8622] loop4: detected capacity change from 0 to 512 [ 130.153285][ T8619] bond2: (slave wireguard0): Releasing backup interface [ 130.170527][ T8619] bond2: (slave wireguard1): making interface the new active one [ 130.199311][ T8622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.229544][ T8619] bond2: (slave wireguard1): Releasing backup interface [ 130.243808][ T8622] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.255119][ T8630] netlink: 'syz.0.2010': attribute type 1 has an invalid length. [ 130.265630][ T8619] bond4: (slave ip6gretap1): Removing an active aggregator [ 130.273221][ T8619] bond4: (slave ip6gretap1): Releasing backup interface [ 130.283305][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 130.283321][ T29] audit: type=1400 audit(1757888339.043:8291): avc: denied { read write } for pid=8618 comm="syz.3.2007" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.313365][ T29] audit: type=1400 audit(1757888339.043:8292): avc: denied { open } for pid=8618 comm="syz.3.2007" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.373719][ T29] audit: type=1400 audit(1757888339.103:8293): avc: denied { append } for pid=8621 comm="syz.4.2008" path="/367/bus/hugetlb.2MB.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.404757][ T8630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.451616][ T8632] bond4: (slave veth7): Enslaving as an active interface with a down link [ 130.476867][ T8638] vlan1: entered allmulticast mode [ 130.482164][ T8638] veth0_to_bond: entered allmulticast mode [ 130.520481][ T8638] bond4: (slave vlan1): Opening slave failed [ 130.529557][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.548267][ T29] audit: type=1400 audit(1757888339.283:8294): avc: denied { name_bind } for pid=8643 comm="syz.2.2012" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 130.573429][ T29] audit: type=1400 audit(1757888339.323:8295): avc: denied { read } for pid=8648 comm="syz.2.2015" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.020331][ T29] audit: type=1400 audit(1757888339.733:8296): avc: denied { listen } for pid=8662 comm="syz.2.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.297686][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2022'. [ 131.322848][ T8675] tipc: Enabling of bearer rejected, failed to enable media [ 131.402077][ T8683] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 131.417981][ T8683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.438574][ T8683] bond5: (slave geneve2): making interface the new active one [ 131.440380][ T29] audit: type=1400 audit(1757888340.193:8297): avc: denied { setopt } for pid=8685 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.448010][ T8683] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 131.505859][ T29] audit: type=1400 audit(1757888340.223:8298): avc: denied { connect } for pid=8685 comm="syz.1.2027" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.553772][ T5130] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.566519][ T5130] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.575288][ T5130] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.583638][ T5130] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.591588][ T8688] netlink: 'syz.3.2021': attribute type 14 has an invalid length. [ 131.599857][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2021'. [ 131.600095][ T8689] loop4: detected capacity change from 0 to 512 [ 131.672295][ T29] audit: type=1400 audit(1757888340.423:8299): avc: denied { write } for pid=8690 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.715916][ T8689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.748527][ T8689] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.762296][ T29] audit: type=1400 audit(1757888340.513:8300): avc: denied { read write } for pid=8687 comm="syz.4.2028" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.798508][ T8700] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 131.825401][ T8700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 131.840021][ T8700] bond6: (slave ip6gretap1): making interface the new active one [ 131.849450][ T8700] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 131.868434][ T8700] veth9: entered promiscuous mode [ 132.181444][ T8700] bond6: (slave veth9): Enslaving as an active interface with a down link [ 132.216944][ T8707] erspan0: entered allmulticast mode [ 132.238754][ T8707] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 132.347788][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.589021][ T8720] batman_adv: batadv0: Removing interface: dummy0 [ 132.597947][ T8720] bond0: (slave bond_slave_0): Releasing backup interface [ 132.607923][ T8720] bond0: (slave bond_slave_1): Releasing backup interface [ 132.618938][ T8720] team0: Port device team_slave_0 removed [ 132.654091][ T8720] team0: Port device team_slave_1 removed [ 132.663012][ T8722] loop2: detected capacity change from 0 to 1024 [ 132.670922][ T8720] bond2: (slave ip6gretap1): Releasing active interface [ 132.678461][ T8722] EXT4-fs: Ignoring removed orlov option [ 132.684326][ T8722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.720275][ T8720] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 132.728218][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2038'. [ 132.738190][ T8720] veth1_vlan: left promiscuous mode [ 132.744271][ T8720] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 132.775186][ T6482] IPVS: starting estimator thread 0... [ 132.828883][ T8722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.857997][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.867402][ T8731] IPVS: using max 1728 ests per chain, 86400 per kthread [ 132.905574][ T8739] netlink: 'syz.1.2043': attribute type 4 has an invalid length. [ 133.167664][ T8753] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 133.205790][ T8753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 133.256025][ T8753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 133.304647][ T8753] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 133.347033][ T8753] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 133.416549][ T8768] ip6erspan0: entered promiscuous mode [ 133.435622][ T8768] bond6: (slave ip6erspan0): making interface the new active one [ 133.455183][ T8768] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 133.508503][ T8753] macvlan2: entered promiscuous mode [ 133.520795][ T8753] bond6: entered promiscuous mode [ 133.543262][ T8753] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.578297][ T8753] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 133.630785][ T8753] bond6: left promiscuous mode [ 133.973723][ T8790] netlink: 'syz.2.2057': attribute type 1 has an invalid length. [ 134.011281][ T8789] loop4: detected capacity change from 0 to 8192 [ 134.027859][ T8790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 134.099780][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.109405][ T8792] bond6: (slave batadv0): making interface the new active one [ 134.118494][ T8792] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 134.380447][ T12] ================================================================== [ 134.388582][ T12] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 134.396867][ T12] [ 134.399219][ T12] write to 0xffff88813e99562e of 2 bytes by task 8789 on cpu 0: [ 134.406873][ T12] fat16_ent_put+0x28/0x60 [ 134.411315][ T12] fat_alloc_clusters+0x4ce/0xa80 [ 134.416395][ T12] fat_get_block+0x258/0x5e0 [ 134.421007][ T12] __block_write_begin_int+0x3fd/0xf90 [ 134.426489][ T12] cont_write_begin+0x5fc/0x970 [ 134.431357][ T12] fat_write_begin+0x4f/0xe0 [ 134.435964][ T12] cont_write_begin+0x1ad/0x970 [ 134.440831][ T12] fat_write_begin+0x4f/0xe0 [ 134.445433][ T12] generic_cont_expand_simple+0xb0/0x150 [ 134.451086][ T12] fat_cont_expand+0x3e/0x170 [ 134.455773][ T12] fat_setattr+0x2a5/0x8a0 [ 134.460200][ T12] notify_change+0x809/0x890 [ 134.464796][ T12] do_ftruncate+0x34b/0x450 [ 134.469338][ T12] __x64_sys_ftruncate+0x68/0xc0 [ 134.474290][ T12] x64_sys_call+0x2d52/0x2ff0 [ 134.478986][ T12] do_syscall_64+0xd2/0x200 [ 134.483535][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.489440][ T12] [ 134.491784][ T12] read to 0xffff88813e995600 of 512 bytes by task 12 on cpu 1: [ 134.499336][ T12] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 134.505252][ T12] generic_perform_write+0x2c2/0x490 [ 134.510574][ T12] shmem_file_write_iter+0xc5/0xf0 [ 134.515700][ T12] lo_rw_aio+0x69d/0x760 [ 134.519981][ T12] loop_process_work+0x52d/0xa60 [ 134.524925][ T12] loop_workfn+0x31/0x40 [ 134.529177][ T12] process_scheduled_works+0x4cb/0x9d0 [ 134.534659][ T12] worker_thread+0x582/0x770 [ 134.539276][ T12] kthread+0x489/0x510 [ 134.543359][ T12] ret_from_fork+0x11f/0x1b0 [ 134.547964][ T12] ret_from_fork_asm+0x1a/0x30 [ 134.552744][ T12] [ 134.555074][ T12] Reported by Kernel Concurrency Sanitizer on: [ 134.561233][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.572551][ T12] Tainted: [W]=WARN [ 134.576355][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.586431][ T12] Workqueue: loop4 loop_workfn [ 134.591225][ T12] ==================================================================