last executing test programs: 4.57295939s ago: executing program 2 (id=4388): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) 4.509782675s ago: executing program 2 (id=4391): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f00000001c0)="c995", &(0x7f0000000080)=""/14}, 0x20) 4.484660168s ago: executing program 2 (id=4393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4.483390598s ago: executing program 2 (id=4394): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001400)={'batadv0\x00', 0x0}) r3 = socket$inet6(0xa, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = getpgid(r4) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x80000000, 0x1, 0x9}, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[], 0x48}}, 0x0) r7 = syz_io_uring_setup(0x3665, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0xff39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, 0x0, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_buf(r12, 0x1, 0x1c, 0x0, &(0x7f00000002c0)=0x57) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x4, 0x1, 0xd, 0xb1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7800, 0x8, 0x73ca}}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 3.552179569s ago: executing program 2 (id=4403): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) 3.551501029s ago: executing program 2 (id=4404): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1d, 0x2, 0x6) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 1.981265447s ago: executing program 3 (id=4504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000100f3ff000000002b000000080002"], 0x1c}}, 0x0) 1.966083678s ago: executing program 3 (id=4506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0x120bc2160486775c}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.94313406s ago: executing program 3 (id=4508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0) 1.94287295s ago: executing program 3 (id=4509): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0003", @ANYRES8], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 1.899851354s ago: executing program 3 (id=4512): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x20}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}}, 0x0) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x440, &(0x7f0000000580)=ANY=[@ANYBLOB='size= ,']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f00000000c0)={0x15, {{0x29, 0x0, 0x5000000, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x1, 0x2, 0x68, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x8, 0x8, 0xfffffff8}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) 1.806948412s ago: executing program 3 (id=4513): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 560.954251ms ago: executing program 0 (id=4549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000580)=@newtaction={0x44, 0x31, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x3}, {0x4}, {0xffffffffffffff79}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 560.550571ms ago: executing program 1 (id=4550): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 450.51668ms ago: executing program 0 (id=4551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000500260001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) 421.128863ms ago: executing program 1 (id=4552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x8, 0x13}]}, 0x24}}, 0x0) 369.072598ms ago: executing program 0 (id=4553): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setpriority(0x0, 0x0, 0xffffffffffffffcd) 368.714768ms ago: executing program 1 (id=4554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="1c00000018002507b9409b14ffff00000204be04020506050e02040943", 0x1d, 0x0, 0x0, 0x0) 340.74555ms ago: executing program 0 (id=4556): r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140091d427323b4725458db4560200000000ff81000e224e227f0000017b00092b1e58e6000001e809000000fff7ffef3ac7100003ffffffffffff00000000000003000000deff000000", 0x4e}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 340.45885ms ago: executing program 1 (id=4557): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=')\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4008744b, 0x20000000) 317.488812ms ago: executing program 4 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 303.189353ms ago: executing program 4 (id=4559): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x210}}, 0x0) 290.394454ms ago: executing program 0 (id=4560): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mq_unlink(0x0) 288.309085ms ago: executing program 1 (id=4561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="5401000010001307f68a000000000000ac1414bb000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac1414100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f3000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c2900"], 0x154}}, 0x0) 179.494544ms ago: executing program 4 (id=4562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x40, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 124.581349ms ago: executing program 0 (id=4563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xc0}}, 0x0) 111.48825ms ago: executing program 4 (id=4564): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 22.078348ms ago: executing program 4 (id=4565): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, 0xe) 9.326999ms ago: executing program 4 (id=4566): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) 0s ago: executing program 1 (id=4567): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x44) kernel console output (not intermixed with test programs): 41] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.855928][T13741] Cannot create hsr debugfs directory [ 213.314236][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2051'. [ 213.348182][T13741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.365382][T13741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.379475][T14328] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2052'. [ 213.395201][T13741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.413542][T13741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.438414][T14331] delete_channel: no stack [ 213.528317][T12191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.558746][T13741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.578842][ T4349] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.616561][T14304] ip6gretap0 speed is unknown, defaulting to 1000 [ 213.622090][T13741] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.640572][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.647669][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.668267][ T4349] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.691786][T14304] lo speed is unknown, defaulting to 1000 [ 213.707794][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.714957][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.752022][ T4349] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.821505][ T4349] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.970725][T14304] chnl_net:caif_netlink_parms(): no params data found [ 214.010880][ T4349] bridge_slave_1: left allmulticast mode [ 214.016673][ T4349] bridge_slave_1: left promiscuous mode [ 214.022308][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.049243][ T4349] bridge_slave_0: left allmulticast mode [ 214.054972][ T4349] bridge_slave_0: left promiscuous mode [ 214.060816][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.109052][T14526] tmpfs: Bad value for 'mpol' [ 214.219986][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.232621][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.253844][ T4349] bond0 (unregistering): Released all slaves [ 214.329150][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.336484][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.344619][T14304] bridge_slave_0: entered allmulticast mode [ 214.351216][T14304] bridge_slave_0: entered promiscuous mode [ 214.373115][T13741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.411967][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.419660][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.435229][T14304] bridge_slave_1: entered allmulticast mode [ 214.447213][T14304] bridge_slave_1: entered promiscuous mode [ 214.465995][ T4349] hsr_slave_0: left promiscuous mode [ 214.487047][ T4349] hsr_slave_1: left promiscuous mode [ 214.509231][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.516713][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.537224][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.544790][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.573545][ T4349] veth1_macvtap: left promiscuous mode [ 214.579134][ T4349] veth0_macvtap: left promiscuous mode [ 214.584713][ T4349] veth1_vlan: left promiscuous mode [ 214.590111][ T4349] veth0_vlan: left allmulticast mode [ 214.595434][ T4349] veth0_vlan: left promiscuous mode [ 214.722355][ T4349] team0 (unregistering): Port device team_slave_1 removed [ 214.734568][ T4349] team0 (unregistering): Port device team_slave_0 removed [ 214.852674][T14304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.872682][T14658] __nla_validate_parse: 3 callbacks suppressed [ 214.872695][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 214.911034][T14304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.978350][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 214.987398][T14683] openvswitch: netlink: Flow key attr not present in new flow. [ 214.997322][T14304] team0: Port device team_slave_0 added [ 215.013760][T14304] team0: Port device team_slave_1 added [ 215.075614][T14304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.082822][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.108952][T14304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.157468][T14304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.164480][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.190618][T14304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.230082][T14730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2090'. [ 215.394779][T14304] hsr_slave_0: entered promiscuous mode [ 215.409298][T14304] hsr_slave_1: entered promiscuous mode [ 215.418272][T14304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.427771][T14304] Cannot create hsr debugfs directory [ 215.455302][T13741] veth0_vlan: entered promiscuous mode [ 215.473651][T13741] veth1_vlan: entered promiscuous mode [ 215.536989][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 215.537026][ T29] audit: type=1400 audit(1725744042.782:98221): avc: denied { ioctl } for pid=14843 comm="syz.2.2100" path="socket:[36252]" dev="sockfs" ino=36252 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.579399][T13741] veth0_macvtap: entered promiscuous mode [ 215.613621][T13741] veth1_macvtap: entered promiscuous mode [ 215.632011][T14888] IPv6: Can't replace route, no match found [ 215.671841][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.676353][ T29] audit: type=1400 audit(1725744042.922:98222): avc: denied { create } for pid=14900 comm="syz.2.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.682346][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.712028][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.722550][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.732385][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.743012][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.757377][T14907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2106'. [ 215.767493][ T29] audit: type=1400 audit(1725744042.952:98223): avc: denied { setopt } for pid=14900 comm="syz.2.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.771663][T13741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.809280][T14913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2111'. [ 215.824342][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.834874][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.844729][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.855366][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.865249][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.875806][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.900019][T13741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.936563][T13741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.945812][T13741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.954740][T13741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.963541][T13741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.008179][T14304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.025603][T14304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.034493][T14959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2117'. [ 216.043548][T14959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2117'. [ 216.116904][T14304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.123928][ T29] audit: type=1326 audit(1725744043.362:98224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 216.148176][ T29] audit: type=1326 audit(1725744043.362:98225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 216.172198][ T29] audit: type=1326 audit(1725744043.402:98226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 216.195971][ T29] audit: type=1326 audit(1725744043.402:98227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 216.219557][ T29] audit: type=1326 audit(1725744043.402:98228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 216.243972][ T29] audit: type=1326 audit(1725744043.402:98229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 216.248069][T14304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.267553][ T29] audit: type=1326 audit(1725744043.402:98230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 216.339061][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2122'. [ 216.406046][T14304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.444760][T14304] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.477770][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.484936][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.512843][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.520084][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.577872][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 216.630031][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 216.705578][T14304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.768582][T15066] vlan0: entered allmulticast mode [ 216.773760][T15066] veth0_vlan: entered allmulticast mode [ 216.784780][T15075] bridge1: entered allmulticast mode [ 216.874827][T14304] veth0_vlan: entered promiscuous mode [ 216.892418][T14304] veth1_vlan: entered promiscuous mode [ 216.931149][T14304] veth0_macvtap: entered promiscuous mode [ 216.954968][T14304] veth1_macvtap: entered promiscuous mode [ 216.978965][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.989493][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.999328][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.009955][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.019826][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.030323][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.040185][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.050802][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.066089][T14304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.073352][T15116] netlink: 'syz.1.2148': attribute type 10 has an invalid length. [ 217.106290][T15116] team0: Device macsec0 is of different type [ 217.115465][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.126236][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.136087][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.146526][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.156354][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.166894][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.176736][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.187258][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.198630][T14304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.208562][T14304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.217322][T14304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.226220][T14304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.235011][T14304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.302770][T15145] netlink: 'syz.3.2049': attribute type 3 has an invalid length. [ 217.876099][T15306] tmpfs: Bad value for 'size' [ 218.904271][T15343] syzkaller0: entered promiscuous mode [ 218.909988][T15343] syzkaller0: entered allmulticast mode [ 218.980038][T15343] syzkaller0: create flow: hash 4078484848 index 0 [ 219.047435][T15387] tmpfs: Bad value for 'size' [ 219.086090][T15341] syzkaller0 (unregistered): delete flow: hash 4078484848 index 0 [ 219.341981][T15498] SET target dimension over the limit! [ 219.365735][T15509] netlink: 'syz.0.2233': attribute type 2 has an invalid length. [ 219.473120][T15541] xt_l2tp: missing protocol rule (udp|l2tpip) [ 219.497278][T15544] syzkaller0: create flow: hash 4078484848 index 0 [ 219.512213][T15514] syzkaller0: entered promiscuous mode [ 219.517818][T15514] syzkaller0: entered allmulticast mode [ 219.544682][ T1723] syzkaller0: tun_net_xmit 48 [ 219.578994][T15561] netlink: 'syz.1.2245': attribute type 11 has an invalid length. [ 219.586905][T15561] netlink: 'syz.1.2245': attribute type 5 has an invalid length. [ 219.764582][T15607] tmpfs: Bad value for 'size' [ 219.885635][T15639] __nla_validate_parse: 13 callbacks suppressed [ 219.885649][T15639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2266'. [ 219.926036][T15511] syzkaller0 (unregistered): delete flow: hash 4078484848 index 0 [ 220.108148][T15687] loop4: detected capacity change from 0 to 512 [ 220.140683][T15687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.167243][T15687] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.195231][T13741] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /34/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 220.218134][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 220.227221][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 220.286083][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 220.708572][T15819] netlink: 'syz.2.2282': attribute type 2 has an invalid length. [ 220.716449][T15819] netlink: 'syz.2.2282': attribute type 1 has an invalid length. [ 220.788327][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 220.852664][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 220.900450][T15852] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2291'. [ 220.923827][T15855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2286'. [ 220.932985][T15855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2286'. [ 220.995370][ T29] kauditd_printk_skb: 8622 callbacks suppressed [ 220.995386][ T29] audit: type=1326 audit(1725744048.232:106853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 221.012774][T15866] syzkaller0: create flow: hash 4078484848 index 0 [ 221.051105][T15868] tmpfs: Bad value for 'size' [ 221.054655][ T29] audit: type=1326 audit(1725744048.242:106854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 221.079690][ T29] audit: type=1326 audit(1725744048.242:106855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 221.103549][ T29] audit: type=1326 audit(1725744048.242:106856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 221.127290][ T29] audit: type=1326 audit(1725744048.242:106857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 221.151108][ T29] audit: type=1326 audit(1725744048.242:106858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac17e0b890 code=0x7ffc0000 [ 221.174932][ T29] audit: type=1326 audit(1725744048.242:106859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac17e0b890 code=0x7ffc0000 [ 221.199246][ T29] audit: type=1326 audit(1725744048.242:106860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 221.223024][ T29] audit: type=1326 audit(1725744048.242:106861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 221.259755][T15854] syzkaller0: entered promiscuous mode [ 221.265500][T15854] syzkaller0: entered allmulticast mode [ 221.274375][T15863] netlink: 'syz.2.2293': attribute type 21 has an invalid length. [ 221.335605][ T4351] syzkaller0: tun_net_xmit 48 [ 221.342895][ T29] audit: type=1326 audit(1725744048.542:106862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 221.427980][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'. [ 221.525978][T15851] syzkaller0 (unregistered): delete flow: hash 4078484848 index 0 [ 222.471288][T15967] cgroup: name respecified [ 222.515769][T15977] netlink: 'syz.1.2317': attribute type 5 has an invalid length. [ 222.555301][T15983] netlink: 'syz.1.2320': attribute type 21 has an invalid length. [ 222.730451][T16000] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 223.706009][T16032] openvswitch: netlink: Message has 12 unknown bytes. [ 223.733791][T16036] IPv6: sit1: Disabled Multicast RS [ 223.885533][T16066] netlink: 'syz.3.2356': attribute type 2 has an invalid length. [ 224.055970][T16102] openvswitch: netlink: Multiple metadata blocks provided [ 224.076836][T16104] tmpfs: Bad value for 'size' [ 224.294273][T16166] netlink: 'syz.1.2388': attribute type 1 has an invalid length. [ 224.375046][T16181] tmpfs: Bad value for 'size' [ 224.469847][T16210] gre0: Master is either lo or non-ether device [ 224.571305][T16226] loop3: detected capacity change from 0 to 512 [ 224.615260][T16226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.663171][T16226] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.755831][T14304] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 224.915381][T16289] --map-set only usable from mangle table [ 225.010605][T16294] tmpfs: Bad value for 'size' [ 225.197447][T16324] tmpfs: Bad value for 'size' [ 225.313460][T16350] IPv6: Can't replace route, no match found [ 225.490277][T16371] __nla_validate_parse: 20 callbacks suppressed [ 225.490293][T16371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2444'. [ 225.676803][T16398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2447'. [ 225.685856][T16398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2447'. [ 225.937471][T16408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2454'. [ 226.583610][T16433] cgroup: Invalid name [ 226.656708][T16437] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.766921][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2462'. [ 226.775997][T16441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2462'. [ 226.912732][T16457] netlink: 'syz.1.2470': attribute type 21 has an invalid length. [ 226.936043][T16457] netlink: 'syz.1.2470': attribute type 6 has an invalid length. [ 226.943794][T16457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2470'. [ 226.973197][T16459] netlink: 'syz.2.2471': attribute type 4 has an invalid length. [ 227.077659][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 227.349488][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 227.349503][ T29] audit: type=1400 audit(1725744054.592:107190): avc: denied { getopt } for pid=16518 comm="syz.1.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.389060][T16523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2493'. [ 227.398180][T16523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2493'. [ 227.407978][ T29] audit: type=1400 audit(1725744054.622:107191): avc: denied { ioctl } for pid=16519 comm="syz.2.2491" path="socket:[40962]" dev="sockfs" ino=40962 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.456930][T16527] netlink: 'syz.2.2494': attribute type 3 has an invalid length. [ 227.582103][T16545] netlink: 'syz.1.2503': attribute type 1 has an invalid length. [ 227.646718][ T29] audit: type=1400 audit(1725744054.882:107192): avc: denied { write } for pid=16553 comm="syz.2.2508" name="igmp" dev="proc" ino=4026532444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 227.900732][T16588] netlink: 'syz.1.2524': attribute type 10 has an invalid length. [ 227.910140][T16588] veth1_macvtap: entered allmulticast mode [ 227.916620][T16588] bridge0: port 1(veth1_macvtap) entered blocking state [ 227.923627][T16588] bridge0: port 1(veth1_macvtap) entered disabled state [ 227.932456][T16588] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 228.631435][T16630] netlink: 'syz.0.2537': attribute type 27 has an invalid length. [ 228.791666][T16643] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 228.864078][ T29] audit: type=1400 audit(1725744056.102:107193): avc: denied { setopt } for pid=16644 comm="syz.2.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 229.097002][ T29] audit: type=1400 audit(1725744056.342:107194): avc: denied { getopt } for pid=16694 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 229.661090][ T29] audit: type=1400 audit(1725744056.902:107195): avc: denied { name_connect } for pid=16745 comm="syz.2.2568" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 229.744187][ T29] audit: type=1326 audit(1725744056.982:107196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 229.802742][ T29] audit: type=1326 audit(1725744056.982:107197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 229.826661][ T29] audit: type=1326 audit(1725744056.982:107198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 229.850501][ T29] audit: type=1326 audit(1725744056.982:107199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 230.449133][T13741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.460236][ T4351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.518210][T16793] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.530556][ T4351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.576272][T16793] lo speed is unknown, defaulting to 1000 [ 230.620070][ T4351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.697201][ T4351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.800340][T16793] chnl_net:caif_netlink_parms(): no params data found [ 230.888357][ T4351] bridge_slave_1: left allmulticast mode [ 230.894015][ T4351] bridge_slave_1: left promiscuous mode [ 230.899796][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.921681][ T4351] bridge_slave_0: left allmulticast mode [ 230.927361][ T4351] bridge_slave_0: left promiscuous mode [ 230.933149][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.952835][T16969] __nla_validate_parse: 12 callbacks suppressed [ 230.952849][T16969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2606'. [ 231.198867][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.210216][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.220796][ T4351] bond0 (unregistering): Released all slaves [ 231.235760][T16961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 231.245095][T16978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2608'. [ 231.338087][ T4351] hsr_slave_0: left promiscuous mode [ 231.372965][ T4351] hsr_slave_1: left promiscuous mode [ 231.379525][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.387178][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.397271][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.404737][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.414724][ T4351] veth1_macvtap: left promiscuous mode [ 231.420296][ T4351] veth0_macvtap: left promiscuous mode [ 231.425813][ T4351] veth1_vlan: left promiscuous mode [ 231.431179][ T4351] veth0_vlan: left promiscuous mode [ 231.542654][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 231.639131][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 231.650126][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 231.708721][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2617'. [ 231.719468][T17059] netlink: 'syz.1.2621': attribute type 8 has an invalid length. [ 231.741505][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.749504][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.776187][T16793] bridge_slave_0: entered allmulticast mode [ 231.782781][T16793] bridge_slave_0: entered promiscuous mode [ 231.806992][T16793] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.814057][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.831072][T16793] bridge_slave_1: entered allmulticast mode [ 231.856542][T16793] bridge_slave_1: entered promiscuous mode [ 231.895311][T16793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.923953][T16793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.033674][T17139] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 232.082399][T16793] team0: Port device team_slave_0 added [ 232.083997][T17145] tmpfs: Bad value for 'size' [ 232.094090][T16793] team0: Port device team_slave_1 added [ 232.157062][T16793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.164029][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.190046][T16793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.387630][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 232.387656][ T29] audit: type=1326 audit(1725744059.632:107298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17144 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 232.439099][ T29] audit: type=1326 audit(1725744059.662:107299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17144 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 232.445203][T16793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.469961][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.495919][T16793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.569256][T16793] hsr_slave_0: entered promiscuous mode [ 232.579300][T16793] hsr_slave_1: entered promiscuous mode [ 232.587405][T16793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.599405][T16793] Cannot create hsr debugfs directory [ 232.637284][T17263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.839029][ T29] audit: type=1400 audit(1725744060.072:107300): avc: denied { setopt } for pid=17337 comm="syz.1.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.897139][ T29] audit: type=1326 audit(1725744060.142:107301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 232.973421][ T29] audit: type=1326 audit(1725744060.142:107302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 232.997202][ T29] audit: type=1326 audit(1725744060.142:107303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 233.020950][ T29] audit: type=1326 audit(1725744060.142:107304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 233.045121][ T29] audit: type=1326 audit(1725744060.142:107305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 233.068879][ T29] audit: type=1326 audit(1725744060.142:107306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 233.092586][ T29] audit: type=1326 audit(1725744060.142:107307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 233.133810][T16793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.144809][T16793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.154140][T16793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.172537][T17399] tmpfs: Bad value for 'size' [ 233.186323][T16793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.214407][T17416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2663'. [ 233.299042][T16793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.345739][T16793] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.380453][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.387548][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.433727][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.440891][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.489940][T17453] cgroup: name respecified [ 233.625702][T16793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.635052][T17481] netlink: 696 bytes leftover after parsing attributes in process `syz.0.2681'. [ 233.648185][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2680'. [ 233.877991][T16793] veth0_vlan: entered promiscuous mode [ 233.891440][T16793] veth1_vlan: entered promiscuous mode [ 233.917921][T16793] veth0_macvtap: entered promiscuous mode [ 233.940797][T16793] veth1_macvtap: entered promiscuous mode [ 233.956767][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.967422][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.977442][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.988149][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.998205][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.008650][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.018555][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.029220][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.064124][T16793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.081024][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.091575][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.101410][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.111956][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.122087][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.132641][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.142710][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.153338][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.166838][T16793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.176912][T16793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.185615][T16793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.194534][T16793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.203453][T16793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.208173][T17555] tmpfs: Bad value for 'size' [ 234.275398][T17570] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2704'. [ 234.284524][T17570] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2704'. [ 234.492269][T17609] loop4: detected capacity change from 0 to 512 [ 234.522586][T17609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.546041][T17609] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.587565][T16793] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /3/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.689447][T17639] netlink: 'syz.2.2724': attribute type 1 has an invalid length. [ 234.901953][T17674] netlink: 'syz.1.2740': attribute type 3 has an invalid length. [ 234.932851][T17680] netlink: 'syz.0.2742': attribute type 2 has an invalid length. [ 234.940739][T17680] netlink: 'syz.0.2742': attribute type 9 has an invalid length. [ 234.958109][T17683] netlink: 'syz.1.2743': attribute type 3 has an invalid length. [ 235.040357][T17663] ip6gretap0 speed is unknown, defaulting to 1000 [ 235.058202][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.077790][ T4329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.106680][T17663] lo speed is unknown, defaulting to 1000 [ 235.178563][T17740] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.187478][T17740] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.196286][T17740] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.205121][T17740] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.241782][T17740] geneve2: entered promiscuous mode [ 235.247066][T17740] geneve2: entered allmulticast mode [ 235.268535][T17740] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.277932][T17740] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.286978][T17740] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.295948][T17740] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.349628][ T4329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.445867][ T4329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.486691][T17838] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 235.513803][ T4329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.534183][T17663] chnl_net:caif_netlink_parms(): no params data found [ 235.620333][ T4329] bridge_slave_1: left allmulticast mode [ 235.626093][ T4329] bridge_slave_1: left promiscuous mode [ 235.631869][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.666685][ T4329] bridge_slave_0: left allmulticast mode [ 235.672373][ T4329] bridge_slave_0: left promiscuous mode [ 235.678094][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.800244][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.811935][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.822761][ T4329] bond0 (unregistering): Released all slaves [ 235.946388][T17663] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.953589][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.991821][T17663] bridge_slave_0: entered allmulticast mode [ 236.014298][T17663] bridge_slave_0: entered promiscuous mode [ 236.036594][T17663] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.043686][T17663] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.073123][T17663] bridge_slave_1: entered allmulticast mode [ 236.086630][T17663] bridge_slave_1: entered promiscuous mode [ 236.110011][ T4329] hsr_slave_0: left promiscuous mode [ 236.119775][ T4329] hsr_slave_1: left promiscuous mode [ 236.137641][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.145080][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.155771][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.163347][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.174387][ T4329] veth1_macvtap: left promiscuous mode [ 236.179964][ T4329] veth0_macvtap: left promiscuous mode [ 236.185525][ T4329] veth1_vlan: left promiscuous mode [ 236.190798][ T4329] veth0_vlan: left promiscuous mode [ 236.295335][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 236.307113][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 236.347815][T17949] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 236.387362][T17960] __nla_validate_parse: 9 callbacks suppressed [ 236.387376][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'. [ 236.448799][T17663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.458145][T17983] netlink: 'syz.2.2781': attribute type 2 has an invalid length. [ 236.466202][T17983] netlink: 'syz.2.2781': attribute type 8 has an invalid length. [ 236.474089][T17983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2781'. [ 236.510335][T18004] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2782'. [ 236.519357][T18004] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2782'. [ 236.535394][T17663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.620270][T17663] team0: Port device team_slave_0 added [ 236.642333][T18054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2790'. [ 236.643766][T17663] team0: Port device team_slave_1 added [ 236.699877][T17663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.706889][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.732850][T17663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.769683][T17663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.776670][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.802693][T17663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.822814][T18095] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2798'. [ 236.892219][T18130] xt_CONNSECMARK: invalid mode: 0 [ 236.900445][T17663] hsr_slave_0: entered promiscuous mode [ 236.906928][T17663] hsr_slave_1: entered promiscuous mode [ 236.926121][T17663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.933686][T17663] Cannot create hsr debugfs directory [ 237.067370][T18185] bond2: entered allmulticast mode [ 237.101419][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 237.176161][T18260] netlink: 612 bytes leftover after parsing attributes in process `syz.0.2815'. [ 237.267523][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2819'. [ 237.326485][T18305] netlink: 'syz.1.2823': attribute type 2 has an invalid length. [ 237.329928][T18303] xt_connbytes: Forcing CT accounting to be enabled [ 237.334273][T18305] netlink: 'syz.1.2823': attribute type 9 has an invalid length. [ 237.348806][T18305] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2823'. [ 237.459972][T17663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.484941][T17663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.507355][T17663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.521753][T17663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.594205][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 237.594221][ T29] audit: type=1400 audit(1725744064.832:107576): avc: denied { write } for pid=18357 comm="syz.1.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.660928][T17663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.679695][T17663] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.690347][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.697430][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.721048][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.728191][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.761142][ T29] audit: type=1400 audit(1725744065.002:107577): avc: denied { bind } for pid=18377 comm="syz.0.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 237.821032][T17663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.831475][T17663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.963377][ T29] audit: type=1400 audit(1725744065.202:107578): avc: denied { connect } for pid=18405 comm="syz.0.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.055234][T17663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.085002][T18431] netlink: 'syz.2.2856': attribute type 13 has an invalid length. [ 238.259375][T17663] veth0_vlan: entered promiscuous mode [ 238.285691][T17663] veth1_vlan: entered promiscuous mode [ 238.320026][T17663] veth0_macvtap: entered promiscuous mode [ 238.333482][T17663] veth1_macvtap: entered promiscuous mode [ 238.367032][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.377489][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.387518][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.398112][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.408022][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.418459][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.428307][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.439103][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.464003][T17663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.500410][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.510938][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.520970][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.531752][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.541645][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.552486][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.562569][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.573088][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.588542][T17663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.590921][ T29] audit: type=1326 audit(1725744065.832:107579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18504 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 238.599276][T17663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.628675][T17663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.637630][T17663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.646346][T17663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.705708][ T29] audit: type=1326 audit(1725744065.872:107580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18504 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 238.729572][ T29] audit: type=1326 audit(1725744065.872:107581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18504 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 238.753367][ T29] audit: type=1326 audit(1725744065.872:107582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18504 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 238.777164][ T29] audit: type=1326 audit(1725744065.872:107583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18504 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 238.800923][ T29] audit: type=1326 audit(1725744065.872:107584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18504 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 238.824627][ T29] audit: type=1326 audit(1725744065.872:107585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18504 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 238.861038][T18515] tmpfs: Bad value for 'size' [ 238.988242][T18560] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 239.813602][T18721] xt_nfacct: accounting object `sy' does not exists [ 239.910217][T18734] usb usb4: check_ctrlrecip: process 18734 (syz.3.2947) requesting ep 01 but needs 81 [ 239.919897][T18734] usb usb4: usbfs: process 18734 (syz.3.2947) did not claim interface 0 before use [ 239.989566][T18742] tmpfs: Bad value for 'size' [ 240.162581][T18784] validate_nla: 3 callbacks suppressed [ 240.162596][T18784] netlink: 'syz.0.2964': attribute type 1 has an invalid length. [ 240.175872][T18784] netlink: 'syz.0.2964': attribute type 2 has an invalid length. [ 240.334041][T18816] netlink: 'syz.1.2978': attribute type 1 has an invalid length. [ 240.339959][T18810] loop3: detected capacity change from 0 to 512 [ 240.386301][T18822] netlink: 'syz.1.2981': attribute type 1 has an invalid length. [ 240.416633][T18810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.441042][T18810] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.484499][T18838] tmpfs: Bad value for 'size' [ 240.507292][T17663] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 241.008960][T18927] xt_TCPMSS: Only works on TCP SYN packets [ 241.243367][T18950] netlink: 'syz.2.3017': attribute type 12 has an invalid length. [ 241.280805][T18952] tmpfs: Bad value for 'size' [ 241.450997][T18981] __nla_validate_parse: 22 callbacks suppressed [ 241.451014][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3023'. [ 241.513248][T18989] netlink: 'syz.2.3025': attribute type 32 has an invalid length. [ 241.706678][T19014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3041'. [ 241.803807][T19035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3036'. [ 241.815507][T19037] netlink: 'syz.1.3038': attribute type 2 has an invalid length. [ 241.823276][T19037] netlink: 'syz.1.3038': attribute type 9 has an invalid length. [ 241.831025][T19037] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3038'. [ 242.169819][T19089] program syz.0.3061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.195980][T19085] netlink: 'syz.2.3059': attribute type 21 has an invalid length. [ 242.215978][T19085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3059'. [ 242.226860][T19093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3063'. [ 242.264645][T19097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3065'. [ 242.539960][T19123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3077'. [ 242.717517][T19149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3091'. [ 242.721634][T19151] openvswitch: netlink: IP tunnel TTL not specified. [ 242.907665][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 242.907716][ T29] audit: type=1326 audit(1725744070.152:108103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 242.967098][ T29] audit: type=1326 audit(1725744070.152:108104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 242.990900][ T29] audit: type=1326 audit(1725744070.192:108105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 243.014592][ T29] audit: type=1326 audit(1725744070.192:108106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 243.038322][ T29] audit: type=1326 audit(1725744070.192:108107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 243.061961][ T29] audit: type=1326 audit(1725744070.192:108108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 243.069571][T19183] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3117'. [ 243.085931][ T29] audit: type=1326 audit(1725744070.192:108109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 243.118722][ T29] audit: type=1326 audit(1725744070.192:108110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 243.142371][ T29] audit: type=1326 audit(1725744070.202:108111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 243.166083][ T29] audit: type=1326 audit(1725744070.202:108112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19176 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38193fcef9 code=0x7ffc0000 [ 243.249318][T19190] tmpfs: Bad value for 'size' [ 243.754370][T19283] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 243.820487][T19295] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 244.056778][T19322] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.081740][T19322] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 244.179338][T19340] xt_l2tp: wrong L2TP version: 0 [ 244.185478][T19330] tmpfs: Bad value for 'size' [ 244.845197][T19426] ip6gretap0 speed is unknown, defaulting to 1000 [ 244.870626][T19426] lo speed is unknown, defaulting to 1000 [ 244.884682][T16793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.889261][T19455] xt_HMARK: proto mask must be zero with L3 mode [ 244.904824][ T4329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.959924][ T4329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.019596][ T4329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.123082][ T4329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.137268][T19426] chnl_net:caif_netlink_parms(): no params data found [ 245.207878][T19426] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.214940][T19426] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.222388][T19426] bridge_slave_0: entered allmulticast mode [ 245.228837][T19426] bridge_slave_0: entered promiscuous mode [ 245.246183][T19630] xt_nat: multiple ranges no longer supported [ 245.269072][T19638] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 245.306486][T19426] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.313546][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.336085][T19426] bridge_slave_1: entered allmulticast mode [ 245.342591][T19426] bridge_slave_1: entered promiscuous mode [ 245.409061][ T4329] bridge_slave_1: left allmulticast mode [ 245.414914][ T4329] bridge_slave_1: left promiscuous mode [ 245.420661][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.447644][ T4329] bridge_slave_0: left allmulticast mode [ 245.453323][ T4329] bridge_slave_0: left promiscuous mode [ 245.459100][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.638830][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.670594][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.708101][ T4329] bond0 (unregistering): Released all slaves [ 245.729576][T19426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.758939][T19426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.821318][T19426] team0: Port device team_slave_0 added [ 245.838152][ T4329] hsr_slave_0: left promiscuous mode [ 245.859448][ T4329] hsr_slave_1: left promiscuous mode [ 245.874286][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.881785][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.909911][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.917470][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.950807][ T4329] veth1_macvtap: left promiscuous mode [ 245.956462][ T4329] veth0_macvtap: left promiscuous mode [ 245.962141][ T4329] veth1_vlan: left promiscuous mode [ 245.967503][ T4329] veth0_vlan: left promiscuous mode [ 246.122727][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 246.133661][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 246.175832][T19426] team0: Port device team_slave_1 added [ 246.183342][T19763] validate_nla: 1 callbacks suppressed [ 246.183354][T19763] netlink: 'syz.2.3239': attribute type 2 has an invalid length. [ 246.236557][T19426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.243507][T19426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.269422][T19426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.292860][T19426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.299912][T19426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.326104][T19426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.375027][T19426] hsr_slave_0: entered promiscuous mode [ 246.383379][T19426] hsr_slave_1: entered promiscuous mode [ 246.397652][T19426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.405213][T19426] Cannot create hsr debugfs directory [ 246.528249][T19886] tmpfs: Bad value for 'size' [ 246.690604][T19962] netlink: 'syz.0.3263': attribute type 32 has an invalid length. [ 246.737562][T19980] __nla_validate_parse: 17 callbacks suppressed [ 246.737577][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3266'. [ 246.819102][T19426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.839092][T19426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.854057][T19426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.876930][T19426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.920843][T20024] netlink: 'syz.0.3275': attribute type 1 has an invalid length. [ 246.928654][T20024] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.3275'. [ 246.947601][T20028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3273'. [ 247.003632][T20038] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3279'. [ 247.008698][T19426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.052961][T19426] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.079078][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.086566][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.114691][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.121833][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.281804][T20074] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 247.292839][T19426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.317935][T20082] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 247.415773][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'. [ 247.497451][T20109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3298'. [ 247.573880][T19426] veth0_vlan: entered promiscuous mode [ 247.602326][T19426] veth1_vlan: entered promiscuous mode [ 247.621337][T20133] netlink: 696 bytes leftover after parsing attributes in process `syz.2.3303'. [ 247.640891][T19426] veth0_macvtap: entered promiscuous mode [ 247.649420][T19426] veth1_macvtap: entered promiscuous mode [ 247.655862][T20137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3304'. [ 247.664912][T20137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3304'. [ 247.695250][T19426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.705743][T19426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.715613][T19426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.726086][T19426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.735937][T19426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.746378][T19426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.756199][T19426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.766760][T19426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.778307][T19426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.802171][T19426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.812648][T19426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.822537][T19426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.832969][T19426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.842773][T19426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.853309][T19426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.863308][T19426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.873862][T19426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.937461][T19426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.948649][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 247.948662][ T29] audit: type=1400 audit(1725744075.192:108753): avc: denied { ioctl } for pid=20158 comm="syz.2.3310" path="pid:[4026532410]" dev="nsfs" ino=4026532410 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.977588][T19426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.989252][T19426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.998039][T19426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.006773][T19426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.025106][ T29] audit: type=1326 audit(1725744075.262:108754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 248.049158][ T29] audit: type=1326 audit(1725744075.262:108755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 248.070521][T20163] tmpfs: Bad value for 'size' [ 248.073007][ T29] audit: type=1326 audit(1725744075.262:108756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 248.079525][T20165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3313'. [ 248.101404][ T29] audit: type=1326 audit(1725744075.262:108757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 248.134513][ T29] audit: type=1326 audit(1725744075.262:108758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 248.158469][ T29] audit: type=1326 audit(1725744075.262:108759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac17e0b890 code=0x7ffc0000 [ 248.182226][ T29] audit: type=1326 audit(1725744075.262:108760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac17e0b890 code=0x7ffc0000 [ 248.206390][ T29] audit: type=1326 audit(1725744075.262:108761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 248.230348][ T29] audit: type=1326 audit(1725744075.262:108762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20160 comm="syz.1.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 248.258383][T20174] IPv6: NLM_F_REPLACE set, but no existing node found! [ 248.757831][T20279] siw: device registration error -23 [ 249.022697][T20320] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 249.328492][T20395] tmpfs: Bad value for 'mpol' [ 249.447214][T20408] tmpfs: Bad value for 'size' [ 249.549033][T20436] batadv0: entered promiscuous mode [ 249.582100][T20443] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 250.377111][T20530] netlink: 'syz.0.3432': attribute type 3 has an invalid length. [ 250.385053][T20530] netlink: 'syz.0.3432': attribute type 3 has an invalid length. [ 250.721022][T20559] ip6gretap0 speed is unknown, defaulting to 1000 [ 250.736679][T20559] lo speed is unknown, defaulting to 1000 [ 250.789675][T17663] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.826826][ T4347] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.854499][T20559] chnl_net:caif_netlink_parms(): no params data found [ 250.884853][ T4347] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.950745][T20718] nft_compat: unsupported protocol 0 [ 250.966203][T20708] tmpfs: Bad value for 'size' [ 250.977736][ T4347] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.989911][T20742] netlink: 'syz.2.3466': attribute type 3 has an invalid length. [ 251.060439][ T4347] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.094028][T20559] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.101300][T20559] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.110935][T20559] bridge_slave_0: entered allmulticast mode [ 251.118664][T20559] bridge_slave_0: entered promiscuous mode [ 251.127733][T20559] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.134891][T20559] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.143316][T20559] bridge_slave_1: entered allmulticast mode [ 251.150086][T20559] bridge_slave_1: entered promiscuous mode [ 251.165372][T20798] netlink: 'syz.2.3475': attribute type 8 has an invalid length. [ 251.220286][T20826] netlink: 'syz.1.3483': attribute type 1 has an invalid length. [ 251.277870][T20559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.303538][ T4347] bridge_slave_1: left allmulticast mode [ 251.309357][ T4347] bridge_slave_1: left promiscuous mode [ 251.315026][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.421253][ T4347] bridge_slave_0: left allmulticast mode [ 251.427058][ T4347] bridge_slave_0: left promiscuous mode [ 251.432728][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.608200][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.618565][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.631688][ T4347] bond0 (unregistering): Released all slaves [ 251.639991][ T4347] bond1 (unregistering): Released all slaves [ 251.649162][T20559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.689244][T20950] netlink: 'syz.1.3508': attribute type 13 has an invalid length. [ 251.709201][T20559] team0: Port device team_slave_0 added [ 251.717198][T20559] team0: Port device team_slave_1 added [ 251.751485][T20559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.758500][T20559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.784547][T20559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.797182][T20972] __nla_validate_parse: 21 callbacks suppressed [ 251.797195][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 251.812487][T20972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3509'. [ 251.828943][ T4347] hsr_slave_0: left promiscuous mode [ 251.835578][ T4347] hsr_slave_1: left promiscuous mode [ 251.842485][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.849998][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.861763][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.869240][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.879482][ T4347] veth1_macvtap: left promiscuous mode [ 251.884972][ T4347] veth0_macvtap: left promiscuous mode [ 251.890549][ T4347] veth1_vlan: left promiscuous mode [ 251.895765][ T4347] veth0_vlan: left promiscuous mode [ 251.998677][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 252.008779][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 252.042410][T20559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.049445][T20559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.075634][T20559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.117582][T21002] netlink: 'syz.0.3513': attribute type 21 has an invalid length. [ 252.166072][T20559] hsr_slave_0: entered promiscuous mode [ 252.178276][T20559] hsr_slave_1: entered promiscuous mode [ 252.195938][T20559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.204687][T21055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3524'. [ 252.207449][T20559] Cannot create hsr debugfs directory [ 252.252628][T21071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3527'. [ 252.333261][T21112] netlink: 'syz.2.3530': attribute type 32 has an invalid length. [ 252.344004][T21105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3531'. [ 252.344928][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'. [ 252.485986][T21170] netlink: 'syz.0.3539': attribute type 64 has an invalid length. [ 252.692813][T20559] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.721865][T21247] tmpfs: Bad value for 'size' [ 252.731551][T20559] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.758018][T20559] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.776710][T20559] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.867470][T20559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.884483][T21295] netlink: 'syz.1.3572': attribute type 30 has an invalid length. [ 252.924971][T20559] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.932778][T21338] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3574'. [ 252.943659][T21289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3570'. [ 252.968124][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.975222][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.003444][T20559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.013837][T20559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.032691][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.039884][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.082197][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 253.082211][ T29] audit: type=1326 audit(1725744080.322:109134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 253.120359][ T29] audit: type=1326 audit(1725744080.362:109135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 253.144256][ T29] audit: type=1326 audit(1725744080.362:109136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 253.150248][T21361] tmpfs: Bad value for 'size' [ 253.168091][ T29] audit: type=1326 audit(1725744080.362:109137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 253.196542][ T29] audit: type=1326 audit(1725744080.362:109138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 253.220326][ T29] audit: type=1326 audit(1725744080.362:109139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 253.244033][ T29] audit: type=1326 audit(1725744080.362:109140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 253.267994][ T29] audit: type=1326 audit(1725744080.362:109141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23d98bb890 code=0x7ffc0000 [ 253.291711][ T29] audit: type=1326 audit(1725744080.362:109142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23d98bb890 code=0x7ffc0000 [ 253.315420][ T29] audit: type=1326 audit(1725744080.362:109143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21360 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 253.347793][T21356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3578'. [ 253.443441][T20559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.495726][T21429] xt_socket: unknown flags 0x50 [ 253.501661][T21422] vhci_hcd: invalid port number 61 [ 253.506970][T21422] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 253.596184][T21446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3590'. [ 253.749177][T20559] veth0_vlan: entered promiscuous mode [ 253.780134][T20559] veth1_vlan: entered promiscuous mode [ 253.808042][T21500] netlink: 'syz.1.3602': attribute type 1 has an invalid length. [ 253.819313][T20559] veth0_macvtap: entered promiscuous mode [ 253.828092][T20559] veth1_macvtap: entered promiscuous mode [ 253.849959][T20559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.860550][T20559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.870540][T20559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.881174][T20559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.891092][T20559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.901570][T20559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.911478][T20559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.922063][T20559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.936974][T20559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.945630][T20559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.956148][T20559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.966203][T20559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.976980][T20559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.987109][T20559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.997989][T20559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.007912][T20559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.018477][T20559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.030413][T20559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.055529][T21518] team0: Port device wg2 removed [ 254.094391][T20559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.103277][T20559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.112037][T20559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.120764][T20559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.186853][T21541] netlink: zone id is out of range [ 254.192085][T21541] netlink: zone id is out of range [ 254.197293][T21541] netlink: zone id is out of range [ 254.202477][T21541] netlink: zone id is out of range [ 254.207778][T21541] netlink: zone id is out of range [ 254.437210][T21586] tmpfs: Bad value for 'size' [ 254.613762][T21648] netlink: 'syz.0.3662': attribute type 2 has an invalid length. [ 254.621589][T21648] netlink: 'syz.0.3662': attribute type 8 has an invalid length. [ 254.673783][T21660] tmpfs: Bad value for 'size' [ 254.744795][T21682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 254.751395][T21682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.759196][T21682] vhci_hcd vhci_hcd.0: Device attached [ 254.805550][T21684] vhci_hcd: connection closed [ 254.805881][ T4333] vhci_hcd: stop threads [ 254.815035][ T4333] vhci_hcd: release socket [ 254.819575][ T4333] vhci_hcd: disconnect device [ 254.840099][T21695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.031255][T21787] netlink: 'syz.2.3690': attribute type 30 has an invalid length. [ 255.100732][T21798] wireguard0: entered promiscuous mode [ 255.262530][T21821] tmpfs: Bad value for 'size' [ 255.273211][T21813] ip6gretap0 speed is unknown, defaulting to 1000 [ 255.314637][T21813] lo speed is unknown, defaulting to 1000 [ 255.314677][T21829] ip6gretap0 speed is unknown, defaulting to 1000 [ 255.377735][T21829] lo speed is unknown, defaulting to 1000 [ 255.563805][T21913] tmpfs: Bad value for 'size' [ 255.987802][T22023] cgroup: noprefix used incorrectly [ 256.075759][T22046] tmpfs: Bad value for 'size' [ 256.327532][T22118] tmpfs: Bad value for 'size' [ 256.527848][T22179] bond3: entered promiscuous mode [ 256.532925][T22179] bond3: entered allmulticast mode [ 256.538521][T22179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.812252][T22293] __nla_validate_parse: 22 callbacks suppressed [ 256.812266][T22293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3823'. [ 256.851420][T22296] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3826'. [ 257.016348][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3839'. [ 257.078110][T22352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3845'. [ 257.157890][T22362] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 257.184875][T22374] validate_nla: 2 callbacks suppressed [ 257.184890][T22374] netlink: 'syz.4.3853': attribute type 27 has an invalid length. [ 257.407967][T22383] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in; [ 257.407967][T22383] program syz.3.3856 not setting count and/or reply_len properly [ 257.443349][T22374] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.450596][T22374] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.769628][T22374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.807670][T22374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.899080][T22408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3865'. [ 257.908173][T22408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3865'. [ 258.138050][T22374] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.147018][T22374] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.156119][T22374] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.164989][T22374] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.259990][ T29] kauditd_printk_skb: 879 callbacks suppressed [ 258.260004][ T29] audit: type=1400 audit(1725744085.502:110023): avc: denied { ioctl } for pid=22412 comm="syz.4.3866" path="socket:[53033]" dev="sockfs" ino=53033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.301405][ T29] audit: type=1400 audit(1725744085.542:110024): avc: denied { module_request } for pid=22412 comm="syz.4.3866" kmod="net-pf-10-proto-0-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 258.344167][T22413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3866'. [ 258.345433][ T29] audit: type=1400 audit(1725744085.582:110025): avc: denied { create } for pid=22412 comm="syz.4.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.466224][ T29] audit: type=1400 audit(1725744085.712:110026): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 258.489983][ T29] audit: type=1400 audit(1725744085.712:110027): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 258.549489][ T29] audit: type=1400 audit(1725744085.792:110028): avc: denied { ioctl } for pid=22441 comm="syz.0.3872" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 258.602108][T22448] tmpfs: Bad value for 'nr_inodes' [ 258.607475][ T29] audit: type=1400 audit(1725744085.842:110029): avc: denied { mounton } for pid=22446 comm="syz.1.3874" path="/1010/file0" dev="tmpfs" ino=5332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 258.660655][T22457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3879'. [ 258.661328][ T29] audit: type=1400 audit(1725744085.902:110030): avc: denied { create } for pid=22458 comm="syz.0.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.695583][ T29] audit: type=1400 audit(1725744085.922:110031): avc: denied { bind } for pid=22458 comm="syz.0.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.717311][ T29] audit: type=1400 audit(1725744085.962:110032): avc: denied { append } for pid=22461 comm="syz.1.3880" name="001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.759997][T22470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3884'. [ 258.819420][T22485] netlink: 'syz.1.3891': attribute type 1 has an invalid length. [ 258.978615][T22494] mmap: syz.3.3894 (22494): VmData 17469440 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 259.161042][T22535] netlink: 'syz.3.3911': attribute type 10 has an invalid length. [ 259.176978][T22535] bridge0: port 3(netdevsim1) entered blocking state [ 259.183793][T22535] bridge0: port 3(netdevsim1) entered disabled state [ 259.205546][T22535] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 259.214004][T22535] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 259.226644][T22535] bridge0: port 3(netdevsim1) entered blocking state [ 259.233394][T22535] bridge0: port 3(netdevsim1) entered forwarding state [ 259.407766][T22591] tracefs: Bad value for 'uid' [ 259.412673][T22591] tracefs: Bad value for 'uid' [ 259.439586][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3938'. [ 259.492470][T22615] IPv6: Can't replace route, no match found [ 259.523679][T22624] usb usb9: usbfs: process 22624 (syz.3.3946) did not claim interface 0 before use [ 259.708915][T22667] tmpfs: Bad value for 'size' [ 259.807228][T22701] loop3: detected capacity change from 0 to 512 [ 259.841046][T22701] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.877210][T22701] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.3972: iget: bad i_size value: -6917529027641081756 [ 259.881603][T22714] netlink: 'syz.0.3975': attribute type 153 has an invalid length. [ 259.902442][T22701] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3972: couldn't read orphan inode 17 (err -117) [ 259.940503][T22701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.016543][T20559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.237089][T22756] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.3983' resets device [ 260.529523][T22821] loop4: detected capacity change from 0 to 2048 [ 260.551529][T22821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.583933][T19426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.643558][T22837] tmpfs: Bad value for 'size' [ 260.788134][T22878] syz.4.4018[22878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.788312][T22878] syz.4.4018[22878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.162179][T22946] No control pipe specified [ 261.234035][T22958] Invalid ELF section header size [ 261.348238][T22980] random: crng reseeded on system resumption [ 261.667691][T23017] tmpfs: Bad value for 'size' [ 261.932840][T23084] __nla_validate_parse: 4 callbacks suppressed [ 261.932886][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4080'. [ 261.991754][T23089] tmpfs: Bad value for 'size' [ 262.178284][T23151] ip6gretap0 speed is unknown, defaulting to 1000 [ 262.186831][T23151] lo speed is unknown, defaulting to 1000 [ 262.291514][T23191] tmpfs: Bad value for 'size' [ 262.429123][T23233] syz.1.4118[23233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.429217][T23233] syz.1.4118[23233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.512764][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'. [ 262.533500][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'. [ 262.575202][T23246] tmpfs: Bad value for 'size' [ 262.631291][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4129'. [ 262.851361][T23320] tmpfs: Bad value for 'size' [ 262.935628][T23347] netlink: 'syz.1.4150': attribute type 27 has an invalid length. [ 263.263333][T23354] loop4: detected capacity change from 0 to 512 [ 263.273616][T23358] loop3: detected capacity change from 0 to 512 [ 263.291957][T23358] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4154: bg 0: block 5: invalid block bitmap [ 263.312326][T23354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 263.325260][T23358] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 263.326005][T23354] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.337137][T23358] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4154: invalid indirect mapped block 3 (level 2) [ 263.362211][ T29] kauditd_printk_skb: 969 callbacks suppressed [ 263.362225][ T29] audit: type=1400 audit(1725744090.602:111002): avc: denied { write } for pid=23353 comm="syz.4.4153" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.362292][T23354] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 263.362316][ T29] audit: type=1400 audit(1725744090.602:111003): avc: denied { remove_name } for pid=23353 comm="syz.4.4153" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.368589][T23354] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 263.390943][ T29] audit: type=1400 audit(1725744090.602:111004): avc: denied { rename } for pid=23353 comm="syz.4.4153" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 263.401243][T23354] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.4153: Failed to acquire dquot type 0 [ 263.424072][ T29] audit: type=1400 audit(1725744090.602:111005): avc: denied { add_name } for pid=23353 comm="syz.4.4153" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.437474][T23358] EXT4-fs (loop3): 1 orphan inode deleted [ 263.516138][T23358] EXT4-fs (loop3): 1 truncate cleaned up [ 263.523837][T19426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 263.533286][T23358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.585140][T20559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.636098][ T29] audit: type=1400 audit(1725744090.872:111006): avc: denied { read } for pid=23379 comm="syz.3.4156" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 263.659330][ T29] audit: type=1400 audit(1725744090.872:111007): avc: denied { open } for pid=23379 comm="syz.3.4156" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 263.683204][ T29] audit: type=1400 audit(1725744090.882:111008): avc: denied { ioctl } for pid=23379 comm="syz.3.4156" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 263.896288][T23347] veth0_vlan: left allmulticast mode [ 263.901636][T23347] vlan0: left allmulticast mode [ 263.939932][T23347] veth1_macvtap: left promiscuous mode [ 263.945493][T23347] veth1_macvtap: left allmulticast mode [ 263.996369][T23347] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.004801][T23347] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.013258][T23347] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.021684][T23347] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.052677][T23347] bond1: left allmulticast mode [ 264.079696][T23347] wireguard0: left promiscuous mode [ 264.095370][T23347] bond3: left promiscuous mode [ 264.100183][T23347] bond3: left allmulticast mode [ 264.115947][ T3337] ip6gretap0 speed is unknown, defaulting to 1000 [ 264.122397][T23384] netlink: 'syz.4.4160': attribute type 2 has an invalid length. [ 264.130160][T23384] netlink: 'syz.4.4160': attribute type 8 has an invalid length. [ 264.137982][T23384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4160'. [ 264.154458][ T29] audit: type=1326 audit(1725744091.392:111009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23390 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac17e0cef9 code=0x7ffc0000 [ 264.221918][T23402] random: crng reseeded on system resumption [ 264.258635][T23409] loop4: detected capacity change from 0 to 1764 [ 264.301378][T23409] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 264.311185][T23410] tmpfs: Bad value for 'size' [ 264.418817][T23451] netlink: 'syz.0.4176': attribute type 27 has an invalid length. [ 264.447921][T23462] loop3: detected capacity change from 0 to 128 [ 264.803855][T23517] tmpfs: Bad value for 'size' [ 264.840730][T23451] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.847977][T23451] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.087638][T23451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.102648][T23547] 9pnet_fd: Insufficient options for proto=fd [ 265.116409][T23451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.421174][T23451] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.430299][T23451] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.433260][T23551] loop3: detected capacity change from 0 to 128 [ 265.439476][T23451] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.454598][T23451] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.467643][T23551] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.541759][T23451] bridge1: left promiscuous mode [ 265.546890][T23451] bridge1: left allmulticast mode [ 265.980058][T23655] loop3: detected capacity change from 0 to 2048 [ 266.027417][T23655] loop3: p1 < > p4 [ 266.032432][T23655] loop3: p4 size 8388608 extends beyond EOD, truncated [ 266.095007][T23689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4245'. [ 266.373662][T23759] loop3: detected capacity change from 0 to 512 [ 266.391070][T23759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.413542][T23759] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.430259][T23774] ip6gretap0 speed is unknown, defaulting to 1000 [ 266.438058][T23774] lo speed is unknown, defaulting to 1000 [ 266.447034][T20559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.532237][T23809] ip6gretap0 speed is unknown, defaulting to 1000 [ 266.545236][T23809] lo speed is unknown, defaulting to 1000 [ 266.697529][T23860] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 266.746655][T23864] loop4: detected capacity change from 0 to 1024 [ 266.784792][T23864] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 266.894627][T23901] loop4: detected capacity change from 0 to 512 [ 266.907475][T23901] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.918769][T23901] EXT4-fs (loop4): 1 truncate cleaned up [ 266.926714][T23901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.955696][T19426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.998324][T23923] tmpfs: Bad value for 'size' [ 267.043338][T23936] loop4: detected capacity change from 0 to 2048 [ 267.120288][T23936] Alternate GPT is invalid, using primary GPT. [ 267.126667][T23936] loop4: p1 p2 p3 [ 267.197567][T17376] udevd[17376]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 267.203188][T17375] udevd[17375]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 267.212186][T16939] udevd[16939]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 267.235381][T23997] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 267.336583][T24020] tmpfs: Bad value for 'size' [ 267.359737][T24034] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 267.478901][T24041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4339'. [ 267.488190][T24041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4339'. [ 268.420252][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 268.420273][ T29] audit: type=1326 audit(1725744095.662:111475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f1fbcef9 code=0x7ffc0000 [ 268.450235][ T29] audit: type=1326 audit(1725744095.662:111476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f1fbcef9 code=0x7ffc0000 [ 268.494964][ T29] audit: type=1326 audit(1725744095.722:111477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f07f1fbcef9 code=0x7ffc0000 [ 268.518629][ T29] audit: type=1326 audit(1725744095.722:111478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f1fbcef9 code=0x7ffc0000 [ 268.542430][ T29] audit: type=1326 audit(1725744095.722:111479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f1fbcef9 code=0x7ffc0000 [ 268.566117][ T29] audit: type=1326 audit(1725744095.722:111480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f07f1fbcef9 code=0x7ffc0000 [ 268.589905][ T29] audit: type=1326 audit(1725744095.722:111481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f1fbcef9 code=0x7ffc0000 [ 268.613715][ T29] audit: type=1326 audit(1725744095.722:111482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f1fbcef9 code=0x7ffc0000 [ 268.638414][ T29] audit: type=1326 audit(1725744095.862:111483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24102 comm="syz.0.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 268.662203][ T29] audit: type=1326 audit(1725744095.862:111484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24102 comm="syz.0.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 268.688942][T24107] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4364'. [ 268.910733][T24142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'. [ 269.043315][T24152] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4379'. [ 269.463869][T24205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4397'. [ 269.566367][T24214] loop4: detected capacity change from 0 to 1024 [ 269.573552][T24118] syz.0.4368 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 269.587737][T24118] CPU: 0 UID: 0 PID: 24118 Comm: syz.0.4368 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 269.598548][T24118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 269.606364][T24214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.608617][T24118] Call Trace: [ 269.608626][T24118] [ 269.608635][T24118] dump_stack_lvl+0xf2/0x150 [ 269.626053][T24118] dump_stack+0x15/0x20 [ 269.630279][T24118] dump_header+0x83/0x2d0 [ 269.634676][T24118] oom_kill_process+0x341/0x4c0 [ 269.639627][T24118] out_of_memory+0x9af/0xbe0 [ 269.644470][T24118] ? __rcu_read_unlock+0x4e/0x70 [ 269.649414][T24118] mem_cgroup_out_of_memory+0x13e/0x190 [ 269.654991][T24118] try_charge_memcg+0x51b/0x810 [ 269.660023][T24118] obj_cgroup_charge_pages+0xbd/0x1a0 [ 269.665383][T24118] __memcg_kmem_charge_page+0x9d/0x170 [ 269.670832][T24118] __alloc_pages_noprof+0x1bc/0x360 [ 269.676118][T24118] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 269.681496][T24118] alloc_pages_noprof+0xe1/0x100 [ 269.686423][T24118] __vmalloc_node_range_noprof+0x736/0xec0 [ 269.686629][T24214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.692334][T24118] __kvmalloc_node_noprof+0x121/0x170 [ 269.709719][T24118] ? ip_set_alloc+0x1f/0x30 [ 269.714205][T24118] ip_set_alloc+0x1f/0x30 [ 269.718611][T24118] hash_netiface_create+0x273/0x730 [ 269.723897][T24118] ? __nla_parse+0x40/0x60 [ 269.728399][T24118] ? __pfx_hash_netiface_create+0x10/0x10 [ 269.734317][T24118] ip_set_create+0x359/0x8a0 [ 269.737003][T24214] EXT4-fs error (device loop4): __ext4_new_inode:1070: comm syz.4.4400: reserved inode found cleared - inode=18 [ 269.738916][T24118] ? strnstr+0xf1/0x100 [ 269.754960][T24118] ? __nla_parse+0x40/0x60 [ 269.759411][T24118] nfnetlink_rcv_msg+0x4a9/0x570 [ 269.764369][T24118] netlink_rcv_skb+0x12c/0x230 [ 269.769174][T24118] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 269.774686][T24118] nfnetlink_rcv+0x16c/0x15e0 [ 269.779382][T24118] ? _raw_spin_unlock_bh+0x36/0x40 [ 269.784527][T24118] ? selinux_nlmsg_lookup+0x228/0x800 [ 269.789890][T24118] ? __rcu_read_unlock+0x34/0x70 [ 269.794969][T24118] ? __netlink_lookup+0x253/0x290 [ 269.800060][T24118] netlink_unicast+0x599/0x670 [ 269.804842][T24118] netlink_sendmsg+0x5cc/0x6e0 [ 269.809596][T24118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.814946][T24118] __sock_sendmsg+0x140/0x180 [ 269.819614][T24118] ____sys_sendmsg+0x312/0x410 [ 269.824381][T24118] __sys_sendmsg+0x1e9/0x280 [ 269.829008][T24118] ? futex_wait+0x18e/0x1c0 [ 269.833568][T24118] __x64_sys_sendmsg+0x46/0x50 [ 269.838413][T24118] x64_sys_call+0x2689/0x2d60 [ 269.843088][T24118] do_syscall_64+0xc9/0x1c0 [ 269.847599][T24118] ? clear_bhb_loop+0x55/0xb0 [ 269.852257][T24118] ? clear_bhb_loop+0x55/0xb0 [ 269.856959][T24118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.862844][T24118] RIP: 0033:0x7f23d98bcef9 [ 269.867332][T24118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.887453][T24118] RSP: 002b:00007f23d8537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.895847][T24118] RAX: ffffffffffffffda RBX: 00007f23d9a75f80 RCX: 00007f23d98bcef9 [ 269.903887][T24118] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 269.911846][T24118] RBP: 00007f23d992f046 R08: 0000000000000000 R09: 0000000000000000 [ 269.919855][T24118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.927859][T24118] R13: 0000000000000000 R14: 00007f23d9a75f80 R15: 00007ffcb0ae9908 [ 269.935900][T24118] [ 269.938959][T24118] memory: usage 307200kB, limit 307200kB, failcnt 219 [ 269.941450][T19426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.945726][T24118] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0 [ 269.945740][T24118] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 269.970233][T24118] Memory cgroup stats for /syz0: [ 269.973927][T24118] cache 69632 [ 269.982247][T24118] rss 0 [ 269.985047][T24118] shmem 0 [ 269.988020][T24118] mapped_file 69632 [ 269.991827][T24118] dirty 69632 [ 269.995099][T24118] writeback 0 [ 269.998464][T24118] workingset_refault_anon 394 [ 270.003154][T24118] workingset_refault_file 2061 [ 270.007919][T24118] swap 258048 [ 270.011179][T24118] swapcached 8192 [ 270.014788][T24118] pgpgin 299459 [ 270.018265][T24118] pgpgout 299440 [ 270.021797][T24118] pgfault 358220 [ 270.025320][T24118] pgmajfault 85 [ 270.028780][T24118] inactive_anon 0 [ 270.032419][T24118] active_anon 8192 [ 270.036157][T24118] inactive_file 0 [ 270.039775][T24118] active_file 69632 [ 270.043565][T24118] unevictable 0 [ 270.047049][T24118] hierarchical_memory_limit 314572800 [ 270.052511][T24118] hierarchical_memsw_limit 9223372036854771712 [ 270.058773][T24118] total_cache 69632 [ 270.062564][T24118] total_rss 0 [ 270.065842][T24118] total_shmem 0 [ 270.069319][T24118] total_mapped_file 69632 [ 270.073667][T24118] total_dirty 69632 [ 270.077495][T24118] total_writeback 0 [ 270.081337][T24118] total_workingset_refault_anon 394 [ 270.086556][T24118] total_workingset_refault_file 2061 [ 270.091898][T24118] total_swap 258048 [ 270.095698][T24118] total_swapcached 8192 [ 270.099881][T24118] total_pgpgin 299459 [ 270.103990][T24118] total_pgpgout 299440 [ 270.108068][T24118] total_pgfault 358247 [ 270.112181][T24118] total_pgmajfault 85 [ 270.116163][T24118] total_inactive_anon 0 [ 270.120305][T24118] total_active_anon 8192 [ 270.124524][T24118] total_inactive_file 0 [ 270.128802][T24118] total_active_file 69632 [ 270.133159][T24118] total_unevictable 0 [ 270.137166][T24118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4368,pid=24117,uid=0 [ 270.152542][T24118] Memory cgroup out of memory: Killed process 24117 (syz.0.4368) total-vm:88984kB, anon-rss:568kB, file-rss:15908kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 270.177077][T24225] loop4: detected capacity change from 0 to 1024 [ 270.191307][T24225] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 270.203310][T24225] JBD2: no valid journal superblock found [ 270.209084][T24225] EXT4-fs (loop4): Could not load journal inode [ 270.532464][T24266] program syz.4.4417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.603428][T24275] netlink: 'syz.4.4421': attribute type 3 has an invalid length. [ 270.611198][T24275] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4421'. [ 270.626598][T24275] netlink: 'syz.4.4421': attribute type 3 has an invalid length. [ 270.639689][T24281] netlink: 'syz.0.4423': attribute type 33 has an invalid length. [ 270.647571][T24281] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4423'. [ 270.827618][T24307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4433'. [ 270.859308][T24320] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 270.865956][T24320] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 270.873719][T24320] vhci_hcd vhci_hcd.0: Device attached [ 270.882214][T24321] vhci_hcd: connection closed [ 270.882423][ T4329] vhci_hcd: stop threads [ 270.891526][ T4329] vhci_hcd: release socket [ 270.895974][ T4329] vhci_hcd: disconnect device [ 270.929257][T24327] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 270.967910][T24332] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.080823][T24349] program syz.3.4452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.226511][T24374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4464'. [ 271.432649][T24408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 271.471845][T24419] netlink: 'syz.4.4482': attribute type 33 has an invalid length. [ 271.520618][T24431] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 271.531176][T24431] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 271.699124][T24463] syz.0.4495[24463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.699209][T24463] syz.0.4495[24463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.765785][T24441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.793743][T24441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.910186][T24500] tmpfs: Bad value for 'size' [ 272.377383][T24566] tmpfs: Bad value for 'size' [ 272.545964][T24608] pimreg: entered allmulticast mode [ 272.556794][T24608] dvmrp5: entered allmulticast mode [ 272.565748][T24608] pimreg: left allmulticast mode [ 272.566252][T24614] syz.1.4539[24614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.570815][T24614] syz.1.4539[24614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.570877][T24608] dvmrp5: left allmulticast mode [ 272.799855][T24527] syz.3.4513 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 272.814016][T24527] CPU: 1 UID: 0 PID: 24527 Comm: syz.3.4513 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 272.824873][T24527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 272.835009][T24527] Call Trace: [ 272.838277][T24527] [ 272.841264][T24527] dump_stack_lvl+0xf2/0x150 [ 272.845848][T24527] dump_stack+0x15/0x20 [ 272.850031][T24527] dump_header+0x83/0x2d0 [ 272.854442][T24527] oom_kill_process+0x341/0x4c0 [ 272.859290][T24527] out_of_memory+0x9af/0xbe0 [ 272.863971][T24527] ? __rcu_read_unlock+0x4e/0x70 [ 272.868927][T24527] mem_cgroup_out_of_memory+0x13e/0x190 [ 272.874479][T24527] try_charge_memcg+0x51b/0x810 [ 272.879362][T24527] obj_cgroup_charge_pages+0xbd/0x1a0 [ 272.884736][T24527] __memcg_kmem_charge_page+0x9d/0x170 [ 272.890533][T24527] __alloc_pages_noprof+0x1bc/0x360 [ 272.895804][T24527] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 272.901218][T24527] alloc_pages_noprof+0xe1/0x100 [ 272.906249][T24527] __vmalloc_node_range_noprof+0x736/0xec0 [ 272.912053][T24527] __kvmalloc_node_noprof+0x121/0x170 [ 272.917421][T24527] ? ip_set_alloc+0x1f/0x30 [ 272.921936][T24527] ip_set_alloc+0x1f/0x30 [ 272.926266][T24527] hash_netiface_create+0x273/0x730 [ 272.931516][T24527] ? __nla_parse+0x40/0x60 [ 272.935994][T24527] ? __pfx_hash_netiface_create+0x10/0x10 [ 272.941705][T24527] ip_set_create+0x359/0x8a0 [ 272.946382][T24527] ? strnstr+0xf1/0x100 [ 272.950545][T24527] ? __nla_parse+0x40/0x60 [ 272.955032][T24527] nfnetlink_rcv_msg+0x4a9/0x570 [ 272.959982][T24527] netlink_rcv_skb+0x12c/0x230 [ 272.964815][T24527] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 272.970277][T24527] nfnetlink_rcv+0x16c/0x15e0 [ 272.975024][T24527] ? kmem_cache_free+0xd8/0x280 [ 272.979983][T24527] ? nlmon_xmit+0x51/0x60 [ 272.984306][T24527] ? __kfree_skb+0x102/0x150 [ 272.988943][T24527] ? consume_skb+0x57/0x180 [ 272.993434][T24527] ? nlmon_xmit+0x51/0x60 [ 272.997752][T24527] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 273.003030][T24527] ? __dev_queue_xmit+0xb86/0x1fe0 [ 273.008142][T24527] ? ref_tracker_free+0x3a5/0x410 [ 273.013157][T24527] ? __dev_queue_xmit+0x161/0x1fe0 [ 273.018263][T24527] ? __netlink_deliver_tap+0x495/0x4c0 [ 273.023784][T24527] netlink_unicast+0x599/0x670 [ 273.028538][T24527] netlink_sendmsg+0x5cc/0x6e0 [ 273.033304][T24527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.038613][T24527] __sock_sendmsg+0x140/0x180 [ 273.043354][T24527] ____sys_sendmsg+0x312/0x410 [ 273.048137][T24527] __sys_sendmsg+0x1e9/0x280 [ 273.052816][T24527] ? futex_wait+0x18e/0x1c0 [ 273.057323][T24527] __x64_sys_sendmsg+0x46/0x50 [ 273.062078][T24527] x64_sys_call+0x2689/0x2d60 [ 273.066748][T24527] do_syscall_64+0xc9/0x1c0 [ 273.071262][T24527] ? clear_bhb_loop+0x55/0xb0 [ 273.075928][T24527] ? clear_bhb_loop+0x55/0xb0 [ 273.080591][T24527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.086483][T24527] RIP: 0033:0x7f6192d9cef9 [ 273.090973][T24527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.110653][T24527] RSP: 002b:00007f6191a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.119350][T24527] RAX: ffffffffffffffda RBX: 00007f6192f55f80 RCX: 00007f6192d9cef9 [ 273.127307][T24527] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 273.135357][T24527] RBP: 00007f6192e0f046 R08: 0000000000000000 R09: 0000000000000000 [ 273.143311][T24527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.151359][T24527] R13: 0000000000000000 R14: 00007f6192f55f80 R15: 00007ffda851aef8 [ 273.159323][T24527] [ 273.163064][T24527] memory: usage 307200kB, limit 307200kB, failcnt 180 [ 273.169892][T24527] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 273.177807][T24527] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 273.185145][T24527] Memory cgroup stats for /syz3: [ 273.185306][T24527] cache 102400 [ 273.193602][T24527] rss 0 [ 273.196359][T24527] shmem 0 [ 273.199349][T24527] mapped_file 102400 [ 273.203215][T24527] dirty 102400 [ 273.206587][T24527] writeback 0 [ 273.209954][T24527] workingset_refault_anon 121 [ 273.214637][T24527] workingset_refault_file 107 [ 273.219323][T24527] swap 389120 [ 273.222598][T24527] swapcached 4096 [ 273.226233][T24527] pgpgin 162395 [ 273.229681][T24527] pgpgout 162369 [ 273.233228][T24527] pgfault 207449 [ 273.236800][T24527] pgmajfault 40 [ 273.240337][T24527] inactive_anon 0 [ 273.243958][T24527] active_anon 4096 [ 273.247719][T24527] inactive_file 0 [ 273.251372][T24527] active_file 102400 [ 273.255278][T24527] unevictable 0 [ 273.258745][T24527] hierarchical_memory_limit 314572800 [ 273.264211][T24527] hierarchical_memsw_limit 9223372036854771712 [ 273.270555][T24527] total_cache 102400 [ 273.274444][T24527] total_rss 0 [ 273.277782][T24527] total_shmem 0 [ 273.281237][T24527] total_mapped_file 102400 [ 273.285648][T24527] total_dirty 102400 [ 273.289585][T24527] total_writeback 0 [ 273.293393][T24527] total_workingset_refault_anon 121 [ 273.298602][T24527] total_workingset_refault_file 107 [ 273.303786][T24527] total_swap 389120 [ 273.307608][T24527] total_swapcached 4096 [ 273.311819][T24527] total_pgpgin 162395 [ 273.311992][T24645] __nla_validate_parse: 3 callbacks suppressed [ 273.312003][T24645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4549'. [ 273.315851][T24527] total_pgpgout 162369 [ 273.315860][T24527] total_pgfault 207449 [ 273.315867][T24527] total_pgmajfault 40 [ 273.315874][T24527] total_inactive_anon 0 [ 273.347268][T24527] total_active_anon 4096 [ 273.351507][T24527] total_inactive_file 0 [ 273.353618][T24648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4551'. [ 273.355642][T24527] total_active_file 102400 [ 273.355651][T24527] total_unevictable 0 [ 273.355659][T24527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.404,pid=5079,uid=0 [ 273.388184][T24527] Memory cgroup out of memory: Killed process 5082 (syz.3.404) total-vm:87200kB, anon-rss:568kB, file-rss:16168kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 273.470104][T24661] program syz.0.4556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.509903][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 273.509978][ T29] audit: type=1400 audit(1725744100.752:111788): avc: denied { setopt } for pid=24670 comm="syz.4.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.537860][ T29] audit: type=1326 audit(1725744100.782:111789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24674 comm="syz.0.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 273.561658][ T29] audit: type=1326 audit(1725744100.782:111790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24674 comm="syz.0.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 273.585475][ T29] audit: type=1400 audit(1725744100.782:111791): avc: denied { ioctl } for pid=24670 comm="syz.4.4559" path="socket:[57927]" dev="sockfs" ino=57927 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.608507][T24673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4561'. [ 273.622118][ T29] audit: type=1326 audit(1725744100.852:111792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24674 comm="syz.0.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 273.645991][ T29] audit: type=1326 audit(1725744100.852:111793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24674 comm="syz.0.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 273.669875][ T29] audit: type=1326 audit(1725744100.852:111794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24674 comm="syz.0.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 273.693616][ T29] audit: type=1326 audit(1725744100.872:111795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24674 comm="syz.0.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 273.717773][ T29] audit: type=1326 audit(1725744100.872:111796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24674 comm="syz.0.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 273.741599][ T29] audit: type=1326 audit(1725744100.872:111797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24674 comm="syz.0.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d98bcef9 code=0x7ffc0000 [ 273.741951][T24682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4563'. [ 273.801014][T20559] ================================================================== [ 273.809232][T20559] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 273.816680][T20559] [ 273.818992][T20559] read to 0xffff888114dcde68 of 4 bytes by task 24526 on cpu 0: [ 273.826606][T20559] mem_cgroup_iter+0x93/0x380 [ 273.831288][T20559] shrink_node+0x74a/0x1d40 [ 273.835790][T20559] do_try_to_free_pages+0x3c6/0xc50 [ 273.840992][T20559] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 273.846891][T20559] try_charge_memcg+0x2bc/0x810 [ 273.851739][T20559] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 273.857814][T20559] __read_swap_cache_async+0x2b7/0x520 [ 273.863282][T20559] swap_cluster_readahead+0x276/0x3f0 [ 273.868664][T20559] swapin_readahead+0xe4/0x760 [ 273.873443][T20559] do_swap_page+0x3da/0x1ef0 [ 273.878206][T20559] handle_mm_fault+0x8cb/0x2a30 [ 273.883147][T20559] exc_page_fault+0x3b9/0x650 [ 273.888003][T20559] asm_exc_page_fault+0x26/0x30 [ 273.892867][T20559] [ 273.895188][T20559] read-write to 0xffff888114dcde68 of 4 bytes by task 20559 on cpu 1: [ 273.903757][T20559] mem_cgroup_iter+0x28e/0x380 [ 273.908528][T20559] shrink_node+0x74a/0x1d40 [ 273.913040][T20559] do_try_to_free_pages+0x3c6/0xc50 [ 273.918259][T20559] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 273.924244][T20559] try_charge_memcg+0x2bc/0x810 [ 273.929096][T20559] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 273.935169][T20559] __read_swap_cache_async+0x2b7/0x520 [ 273.940630][T20559] swap_cluster_readahead+0x276/0x3f0 [ 273.946007][T20559] swapin_readahead+0xe4/0x760 [ 273.950785][T20559] do_swap_page+0x3da/0x1ef0 [ 273.955382][T20559] handle_mm_fault+0x8cb/0x2a30 [ 273.960232][T20559] exc_page_fault+0x3b9/0x650 [ 273.964920][T20559] asm_exc_page_fault+0x26/0x30 [ 273.970049][T20559] [ 273.972375][T20559] value changed: 0x00000d5b -> 0x00000d5c [ 273.978178][T20559] [ 273.980492][T20559] Reported by Kernel Concurrency Sanitizer on: [ 273.986630][T20559] CPU: 1 UID: 0 PID: 20559 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 273.997567][T20559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 274.007627][T20559] ================================================================== [ 274.554116][T24527] ================================================================== [ 274.562233][T24527] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 274.569696][T24527] [ 274.572020][T24527] read-write to 0xffff888114dcde68 of 4 bytes by task 20559 on cpu 1: [ 274.580164][T24527] mem_cgroup_iter+0x28e/0x380 [ 274.585008][T24527] shrink_node+0x74a/0x1d40 [ 274.589516][T24527] do_try_to_free_pages+0x3c6/0xc50 [ 274.594722][T24527] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 274.600626][T24527] try_charge_memcg+0x2bc/0x810 [ 274.605817][T24527] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 274.612067][T24527] __read_swap_cache_async+0x2b7/0x520 [ 274.617548][T24527] swap_cluster_readahead+0x276/0x3f0 [ 274.622933][T24527] swapin_readahead+0xe4/0x760 [ 274.627712][T24527] do_swap_page+0x3da/0x1ef0 [ 274.632309][T24527] handle_mm_fault+0x8cb/0x2a30 [ 274.637160][T24527] exc_page_fault+0x3b9/0x650 [ 274.641937][T24527] asm_exc_page_fault+0x26/0x30 [ 274.646814][T24527] [ 274.649132][T24527] read to 0xffff888114dcde68 of 4 bytes by task 24527 on cpu 0: [ 274.656753][T24527] mem_cgroup_iter+0xba/0x380 [ 274.661948][T24527] shrink_node+0x458/0x1d40 [ 274.666469][T24527] do_try_to_free_pages+0x3c6/0xc50 [ 274.671686][T24527] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 274.677589][T24527] try_charge_memcg+0x2bc/0x810 [ 274.682434][T24527] obj_cgroup_charge_pages+0xbd/0x1a0 [ 274.687892][T24527] __memcg_kmem_charge_page+0x9d/0x170 [ 274.693356][T24527] __alloc_pages_noprof+0x1bc/0x360 [ 274.698648][T24527] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 274.704033][T24527] alloc_pages_noprof+0xe1/0x100 [ 274.708976][T24527] __vmalloc_node_range_noprof+0x736/0xec0 [ 274.714870][T24527] __kvmalloc_node_noprof+0x121/0x170 [ 274.720245][T24527] ip_set_alloc+0x1f/0x30 [ 274.724577][T24527] hash_netiface_create+0x273/0x730 [ 274.729792][T24527] ip_set_create+0x359/0x8a0 [ 274.734380][T24527] nfnetlink_rcv_msg+0x4a9/0x570 [ 274.739322][T24527] netlink_rcv_skb+0x12c/0x230 [ 274.744082][T24527] nfnetlink_rcv+0x16c/0x15e0 [ 274.748754][T24527] netlink_unicast+0x599/0x670 [ 274.753514][T24527] netlink_sendmsg+0x5cc/0x6e0 [ 274.758277][T24527] __sock_sendmsg+0x140/0x180 [ 274.762965][T24527] ____sys_sendmsg+0x312/0x410 [ 274.767734][T24527] __sys_sendmsg+0x1e9/0x280 [ 274.772333][T24527] __x64_sys_sendmsg+0x46/0x50 [ 274.777091][T24527] x64_sys_call+0x2689/0x2d60 [ 274.781816][T24527] do_syscall_64+0xc9/0x1c0 [ 274.786322][T24527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.792226][T24527] [ 274.794551][T24527] value changed: 0x00003ae5 -> 0x00003ae6 [ 274.800340][T24527] [ 274.802648][T24527] Reported by Kernel Concurrency Sanitizer on: [ 274.808956][T24527] CPU: 0 UID: 0 PID: 24527 Comm: syz.3.4513 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 274.819743][T24527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 274.829789][T24527] ================================================================== [ 275.427217][ T30] oom_reaper: reaped process 5082 (syz.3.404), now anon-rss:0kB, file-rss:14988kB, shmem-rss:0kB [ 275.440976][T20559] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 275.451989][T20559] CPU: 0 UID: 0 PID: 20559 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 275.462921][T20559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 275.473021][T20559] Call Trace: [ 275.476282][T20559] [ 275.479214][T20559] dump_stack_lvl+0xf2/0x150 [ 275.483849][T20559] dump_stack+0x15/0x20 [ 275.488060][T20559] dump_header+0x83/0x2d0 [ 275.492460][T20559] oom_kill_process+0x341/0x4c0 [ 275.497941][T20559] out_of_memory+0x9af/0xbe0 [ 275.502693][T20559] ? __rcu_read_unlock+0x4e/0x70 [ 275.507642][T20559] mem_cgroup_out_of_memory+0x13e/0x190 [ 275.513213][T20559] try_charge_memcg+0x51b/0x810 [ 275.518073][T20559] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 275.524192][T20559] __read_swap_cache_async+0x2b7/0x520 [ 275.529643][T20559] swap_cluster_readahead+0x276/0x3f0 [ 275.535156][T20559] swapin_readahead+0xe4/0x760 [ 275.539907][T20559] ? __filemap_get_folio+0x420/0x5b0 [ 275.545283][T20559] ? save_fpregs_to_fpstate+0x102/0x160 [ 275.550869][T20559] ? swap_cache_get_folio+0x77/0x210 [ 275.556221][T20559] do_swap_page+0x3da/0x1ef0 [ 275.560867][T20559] ? hrtimer_start_range_ns+0x53d/0x580 [ 275.566490][T20559] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 275.571982][T20559] ? __rcu_read_lock+0x36/0x50 [ 275.577167][T20559] ? pte_offset_map_nolock+0x124/0x1d0 [ 275.582691][T20559] handle_mm_fault+0x8cb/0x2a30 [ 275.587629][T20559] exc_page_fault+0x3b9/0x650 [ 275.592324][T20559] asm_exc_page_fault+0x26/0x30 [ 275.597172][T20559] RIP: 0033:0x7f6192dcefa5 [ 275.601578][T20559] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 15 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 275.621605][T20559] RSP: 002b:00007ffda851b248 EFLAGS: 00010246 [ 275.627669][T20559] RAX: 0000000000000000 RBX: 000000000000015a RCX: 00007f6192dcefa3 [ 275.635621][T20559] RDX: 00007ffda851b260 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.643852][T20559] RBP: 00007ffda851b2bc R08: 000000002bde8210 R09: 7fffffffffffffff [ 275.651903][T20559] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 275.660318][T20559] R13: 0000000000042679 R14: 000000000004266e R15: 00007ffda851b310 [ 275.668288][T20559] [ 275.671416][T20559] memory: usage 307200kB, limit 307200kB, failcnt 3342 [ 275.678301][T20559] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0 [ 275.686254][T20559] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 275.693542][T20559] Memory cgroup stats for /syz3: [ 275.694081][T20559] cache 102400 [ 275.702421][T20559] rss 0 [ 275.705215][T20559] shmem 0 [ 275.708154][T20559] mapped_file 102400 [ 275.712075][T20559] dirty 102400 [ 275.715419][T20559] writeback 0 [ 275.718701][T20559] workingset_refault_anon 121 [ 275.723416][T20559] workingset_refault_file 107 [ 275.728103][T20559] swap 331776 [ 275.731458][T20559] swapcached 0 [ 275.734807][T20559] pgpgin 162395 [ 275.738295][T20559] pgpgout 162370 [ 275.741829][T20559] pgfault 207449 [ 275.745362][T20559] pgmajfault 40 [ 275.748851][T20559] inactive_anon 0 [ 275.752468][T20559] active_anon 0 [ 275.756273][T20559] inactive_file 0 [ 275.759945][T20559] active_file 102400 [ 275.763941][T20559] unevictable 0 [ 275.767412][T20559] hierarchical_memory_limit 314572800 [ 275.772804][T20559] hierarchical_memsw_limit 9223372036854771712 [ 275.779005][T20559] total_cache 102400 [ 275.782884][T20559] total_rss 0 [ 275.786172][T20559] total_shmem 0 [ 275.789672][T20559] total_mapped_file 102400 [ 275.794057][T20559] total_dirty 102400 [ 275.797969][T20559] total_writeback 0 [ 275.801758][T20559] total_workingset_refault_anon 121 [ 275.806953][T20559] total_workingset_refault_file 107 [ 275.812205][T20559] total_swap 331776 [ 275.816029][T20559] total_swapcached 0 [ 275.820007][T20559] total_pgpgin 162395 [ 275.823974][T20559] total_pgpgout 162370 [ 275.828063][T20559] total_pgfault 207449 [ 275.832164][T20559] total_pgmajfault 40 [ 275.836146][T20559] total_inactive_anon 0 [ 275.840295][T20559] total_active_anon 0 [ 275.844250][T20559] total_inactive_file 0 [ 275.848478][T20559] total_active_file 102400 [ 275.852886][T20559] total_unevictable 0 [ 275.856876][T20559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4513,pid=24526,uid=0 [ 275.871784][T20559] Memory cgroup out of memory: Killed process 24526 (syz.3.4513) total-vm:88984kB, anon-rss:568kB, file-rss:15976kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 276.129796][T24527] syz.3.4513 (24527) used greatest stack depth: 6528 bytes left