last executing test programs: 2.211680025s ago: executing program 1 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x2000000, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x40032043, 0x1}) 1.901198447s ago: executing program 1 (id=975): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) 1.821657888s ago: executing program 1 (id=978): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") symlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000000) 1.48485573s ago: executing program 1 (id=980): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x101, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.48445514s ago: executing program 3 (id=981): socket$kcm(0xa, 0x5, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 1.345389091s ago: executing program 1 (id=983): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060106000000ffff000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.345081411s ago: executing program 3 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000300)=""/254, 0xffffff1e, 0x0, 0x0, 0x0) 1.278065751s ago: executing program 2 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x10) 1.253369461s ago: executing program 3 (id=987): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.192041002s ago: executing program 0 (id=988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r6, r3) 1.164428452s ago: executing program 0 (id=989): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x552}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 1.155865342s ago: executing program 3 (id=990): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x1ffffffffffffebe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.118121152s ago: executing program 0 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 1.061292543s ago: executing program 2 (id=992): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0x30, &(0x7f00000003c0)=""/151}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, 0x0, 0x20008080) 1.060681952s ago: executing program 0 (id=993): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)=')@/#-^^\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='syztnl0\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)=',)\x00', &(0x7f0000000240)='syztnl1\x00', &(0x7f0000000280)='syztnl0\x00', &(0x7f00000002c0)='syztnl1\x00']}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 1.033875623s ago: executing program 3 (id=994): socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 882.826734ms ago: executing program 2 (id=995): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r4}, 0x10) 755.644965ms ago: executing program 2 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7fc, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 654.822425ms ago: executing program 2 (id=998): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efea", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a", 0xcc}], 0x1}}], 0x2, 0x2010) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000ac0)={r1, r2+60000000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 591.506476ms ago: executing program 2 (id=1009): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 548.510497ms ago: executing program 1 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080700007500fcff0000000095000000d3031a00041f8ea47c2eb2b7639c2ad3a4c89eb40634ab9b5ade7978eb59ff70cd62adbe9c31865cf39dc9e93813d9433f34dad576b1897b3533f883f9e873d9c435ab89afdd4ff0c24c0053f1721e9dc694f461734e10ea76584696317ca540336bc0e60e7d6d44484e01102b1c830d2630c3932755946ba8848b0d93caec1f4d89f99dcd2e9cb4d3646bc48d7ece5cbb87cdd67955cf5c813c05411a276d6afe065ac5849c64aebf30294fc59168bcb9a25164a1826a81cf45e576ef4dd94e292cbbf69d0787fa4b596ce132d7e976b136871cebb77ad2e34ffcf52557e6a0403769815ed13ca7b6c9f2fd7d11461997a57b35715cee9809008af9df0690f5d42d2e0f2d967aa4bc96a7d4b343411ef4d962699ffc5c434cf53339430fe9d668405875e14bea5c4aea70b9de7b9fb36561bdc896a0cc666f0d9b49832984ed9effda637edfb97defbd3219055f5a7ee877c79ec93133f0109e9746acd0cba749390a9b575a129f1838688c21ea8db8"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x23) 412.289957ms ago: executing program 4 (id=1003): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r2, &(0x7f0000005640)=ANY=[@ANYRES16=r4], 0x69) close(r2) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) 365.137327ms ago: executing program 4 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) 327.272618ms ago: executing program 4 (id=1005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000340), &(0x7f0000000300)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000d1dd0fccd5de059daf79f3", 0x16}, {&(0x7f0000000540)="37a88dc41ed443abea1e522800b6e02a", 0x10}], 0x3) 245.448338ms ago: executing program 4 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 158.943429ms ago: executing program 4 (id=1007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xed}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749d, 0x4, 0x0, 0x0, 0x0) 124.227869ms ago: executing program 3 (id=1008): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x10) setpriority(0x1, 0x0, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_genetlink_get_family_id$devlink(0x0, r0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 84.234019ms ago: executing program 0 (id=1010): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 62.169189ms ago: executing program 4 (id=1011): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 0s ago: executing program 0 (id=1012): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r4, 0x2, {0x2}}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 23.812547][ T29] audit: type=1400 audit(1762376391.481:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.837064][ T29] audit: type=1400 audit(1762376391.501:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.837809][ T3302] cgroup: Unknown subsys name 'net' [ 23.865548][ T29] audit: type=1400 audit(1762376391.531:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.981897][ T3302] cgroup: Unknown subsys name 'cpuset' [ 23.988221][ T3302] cgroup: Unknown subsys name 'rlimit' [ 24.098141][ T29] audit: type=1400 audit(1762376391.761:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.122087][ T29] audit: type=1400 audit(1762376391.761:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.144356][ T29] audit: type=1400 audit(1762376391.761:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.162318][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.165506][ T29] audit: type=1400 audit(1762376391.761:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.195112][ T29] audit: type=1400 audit(1762376391.771:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.211132][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.220583][ T29] audit: type=1400 audit(1762376391.771:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.220611][ T29] audit: type=1400 audit(1762376391.841:71): avc: denied { relabelto } for pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.357317][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 25.374844][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.396614][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.483635][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 25.520725][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.527975][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.535266][ T3318] bridge_slave_0: entered allmulticast mode [ 25.541700][ T3318] bridge_slave_0: entered promiscuous mode [ 25.550232][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.557316][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.564709][ T3318] bridge_slave_1: entered allmulticast mode [ 25.570963][ T3318] bridge_slave_1: entered promiscuous mode [ 25.577261][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.584342][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.593734][ T3311] bridge_slave_0: entered allmulticast mode [ 25.600095][ T3311] bridge_slave_0: entered promiscuous mode [ 25.615120][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 25.627387][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.634488][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.641731][ T3311] bridge_slave_1: entered allmulticast mode [ 25.647923][ T3311] bridge_slave_1: entered promiscuous mode [ 25.671908][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.679236][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.686481][ T3312] bridge_slave_0: entered allmulticast mode [ 25.692974][ T3312] bridge_slave_0: entered promiscuous mode [ 25.706095][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.719649][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.726736][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.733961][ T3312] bridge_slave_1: entered allmulticast mode [ 25.740324][ T3312] bridge_slave_1: entered promiscuous mode [ 25.754592][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.764858][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.789634][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.819356][ T3318] team0: Port device team_slave_0 added [ 25.826168][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.835858][ T3318] team0: Port device team_slave_1 added [ 25.843487][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.850528][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.857691][ T3319] bridge_slave_0: entered allmulticast mode [ 25.864203][ T3319] bridge_slave_0: entered promiscuous mode [ 25.875916][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.899702][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.907498][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.915451][ T3319] bridge_slave_1: entered allmulticast mode [ 25.921900][ T3319] bridge_slave_1: entered promiscuous mode [ 25.928808][ T3311] team0: Port device team_slave_0 added [ 25.949344][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.956425][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.963548][ T3320] bridge_slave_0: entered allmulticast mode [ 25.969945][ T3320] bridge_slave_0: entered promiscuous mode [ 25.981040][ T3311] team0: Port device team_slave_1 added [ 25.987470][ T3312] team0: Port device team_slave_0 added [ 25.993617][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.000583][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.027661][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.038639][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.045814][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.053657][ T3320] bridge_slave_1: entered allmulticast mode [ 26.060563][ T3320] bridge_slave_1: entered promiscuous mode [ 26.080978][ T3312] team0: Port device team_slave_1 added [ 26.087019][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.093984][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.119941][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.139123][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.148595][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.155561][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.181501][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.203289][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.213397][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.222734][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.229740][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.255776][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.272368][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.279324][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.305336][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.321035][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.341133][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.348176][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.374176][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.389405][ T3319] team0: Port device team_slave_0 added [ 26.402404][ T3318] hsr_slave_0: entered promiscuous mode [ 26.408486][ T3318] hsr_slave_1: entered promiscuous mode [ 26.427322][ T3319] team0: Port device team_slave_1 added [ 26.439673][ T3320] team0: Port device team_slave_0 added [ 26.466334][ T3320] team0: Port device team_slave_1 added [ 26.479483][ T3311] hsr_slave_0: entered promiscuous mode [ 26.485651][ T3311] hsr_slave_1: entered promiscuous mode [ 26.491567][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 26.497291][ T3311] Cannot create hsr debugfs directory [ 26.503030][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.509990][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.535971][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.547385][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.554344][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.580397][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.615915][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.622912][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.648974][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.660641][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.667703][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.693725][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.712570][ T3312] hsr_slave_0: entered promiscuous mode [ 26.718531][ T3312] hsr_slave_1: entered promiscuous mode [ 26.724339][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 26.730045][ T3312] Cannot create hsr debugfs directory [ 26.767647][ T3319] hsr_slave_0: entered promiscuous mode [ 26.773636][ T3319] hsr_slave_1: entered promiscuous mode [ 26.779501][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 26.785266][ T3319] Cannot create hsr debugfs directory [ 26.796948][ T3320] hsr_slave_0: entered promiscuous mode [ 26.803006][ T3320] hsr_slave_1: entered promiscuous mode [ 26.808886][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 26.814628][ T3320] Cannot create hsr debugfs directory [ 26.967216][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.975893][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.991397][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.006538][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.028149][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.042701][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.052419][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.060784][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.078689][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.092278][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.103112][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.112079][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.146727][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.157330][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.177243][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.187995][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.205618][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.231975][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.247040][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.255638][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.266089][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.275023][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.286984][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.294648][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.315943][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.323007][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.331687][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.338820][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.347278][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.354387][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.363121][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.370152][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.421525][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.436786][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.451601][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.473309][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.484195][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.495115][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.502227][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.532563][ T1857] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.539710][ T1857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.552225][ T1857] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.559421][ T1857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.578790][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.598828][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.609752][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.621348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.628453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.637339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.644408][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.657718][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.671148][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.678441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.706105][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.716910][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.783513][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.853986][ T3312] veth0_vlan: entered promiscuous mode [ 27.871754][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.883787][ T3318] veth0_vlan: entered promiscuous mode [ 27.896823][ T3312] veth1_vlan: entered promiscuous mode [ 27.908071][ T3318] veth1_vlan: entered promiscuous mode [ 27.924790][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.947993][ T3318] veth0_macvtap: entered promiscuous mode [ 27.966517][ T3312] veth0_macvtap: entered promiscuous mode [ 27.975342][ T3318] veth1_macvtap: entered promiscuous mode [ 27.983431][ T3312] veth1_macvtap: entered promiscuous mode [ 28.005406][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.015037][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.024789][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.034263][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.056236][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.083599][ T3320] veth0_vlan: entered promiscuous mode [ 28.089696][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.098514][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.115418][ T3320] veth1_vlan: entered promiscuous mode [ 28.122567][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.138816][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.164591][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.175352][ T3319] veth0_vlan: entered promiscuous mode [ 28.182861][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.192239][ T3311] veth0_vlan: entered promiscuous mode [ 28.201205][ T3319] veth1_vlan: entered promiscuous mode [ 28.210951][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.226233][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.240574][ T3311] veth1_vlan: entered promiscuous mode [ 28.252327][ T3320] veth0_macvtap: entered promiscuous mode [ 28.277462][ T3320] veth1_macvtap: entered promiscuous mode [ 28.302592][ T3319] veth0_macvtap: entered promiscuous mode [ 28.322608][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.333366][ T3319] veth1_macvtap: entered promiscuous mode [ 28.349860][ T3311] veth0_macvtap: entered promiscuous mode [ 28.359823][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.369086][ T3311] veth1_macvtap: entered promiscuous mode [ 28.379279][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.395360][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.403668][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.412843][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.439650][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.462882][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.475619][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.486664][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.537704][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.582204][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.627008][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.707618][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.798768][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.856379][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.893590][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.902580][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.929558][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.206940][ T3503] ªªªªªª: renamed from vlan0 (while UP) [ 29.261329][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 29.261344][ T29] audit: type=1400 audit(1762376396.921:108): avc: denied { name_bind } for pid=3504 comm="syz.2.8" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.262414][ T3505] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 29.280378][ T29] audit: type=1400 audit(1762376396.931:109): avc: denied { node_bind } for pid=3504 comm="syz.2.8" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.381950][ T29] audit: type=1400 audit(1762376397.011:110): avc: denied { create } for pid=3506 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.401615][ T29] audit: type=1400 audit(1762376397.011:111): avc: denied { bind } for pid=3506 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.420991][ T29] audit: type=1400 audit(1762376397.011:112): avc: denied { listen } for pid=3506 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.440345][ T29] audit: type=1400 audit(1762376397.011:113): avc: denied { connect } for pid=3506 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.459993][ T29] audit: type=1400 audit(1762376397.011:114): avc: denied { write } for pid=3506 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.479273][ T29] audit: type=1400 audit(1762376397.011:115): avc: denied { accept } for pid=3506 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.498818][ T29] audit: type=1400 audit(1762376397.011:116): avc: denied { read } for pid=3506 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.703169][ T29] audit: type=1400 audit(1762376397.371:117): avc: denied { open } for pid=3519 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.791832][ T3527] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 29.839127][ T3535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 29.846390][ T3529] bridge: RTM_NEWNEIGH with invalid ether address [ 29.907598][ T3535] syz.1.23 (3535) used greatest stack depth: 10344 bytes left [ 30.096972][ T3568] xt_hashlimit: max too large, truncated to 1048576 [ 30.112615][ T3565] usb usb8: usbfs: process 3565 (syz.0.34) did not claim interface 0 before use [ 30.124120][ T3571] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 30.218294][ T3577] ip_vti0: entered promiscuous mode [ 30.223684][ T3577] ip_vti0: entered allmulticast mode [ 30.326963][ T3584] loop0: detected capacity change from 0 to 1024 [ 30.352714][ T3584] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 30.397831][ T3584] loop0: detected capacity change from 0 to 1024 [ 30.412585][ T3584] ext4: Unknown parameter 'uid<00000000000000000000' [ 30.468949][ T3598] netlink: 'syz.3.46': attribute type 30 has an invalid length. [ 30.607067][ T3610] process 'syz.1.51' launched './file0' with NULL argv: empty string added [ 30.675085][ T3616] netlink: 176 bytes leftover after parsing attributes in process `syz.0.54'. [ 30.719613][ T3621] loop4: detected capacity change from 0 to 256 [ 30.848970][ T3634] netlink: 96 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.025478][ T3644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 31.039679][ T3644] vlan2: entered promiscuous mode [ 31.044874][ T3644] syz_tun: entered promiscuous mode [ 31.253816][ T3625] Set syz1 is full, maxelem 65536 reached [ 31.330143][ T3655] veth2: entered promiscuous mode [ 31.335234][ T3655] veth2: entered allmulticast mode [ 31.346802][ T3659] loop1: detected capacity change from 0 to 164 [ 31.492098][ T3673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 31.693844][ T3685] bridge: RTM_NEWNEIGH with invalid ether address [ 31.736338][ T3687] mmap: syz.2.87 (3687) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.818414][ T3692] bridge: RTM_NEWNEIGH with invalid ether address [ 31.905200][ T3701] bridge: RTM_NEWNEIGH with invalid ether address [ 32.005207][ T3709] netlink: 'syz.1.98': attribute type 12 has an invalid length. [ 32.380143][ T3737] tipc: Started in network mode [ 32.385185][ T3737] tipc: Node identity 56102a9e80d8, cluster identity 4711 [ 32.392413][ T3737] tipc: Enabled bearer , priority 0 [ 32.423653][ T3733] tipc: Resetting bearer [ 32.436392][ T3733] tipc: Disabling bearer [ 32.525919][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.556777][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.845233][ T3754] loop1: detected capacity change from 0 to 512 [ 32.950991][ T3754] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 32.962604][ T3754] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 32.972708][ T3754] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.115: Corrupt directory, running e2fsck is recommended [ 33.003584][ T3754] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 33.012138][ T3754] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.115: corrupted in-inode xattr: invalid ea_ino [ 33.031321][ T3754] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.115: couldn't read orphan inode 15 (err -117) [ 33.052049][ T3754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.117081][ T3754] ======================================================= [ 33.117081][ T3754] WARNING: The mand mount option has been deprecated and [ 33.117081][ T3754] and is ignored by this kernel. Remove the mand [ 33.117081][ T3754] option from the mount to silence this warning. [ 33.117081][ T3754] ======================================================= [ 33.271515][ T3754] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 33.335060][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.487845][ T3768] rdma_op ffff88811a7a3580 conn xmit_rdma 0000000000000000 [ 33.719693][ T3776] loop2: detected capacity change from 0 to 164 [ 33.758179][ T3776] syz.2.121: attempt to access beyond end of device [ 33.758179][ T3776] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 33.832968][ T3776] syz.2.121: attempt to access beyond end of device [ 33.832968][ T3776] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.295877][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 34.295894][ T29] audit: type=1326 audit(1762376401.961:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.325596][ T29] audit: type=1326 audit(1762376401.961:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.491537][ T29] audit: type=1326 audit(1762376401.991:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.515081][ T29] audit: type=1326 audit(1762376402.001:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.538386][ T29] audit: type=1326 audit(1762376402.011:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.561887][ T29] audit: type=1326 audit(1762376402.021:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.564151][ T3794] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 34.585156][ T29] audit: type=1326 audit(1762376402.021:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.616105][ T29] audit: type=1326 audit(1762376402.021:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.639373][ T29] audit: type=1326 audit(1762376402.021:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 34.651410][ T3795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 34.669015][ T29] audit: type=1326 audit(1762376402.021:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb27f32f6c9 code=0x7ffc0000 [ 35.014679][ T3798] tipc: Started in network mode [ 35.019573][ T3798] tipc: Node identity d20f88f0f796, cluster identity 4711 [ 35.027407][ T3798] tipc: Enabled bearer , priority 0 [ 35.089177][ T3796] tipc: Resetting bearer [ 35.111311][ T3796] tipc: Disabling bearer [ 35.214454][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 35.239067][ T3808] loop2: detected capacity change from 0 to 128 [ 35.286582][ T3808] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.321801][ T3805] bridge: RTM_NEWNEIGH with invalid ether address [ 35.335900][ T3808] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.503519][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.597867][ T3818] syz.2.134 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.662633][ T3819] tipc: Enabled bearer , priority 0 [ 35.742907][ T3813] tipc: Resetting bearer [ 35.797435][ T3813] tipc: Disabling bearer [ 35.920011][ T3829] loop1: detected capacity change from 0 to 1024 [ 35.979556][ T3829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.073433][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.147836][ T3835] ------------[ cut here ]------------ [ 36.153462][ T3835] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0) [ 36.170101][ T3835] WARNING: CPU: 1 PID: 3835 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 36.180439][ T3835] Modules linked in: [ 36.184403][ T3835] CPU: 1 UID: 0 PID: 3835 Comm: syz.4.141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.194101][ T3835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.204398][ T3835] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 36.210842][ T3835] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 c2 f7 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 36.230617][ T3835] RSP: 0018:ffffc9001051f408 EFLAGS: 00010282 [ 36.236768][ T3835] RAX: 7688603b50f69d00 RBX: ffff88811b8340b0 RCX: 0000000000080000 [ 36.244821][ T3835] RDX: ffffc90004309000 RSI: 0000000000009bcd RDI: 0000000000009bce [ 36.252891][ T3835] RBP: 0000000000000010 R08: 0001c9001051f257 R09: 0000000000000000 [ 36.260862][ T3835] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811b834070 [ 36.269121][ T3835] R13: ffff88810a0e8000 R14: ffff88810a0e8000 R15: ffff88811b8340a8 [ 36.277119][ T3835] FS: 00007fc936e976c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 36.286088][ T3835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.292702][ T3835] CR2: 00007f06cacf0e9c CR3: 000000011b8a6000 CR4: 00000000003506f0 [ 36.300702][ T3835] Call Trace: [ 36.304287][ T3835] [ 36.307293][ T3835] reg_set_min_max+0x1eb/0x260 [ 36.312090][ T3835] check_cond_jmp_op+0x1370/0x19e0 [ 36.317283][ T3835] do_check+0x3363/0x8460 [ 36.321662][ T3835] do_check_common+0xc5e/0x12b0 [ 36.326526][ T3835] bpf_check+0xaaae/0xd9d0 [ 36.331049][ T3835] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 36.337115][ T3835] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 36.343037][ T3835] ? css_rstat_updated+0xb7/0x240 [ 36.348064][ T3835] ? try_charge_memcg+0x215/0xa10 [ 36.353131][ T3835] ? pcpu_block_refresh_hint+0x10b/0x170 [ 36.358781][ T3835] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 36.364909][ T3835] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 36.371003][ T3835] ? css_rstat_updated+0xb7/0x240 [ 36.376088][ T3835] ? __rcu_read_unlock+0x4f/0x70 [ 36.381149][ T3835] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 36.387031][ T3835] ? bpf_prog_alloc+0x5b/0x150 [ 36.391895][ T3835] ? pcpu_alloc_noprof+0xd29/0x1250 [ 36.397093][ T3835] ? should_fail_ex+0x30/0x280 [ 36.401893][ T3835] ? should_failslab+0x8c/0xb0 [ 36.406696][ T3835] ? __kmalloc_noprof+0x2a2/0x570 [ 36.411756][ T3835] ? security_bpf_prog_load+0x60/0x140 [ 36.417324][ T3835] ? selinux_bpf_prog_load+0xad/0xd0 [ 36.422736][ T3835] ? security_bpf_prog_load+0x9e/0x140 [ 36.428296][ T3835] bpf_prog_load+0xf6e/0x1100 [ 36.433208][ T3835] ? security_bpf+0x2b/0x90 [ 36.437753][ T3835] __sys_bpf+0x469/0x7c0 [ 36.442053][ T3835] __x64_sys_bpf+0x41/0x50 [ 36.446488][ T3835] x64_sys_call+0x2aee/0x3000 [ 36.451177][ T3835] do_syscall_64+0xd2/0x200 [ 36.455722][ T3835] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.461939][ T3835] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.467728][ T3835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.473800][ T3835] RIP: 0033:0x7fc93842f6c9 [ 36.478214][ T3835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.497970][ T3835] RSP: 002b:00007fc936e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.506525][ T3835] RAX: ffffffffffffffda RBX: 00007fc938685fa0 RCX: 00007fc93842f6c9 [ 36.514586][ T3835] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 36.522811][ T3835] RBP: 00007fc9384b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 36.530809][ T3835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.538952][ T3835] R13: 00007fc938686038 R14: 00007fc938685fa0 R15: 00007ffee39ff9e8 [ 36.547470][ T3835] [ 36.550506][ T3835] ---[ end trace 0000000000000000 ]--- [ 36.572242][ T3844] loop0: detected capacity change from 0 to 128 [ 36.588304][ T3844] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.641690][ T3844] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.705414][ T1857] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.775622][ T3851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.146'. [ 36.802578][ C0] hrtimer: interrupt took 41745 ns [ 36.879802][ T3835] syz.4.141 (3835) used greatest stack depth: 10264 bytes left [ 37.174621][ T3884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 37.203946][ T3885] loop1: detected capacity change from 0 to 512 [ 37.215046][ T3885] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.160: inode #0: comm syz.1.160: iget: illegal inode # [ 37.231473][ T3885] EXT4-fs (loop1): get orphan inode failed [ 37.240506][ T3885] EXT4-fs (loop1): mount failed [ 37.280827][ T3894] netlink: 'syz.2.163': attribute type 7 has an invalid length. [ 37.288567][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 37.316173][ T3894] bridge2: port 1(bond1) entered blocking state [ 37.322533][ T3894] bridge2: port 1(bond1) entered disabled state [ 37.328998][ T3894] bond1: entered allmulticast mode [ 37.388388][ T3900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 37.505548][ T3911] Zero length message leads to an empty skb [ 37.553062][ T3919] netlink: 5 bytes leftover after parsing attributes in process `syz.3.173'. [ 37.562353][ T3919] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 37.569760][ T3919] 0ªî{X¹¦: entered allmulticast mode [ 37.600197][ T3919] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 37.652632][ T3928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.893112][ T3951] netlink: 96 bytes leftover after parsing attributes in process `syz.1.185'. [ 37.927914][ T3953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 37.960471][ T3955] netlink: 'syz.1.187': attribute type 7 has an invalid length. [ 37.968238][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 38.435069][ T3969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.463681][ T3984] ip6gre1: entered allmulticast mode [ 38.806130][ T4006] loop0: detected capacity change from 0 to 512 [ 38.828089][ T4006] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.883506][ T4006] EXT4-fs (loop0): mount failed [ 39.072587][ T4022] loop0: detected capacity change from 0 to 1024 [ 39.113877][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.155842][ T4028] netlink: 'syz.3.217': attribute type 1 has an invalid length. [ 39.221074][ T4028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.253276][ T4030] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 39.294570][ T4030] bond2 (unregistering): Released all slaves [ 39.305036][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.392052][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 39.392093][ T29] audit: type=1400 audit(1762376407.051:801): avc: denied { recv } for pid=4035 comm="syz.0.218" saddr=10.128.0.163 src=30036 daddr=10.128.0.38 dest=49154 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 39.561086][ T4054] loop4: detected capacity change from 0 to 512 [ 39.578475][ T4054] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.593121][ T4054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.660769][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.730255][ T4068] netlink: 'syz.0.234': attribute type 30 has an invalid length. [ 39.751871][ T4071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.773434][ T4073] __nla_validate_parse: 2 callbacks suppressed [ 39.773449][ T4073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 39.839968][ T4071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.884964][ T29] audit: type=1400 audit(1762376407.551:802): avc: denied { mount } for pid=4077 comm="syz.3.237" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.934452][ T4071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.963696][ T29] audit: type=1400 audit(1762376407.631:803): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 39.987378][ T29] audit: type=1400 audit(1762376407.631:804): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 39.999258][ T4087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 40.064816][ T4071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.112902][ T4091] veth2: entered promiscuous mode [ 40.118051][ T4091] veth2: entered allmulticast mode [ 40.161694][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.204094][ T1857] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.229674][ T4103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.230054][ T1857] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.272785][ T1857] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.307549][ T29] audit: type=1326 audit(1762376407.971:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 40.330937][ T29] audit: type=1326 audit(1762376407.971:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 40.354168][ T29] audit: type=1326 audit(1762376407.971:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 40.377471][ T29] audit: type=1326 audit(1762376407.971:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 40.400966][ T29] audit: type=1326 audit(1762376407.971:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 40.424221][ T29] audit: type=1326 audit(1762376407.971:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 40.647468][ T4115] netlink: 88 bytes leftover after parsing attributes in process `syz.2.255'. [ 40.730587][ T4122] loop4: detected capacity change from 0 to 1024 [ 40.740490][ T4122] EXT4-fs: Ignoring removed orlov option [ 40.777241][ T4122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.880163][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.892388][ T4129] veth6: entered promiscuous mode [ 40.897519][ T4129] veth6: entered allmulticast mode [ 40.936648][ T4137] veth4: entered promiscuous mode [ 40.941880][ T4137] veth4: entered allmulticast mode [ 41.015559][ T4145] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.267'. [ 41.039111][ T4147] IPv6: Can't replace route, no match found [ 41.107194][ T4160] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 41.118894][ T4160] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 41.311682][ T4174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.370115][ T4174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.434528][ T4174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.484473][ T4174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.565844][ T41] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.580824][ T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.601657][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.610664][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.719166][ T4189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 42.024731][ T4209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.031983][ T4209] IPv6: NLM_F_CREATE should be set when creating new route [ 42.928025][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 43.142199][ T4252] capability: warning: `syz.4.308' uses deprecated v2 capabilities in a way that may be insecure [ 43.163755][ T4251] netlink: 'syz.3.309': attribute type 10 has an invalid length. [ 43.211566][ T4251] team0: Port device dummy0 added [ 43.217694][ T4257] netlink: 'syz.3.309': attribute type 10 has an invalid length. [ 43.256360][ T4257] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 43.296808][ T4257] team0: Failed to send options change via netlink (err -105) [ 43.313500][ T4257] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 43.331677][ T4257] team0: Port device dummy0 removed [ 43.347222][ T4257] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.443157][ T4265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4265 comm=syz.1.314 [ 43.493934][ T4272] loop4: detected capacity change from 0 to 512 [ 43.502534][ T4265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.529328][ T4272] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.542457][ T4272] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.560637][ T4275] loop1: detected capacity change from 0 to 1024 [ 43.586776][ T4275] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 43.608017][ T4272] EXT4-fs (loop4): 1 truncate cleaned up [ 43.616794][ T4275] EXT4-fs (loop1): mount failed [ 43.622656][ T4272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.639243][ T4265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.692190][ T4288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.737980][ T4265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.769011][ T4288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.784618][ T4284] syz.2.320 (4284) used greatest stack depth: 9936 bytes left [ 43.815910][ T4265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.847465][ T4288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.889825][ T1857] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.910679][ T4288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.934680][ T1857] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.966331][ T1857] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.004136][ T1857] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.037039][ T1857] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.049444][ T3450] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.061372][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.091824][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.134719][ T4312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 44.175735][ T4313] tipc: Started in network mode [ 44.180644][ T4313] tipc: Node identity 620130df57d7, cluster identity 4711 [ 44.182375][ T4312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 44.187858][ T4313] tipc: Enabled bearer , priority 0 [ 44.228051][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.269611][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 44.280781][ T4319] ip6gretap1: entered allmulticast mode [ 44.292166][ T4309] tipc: Resetting bearer [ 44.312035][ T4309] tipc: Disabling bearer [ 44.379098][ T4331] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 44.390920][ T4334] syz_tun: entered allmulticast mode [ 44.400634][ T4334] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 44.409179][ T4334] mroute: pending queue full, dropping entries [ 44.415646][ T4331] macvlan1: entered promiscuous mode [ 44.420963][ T4331] macvlan1: entered allmulticast mode [ 44.443187][ T4331] veth1_vlan: entered allmulticast mode [ 44.452994][ T4331] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 44.461963][ T4335] netlink: 'syz.0.342': attribute type 12 has an invalid length. [ 44.469890][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 44.469901][ T29] audit: type=1400 audit(1762376412.131:1362): avc: denied { name_connect } for pid=4338 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 44.515465][ T4342] netlink: 'syz.0.345': attribute type 2 has an invalid length. [ 44.523240][ T4342] netlink: 'syz.0.345': attribute type 2 has an invalid length. [ 44.530950][ T4342] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 44.538681][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 44.553991][ T4342] hub 9-0:1.0: USB hub found [ 44.560139][ T4342] hub 9-0:1.0: 8 ports detected [ 44.581524][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.588910][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.633281][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.640690][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.707676][ T4357] syzkaller0: entered allmulticast mode [ 44.721583][ T4357] syzkaller0: entered promiscuous mode [ 44.743440][ T4357] syzkaller0 (unregistering): left allmulticast mode [ 44.750460][ T4357] syzkaller0 (unregistering): left promiscuous mode [ 44.814694][ T4368] netlink: 'syz.3.356': attribute type 10 has an invalid length. [ 44.827892][ T4370] loop2: detected capacity change from 0 to 1024 [ 44.836390][ T4368] bond0: (slave dummy0): Releasing backup interface [ 44.843998][ T4370] EXT4-fs: Ignoring removed nobh option [ 44.852871][ T4368] team0: Failed to send options change via netlink (err -105) [ 44.860364][ T4368] team0: Port device dummy0 added [ 44.872549][ T4370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.885348][ T4368] netlink: 'syz.3.356': attribute type 10 has an invalid length. [ 44.895268][ T4368] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.914809][ T29] audit: type=1400 audit(1762376412.571:1363): avc: denied { read write } for pid=4369 comm="syz.2.357" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.937420][ T29] audit: type=1400 audit(1762376412.571:1364): avc: denied { open } for pid=4369 comm="syz.2.357" path="/63/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.975924][ T4370] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 44.990997][ T4368] team0: Failed to send options change via netlink (err -105) [ 44.998859][ T4368] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.008380][ T4368] team0: Port device dummy0 removed [ 45.016110][ T4368] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.024830][ T29] audit: type=1400 audit(1762376412.661:1365): avc: denied { lock } for pid=4369 comm="syz.2.357" path="/63/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.111241][ T29] audit: type=1400 audit(1762376412.771:1366): avc: denied { watch_reads } for pid=4383 comm="syz.0.362" path="/83" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.177897][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.279948][ T29] audit: type=1400 audit(1762376412.941:1367): avc: denied { create } for pid=4394 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 45.396415][ T29] audit: type=1326 audit(1762376413.061:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 45.419804][ T29] audit: type=1326 audit(1762376413.061:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 45.447928][ T29] audit: type=1326 audit(1762376413.111:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 45.471330][ T29] audit: type=1326 audit(1762376413.111:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 45.609468][ T4414] bridge: RTM_NEWNEIGH with invalid ether address [ 46.166182][ T4444] __nla_validate_parse: 2 callbacks suppressed [ 46.166200][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 46.317199][ T4459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.363033][ T4459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.422871][ T4459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.503447][ T4459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.596186][ T4479] syz_tun: entered allmulticast mode [ 46.619489][ T4481] xt_hashlimit: max too large, truncated to 1048576 [ 46.650744][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 46.660094][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.673601][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.706378][ T4486] rdma_op ffff88811a795d80 conn xmit_rdma 0000000000000000 [ 46.863916][ T4499] loop2: detected capacity change from 0 to 1764 [ 46.942259][ T4508] netlink: 64 bytes leftover after parsing attributes in process `syz.4.412'. [ 46.980897][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 47.090250][ T4521] syz.3.418: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 47.104737][ T4521] CPU: 1 UID: 0 PID: 4521 Comm: syz.3.418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.104770][ T4521] Tainted: [W]=WARN [ 47.104777][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.104789][ T4521] Call Trace: [ 47.104794][ T4521] [ 47.104801][ T4521] __dump_stack+0x1d/0x30 [ 47.104865][ T4521] dump_stack_lvl+0xe8/0x140 [ 47.104916][ T4521] dump_stack+0x15/0x1b [ 47.104932][ T4521] warn_alloc+0x12b/0x1a0 [ 47.104983][ T4521] ? __rcu_read_unlock+0x4f/0x70 [ 47.105015][ T4521] ? __cgroup_account_cputime+0x81/0xa0 [ 47.105035][ T4521] __vmalloc_node_range_noprof+0x9d/0xed0 [ 47.105068][ T4521] ? probe_sched_wakeup+0x85/0xa0 [ 47.105129][ T4521] ? __rcu_read_unlock+0x4f/0x70 [ 47.105158][ T4521] ? avc_has_perm_noaudit+0x1b1/0x200 [ 47.105196][ T4521] ? should_fail_ex+0x30/0x280 [ 47.105217][ T4521] ? xskq_create+0x36/0xe0 [ 47.105263][ T4521] vmalloc_user_noprof+0x7d/0xb0 [ 47.105381][ T4521] ? xskq_create+0x80/0xe0 [ 47.105404][ T4521] xskq_create+0x80/0xe0 [ 47.105501][ T4521] xsk_init_queue+0x95/0xf0 [ 47.105524][ T4521] xsk_setsockopt+0x477/0x640 [ 47.105546][ T4521] ? __pfx_xsk_setsockopt+0x10/0x10 [ 47.105564][ T4521] __sys_setsockopt+0x184/0x200 [ 47.105596][ T4521] __x64_sys_setsockopt+0x64/0x80 [ 47.105708][ T4521] x64_sys_call+0x20ec/0x3000 [ 47.105731][ T4521] do_syscall_64+0xd2/0x200 [ 47.105748][ T4521] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.105857][ T4521] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.105906][ T4521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.105931][ T4521] RIP: 0033:0x7fb27f32f6c9 [ 47.105948][ T4521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.105967][ T4521] RSP: 002b:00007fb27dd8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 47.106041][ T4521] RAX: ffffffffffffffda RBX: 00007fb27f585fa0 RCX: 00007fb27f32f6c9 [ 47.106056][ T4521] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 47.106069][ T4521] RBP: 00007fb27f3b1f91 R08: 0000000000000004 R09: 0000000000000000 [ 47.106080][ T4521] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 47.106092][ T4521] R13: 00007fb27f586038 R14: 00007fb27f585fa0 R15: 00007fff7f972658 [ 47.106111][ T4521] [ 47.106129][ T4521] Mem-Info: [ 47.340258][ T4521] active_anon:20980 inactive_anon:1 isolated_anon:0 [ 47.340258][ T4521] active_file:18404 inactive_file:2246 isolated_file:0 [ 47.340258][ T4521] unevictable:0 dirty:284 writeback:0 [ 47.340258][ T4521] slab_reclaimable:3238 slab_unreclaimable:16366 [ 47.340258][ T4521] mapped:28987 shmem:17045 pagetables:1142 [ 47.340258][ T4521] sec_pagetables:0 bounce:0 [ 47.340258][ T4521] kernel_misc_reclaimable:0 [ 47.340258][ T4521] free:1869399 free_pcp:12517 free_cma:0 [ 47.385791][ T4521] Node 0 active_anon:83920kB inactive_anon:4kB active_file:73616kB inactive_file:8984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115948kB dirty:1136kB writeback:0kB shmem:68180kB kernel_stack:3360kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 47.413335][ T4521] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 47.443164][ T4521] lowmem_reserve[]: 0 2881 7859 7859 [ 47.448479][ T4521] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 47.479874][ T4521] lowmem_reserve[]: 0 0 4978 4978 [ 47.485014][ T4521] Node 0 Normal free:4515608kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:83920kB inactive_anon:4kB active_file:73616kB inactive_file:8984kB unevictable:0kB writepending:1136kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:46436kB local_pcp:9224kB free_cma:0kB [ 47.517958][ T4521] lowmem_reserve[]: 0 0 0 0 [ 47.522572][ T4521] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 47.535589][ T4521] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946628kB [ 47.551753][ T4521] Node 0 Normal: 504*4kB (UM) 445*8kB (UME) 395*16kB (UME) 335*32kB (UME) 282*64kB (UME) 114*128kB (UM) 69*256kB (UME) 49*512kB (UM) 28*1024kB (UM) 17*2048kB (UME) 1063*4096kB (UM) = 4515544kB [ 47.570880][ T4521] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 47.580198][ T4521] 37690 total pagecache pages [ 47.584883][ T4521] 1 pages in swap cache [ 47.589031][ T4521] Free swap = 124992kB [ 47.593196][ T4521] Total swap = 124996kB [ 47.597354][ T4521] 2097051 pages RAM [ 47.601186][ T4521] 0 pages HighMem/MovableOnly [ 47.605874][ T4521] 81086 pages reserved [ 47.919064][ T4532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4532 comm=syz.3.422 [ 47.989949][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 48.044345][ T4539] loop4: detected capacity change from 0 to 164 [ 48.064916][ T4539] syz.4.425: attempt to access beyond end of device [ 48.064916][ T4539] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.091118][ T4539] syz.4.425: attempt to access beyond end of device [ 48.091118][ T4539] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.557001][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586698][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.599471][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.628680][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.925429][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'. [ 48.934405][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 48.957246][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'. [ 48.966243][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 49.063059][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 49.264414][ T4618] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 49.296290][ T4620] syzkaller0: entered allmulticast mode [ 49.302638][ T4620] syzkaller0: entered promiscuous mode [ 49.311930][ T4620] syzkaller0 (unregistering): left allmulticast mode [ 49.318650][ T4620] syzkaller0 (unregistering): left promiscuous mode [ 49.385966][ T4624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.401829][ T4624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.412354][ T4624] bond0 (unregistering): Released all slaves [ 49.651611][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 49.651626][ T29] audit: type=1400 audit(1762376417.321:1677): avc: denied { ioctl } for pid=4656 comm="syz.0.477" path="socket:[14590]" dev="sockfs" ino=14590 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.684427][ T4659] hsr_slave_0: left promiscuous mode [ 49.690194][ T4659] hsr_slave_1: left promiscuous mode [ 49.714008][ T29] audit: type=1400 audit(1762376417.381:1678): avc: denied { ioctl } for pid=4662 comm="syz.0.479" path="socket:[13906]" dev="sockfs" ino=13906 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.759348][ T29] audit: type=1400 audit(1762376417.401:1679): avc: denied { bind } for pid=4662 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.778666][ T29] audit: type=1400 audit(1762376417.401:1680): avc: denied { read } for pid=4662 comm="syz.0.479" path="socket:[13906]" dev="sockfs" ino=13906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.886047][ T29] audit: type=1400 audit(1762376417.551:1681): avc: denied { unmount } for pid=4672 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.295658][ T29] audit: type=1326 audit(1762376417.961:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 50.323056][ T4715] loop2: detected capacity change from 0 to 512 [ 50.338333][ T4715] EXT4-fs: Ignoring removed bh option [ 50.347576][ T29] audit: type=1326 audit(1762376417.981:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 50.370971][ T29] audit: type=1326 audit(1762376417.991:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 50.394319][ T29] audit: type=1326 audit(1762376417.991:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 50.417745][ T29] audit: type=1326 audit(1762376417.991:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3693d7f6c9 code=0x7ffc0000 [ 50.462579][ T4715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 50.475593][ T4715] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.514376][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 50.707872][ T4752] lo speed is unknown, defaulting to 1000 [ 50.713861][ T4752] lo speed is unknown, defaulting to 1000 [ 50.719852][ T4752] lo speed is unknown, defaulting to 1000 [ 50.726060][ T4752] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.734222][ T4752] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.752212][ T4752] lo speed is unknown, defaulting to 1000 [ 50.759419][ T4752] lo speed is unknown, defaulting to 1000 [ 50.770668][ T4752] lo speed is unknown, defaulting to 1000 [ 50.778516][ T4752] lo speed is unknown, defaulting to 1000 [ 50.784615][ T4752] lo speed is unknown, defaulting to 1000 [ 50.785477][ T4754] loop2: detected capacity change from 0 to 512 [ 50.790750][ T4752] lo speed is unknown, defaulting to 1000 [ 50.805411][ T4754] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.516: EA inode hash validation failed [ 50.818109][ T4754] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.831307][ T4754] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.516: corrupted inode contents [ 50.861426][ T4754] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.516: mark_inode_dirty error [ 50.881451][ T4754] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.516: corrupted inode contents [ 50.895459][ T4754] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.516: mark_inode_dirty error [ 50.908510][ T4754] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.516: mark inode dirty (error -117) [ 50.928276][ T4754] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 50.942593][ T4754] EXT4-fs (loop2): 1 orphan inode deleted [ 50.948847][ T4754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.968733][ T4754] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.027051][ T4782] kernel profiling enabled (shift: 63) [ 51.032726][ T4782] profiling shift: 63 too large [ 51.135975][ T4788] lo speed is unknown, defaulting to 1000 [ 51.367715][ T4813] loop4: detected capacity change from 0 to 1024 [ 51.382967][ T4813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.405957][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.472428][ T4823] netlink: 'syz.4.546': attribute type 30 has an invalid length. [ 51.658230][ T4848] __nla_validate_parse: 12 callbacks suppressed [ 51.658246][ T4848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 51.737557][ T4853] veth4: entered promiscuous mode [ 51.742680][ T4853] veth4: entered allmulticast mode [ 52.018156][ T4865] loop0: detected capacity change from 0 to 1024 [ 52.036613][ T4865] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 53.231690][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 53.393471][ T4903] loop1: detected capacity change from 0 to 128 [ 53.426971][ T4903] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 53.434827][ T4903] FAT-fs (loop1): Filesystem has been set read-only [ 53.454161][ T4909] kernel profiling enabled (shift: 63) [ 53.459651][ T4909] profiling shift: 63 too large [ 53.465045][ T4903] syz.1.577: attempt to access beyond end of device [ 53.465045][ T4903] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.589082][ T4914] lo speed is unknown, defaulting to 1000 [ 53.809961][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 53.954891][ T4942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.593'. [ 53.964252][ T4942] unsupported nlmsg_type 40 [ 54.011914][ T4948] loop4: detected capacity change from 0 to 512 [ 54.031835][ T4948] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.040019][ T4948] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.063187][ T4948] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.596: corrupted inode contents [ 54.103776][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 54.112979][ T4952] bridge_slave_1: left allmulticast mode [ 54.114632][ T4948] EXT4-fs (loop4): Remounting filesystem read-only [ 54.118797][ T4952] bridge_slave_1: left promiscuous mode [ 54.119022][ T4952] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.144659][ T4948] EXT4-fs (loop4): 1 truncate cleaned up [ 54.152295][ T290] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.162867][ T290] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.176671][ T4954] loop0: detected capacity change from 0 to 512 [ 54.191719][ T4954] EXT4-fs: Ignoring removed bh option [ 54.208300][ T290] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.219548][ T4952] bridge_slave_0: left allmulticast mode [ 54.225236][ T4952] bridge_slave_0: left promiscuous mode [ 54.226490][ T4954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 54.230963][ T4952] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.251814][ T4948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.266317][ T4954] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.300262][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.334917][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 54.485013][ T4976] lo speed is unknown, defaulting to 1000 [ 54.589907][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 54.852149][ T5007] netlink: 176 bytes leftover after parsing attributes in process `syz.1.629'. [ 54.865944][ T5009] ÿ: renamed from bond_slave_0 (while UP) [ 54.938507][ T5015] lo speed is unknown, defaulting to 1000 [ 55.222421][ T5033] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 55.245016][ T5033] team0: Port device dummy0 added [ 55.327620][ T5040] netlink: 'syz.2.634': attribute type 3 has an invalid length. [ 55.613338][ T5055] SELinux: failed to load policy [ 55.618363][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 55.618379][ T29] audit: type=1400 audit(1762376423.281:1834): avc: denied { load_policy } for pid=5054 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.695169][ T5067] futex_wake_op: syz.2.643 tries to shift op by -1; fix this program [ 55.732521][ T5070] lo speed is unknown, defaulting to 1000 [ 55.806783][ T5082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.645'. [ 55.815854][ T5082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.645'. [ 55.853127][ T29] audit: type=1326 audit(1762376423.521:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 55.864122][ T5082] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 55.879061][ T29] audit: type=1326 audit(1762376423.541:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 55.916047][ T29] audit: type=1326 audit(1762376423.541:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 55.939687][ T29] audit: type=1326 audit(1762376423.541:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 55.962998][ T29] audit: type=1326 audit(1762376423.541:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 55.987200][ T29] audit: type=1326 audit(1762376423.541:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 56.011204][ T29] audit: type=1326 audit(1762376423.541:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 56.035215][ T29] audit: type=1326 audit(1762376423.541:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 56.059186][ T29] audit: type=1326 audit(1762376423.541:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22481f6c9 code=0x7ffc0000 [ 56.185094][ T5103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 56.259313][ T5111] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 56.280261][ T5111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.303306][ T5111] bond2 (unregistering): Released all slaves [ 56.314691][ T5105] loop4: detected capacity change from 0 to 8192 [ 56.470717][ T5128] lo speed is unknown, defaulting to 1000 [ 56.562657][ T5140] loop1: detected capacity change from 0 to 512 [ 56.571271][ T5140] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.592087][ T5140] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 56.637033][ T5140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.650356][ T5140] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.677315][ T5148] bridge: RTM_NEWNEIGH with invalid ether address [ 56.802444][ T5169] __nla_validate_parse: 4 callbacks suppressed [ 56.802461][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 56.822052][ T5169] netlink: 236 bytes leftover after parsing attributes in process `syz.4.683'. [ 56.963011][ T5185] lo speed is unknown, defaulting to 1000 [ 57.158820][ T5204] loop4: detected capacity change from 0 to 136 [ 57.397207][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.424918][ T5226] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 58.039584][ T5239] syz.0.709: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 58.054359][ T5239] CPU: 0 UID: 0 PID: 5239 Comm: syz.0.709 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 58.054464][ T5239] Tainted: [W]=WARN [ 58.054472][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.054485][ T5239] Call Trace: [ 58.054492][ T5239] [ 58.054500][ T5239] __dump_stack+0x1d/0x30 [ 58.054525][ T5239] dump_stack_lvl+0xe8/0x140 [ 58.054545][ T5239] dump_stack+0x15/0x1b [ 58.054561][ T5239] warn_alloc+0x12b/0x1a0 [ 58.054614][ T5239] ? __rcu_read_unlock+0x4f/0x70 [ 58.054641][ T5239] __vmalloc_node_range_noprof+0x9d/0xed0 [ 58.054726][ T5239] ? __futex_wait+0x1fa/0x260 [ 58.054747][ T5239] ? __pfx_futex_wake_mark+0x10/0x10 [ 58.054768][ T5239] ? __rcu_read_unlock+0x4f/0x70 [ 58.054796][ T5239] ? avc_has_perm_noaudit+0x1b1/0x200 [ 58.054818][ T5239] ? should_fail_ex+0x30/0x280 [ 58.054918][ T5239] ? xskq_create+0x36/0xe0 [ 58.054942][ T5239] vmalloc_user_noprof+0x7d/0xb0 [ 58.054976][ T5239] ? xskq_create+0x80/0xe0 [ 58.054998][ T5239] xskq_create+0x80/0xe0 [ 58.055020][ T5239] xsk_init_queue+0x95/0xf0 [ 58.055101][ T5239] xsk_setsockopt+0x477/0x640 [ 58.055165][ T5239] ? __pfx_xsk_setsockopt+0x10/0x10 [ 58.055186][ T5239] __sys_setsockopt+0x184/0x200 [ 58.055220][ T5239] __x64_sys_setsockopt+0x64/0x80 [ 58.055255][ T5239] x64_sys_call+0x20ec/0x3000 [ 58.055321][ T5239] do_syscall_64+0xd2/0x200 [ 58.055338][ T5239] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.055364][ T5239] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.055399][ T5239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.055444][ T5239] RIP: 0033:0x7f3693d7f6c9 [ 58.055466][ T5239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.055484][ T5239] RSP: 002b:00007f36927df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 58.055503][ T5239] RAX: ffffffffffffffda RBX: 00007f3693fd5fa0 RCX: 00007f3693d7f6c9 [ 58.055515][ T5239] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 58.055526][ T5239] RBP: 00007f3693e01f91 R08: 0000000000000004 R09: 0000000000000000 [ 58.055538][ T5239] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 58.055551][ T5239] R13: 00007f3693fd6038 R14: 00007f3693fd5fa0 R15: 00007ffd40a8d618 [ 58.055623][ T5239] [ 58.055630][ T5239] Mem-Info: [ 58.289149][ T5239] active_anon:20993 inactive_anon:2 isolated_anon:0 [ 58.289149][ T5239] active_file:18788 inactive_file:2253 isolated_file:0 [ 58.289149][ T5239] unevictable:0 dirty:324 writeback:0 [ 58.289149][ T5239] slab_reclaimable:3252 slab_unreclaimable:16780 [ 58.289149][ T5239] mapped:28962 shmem:17062 pagetables:1189 [ 58.289149][ T5239] sec_pagetables:0 bounce:0 [ 58.289149][ T5239] kernel_misc_reclaimable:0 [ 58.289149][ T5239] free:1857906 free_pcp:19688 free_cma:0 [ 58.334523][ T5239] Node 0 active_anon:83972kB inactive_anon:8kB active_file:75152kB inactive_file:9012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115848kB dirty:1296kB writeback:0kB shmem:68248kB kernel_stack:3408kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 58.361906][ T5239] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 58.391751][ T5239] lowmem_reserve[]: 0 2881 7859 7859 [ 58.397106][ T5239] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 58.428500][ T5239] lowmem_reserve[]: 0 0 4978 4978 [ 58.433722][ T5239] Node 0 Normal free:4469636kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:83972kB inactive_anon:8kB active_file:75152kB inactive_file:9012kB unevictable:0kB writepending:1296kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:74828kB local_pcp:47192kB free_cma:0kB [ 58.466831][ T5239] lowmem_reserve[]: 0 0 0 0 [ 58.471450][ T5239] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 58.484247][ T5239] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946628kB [ 58.500329][ T5239] Node 0 Normal: 973*4kB (UME) 550*8kB (UM) 560*16kB (UME) 335*32kB (UME) 243*64kB (UME) 65*128kB (UME) 35*256kB (UME) 35*512kB (UME) 22*1024kB (UME) 11*2048kB (UM) 1061*4096kB (UM) = 4469636kB [ 58.519861][ T5239] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 58.530071][ T5239] 38098 total pagecache pages [ 58.535245][ T5239] 2 pages in swap cache [ 58.539394][ T5239] Free swap = 124988kB [ 58.543565][ T5239] Total swap = 124996kB [ 58.547708][ T5239] 2097051 pages RAM [ 58.551533][ T5239] 0 pages HighMem/MovableOnly [ 58.556206][ T5239] 81086 pages reserved [ 58.628496][ T5251] lo speed is unknown, defaulting to 1000 [ 58.657696][ T5253] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.703452][ T5253] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.726041][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 58.764718][ T5253] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.777629][ T5259] futex_wake_op: syz.0.716 tries to shift op by -1; fix this program [ 58.803335][ T5253] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.893351][ T1857] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.944993][ T1857] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.968820][ T1857] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.020803][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 59.043474][ T1857] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.217476][ T5291] futex_wake_op: syz.1.732 tries to shift op by -1; fix this program [ 59.226276][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 59.241370][ T5287] bridge_slave_1: left allmulticast mode [ 59.247045][ T5287] bridge_slave_1: left promiscuous mode [ 59.252778][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.267729][ T5287] bridge_slave_0: left allmulticast mode [ 59.273628][ T5287] bridge_slave_0: left promiscuous mode [ 59.279281][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.413565][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 59.475057][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 59.486932][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 59.496247][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 59.505547][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 59.555574][ T5315] loop4: detected capacity change from 0 to 512 [ 59.556023][ T5314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.584789][ T5315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.594667][ T5315] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 59.635781][ T5314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.706997][ T5314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.784572][ T5314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.840213][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.855854][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.888936][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.921531][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.046036][ T5327] loop0: detected capacity change from 0 to 1024 [ 60.053533][ T5327] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.064644][ T5327] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.076409][ T5327] JBD2: no valid journal superblock found [ 60.082176][ T5327] EXT4-fs (loop0): Could not load journal inode [ 60.314106][ T5330] futex_wake_op: syz.3.747 tries to shift op by -1; fix this program [ 60.621472][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 60.621488][ T29] audit: type=1326 audit(1762376428.291:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.685911][ T29] audit: type=1326 audit(1762376428.291:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.709370][ T29] audit: type=1326 audit(1762376428.291:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.715083][ T5374] infiniband syz!: set active [ 60.732838][ T29] audit: type=1326 audit(1762376428.291:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.737498][ T5374] infiniband syz!: added team_slave_0 [ 60.760929][ T29] audit: type=1326 audit(1762376428.291:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.773053][ T5374] RDS/IB: syz!: added [ 60.789695][ T29] audit: type=1326 audit(1762376428.291:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.793537][ T5374] smc: adding ib device syz! with port count 1 [ 60.816792][ T29] audit: type=1326 audit(1762376428.291:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.822982][ T5374] smc: ib device syz! port 1 has no pnetid [ 60.852486][ T29] audit: type=1326 audit(1762376428.291:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.876037][ T29] audit: type=1326 audit(1762376428.291:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 60.899838][ T29] audit: type=1326 audit(1762376428.301:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3693db1f85 code=0x7ffc0000 [ 61.192173][ T5399] vhci_hcd: invalid port number 65 [ 61.197327][ T5399] vhci_hcd: invalid port number 65 [ 61.251180][ T5408] loop2: detected capacity change from 0 to 128 [ 61.511132][ T5428] tipc: Enabled bearer , priority 0 [ 61.521140][ T5427] tipc: Resetting bearer [ 61.537219][ T5427] tipc: Disabling bearer [ 61.595206][ T5438] lo speed is unknown, defaulting to 1000 [ 62.286237][ T5489] netlink: 'syz.4.811': attribute type 29 has an invalid length. [ 62.302043][ T5489] netlink: 'syz.4.811': attribute type 29 has an invalid length. [ 62.330609][ T5489] __nla_validate_parse: 2 callbacks suppressed [ 62.330623][ T5489] netlink: 500 bytes leftover after parsing attributes in process `syz.4.811'. [ 62.345861][ T5489] unsupported nla_type 66 [ 62.350977][ T5495] netlink: 'syz.3.814': attribute type 30 has an invalid length. [ 62.513390][ T5512] netlink: 72 bytes leftover after parsing attributes in process `syz.1.821'. [ 62.722385][ T5528] siw: device registration error -23 [ 62.730012][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 62.746814][ T5528] loop1: detected capacity change from 0 to 512 [ 62.769034][ T5528] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.838: EA inode hash validation failed [ 62.782995][ T5529] veth6: entered promiscuous mode [ 62.788186][ T5529] veth6: entered allmulticast mode [ 62.797329][ T5528] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.838: corrupted inode contents [ 62.825061][ T5528] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.838: mark_inode_dirty error [ 62.837316][ T5528] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.838: corrupted inode contents [ 62.851531][ T5528] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.838: mark_inode_dirty error [ 62.868035][ T5528] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.838: mark inode dirty (error -117) [ 62.880907][ T5528] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 62.890277][ T5528] EXT4-fs (loop1): 1 orphan inode deleted [ 62.896453][ T5528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.909524][ T5528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.042552][ T5564] loop4: detected capacity change from 0 to 1024 [ 63.052263][ T5564] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.843: Failed to acquire dquot type 0 [ 63.065051][ T5564] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 63.080398][ T5564] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.843: corrupted inode contents [ 63.093247][ T5564] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.843: mark_inode_dirty error [ 63.109808][ T5564] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.843: corrupted inode contents [ 63.122372][ T5564] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.843: mark_inode_dirty error [ 63.136336][ T5564] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.843: corrupted inode contents [ 63.148290][ T5564] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 63.157074][ T5564] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.843: corrupted inode contents [ 63.172273][ T5564] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.843: mark_inode_dirty error [ 63.192852][ T5564] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 63.217083][ T5564] EXT4-fs (loop4): 1 truncate cleaned up [ 63.223690][ T5564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.268891][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.469222][ T5611] netlink: 96 bytes leftover after parsing attributes in process `syz.2.863'. [ 63.918681][ T5635] ªªªªªª: renamed from wg2 (while UP) [ 64.508052][ T5655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.584993][ T5670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5670 comm=syz.2.885 [ 64.589823][ T5673] lo speed is unknown, defaulting to 1000 [ 64.771385][ T5686] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 66.521292][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.543925][ T5704] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.580473][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.650266][ T5704] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.727697][ T5708] vhci_hcd: invalid port number 65 [ 66.732941][ T5708] vhci_hcd: invalid port number 65 [ 66.765392][ T5704] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.865604][ T5704] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.047065][ T5710] ip_vti0: left promiscuous mode [ 67.053048][ T5710] ip_vti0: left allmulticast mode [ 67.284617][ T5710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.306626][ T10] lo speed is unknown, defaulting to 1000 [ 67.347069][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.375717][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 67.375783][ T29] audit: type=1400 audit(1762376435.041:3159): avc: denied { create } for pid=5720 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.416598][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.431624][ T5725] netlink: 'syz.2.903': attribute type 10 has an invalid length. [ 67.449697][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.471432][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.483088][ T5728] netlink: 'syz.2.903': attribute type 10 has an invalid length. [ 67.496243][ T29] audit: type=1400 audit(1762376435.041:3160): avc: denied { getopt } for pid=5720 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.502267][ T5725] team0: Port device dummy0 added [ 67.516317][ T29] audit: type=1400 audit(1762376435.041:3161): avc: denied { write } for pid=5720 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.541140][ T29] audit: type=1400 audit(1762376435.041:3162): avc: denied { read } for pid=5720 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.560889][ T29] audit: type=1400 audit(1762376435.061:3163): avc: denied { read } for pid=5722 comm="syz.0.902" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.583510][ T29] audit: type=1400 audit(1762376435.061:3164): avc: denied { open } for pid=5722 comm="syz.0.902" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.607113][ T29] audit: type=1400 audit(1762376435.061:3165): avc: denied { create } for pid=5722 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 67.630340][ T5728] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.653330][ T5728] team0: Failed to send options change via netlink (err -105) [ 67.670794][ T5728] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.675653][ T29] audit: type=1326 audit(1762376435.331:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93842f6c9 code=0x7ffc0000 [ 67.688482][ T5728] team0: Port device dummy0 removed [ 67.702896][ T29] audit: type=1326 audit(1762376435.331:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93842f6c9 code=0x7ffc0000 [ 67.716727][ T5728] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.731427][ T29] audit: type=1326 audit(1762376435.331:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93842f6c9 code=0x7ffc0000 [ 67.763835][ T5723] lo speed is unknown, defaulting to 1000 [ 67.859913][ T5744] loop2: detected capacity change from 0 to 512 [ 67.908464][ T5753] loop4: detected capacity change from 0 to 512 [ 67.915363][ T5753] EXT4-fs: Ignoring removed nobh option [ 67.947716][ T5754] 0ªî{X¹¦: left allmulticast mode [ 68.030187][ T5753] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.917: iget: bad i_size value: 38620345925642 [ 68.043588][ T5753] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.917: couldn't read orphan inode 15 (err -117) [ 68.055951][ T5754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.076333][ T5753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.201212][ T5763] netlink: 36 bytes leftover after parsing attributes in process `GPL'. [ 68.233056][ T5744] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 68.251649][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 68.260675][ T5744] EXT4-fs (loop2): mount failed [ 68.282722][ T5759] wg2: entered promiscuous mode [ 68.287618][ T5759] wg2: entered allmulticast mode [ 68.369692][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.578025][ T5799] loop1: detected capacity change from 0 to 512 [ 68.587366][ T5799] EXT4-fs: Ignoring removed nobh option [ 68.599311][ T5799] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.935: iget: bad i_size value: 38620345925642 [ 68.619767][ T5799] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.935: couldn't read orphan inode 15 (err -117) [ 68.636392][ T5799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.673838][ T5786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.679212][ T5805] SELinux: ebitmap: truncated map [ 68.697168][ T5792] veth8: entered promiscuous mode [ 68.702297][ T5792] veth8: entered allmulticast mode [ 68.773218][ T5805] SELinux: failed to load policy [ 68.778044][ T5810] hub 5-0:1.0: USB hub found [ 68.783310][ T5810] hub 5-0:1.0: 8 ports detected [ 68.821468][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.934365][ T5819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.954698][ T5824] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 68.992665][ T5826] syz.2.946 uses obsolete (PF_INET,SOCK_PACKET) [ 69.144047][ T5839] loop4: detected capacity change from 0 to 128 [ 69.226643][ T5839] team0: Port device team_slave_0 removed [ 69.244419][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'. [ 69.291282][ T5842] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 69.397832][ T5852] loop2: detected capacity change from 0 to 512 [ 69.415010][ T5852] EXT4-fs: Ignoring removed nobh option [ 69.432052][ T5852] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.955: iget: bad i_size value: 38620345925642 [ 69.454209][ T5852] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.955: couldn't read orphan inode 15 (err -117) [ 69.511819][ T5852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.580634][ T5860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.694848][ T5870] tipc: New replicast peer: 255.255.255.255 [ 69.700995][ T5870] tipc: Enabled bearer , priority 10 [ 69.814162][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.865587][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 69.930767][ T5885] netlink: 96 bytes leftover after parsing attributes in process `syz.2.972'. [ 70.078709][ T5893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.080779][ T5892] vlan0: entered promiscuous mode [ 70.092160][ T5892] hsr_slave_1: entered promiscuous mode [ 70.097844][ T5892] vlan0: entered allmulticast mode [ 70.102989][ T5892] hsr_slave_1: entered allmulticast mode [ 70.108709][ T5893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.150773][ T5897] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.180190][ T5900] loop1: detected capacity change from 0 to 1024 [ 70.195910][ T5900] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 70.208223][ T5897] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.220468][ T5900] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.978: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.234685][ T5900] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.978: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.248988][ T5900] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.978: Failed to acquire dquot type 0 [ 70.260292][ T5900] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 70.270355][ T5900] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.978: mark_inode_dirty error [ 70.283184][ T5897] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.294884][ T5900] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 70.305511][ T5900] EXT4-fs (loop1): 1 orphan inode deleted [ 70.311603][ T5900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.323836][ T290] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.339082][ T5897] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.348503][ T290] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 70.368352][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.377665][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 70.390707][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 70.400205][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 70.417547][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.428583][ T290] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.439339][ T290] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.450450][ T290] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.493488][ T5908] loop1: detected capacity change from 0 to 512 [ 70.519531][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.541590][ T5908] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.636908][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.701594][ T3387] tipc: Node number set to 3603442334 [ 70.711631][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 70.722640][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 70.744979][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 70.946360][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 71.037854][ T5937] lo speed is unknown, defaulting to 1000 [ 71.218108][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'. [ 71.354092][ T5921] Set syz1 is full, maxelem 65536 reached [ 71.934917][ T5983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.972607][ T5983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.990068][ T5983] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 72.013569][ T5983] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 72.026761][ T5964] ================================================================== [ 72.034868][ T5964] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 72.041835][ T5964] [ 72.044157][ T5964] read-write to 0xffff88811b2f6f6c of 4 bytes by task 5957 on cpu 1: [ 72.052218][ T5964] fifo_open+0x86/0x5d0 [ 72.056381][ T5964] do_dentry_open+0x649/0xa20 [ 72.061057][ T5964] vfs_open+0x37/0x1e0 [ 72.065130][ T5964] path_openat+0x1c5e/0x2170 [ 72.069717][ T5964] do_file_open_root+0x1d0/0x3f0 [ 72.074659][ T5964] file_open_root+0xfd/0x130 [ 72.079255][ T5964] do_handle_open+0x659/0x6e0 [ 72.083950][ T5964] __x64_sys_open_by_handle_at+0x44/0x50 [ 72.089604][ T5964] x64_sys_call+0x279f/0x3000 [ 72.094293][ T5964] do_syscall_64+0xd2/0x200 [ 72.098800][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.104698][ T5964] [ 72.107105][ T5964] read to 0xffff88811b2f6f6c of 4 bytes by task 5964 on cpu 0: [ 72.114639][ T5964] wait_for_partner+0xb5/0x1c0 [ 72.119419][ T5964] fifo_open+0x462/0x5d0 [ 72.123691][ T5964] do_dentry_open+0x649/0xa20 [ 72.128364][ T5964] vfs_open+0x37/0x1e0 [ 72.132426][ T5964] path_openat+0x1c5e/0x2170 [ 72.137021][ T5964] do_filp_open+0x109/0x230 [ 72.141522][ T5964] do_sys_openat2+0xa6/0x110 [ 72.146111][ T5964] __x64_sys_openat+0xf2/0x120 [ 72.150875][ T5964] x64_sys_call+0x2eab/0x3000 [ 72.155640][ T5964] do_syscall_64+0xd2/0x200 [ 72.160148][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.166037][ T5964] [ 72.168354][ T5964] value changed: 0x00000001 -> 0x00000002 [ 72.174144][ T5964] [ 72.176453][ T5964] Reported by Kernel Concurrency Sanitizer on: [ 72.182591][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.2.1009 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.194483][ T5964] Tainted: [W]=WARN [ 72.198272][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.208326][ T5964] ==================================================================