last executing test programs: 4.772683031s ago: executing program 4 (id=1657): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) close(r1) socketpair(0x1e, 0x80005, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500070007ffffffbd2001000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 3.882583749s ago: executing program 4 (id=1670): socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) fallocate(0xffffffffffffffff, 0x3, 0x4, 0x8000c62) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.810213221s ago: executing program 4 (id=1671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x44004000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x10, 0x3, 0x20, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, @local, 0x18, 0x7, 0x2, 0x7}}) r1 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$ptp(r3, &(0x7f0000000040)=""/71, 0x47) 3.362773095s ago: executing program 4 (id=1674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000100000000000000000003000000000000000800010002"], 0x20}}, 0x0) r2 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="04", 0x1, 0x4c090, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.256813828s ago: executing program 4 (id=1677): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.233242039s ago: executing program 2 (id=1678): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x6a, 0x10, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000540)={[{@utf8no}, {@utf8}, {@shortname_mixed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8no}, {@rodir}, {@utf8}, {@numtail}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x26, 0x356, &(0x7f0000000100)="$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") 2.918537009s ago: executing program 2 (id=1689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) 2.728974125s ago: executing program 2 (id=1681): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) close(r1) socketpair(0x1e, 0x80005, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 2.24235444s ago: executing program 4 (id=1686): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 2.190610422s ago: executing program 1 (id=1687): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 2.043442666s ago: executing program 3 (id=1688): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xa) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x0, 0x0) 1.807526864s ago: executing program 2 (id=1691): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) 1.654387098s ago: executing program 2 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fstat(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.007417728s ago: executing program 3 (id=1693): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$kcm(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) connect(r0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) 869.518833ms ago: executing program 3 (id=1694): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) fchdir(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 694.817728ms ago: executing program 2 (id=1695): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20) close(r2) 489.496005ms ago: executing program 1 (id=1696): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 431.144036ms ago: executing program 0 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010800000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 378.337428ms ago: executing program 3 (id=1698): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 374.691358ms ago: executing program 0 (id=1699): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60044084) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 358.266929ms ago: executing program 3 (id=1700): openat$tun(0xffffffffffffff9c, 0x0, 0x448100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0x2}, 0x18a21, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 357.646779ms ago: executing program 1 (id=1701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = dup2(r0, r1) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 281.443191ms ago: executing program 3 (id=1702): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x1048a, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x100000000000000) splice(r1, 0x0, r4, 0x0, 0x100035ab, 0x4) 272.697521ms ago: executing program 1 (id=1703): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x48c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_POLICE={0x44c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x81, 0x0, 0xb5a0, 0x3, 0x3b30, 0x4, 0x0, 0x401, 0x3cd9, 0x3, 0x7, 0x2c, 0x1, 0x7, 0x800, 0x3ff, 0x8, 0x1, 0x7, 0x8a30, 0x4, 0x3, 0x6, 0x0, 0x2, 0xfffffffd, 0x8, 0x3ff, 0x3, 0x3, 0xef4d, 0x2e0594bb, 0x7, 0x7fff, 0x400, 0x1725, 0x0, 0x5, 0x100, 0xfe26, 0xc748, 0x3, 0x4, 0xa, 0xda4, 0x1, 0x1, 0x2, 0x800, 0x0, 0xc7, 0x6, 0x4ee, 0x0, 0x4, 0x1, 0xf, 0x7, 0x6, 0x1000000, 0x4, 0x7, 0x401, 0x3, 0x4, 0x6, 0x4, 0x7f, 0x0, 0x0, 0x2, 0x5, 0x5, 0x3, 0x401, 0xd17a, 0x7, 0x0, 0xd6, 0x3, 0x800, 0x40, 0x669, 0x9, 0x0, 0x2c06, 0x3, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x5fac1451, 0x0, 0x9, 0x2, 0x5, 0x2, 0x5, 0x40, 0x1, 0x594, 0x7f, 0x4, 0x80000001, 0x7, 0x1ff, 0x1, 0x5, 0x4c13157c, 0x7fffffff, 0x5, 0x8, 0x6, 0xa, 0x6, 0x977e, 0x5, 0x4, 0x0, 0x9, 0x1ff, 0x6, 0x43e8, 0xf487, 0x1, 0x6a5, 0x35f1, 0xc, 0x8, 0x81, 0x6, 0x8a, 0x8, 0x9, 0x9, 0x0, 0x7, 0x8, 0xc29a, 0x7fff, 0x5b9a, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x80000001, 0xc, 0x1, 0xb9, 0x8, 0x1000, 0x5ec, 0x0, 0x80000001, 0x4, 0x3, 0x7ca, 0x6, 0x10001, 0x0, 0x101, 0x40, 0x9, 0xd260, 0xc75, 0xc, 0x10, 0x1, 0x7fff, 0x7535, 0x62, 0xe, 0x3ff, 0x3, 0x9, 0x9, 0x2, 0x3, 0x9, 0x63e, 0xff, 0x5, 0xffffff7f, 0x1, 0x2, 0x101, 0xfff, 0xfff, 0x5, 0x0, 0x8, 0x8499, 0x8000, 0x1, 0xd63, 0x8, 0x2, 0x80000000, 0x3ff, 0x1, 0xe, 0x2, 0x1, 0x6, 0x1000, 0xffff, 0x40, 0x2, 0x7, 0x6, 0xffffffd4, 0x2, 0x2, 0x100, 0x4, 0x6, 0x4, 0xef48, 0x8000, 0x0, 0x1, 0x6e, 0x9, 0xffffffff, 0x1, 0x7, 0x8, 0x0, 0x3, 0x3, 0x9, 0x0, 0x7, 0xde7, 0x384759cf, 0x1, 0x6, 0xff, 0xbcac, 0x3, 0x7f, 0xffffff7f, 0x7, 0x5, 0x2, 0x4, 0x6aed, 0x7, 0x0, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000007, 0x1800000, 0x2, 0x1, {0x5, 0x2, 0x7944, 0x8, 0xb, 0x3}, {0x7, 0x1, 0x9d7e, 0x3, 0x2, 0x8}, 0x5a, 0x9, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x48c}}, 0x2000c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 252.481552ms ago: executing program 0 (id=1704): perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfffc000000000000, 0x2}, 0xa108, 0x0, 0x48, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f00000008c0), &(0x7f0000000940)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) 187.572704ms ago: executing program 1 (id=1705): io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x552f, 0x80, 0x5, 0x38a}) io_uring_setup(0x7c9d, &(0x7f0000000100)={0x0, 0x1, 0x100, 0x3, 0x2c1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) 162.683835ms ago: executing program 0 (id=1706): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r0, 0x2) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c42647612d91de4353d68b0fa00", 0x0, 0x8, 0x4000000, 0x7}, 0x3c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000640)=0x653, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 87.454067ms ago: executing program 0 (id=1707): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x31, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 84.382607ms ago: executing program 1 (id=1708): pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd25, 0x4, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) 0s ago: executing program 0 (id=1709): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x200080c4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_delete(r1) kernel console output (not intermixed with test programs): 1][ T4565] FAT-fs (loop3): Directory bread(block 1288) failed [ 57.961961][ T4565] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 58.166441][ T4576] bond0: (slave team0): Releasing backup interface [ 58.181527][ T4576] bridge_slave_0: left allmulticast mode [ 58.188025][ T4576] bridge_slave_0: left promiscuous mode [ 58.229604][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.260584][ T4576] bridge_slave_1: left allmulticast mode [ 58.272896][ T4576] bridge_slave_1: left promiscuous mode [ 58.283905][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.305339][ T4576] bond0: (slave bond_slave_0): Releasing backup interface [ 58.331718][ T4576] bond0: (slave bond_slave_1): Releasing backup interface [ 58.342729][ T4576] team0: Port device team_slave_0 removed [ 58.350042][ T4576] team0: Port device team_slave_1 removed [ 58.356249][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.365118][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.375071][ T4576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.409420][ T4583] geneve2: entered promiscuous mode [ 58.424625][ T4583] geneve2: entered allmulticast mode [ 58.434117][ T1036] team_slave_0: entered promiscuous mode [ 58.439838][ T1036] team_slave_1: entered promiscuous mode [ 58.505489][ T1036] team_slave_0: left promiscuous mode [ 58.510935][ T1036] team_slave_1: left promiscuous mode [ 59.737867][ T4628] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 59.790084][ T4628] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 59.811119][ T4628] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 59.834743][ T4628] bond1: (slave vxcan3): making interface the new active one [ 59.853186][ T4628] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 59.891311][ T4631] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 59.903394][ T4631] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 59.975456][ T4636] loop0: detected capacity change from 0 to 1024 [ 59.988945][ T4636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.015564][ T4636] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 60.034421][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 60.068579][ T4638] bond1: entered promiscuous mode [ 60.095037][ T4638] ip6gre1: entered promiscuous mode [ 60.106166][ T4638] ip6gre1: entered allmulticast mode [ 60.133542][ T4638] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 60.145763][ T4638] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 61.418047][ T4675] IPv6: NLM_F_REPLACE set, but no existing node found! [ 61.873078][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 61.896765][ T4688] tipc: Started in network mode [ 61.902608][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 61.919073][ T4688] tipc: Node identity 4, cluster identity 4711 [ 61.943025][ T4688] tipc: Node number set to 4 [ 61.971361][ T4690] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 62.076634][ T4696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.124937][ T4696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.446620][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 62.446637][ T28] audit: type=1400 audit(1779102130.533:460): avc: denied { setopt } for pid=4700 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.510964][ T28] audit: type=1400 audit(1779102130.533:461): avc: denied { read } for pid=4700 comm="syz.1.394" path="socket:[7722]" dev="sockfs" ino=7722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.650757][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.659017][ T3377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.834901][ T4725] loop2: detected capacity change from 0 to 512 [ 62.888317][ T4725] FAT-fs (loop2): FAT read failed (blocknr 128) [ 63.021283][ T4736] geneve2: entered promiscuous mode [ 63.028568][ T3651] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.044047][ T3651] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.061572][ T3651] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.093796][ T28] audit: type=1400 audit(1779102131.183:462): avc: denied { shutdown } for pid=4739 comm="syz.2.407" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.283525][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 63.333487][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 63.347369][ T4749] team1: entered promiscuous mode [ 63.369311][ T4749] team1: entered allmulticast mode [ 63.390383][ T4749] 8021q: adding VLAN 0 to HW filter on device team1 [ 63.456594][ T4751] team2: entered promiscuous mode [ 63.473249][ T4751] team2: entered allmulticast mode [ 63.493113][ T4751] 8021q: adding VLAN 0 to HW filter on device team2 [ 63.534853][ T28] audit: type=1400 audit(1779102131.623:463): avc: denied { name_bind } for pid=4752 comm="syz.2.411" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.291153][ T28] audit: type=1400 audit(1779102132.373:464): avc: denied { create } for pid=4792 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.537256][ T28] audit: type=1326 audit(1779102132.623:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x0 [ 64.657950][ T4811] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 64.814941][ T4818] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 64.823147][ T4818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.433'. [ 65.317999][ T4811] bond1: (slave veth3): Enslaving as an active interface with a down link [ 65.336111][ T4817] bond1: (slave dummy0): making interface the new active one [ 65.345943][ T4817] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 65.355007][ T4818] dummy0: entered promiscuous mode [ 65.360705][ T4818] bond1: (slave dummy0): Releasing active interface [ 65.757769][ T4736] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 65.815535][ T4736] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 65.823163][ T4842] loop0: detected capacity change from 0 to 4096 [ 65.838395][ T4842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.858825][ T4846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4846 comm=syz.2.443 [ 65.871256][ T28] audit: type=1400 audit(1779102133.943:466): avc: denied { write } for pid=4841 comm="syz.0.441" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.892896][ T28] audit: type=1400 audit(1779102133.943:467): avc: denied { add_name } for pid=4841 comm="syz.0.441" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.914750][ T4846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 65.935448][ T4736] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 65.948400][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.023066][ T3651] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 66.037443][ T3651] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 66.054501][ T3651] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 66.077340][ T3651] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 66.430376][ T4875] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 66.589439][ T4883] loop3: detected capacity change from 0 to 128 [ 66.670102][ T4885] syz.3.457: attempt to access beyond end of device [ 66.670102][ T4885] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 66.702716][ T4885] syz.3.457: attempt to access beyond end of device [ 66.702716][ T4885] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 66.737488][ T4885] syz.3.457: attempt to access beyond end of device [ 66.737488][ T4885] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 66.783789][ T3438] kworker/u8:7: attempt to access beyond end of device [ 66.783789][ T3438] loop3: rw=1, sector=174, nr_sectors = 1 limit=128 [ 66.817495][ T3438] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 66.873641][ T28] audit: type=1400 audit(1779102134.953:468): avc: denied { nlmsg_read } for pid=4888 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.072802][ T28] audit: type=1400 audit(1779102135.153:469): avc: denied { create } for pid=4895 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.742574][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 67.742592][ T28] audit: type=1400 audit(1779102135.823:471): avc: denied { bind } for pid=4917 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.871051][ T4922] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 67.960797][ T4922] bond1: (slave veth3): Enslaving as an active interface with a down link [ 67.987279][ T4922] bond1: (slave dummy0): making interface the new active one [ 67.995370][ T4922] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 68.007945][ T4922] netlink: 'syz.4.471': attribute type 10 has an invalid length. [ 68.015832][ T4922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.471'. [ 68.024841][ T4922] dummy0: entered promiscuous mode [ 68.047368][ T4922] bond1: (slave dummy0): Releasing active interface [ 68.147710][ T28] audit: type=1400 audit(1779102136.223:472): avc: denied { write } for pid=4927 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.186609][ T4935] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.484'. [ 68.199759][ T4934] loop0: detected capacity change from 0 to 512 [ 68.219242][ T4935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.484'. [ 68.231361][ T4934] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 68.248068][ T4934] EXT4-fs (loop0): group descriptors corrupted! [ 68.471892][ T28] audit: type=1400 audit(1779102136.553:473): avc: denied { setopt } for pid=4949 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.356983][ T28] audit: type=1400 audit(1779102137.443:474): avc: denied { allowed } for pid=4972 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.320897][ T28] audit: type=1400 audit(1779102138.403:475): avc: denied { read } for pid=5001 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.410266][ T28] audit: type=1400 audit(1779102138.493:476): avc: denied { read } for pid=5006 comm="syz.4.501" path="socket:[9274]" dev="sockfs" ino=9274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.539264][ T28] audit: type=1400 audit(1779102138.623:477): avc: denied { bind } for pid=5011 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.641627][ T28] audit: type=1400 audit(1779102138.723:478): avc: denied { sqpoll } for pid=5017 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.793660][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 70.856011][ T5025] team0: entered promiscuous mode [ 70.882610][ T5025] team0: entered allmulticast mode [ 70.896610][ T5025] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.034571][ T5033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 71.068351][ T5035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.511'. [ 71.239770][ T5044] geneve2: entered promiscuous mode [ 71.254999][ T5044] geneve2: entered allmulticast mode [ 71.276404][ T28] audit: type=1400 audit(1779102139.363:479): avc: denied { write } for pid=5045 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.304072][ T28] audit: type=1400 audit(1779102139.383:480): avc: denied { read } for pid=5045 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.328764][ T5049] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 71.337166][ T5049] netlink: 152 bytes leftover after parsing attributes in process `syz.0.517'. [ 71.384832][ T5049] .`: renamed from bond0 (while UP) [ 71.517115][ T5059] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 71.526218][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 71.552624][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 71.595852][ T5059] bond0: (slave veth5): Enslaving as an active interface with a down link [ 71.675604][ T5065] loop2: detected capacity change from 0 to 128 [ 71.692830][ T5059] bond0: (slave dummy0): making interface the new active one [ 71.724571][ T5059] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.742718][ T5066] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 71.785802][ T5066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.522'. [ 71.824969][ T5066] dummy0: entered promiscuous mode [ 71.838473][ T5066] bond0: (slave dummy0): Releasing active interface [ 72.507673][ T5100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 72.995628][ T5120] loop0: detected capacity change from 0 to 512 [ 73.039914][ T5120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.069006][ T5120] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.190975][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.291362][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 73.291379][ T28] audit: type=1400 audit(1779102141.373:484): avc: denied { read } for pid=5127 comm="syz.3.541" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.362589][ T28] audit: type=1400 audit(1779102141.373:485): avc: denied { open } for pid=5127 comm="syz.3.541" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.410036][ T5140] loop2: detected capacity change from 0 to 512 [ 73.423943][ T5140] EXT4-fs: Ignoring removed nobh option [ 73.453696][ T5140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.476493][ T5145] loop0: detected capacity change from 0 to 512 [ 73.478706][ T5140] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.490776][ T5141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.545'. [ 73.531039][ T28] audit: type=1400 audit(1779102141.613:486): avc: denied { write } for pid=5138 comm="syz.2.546" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.694013][ T28] audit: type=1400 audit(1779102141.613:487): avc: denied { remove_name } for pid=5138 comm="syz.2.546" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.733204][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.766756][ T28] audit: type=1400 audit(1779102141.613:488): avc: denied { unlink } for pid=5138 comm="syz.2.546" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.836943][ T28] audit: type=1400 audit(1779102141.903:489): avc: denied { remount } for pid=5144 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 74.535144][ T5165] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.796781][ T5145] syz.0.547 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 74.832230][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: syz.0.547 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.832322][ T5145] Tainted: [W]=WARN [ 74.832331][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.832346][ T5145] Call Trace: [ 74.832354][ T5145] [ 74.832438][ T5145] __dump_stack+0x1d/0x30 [ 74.832486][ T5145] dump_stack_lvl+0x95/0xd0 [ 74.832508][ T5145] dump_stack+0x15/0x1b [ 74.832532][ T5145] dump_header+0x80/0x240 [ 74.832560][ T5145] oom_kill_process+0x295/0x350 [ 74.832601][ T5145] out_of_memory+0x97d/0xb80 [ 74.832706][ T5145] try_charge_memcg+0x62f/0xa10 [ 74.832821][ T5145] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 74.832849][ T5145] __alloc_frozen_pages_noprof+0x18a/0x350 [ 74.832899][ T5145] alloc_pages_mpol+0xb3/0x260 [ 74.832931][ T5145] alloc_pages_noprof+0x8f/0x140 [ 74.832961][ T5145] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 74.833003][ T5145] __kvmalloc_node_noprof+0x3d4/0x640 [ 74.833149][ T5145] ? futex_hash_allocate+0x190/0x9a0 [ 74.833187][ T5145] ? futex_hash_allocate+0x190/0x9a0 [ 74.833261][ T5145] futex_hash_allocate+0x190/0x9a0 [ 74.833337][ T5145] ? cap_task_prctl+0x13f/0x6b0 [ 74.833363][ T5145] futex_hash_prctl+0xd8/0xf0 [ 74.833392][ T5145] __se_sys_prctl+0x4f4/0x1400 [ 74.833422][ T5145] __x64_sys_prctl+0x67/0x80 [ 74.833450][ T5145] x64_sys_call+0x2533/0x3020 [ 74.833482][ T5145] do_syscall_64+0x12c/0x3b0 [ 74.833540][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.833565][ T5145] RIP: 0033:0x7f198e91ce59 [ 74.833586][ T5145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.833606][ T5145] RSP: 002b:00007f198d36f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 74.833646][ T5145] RAX: ffffffffffffffda RBX: 00007f198eb95fa0 RCX: 00007f198e91ce59 [ 74.833664][ T5145] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 74.833679][ T5145] RBP: 00007f198e9b2d6f R08: 0000000000000000 R09: 0000000000000000 [ 74.833693][ T5145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.833757][ T5145] R13: 00007f198eb96038 R14: 00007f198eb95fa0 R15: 00007ffff897f448 [ 74.833777][ T5145] [ 75.059217][ T5145] memory: usage 277040kB, limit 307200kB, failcnt 297 [ 75.066083][ T5145] memory+swap: usage 275668kB, limit 9007199254740988kB, failcnt 0 [ 75.074189][ T5145] kmem: usage 273244kB, limit 9007199254740988kB, failcnt 0 [ 75.081542][ T5145] Memory cgroup stats for /syz0: [ 75.081833][ T5145] cache 4096 [ 75.090300][ T5145] rss 0 [ 75.093219][ T5145] shmem 0 [ 75.096192][ T5145] mapped_file 0 [ 75.099669][ T5145] dirty 0 [ 75.103007][ T5145] writeback 0 [ 75.144548][ T5145] workingset_refault_anon 18 [ 75.150829][ T5145] workingset_refault_file 526 [ 75.157440][ T5145] swap 458752 [ 75.161877][ T5145] swapcached 6823936 [ 75.178226][ T5145] pgpgin 79243 [ 75.183194][ T5145] pgpgout 79242 [ 75.188962][ T5145] pgfault 96923 [ 75.196758][ T5145] pgmajfault 2071 [ 75.200804][ T5145] inactive_anon 0 [ 75.207516][ T5145] active_anon 0 [ 75.220658][ T5145] inactive_file 0 [ 75.227326][ T5145] active_file 4096 [ 75.239632][ T5145] unevictable 0 [ 75.250063][ T5145] hierarchical_memory_limit 314572800 [ 75.264711][ T5145] hierarchical_memsw_limit 9223372036854771712 [ 75.272928][ T28] audit: type=1400 audit(1779102143.353:490): avc: denied { ioctl } for pid=5185 comm="syz.3.563" path="socket:[9585]" dev="sockfs" ino=9585 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.307869][ T5145] total_cache 4096 [ 75.321811][ T5145] total_rss 0 [ 75.329274][ T5145] total_shmem 0 [ 75.338440][ T5145] total_mapped_file 0 [ 75.348243][ T5145] total_dirty 0 [ 75.357256][ T5145] total_writeback 0 [ 75.366225][ T5145] total_workingset_refault_anon 18 [ 75.375377][ T5145] total_workingset_refault_file 526 [ 75.392938][ T5145] total_swap 458752 [ 75.403737][ T5145] total_swapcached 6823936 [ 75.415848][ T5145] total_pgpgin 79243 [ 75.425678][ T5145] total_pgpgout 79242 [ 75.440803][ T5145] total_pgfault 96923 [ 75.452986][ T5145] total_pgmajfault 2071 [ 75.463344][ T5145] total_inactive_anon 0 [ 75.474873][ T5145] total_active_anon 0 [ 75.484681][ T5145] total_inactive_file 0 [ 75.496083][ T5145] total_active_file 4096 [ 75.504660][ T5145] total_unevictable 0 [ 75.517866][ T5145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.547,pid=5144,uid=0 [ 75.559405][ T5145] Memory cgroup out of memory: Killed process 5144 (syz.0.547) total-vm:96216kB, anon-rss:1228kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 75.695047][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.736379][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.778723][ T5203] erspan0: entered promiscuous mode [ 75.792253][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 75.905248][ T5202] loop2: detected capacity change from 0 to 8192 [ 75.982467][ T5202] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 76.006625][ T5202] FAT-fs (loop2): Filesystem has been set read-only [ 76.111464][ T28] audit: type=1400 audit(1779102144.193:491): avc: denied { create } for pid=5209 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.222069][ T28] audit: type=1400 audit(1779102144.303:492): avc: denied { cpu } for pid=5213 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.243561][ T5233] loop1: detected capacity change from 0 to 128 [ 77.287552][ T28] audit: type=1326 audit(1779102145.373:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987da1ce59 code=0x7ffc0000 [ 77.734183][ T5247] netlink: 'syz.0.587': attribute type 4 has an invalid length. [ 77.750044][ T5247] netlink: 152 bytes leftover after parsing attributes in process `syz.0.587'. [ 78.424646][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 78.768869][ T5258] loop1: detected capacity change from 0 to 512 [ 78.864347][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.890357][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.982500][ T5258] EXT4-fs: Ignoring removed nobh option [ 79.100088][ T5258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.332503][ T5258] EXT4-fs (loop1): 1 truncate cleaned up [ 79.440363][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.587722][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 79.587740][ T28] audit: type=1400 audit(1779102147.663:511): avc: denied { write } for pid=5257 comm="syz.1.592" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.649803][ T28] audit: type=1400 audit(1779102147.713:512): avc: denied { watch } for pid=5257 comm="syz.1.592" path="/120/file2" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.743453][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.845533][ T5298] loop0: detected capacity change from 0 to 512 [ 79.886169][ T5298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 79.911837][ T5298] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.929508][ T28] audit: type=1400 audit(1779102148.013:513): avc: denied { write } for pid=5297 comm="syz.0.605" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.963906][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 80.649251][ T5318] ref_ctr increment failed for inode: 0x27f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104c7b600 [ 80.689501][ T5317] uprobe: syz.3.611:5317 failed to unregister, leaking uprobe [ 80.732455][ T5322] loop1: detected capacity change from 0 to 128 [ 80.770625][ T28] audit: type=1400 audit(1779102148.853:514): avc: denied { setopt } for pid=5323 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.856783][ T5326] syz.1.613: attempt to access beyond end of device [ 80.856783][ T5326] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 80.894620][ T5326] syz.1.613: attempt to access beyond end of device [ 80.894620][ T5326] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 80.930430][ T5326] syz.1.613: attempt to access beyond end of device [ 80.930430][ T5326] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 80.972368][ T5326] syz.1.613: attempt to access beyond end of device [ 80.972368][ T5326] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 81.006921][ T5326] syz.1.613: attempt to access beyond end of device [ 81.006921][ T5326] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 81.031976][ T5326] syz.1.613: attempt to access beyond end of device [ 81.031976][ T5326] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 81.062111][ T5326] syz.1.613: attempt to access beyond end of device [ 81.062111][ T5326] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 81.081274][ T5326] syz.1.613: attempt to access beyond end of device [ 81.081274][ T5326] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 81.112564][ T5326] syz.1.613: attempt to access beyond end of device [ 81.112564][ T5326] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 81.135310][ T5326] syz.1.613: attempt to access beyond end of device [ 81.135310][ T5326] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 81.695425][ T5342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 81.733933][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.744871][ T5342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 81.751775][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.784814][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.811708][ T5342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 81.811712][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.921382][ T5345] IPv6: Can't replace route, no match found [ 81.987794][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 82.019507][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'. [ 82.278608][ T28] audit: type=1400 audit(1779102150.363:515): avc: denied { mount } for pid=5368 comm="syz.0.633" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.318051][ T5371] netlink: 'syz.2.634': attribute type 29 has an invalid length. [ 83.540566][ T28] audit: type=1400 audit(1779102151.623:516): avc: denied { read } for pid=9 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10837 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.861290][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'. [ 83.918533][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 84.203858][ T28] audit: type=1400 audit(1779102152.293:517): avc: denied { ioctl } for pid=5412 comm="syz.3.650" path="socket:[9967]" dev="sockfs" ino=9967 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.327087][ T28] audit: type=1400 audit(1779102152.413:518): avc: denied { create } for pid=5415 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.397268][ T28] audit: type=1400 audit(1779102152.473:519): avc: denied { read } for pid=5415 comm="syz.1.651" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.475588][ T28] audit: type=1400 audit(1779102152.483:520): avc: denied { open } for pid=5415 comm="syz.1.651" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.565843][ T5396] kexec: Could not allocate control_code_buffer [ 84.617224][ T28] audit: type=1400 audit(1779102152.703:521): avc: denied { ioctl } for pid=5415 comm="syz.1.651" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.674064][ T5437] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 85.699781][ T5440] loop0: detected capacity change from 0 to 1024 [ 85.726642][ T5440] EXT4-fs: test_dummy_encryption option not supported [ 86.048897][ T5450] IPv6: Can't replace route, no match found [ 86.093370][ T28] audit: type=1400 audit(1779102154.183:522): avc: denied { read write } for pid=5452 comm="syz.3.664" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.167208][ T28] audit: type=1400 audit(1779102154.183:523): avc: denied { open } for pid=5452 comm="syz.3.664" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.016872][ T5476] syz.4.672: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 87.053975][ T5476] CPU: 0 UID: 0 PID: 5476 Comm: syz.4.672 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.054016][ T5476] Tainted: [W]=WARN [ 87.054024][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.054077][ T5476] Call Trace: [ 87.054083][ T5476] [ 87.054092][ T5476] __dump_stack+0x1d/0x30 [ 87.054120][ T5476] dump_stack_lvl+0x95/0xd0 [ 87.054146][ T5476] dump_stack+0x15/0x1b [ 87.054169][ T5476] warn_alloc+0x145/0x1c0 [ 87.054240][ T5476] ? futex_unqueue+0xc5/0xf0 [ 87.054271][ T5476] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 87.054299][ T5476] ? __pfx_futex_wake_mark+0x10/0x10 [ 87.054323][ T5476] ? __rcu_read_unlock+0x4e/0x70 [ 87.054417][ T5476] ? avc_has_perm_noaudit+0xab/0x130 [ 87.054459][ T5476] ? should_fail_ex+0x30/0x280 [ 87.054493][ T5476] vmalloc_user_noprof+0x7d/0xb0 [ 87.054514][ T5476] ? xskq_create+0x80/0xe0 [ 87.054543][ T5476] xskq_create+0x80/0xe0 [ 87.054591][ T5476] xsk_init_queue+0x70/0xb0 [ 87.054645][ T5476] xsk_setsockopt+0x477/0x640 [ 87.054678][ T5476] ? __pfx_xsk_setsockopt+0x10/0x10 [ 87.054722][ T5476] __sys_setsockopt+0x184/0x200 [ 87.054751][ T5476] __x64_sys_setsockopt+0x64/0x80 [ 87.054842][ T5476] x64_sys_call+0x2327/0x3020 [ 87.054870][ T5476] do_syscall_64+0x12c/0x3b0 [ 87.054905][ T5476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.054939][ T5476] RIP: 0033:0x7fcd967cce59 [ 87.055014][ T5476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.055035][ T5476] RSP: 002b:00007fcd95227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.055061][ T5476] RAX: ffffffffffffffda RBX: 00007fcd96a45fa0 RCX: 00007fcd967cce59 [ 87.055077][ T5476] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 87.055147][ T5476] RBP: 00007fcd96862d6f R08: 0000000000000004 R09: 0000000000000000 [ 87.055164][ T5476] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 87.055181][ T5476] R13: 00007fcd96a46038 R14: 00007fcd96a45fa0 R15: 00007fff6adec008 [ 87.055205][ T5476] [ 87.060570][ T5476] Mem-Info: [ 87.280724][ T5476] active_anon:42158 inactive_anon:9331 isolated_anon:0 [ 87.280724][ T5476] active_file:24680 inactive_file:2789 isolated_file:0 [ 87.280724][ T5476] unevictable:0 dirty:282 writeback:0 [ 87.280724][ T5476] slab_reclaimable:3346 slab_unreclaimable:17449 [ 87.280724][ T5476] mapped:34015 shmem:43400 pagetables:1180 [ 87.280724][ T5476] sec_pagetables:0 bounce:0 [ 87.280724][ T5476] kernel_misc_reclaimable:0 [ 87.280724][ T5476] free:1750934 free_pcp:88634 free_cma:0 [ 87.327584][ T5476] Node 0 active_anon:168632kB inactive_anon:37324kB active_file:98720kB inactive_file:11156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125736kB dirty:1128kB writeback:0kB shmem:173600kB kernel_stack:3824kB pagetables:4720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 87.386832][ T5476] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.454212][ T5476] lowmem_reserve[]: 0 2878 7857 7857 [ 87.472046][ T5476] Node 0 DMA32 free:2944512kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948036kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 87.541266][ T5476] lowmem_reserve[]: 0 0 4978 4978 [ 87.553096][ T5476] Node 0 Normal free:4052016kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:168640kB inactive_anon:37324kB active_file:98720kB inactive_file:11156kB unevictable:0kB writepending:1128kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:342824kB local_pcp:67812kB free_cma:0kB [ 87.632939][ T5476] lowmem_reserve[]: 0 0 0 0 [ 87.651277][ T5476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.687462][ T5476] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944512kB [ 87.736308][ T5476] Node 0 Normal: 41*4kB (UME) 62*8kB (UE) 453*16kB (UM) 656*32kB (UME) 400*64kB (UME) 189*128kB (UME) 54*256kB (UM) 33*512kB (UM) 25*1024kB (UM) 45*2048kB (UME) 935*4096kB (UM) = 4056932kB [ 87.777704][ T5476] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 87.804541][ T5476] 70899 total pagecache pages [ 87.820818][ T5476] 12 pages in swap cache [ 87.826869][ T5476] Free swap = 94416kB [ 87.843414][ T5476] Total swap = 124996kB [ 87.847687][ T5476] 2097051 pages RAM [ 87.861652][ T5476] 0 pages HighMem/MovableOnly [ 87.874605][ T5476] 81643 pages reserved [ 87.950699][ T28] audit: type=1400 audit(1779102156.033:524): avc: denied { execute } for pid=5485 comm="syz.4.676" path="/122/file0" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.985886][ T5485] uprobe: syz.4.676:5485 failed to unregister, leaking uprobe [ 88.074994][ T28] audit: type=1400 audit(1779102157.159:525): avc: denied { getopt } for pid=5492 comm="syz.4.679" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.136439][ T28] audit: type=1400 audit(1779102157.219:526): avc: denied { create } for pid=5494 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.185476][ T5497] capability: warning: `syz.1.681' uses 32-bit capabilities (legacy support in use) [ 88.204346][ T28] audit: type=1400 audit(1779102157.219:527): avc: denied { write } for pid=5494 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.336813][ T28] audit: type=1400 audit(1779102157.419:528): avc: denied { setopt } for pid=5508 comm="syz.2.686" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.371956][ T5509] xt_hashlimit: size too large, truncated to 1048576 [ 88.607870][ T5515] netlink: 'syz.2.687': attribute type 1 has an invalid length. [ 88.635073][ T5515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.671718][ T5515] vlan2: entered allmulticast mode [ 88.678675][ T5515] bond2: entered allmulticast mode [ 88.713906][ T5515] bond2: (slave geneve2): making interface the new active one [ 88.725120][ T5515] geneve2: entered allmulticast mode [ 88.740387][ T5515] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 88.752650][ T3438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.768859][ T3438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.779551][ T3438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.811462][ T3438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.876115][ T5521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.935197][ T5521] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 88.982628][ T3438] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 89.113826][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 89.154876][ T28] audit: type=1326 audit(1779102158.239:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5532 comm="syz.3.695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b4a9ce59 code=0x7ffc0000 [ 89.221324][ T28] audit: type=1326 audit(1779102158.269:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5532 comm="syz.3.695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b4a9ce59 code=0x7ffc0000 [ 89.273838][ T5538] bond2: entered promiscuous mode [ 89.354214][ T5545] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 89.544708][ T5542] bridge0: port 3(gretap0) entered blocking state [ 89.556477][ T5542] bridge0: port 3(gretap0) entered disabled state [ 89.592553][ T5542] gretap0: entered allmulticast mode [ 89.764929][ T5542] gretap0: entered promiscuous mode [ 90.029492][ T5575] tipc: Enabling of bearer rejected, failed to enable media [ 90.205834][ T5585] netlink: 148 bytes leftover after parsing attributes in process `syz.0.712'. [ 90.270576][ T5591] netlink: 56 bytes leftover after parsing attributes in process `syz.4.714'. [ 90.310018][ T5601] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.396648][ T5607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.722'. [ 90.408856][ T5607] ip6gre1: entered promiscuous mode [ 90.414381][ T5607] ip6gre1: entered allmulticast mode [ 90.429427][ T5609] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 90.453095][ T5609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.467435][ T5607] netlink: 'syz.2.722': attribute type 6 has an invalid length. [ 90.488350][ T5607] netlink: 72 bytes leftover after parsing attributes in process `syz.2.722'. [ 90.493471][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 90.493488][ T28] audit: type=1326 audit(1779102159.569:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.3.723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29b4a9ce59 code=0x0 [ 90.505449][ T5609] vlan3: entered allmulticast mode [ 90.533857][ T5609] bond2: entered allmulticast mode [ 90.610699][ T5609] bond2: (slave geneve2): making interface the new active one [ 90.618305][ T5609] geneve2: entered allmulticast mode [ 90.625144][ T5609] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 90.677850][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 90.693851][ T5621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.718853][ T5621] bond4: (slave wireguard0): refused to change device type [ 90.908143][ T5630] netlink: 76 bytes leftover after parsing attributes in process `syz.4.730'. [ 90.916870][ T28] audit: type=1326 audit(1779102159.989:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.2.729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a388ece59 code=0x0 [ 91.162320][ T5656] netlink: 'syz.2.746': attribute type 4 has an invalid length. [ 91.195252][ T5656] netlink: 'syz.2.746': attribute type 4 has an invalid length. [ 91.368115][ T5667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.399275][ T5667] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 91.441023][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 91.472640][ T3438] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 91.542841][ T5681] netlink: 'syz.4.747': attribute type 39 has an invalid length. [ 91.602604][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 91.618319][ T5684] Invalid argument reading file caps for ./file0 [ 91.626361][ T28] audit: type=1400 audit(1779102161.699:560): avc: denied { execute_no_trans } for pid=5668 comm="syz.2.741" path="/156/file0" dev="tmpfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.871704][ T5705] tipc: Enabled bearer , priority 0 [ 91.902741][ T5705] syzkaller0: entered promiscuous mode [ 91.908335][ T5705] syzkaller0: entered allmulticast mode [ 91.915353][ T5705] tipc: Resetting bearer [ 91.937207][ T5703] tipc: Resetting bearer [ 91.968426][ T5703] tipc: Disabling bearer [ 92.069398][ T28] audit: type=1400 audit(1779102162.149:561): avc: denied { mounton } for pid=5720 comm="syz.4.762" path="/151/file0" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.563363][ T5727] Set syz1 is full, maxelem 65536 reached [ 92.925554][ T5754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.956301][ T5754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.122583][ T28] audit: type=1400 audit(1779102163.199:562): avc: denied { nlmsg_write } for pid=5760 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.208502][ T28] audit: type=1400 audit(1779102163.209:563): avc: denied { nlmsg_read } for pid=5760 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.248297][ T5756] loop2: detected capacity change from 0 to 256 [ 93.271444][ T5756] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 93.501898][ T5775] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.780'. [ 93.518447][ T5775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.780'. [ 93.620624][ T5749] loop1: detected capacity change from 0 to 512 [ 93.683209][ T5777] loop2: detected capacity change from 0 to 128 [ 93.788322][ T5777] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.817013][ T5777] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.878340][ T28] audit: type=1400 audit(1779102163.959:564): avc: denied { write } for pid=5776 comm="syz.2.781" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.905818][ T5749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.927942][ T5749] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.933464][ T28] audit: type=1400 audit(1779102163.989:565): avc: denied { setattr } for pid=5776 comm="syz.2.781" path="/160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.994409][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.069957][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.177152][ T5786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.194130][ T28] audit: type=1400 audit(1779102164.269:566): avc: denied { read } for pid=5787 comm="syz.2.793" path="socket:[13101]" dev="sockfs" ino=13101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.204353][ T5786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.255546][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 95.270226][ T5812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 95.296690][ T5815] bond5: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 95.305546][ T5815] bond5: entered allmulticast mode [ 95.314196][ T5812] bond4: (slave wireguard0): refused to change device type [ 95.325135][ T5815] ip6gretap2: entered promiscuous mode [ 95.332139][ T5815] ip6gretap2: entered allmulticast mode [ 95.337966][ T5815] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 95.755111][ T5829] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.798'. [ 95.811944][ T5831] netlink: 48 bytes leftover after parsing attributes in process `syz.4.799'. [ 95.916231][ T28] audit: type=1326 audit(1779102165.999:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 95.944302][ T28] audit: type=1326 audit(1779102165.999:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 95.970501][ T28] audit: type=1326 audit(1779102166.029:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 95.996401][ T28] audit: type=1326 audit(1779102166.029:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 96.022112][ T28] audit: type=1326 audit(1779102166.029:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 96.069821][ T28] audit: type=1326 audit(1779102166.029:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 96.086051][ T5841] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 96.095473][ T28] audit: type=1326 audit(1779102166.029:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 96.128700][ T28] audit: type=1326 audit(1779102166.029:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 96.154347][ T28] audit: type=1326 audit(1779102166.029:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 96.179898][ T28] audit: type=1326 audit(1779102166.029:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.4.802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd967cce59 code=0x7ffc0000 [ 96.222144][ T5841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.248572][ T5841] bond3: (slave bond4): making interface the new active one [ 96.265219][ T5841] bond3: (slave bond4): Enslaving as an active interface with an up link [ 96.294909][ T5846] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 96.312762][ T3965] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.324138][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.803'. [ 96.339871][ T5841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.397824][ T5858] loop2: detected capacity change from 0 to 512 [ 96.406591][ T5858] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.811: invalid indirect mapped block 256 (level 2) [ 96.420161][ T5858] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 96.420323][ T5858] EXT4-fs (loop2): Remounting filesystem read-only [ 96.429478][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 96.429500][ C1] EXT4-fs (loop2): initial error at time 1779102166: ext4_free_branches:1023: inode 11 [ 96.429532][ C1] EXT4-fs (loop2): last error at time 1779102166: ext4_free_branches:1023: inode 11 [ 96.461882][ T5858] EXT4-fs (loop2): 2 truncates cleaned up [ 96.468319][ T5858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.279430][ T5866] netlink: 'syz.0.813': attribute type 4 has an invalid length. [ 97.350294][ T5866] netlink: 'syz.0.813': attribute type 4 has an invalid length. [ 97.860384][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.884892][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.385379][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.612345][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 98.766036][ T5903] syzkaller0: entered promiscuous mode [ 98.778713][ T5903] syzkaller0: entered allmulticast mode [ 98.817311][ T5903] syzkaller0: tun_net_xmit 1280 [ 98.822423][ T5903] syzkaller0: create flow: hash 1665159259 index 1 [ 98.836172][ T5902] syzkaller0: delete flow: hash 1665159259 index 1 [ 98.863548][ T10] Process accounting resumed [ 99.775917][ T5923] loop2: detected capacity change from 0 to 512 [ 99.911509][ T5923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.051120][ T5923] EXT4-fs (loop2): 1 truncate cleaned up [ 100.331792][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.510833][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.650938][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 100.673770][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 100.697336][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'. [ 101.313873][ T5995] loop3: detected capacity change from 0 to 512 [ 101.347893][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.387840][ T5995] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.438637][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 101.438655][ T28] audit: type=1400 audit(1779102171.519:596): avc: denied { write } for pid=5994 comm="syz.3.858" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.537913][ T28] audit: type=1400 audit(1779102171.559:597): avc: denied { write } for pid=5994 comm="syz.3.858" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.584797][ T5995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.659697][ T6001] netlink: 'syz.1.860': attribute type 1 has an invalid length. [ 101.739940][ T6001] bond2: entered promiscuous mode [ 101.749120][ T5980] syz.4.853 (5980) used greatest stack depth: 7128 bytes left [ 101.769839][ T6001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.861363][ T6001] bond2: (slave bridge3): making interface the new active one [ 101.875367][ T6001] bridge3: entered promiscuous mode [ 101.890488][ T6001] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 101.929953][ T6020] netlink: 'syz.2.866': attribute type 4 has an invalid length. [ 101.979397][ T6020] netlink: 'syz.2.866': attribute type 4 has an invalid length. [ 102.005755][ T6023] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 102.045757][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 102.046139][ T6023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.098020][ T6027] bond3: entered promiscuous mode [ 102.194587][ T6031] netlink: 52 bytes leftover after parsing attributes in process `syz.2.869'. [ 102.203652][ T6031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.869'. [ 102.228131][ T6023] bond3: (slave dummy0): making interface the new active one [ 102.252783][ T6023] dummy0: entered promiscuous mode [ 102.265826][ T6023] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 102.289701][ T6027] bond3 (unregistering): left promiscuous mode [ 102.302634][ T6027] dummy0: left promiscuous mode [ 102.308797][ T6031] loop2: detected capacity change from 0 to 512 [ 102.316360][ T6027] bond3 (unregistering): (slave dummy0): Releasing active interface [ 102.348846][ T6031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.373748][ T6027] bond3 (unregistering): Released all slaves [ 102.385867][ T6031] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.419844][ T28] audit: type=1400 audit(1779102172.499:598): avc: denied { write } for pid=6030 comm="syz.2.869" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.503126][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 102.651369][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 102.786184][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 102.837149][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.880'. [ 102.875037][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.931722][ T28] audit: type=1400 audit(1779102173.009:599): avc: denied { shutdown } for pid=6060 comm="syz.3.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.113879][ T28] audit: type=1400 audit(1779102173.189:600): avc: denied { write } for pid=6073 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.135786][ T6078] 8021q: VLANs not supported on sit0 [ 103.202118][ T28] audit: type=1400 audit(1779102173.279:601): avc: denied { ioctl } for pid=6084 comm="syz.2.894" path="socket:[14118]" dev="sockfs" ino=14118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.319225][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.341075][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.362412][ T6095] bond0 (unregistering): Released all slaves [ 104.106728][ T6116] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.137238][ T6116] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 104.188056][ T6119] macvlan2: entered promiscuous mode [ 104.202317][ T6119] macvlan2: entered allmulticast mode [ 104.220070][ T6119] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 104.418253][ T6121] loop1: detected capacity change from 0 to 512 [ 104.459517][ T6121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.472597][ T6121] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.496330][ T6135] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 104.508995][ T28] audit: type=1400 audit(1779102174.589:602): avc: denied { write } for pid=6120 comm="syz.1.904" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.540163][ T6121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.564665][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.597239][ T28] audit: type=1400 audit(1779102174.589:603): avc: denied { write } for pid=6120 comm="syz.1.904" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.632453][ T6138] bond0: entered promiscuous mode [ 104.655668][ T6139] dummy0: left promiscuous mode [ 104.673154][ T6139] bond0: (slave dummy0): making interface the new active one [ 104.680622][ T6139] dummy0: entered promiscuous mode [ 104.687312][ T6139] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.783424][ T6135] bond0 (unregistering): left promiscuous mode [ 104.807851][ T6135] dummy0: left promiscuous mode [ 104.820197][ T6135] bond0 (unregistering): (slave dummy0): Releasing active interface [ 104.840896][ T6135] bond0 (unregistering): Released all slaves [ 104.897812][ T28] audit: type=1400 audit(1779102174.979:604): avc: denied { relabelfrom } for pid=6154 comm="syz.0.913" name="NETLINK" dev="sockfs" ino=14170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.923820][ T28] audit: type=1400 audit(1779102175.009:605): avc: denied { relabelto } for pid=6154 comm="syz.0.913" name="NETLINK" dev="sockfs" ino=14170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:chkpwd_exec_t tclass=netlink_xfrm_socket permissive=1 [ 106.102378][ T6187] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 106.110580][ T6187] netlink: 'syz.4.927': attribute type 2 has an invalid length. [ 106.272059][ T3376] IPVS: starting estimator thread 0... [ 106.439962][ T6207] IPVS: using max 2592 ests per chain, 129600 per kthread [ 107.181555][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.188840][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.243990][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.253142][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.502608][ T3651] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.511698][ T3651] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.529888][ T3651] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.541011][ T3651] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.545607][ T6157] Set syz1 is full, maxelem 65536 reached [ 107.550435][ T3651] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.570393][ T3651] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.579655][ T3651] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.588838][ T3651] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.707592][ T6238] loop2: detected capacity change from 0 to 512 [ 107.740856][ T6238] EXT4-fs: Ignoring removed nobh option [ 107.786107][ T6238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.839285][ T6238] EXT4-fs (loop2): 1 truncate cleaned up [ 107.845716][ T6238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.875185][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 107.875201][ T28] audit: type=1400 audit(1779102177.959:682): avc: denied { write } for pid=6229 comm="syz.2.945" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.097494][ T6249] geneve2: left promiscuous mode [ 108.117435][ T6249] bond2: left promiscuous mode [ 108.122686][ T6249] bridge3: left promiscuous mode [ 109.074340][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.131955][ T6262] netlink: 'syz.2.955': attribute type 12 has an invalid length. [ 109.568896][ T28] audit: type=1400 audit(1779102179.649:683): avc: denied { append } for pid=6268 comm="syz.0.957" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.795361][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.898886][ T28] audit: type=1326 audit(1779102179.979:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7fc00000 [ 109.974929][ T28] audit: type=1326 audit(1779102179.979:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f198e91ce59 code=0x7fc00000 [ 110.094878][ T6304] __nla_validate_parse: 5 callbacks suppressed [ 110.094898][ T6304] netlink: 56 bytes leftover after parsing attributes in process `syz.3.971'. [ 110.139665][ T28] audit: type=1400 audit(1779102180.219:686): avc: denied { accept } for pid=6307 comm="syz.3.973" path=2F3139362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 110.381471][ T6323] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 110.413916][ T6323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 110.453215][ T6323] bond5: entered promiscuous mode [ 110.487685][ T6323] bond5: (slave dummy0): making interface the new active one [ 110.503641][ T6266] Set syz1 is full, maxelem 65536 reached [ 110.511156][ T6323] dummy0: entered promiscuous mode [ 110.540642][ T6323] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 110.563099][ T6331] bond5 (unregistering): left promiscuous mode [ 110.576592][ T6331] dummy0: left promiscuous mode [ 110.596106][ T6331] bond5 (unregistering): (slave dummy0): Releasing active interface [ 110.629157][ T6331] bond5 (unregistering): Released all slaves [ 110.746225][ T6335] netlink: 'syz.0.981': attribute type 21 has an invalid length. [ 110.798344][ T28] audit: type=1400 audit(1779102180.879:687): avc: denied { setopt } for pid=6338 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.859784][ T6344] batadv_slave_1: entered promiscuous mode [ 110.878364][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 110.890642][ T28] audit: type=1400 audit(1779102180.969:688): avc: denied { map } for pid=6343 comm="syz.1.986" path="socket:[15027]" dev="sockfs" ino=15027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.913975][ T6344] tc_dump_action: action bad kind [ 110.914413][ T6344] batadv_slave_1: left promiscuous mode [ 110.956172][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 111.001377][ T6347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 111.070744][ T6353] veth5: entered allmulticast mode [ 111.078559][ T6353] bond5: (slave veth5): Enslaving as an active interface with an up link [ 111.713310][ T6386] xt_hashlimit: size too large, truncated to 1048576 [ 112.294523][ T28] audit: type=1326 audit(1779102182.379:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.0.1006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 112.310603][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1007'. [ 112.352956][ T28] audit: type=1326 audit(1779102182.409:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.0.1006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 112.432533][ T28] audit: type=1326 audit(1779102182.409:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.0.1006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 112.478696][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1013'. [ 112.846995][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1027'. [ 112.863672][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1027'. [ 113.171397][ T6476] bridge0: port 3(gretap0) entered disabled state [ 113.370812][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.565815][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 113.565850][ T28] audit: type=1400 audit(1779102183.649:729): avc: denied { write } for pid=6507 comm="syz.3.1038" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.601564][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.627484][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.661051][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.687775][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.780047][ T6523] gretap1: entered promiscuous mode [ 113.824553][ T6523] batman_adv: batadv0: Adding interface: gretap1 [ 113.866156][ T6523] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.928366][ T6523] batman_adv: batadv0: Interface activated: gretap1 [ 114.255366][ T28] audit: type=1400 audit(1779102184.339:730): avc: denied { ioctl } for pid=6547 comm="syz.0.1053" path="socket:[16455]" dev="sockfs" ino=16455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.406995][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.422585][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.445614][ T49] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.483615][ T49] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 114.573628][ T28] audit: type=1400 audit(1779102184.659:731): avc: denied { ioctl } for pid=6569 comm="syz.0.1060" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.663478][ T28] audit: type=1326 audit(1779102184.749:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.0.1064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 114.696159][ T28] audit: type=1326 audit(1779102184.769:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.0.1064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 114.740519][ T6589] netlink: 'syz.0.1066': attribute type 12 has an invalid length. [ 114.772972][ T28] audit: type=1326 audit(1779102184.779:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.0.1064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 114.803776][ T28] audit: type=1326 audit(1779102184.779:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.0.1064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 114.830119][ T28] audit: type=1326 audit(1779102184.779:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.0.1064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 114.870143][ T28] audit: type=1326 audit(1779102184.779:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.0.1064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 114.895858][ T28] audit: type=1326 audit(1779102184.779:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.0.1064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198e91ce59 code=0x7ffc0000 [ 115.127085][ T6612] pimreg: entered allmulticast mode [ 115.133245][ T6612] pimreg: left allmulticast mode [ 115.155209][ T6614] sctp: [Deprecated]: syz.2.1076 (pid 6614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.155209][ T6614] Use struct sctp_sack_info instead [ 115.275036][ T6625] xt_hashlimit: size too large, truncated to 1048576 [ 118.033917][ T6699] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 118.049748][ T3651] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 118.064049][ T3651] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 118.072660][ T3651] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 118.081090][ T3651] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 118.581428][ T6732] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 118.654154][ T6732] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 118.703890][ T6732] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 118.765343][ T6732] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 118.831702][ T3651] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 118.848951][ T3651] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 118.864489][ T3651] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 118.879838][ T3651] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 119.309250][ T6749] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 119.318065][ T3651] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.327439][ T3651] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.336794][ T3651] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.345803][ T3651] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 119.524643][ T6758] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.1127'. [ 119.855179][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 119.855199][ T28] audit: type=1400 audit(1779102189.939:782): avc: denied { bind } for pid=6784 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.035417][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 121.466773][ T28] audit: type=1400 audit(1779102191.549:783): avc: denied { setopt } for pid=6836 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.531892][ T28] audit: type=1400 audit(1779102191.609:784): avc: denied { create } for pid=6843 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 121.585114][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 121.585185][ T6850] loop2: detected capacity change from 0 to 128 [ 121.612373][ T6849] bond3: entered promiscuous mode [ 121.617985][ T6849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.634400][ T6849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.644195][ T6849] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 121.656266][ T6849] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 121.679749][ T6858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.686994][ T6858] IPv6: NLM_F_CREATE should be set when creating new route [ 121.694227][ T6858] IPv6: NLM_F_CREATE should be set when creating new route [ 121.734248][ T6858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.775417][ T6858] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 121.801746][ T6858] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 122.524227][ T6896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.553020][ T6896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 122.617755][ T6896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.645462][ T6896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 122.720284][ T6896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.762842][ T6896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 122.801811][ T6902] tipc: Failed to remove unknown binding: 66,0,0/0:2465471711/2465471713 [ 122.810581][ T6902] tipc: Failed to remove unknown binding: 66,0,0/0:2465471711/2465471712 [ 122.819401][ T6902] tipc: Failed to remove unknown binding: 66,0,0/0:2465471711/2465471713 [ 122.828102][ T6902] tipc: Failed to remove unknown binding: 66,0,0/0:2465471711/2465471712 [ 122.850915][ T6896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.866853][ T28] audit: type=1400 audit(1779102192.949:785): avc: denied { setopt } for pid=6903 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.894427][ T6896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 122.983941][ T117] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 122.995723][ T117] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.022944][ T117] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 123.039520][ T117] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.061511][ T117] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 123.088372][ T117] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.103951][ T117] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 123.120737][ T117] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.167345][ T6907] netlink: 'syz.0.1178': attribute type 4 has an invalid length. [ 123.189946][ T6907] netlink: 'syz.0.1178': attribute type 4 has an invalid length. [ 123.247100][ T28] audit: type=1326 audit(1779102193.329:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987da1ce59 code=0x7ffc0000 [ 123.273803][ T28] audit: type=1326 audit(1779102193.339:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987da1ce59 code=0x7ffc0000 [ 123.299575][ T28] audit: type=1326 audit(1779102193.349:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987da1ce59 code=0x7ffc0000 [ 123.334902][ T28] audit: type=1326 audit(1779102193.349:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f987da1ce59 code=0x7ffc0000 [ 123.361052][ T28] audit: type=1326 audit(1779102193.349:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987da1ce59 code=0x7ffc0000 [ 123.414029][ T28] audit: type=1326 audit(1779102193.399:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f987d9dd68e code=0x7ffc0000 [ 123.581137][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'. [ 123.704474][ T6934] loop0: detected capacity change from 0 to 1024 [ 123.713416][ T6942] lo: entered allmulticast mode [ 123.722004][ T117] Bluetooth: hci0: Frame reassembly failed (-90) [ 123.728745][ T6940] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.743960][ T6942] bY4`Ҙ: renamed from lo [ 123.746534][ T6934] EXT4-fs: Ignoring removed orlov option [ 123.759775][ T6940] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.784474][ T6940] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.793362][ T6934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.810631][ T6940] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.868087][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.071206][ T6966] loop0: detected capacity change from 0 to 1024 [ 124.094527][ T6966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.131096][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 124.147145][ T6966] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.207026][ T6982] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.220547][ T6982] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 124.231426][ T12] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 124.254651][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 124.267830][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.267830][ T12] [ 124.279657][ T12] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 124.295410][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 124.332584][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.332584][ T12] [ 125.056693][ T6966] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1201: bg 0: block 112: padding at end of block bitmap is not set [ 125.150165][ T6966] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 125.240707][ T6966] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.240707][ T6966] [ 125.260099][ T6966] EXT4-fs (loop0): Total free blocks count 0 [ 125.266168][ T6966] EXT4-fs (loop0): Free/Dirty block details [ 125.272132][ T6966] EXT4-fs (loop0): free_blocks=0 [ 125.332101][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 125.752653][ T3965] Bluetooth: hci0: command 0x1003 tx timeout [ 125.758712][ T5798] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.110620][ T7050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1220'. [ 126.178230][ T7053] loop2: detected capacity change from 0 to 512 [ 126.215533][ T7053] EXT4-fs: Ignoring removed oldalloc option [ 126.244583][ T7053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.257453][ T7053] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.275657][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1220'. [ 126.295530][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.352336][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 126.414140][ T7064] bond0: entered promiscuous mode [ 126.435990][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 126.436007][ T28] audit: type=1400 audit(1779102196.519:814): avc: denied { create } for pid=7071 comm="syz.4.1227" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.436126][ T7064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.443595][ T7072] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1227'. [ 126.494658][ T7064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.501945][ T7064] IPv6: NLM_F_CREATE should be set when creating new route [ 126.509189][ T7064] IPv6: NLM_F_CREATE should be set when creating new route [ 126.516664][ T7064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.531848][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.540761][ T7068] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 126.553656][ T7068] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 126.584984][ T7064] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 126.612454][ T7064] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 126.716536][ T28] audit: type=1400 audit(1779102196.799:815): avc: denied { unlink } for pid=3297 comm="syz-executor" name="file0" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.117278][ T7096] xt_hashlimit: size too large, truncated to 1048576 [ 127.165552][ T28] audit: type=1400 audit(1779102197.249:816): avc: denied { connect } for pid=7095 comm="syz.4.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.457281][ T7109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1240'. [ 127.485498][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 127.497733][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.513393][ T7111] bridge_slave_0 (unregistering): left allmulticast mode [ 127.520607][ T7111] bridge_slave_0 (unregistering): left promiscuous mode [ 127.528238][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.549016][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 129.000891][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 129.089043][ T7178] syzkaller0: entered promiscuous mode [ 129.094750][ T7178] syzkaller0: entered allmulticast mode [ 129.693738][ T28] audit: type=1400 audit(1779102199.779:817): avc: denied { setopt } for pid=7191 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.690502][ T7225] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 131.288887][ T7234] macsec1: entered promiscuous mode [ 131.496803][ T7244] loop0: detected capacity change from 0 to 512 [ 131.507575][ T7242] netlink: 'syz.4.1288': attribute type 10 has an invalid length. [ 131.523896][ T7242] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.1288'. [ 131.543887][ T7244] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 131.562971][ T7244] EXT4-fs (loop0): 1 truncate cleaned up [ 131.573406][ T7244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.634573][ T7252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1291'. [ 131.663010][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.699966][ T7259] loop0: detected capacity change from 0 to 512 [ 131.710063][ T7259] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.723740][ T7261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1295'. [ 131.733100][ T7259] EXT4-fs (loop0): 1 truncate cleaned up [ 131.738839][ T28] audit: type=1400 audit(1779102201.819:818): avc: denied { setopt } for pid=7256 comm="syz.3.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 131.739221][ T7259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.795411][ T7261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7261 comm=syz.4.1295 [ 131.807927][ T28] audit: type=1400 audit(1779102201.889:819): avc: denied { write } for pid=7258 comm="syz.0.1293" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.811421][ T7259] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.1293: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 131.829859][ T28] audit: type=1400 audit(1779102201.889:820): avc: denied { write } for pid=7258 comm="syz.0.1293" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.850970][ T7259] EXT4-fs (loop0): Remounting filesystem read-only [ 131.871818][ T28] audit: type=1400 audit(1779102201.889:821): avc: denied { write } for pid=7258 comm="syz.0.1293" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.956635][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.038845][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.050839][ T7276] dummy0: left promiscuous mode [ 132.104967][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.122395][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.184988][ T7276] team1: left promiscuous mode [ 132.190067][ T7276] team1: left allmulticast mode [ 132.196931][ T7276] team2: left promiscuous mode [ 132.202136][ T7276] team2: left allmulticast mode [ 132.210718][ T7276] bond2: left promiscuous mode [ 132.239324][ T117] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 132.249411][ T117] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.268798][ T117] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 132.277564][ T117] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.288411][ T117] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 132.297120][ T117] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.305816][ T117] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 132.315728][ T117] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.388586][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'. [ 132.390419][ T7284] loop2: detected capacity change from 0 to 512 [ 132.405274][ T7285] bond3: entered promiscuous mode [ 132.410656][ T7285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.424155][ T7284] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.437632][ T7285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.445270][ T7285] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 132.446955][ T7284] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 132.456716][ T7285] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 132.471015][ T7284] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1303: bg 0: block 248: padding at end of block bitmap is not set [ 132.479261][ T7291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.493061][ T7284] loop2: lost filesystem error report for type 5 error -117 [ 132.499712][ T7291] IPv6: NLM_F_CREATE should be set when creating new route [ 132.499726][ T7291] IPv6: NLM_F_CREATE should be set when creating new route [ 132.507413][ T7284] Quota error (device loop2): write_blk: dquota write failed [ 132.514244][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 132.514266][ C0] EXT4-fs (loop2): last error at time 1779102202: ext4_validate_block_bitmap:441 [ 132.514823][ T7291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.521823][ T7284] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 132.561954][ T7284] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1303: Failed to acquire dquot type 1 [ 132.573452][ T7284] loop2: lost filesystem error report for type 5 error -28 [ 132.573905][ T7284] EXT4-fs (loop2): 1 truncate cleaned up [ 132.587313][ T7284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 132.590413][ T7291] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 132.610881][ T7291] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 132.644460][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 132.664782][ T28] audit: type=1400 audit(1779102202.749:822): avc: denied { setopt } for pid=7293 comm="syz.2.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.981384][ T7314] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1314'. [ 132.990767][ T7314] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 133.049449][ T7323] team0: left promiscuous mode [ 133.061350][ T7323] team0: left allmulticast mode [ 133.092922][ T7323] vlan2: left allmulticast mode [ 133.108077][ T7323] bond2: left allmulticast mode [ 133.123802][ T7323] geneve2: left allmulticast mode [ 133.150384][ T7323] ip6gre1: left promiscuous mode [ 133.172207][ T7323] ip6gre1: left allmulticast mode [ 133.186439][ T7323] bond5: left allmulticast mode [ 133.201255][ T7323] ip6gretap2: left allmulticast mode [ 133.241431][ T7323] ip6gretap2: left promiscuous mode [ 133.253207][ T3637] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.275903][ T3637] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.294558][ T3637] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.316705][ T3637] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.351997][ T7331] netlink: 'syz.3.1320': attribute type 7 has an invalid length. [ 133.391541][ T3637] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.401811][ T7331] netlink: 'syz.3.1320': attribute type 7 has an invalid length. [ 133.416135][ T3637] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.432302][ T3637] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.447757][ T3637] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.640967][ T28] audit: type=1400 audit(1779102203.719:823): avc: denied { execute } for pid=7335 comm="syz.1.1322" name="file1" dev="ramfs" ino=19759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 133.663546][ T28] audit: type=1400 audit(1779102203.719:824): avc: denied { execute_no_trans } for pid=7335 comm="syz.1.1322" path="/file1" dev="ramfs" ino=19759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 134.654216][ T7367] netlink: 'syz.4.1333': attribute type 10 has an invalid length. [ 134.682584][ T7367] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1333'. [ 134.704253][ T7368] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 134.779504][ T7370] netlink: 'syz.1.1335': attribute type 1 has an invalid length. [ 134.809200][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1336'. [ 134.818788][ T7370] bond4: entered promiscuous mode [ 134.824311][ T7370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.841223][ T7373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7373 comm=syz.4.1336 [ 134.858193][ T28] audit: type=1400 audit(1779102204.939:825): avc: denied { create } for pid=7369 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 134.979537][ T7370] bond4: (slave bridge5): making interface the new active one [ 134.987847][ T7370] bridge5: entered promiscuous mode [ 135.005281][ T7370] bridge5: left promiscuous mode [ 135.175150][ T7384] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 135.205743][ T3078] IPVS: starting estimator thread 0... [ 135.235047][ T7384] bond5 (unregistering): Released all slaves [ 135.281731][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1341'. [ 135.305697][ T7395] loop0: detected capacity change from 0 to 1024 [ 135.322715][ T7392] IPVS: using max 2592 ests per chain, 129600 per kthread [ 135.330312][ T7393] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 135.340288][ T7395] EXT4-fs: Ignoring removed bh option [ 135.351686][ T7393] netlink: 'syz.1.1341': attribute type 30 has an invalid length. [ 135.361860][ T7395] EXT4-fs: Ignoring removed oldalloc option [ 135.380691][ T7395] EXT4-fs: Ignoring removed nobh option [ 135.395203][ T7395] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 135.395203][ T7395] [ 135.756413][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1350'. [ 135.858447][ T7414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7414 comm=syz.3.1350 [ 136.556420][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 136.590209][ T7435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7435 comm=syz.3.1358 [ 137.494999][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 137.495024][ T28] audit: type=1400 audit(1779102207.579:850): avc: denied { read } for pid=7451 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.777902][ T7461] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.876231][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 138.336290][ T7471] loop2: detected capacity change from 0 to 256 [ 138.366394][ T7471] FAT-fs (loop2): Directory bread(block 64) failed [ 138.385863][ T7471] FAT-fs (loop2): Directory bread(block 65) failed [ 138.404221][ T7471] FAT-fs (loop2): Directory bread(block 66) failed [ 138.420623][ T7471] FAT-fs (loop2): Directory bread(block 67) failed [ 138.440082][ T7471] FAT-fs (loop2): Directory bread(block 68) failed [ 138.454306][ T7471] FAT-fs (loop2): Directory bread(block 69) failed [ 138.472808][ T7471] FAT-fs (loop2): Directory bread(block 70) failed [ 138.480255][ T7471] FAT-fs (loop2): Directory bread(block 71) failed [ 138.487396][ T7471] FAT-fs (loop2): Directory bread(block 72) failed [ 138.494155][ T7471] FAT-fs (loop2): Directory bread(block 73) failed [ 139.296150][ T28] audit: type=1400 audit(1779102209.379:851): avc: denied { listen } for pid=7496 comm="syz.4.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.351849][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.376610][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 139.396817][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.414019][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 139.432167][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.441583][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 139.477128][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.501749][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 139.524822][ T7504] netlink: 'syz.3.1384': attribute type 4 has an invalid length. [ 140.011658][ T7524] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 140.042800][ T7524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 140.097207][ T7529] hub 8-0:1.0: USB hub found [ 140.107056][ T7529] hub 8-0:1.0: 8 ports detected [ 140.119645][ T7527] netlink: 'syz.1.1393': attribute type 21 has an invalid length. [ 140.151369][ T7530] bond7: entered allmulticast mode [ 140.165087][ T7524] bond7: (slave ip6gretap2): making interface the new active one [ 140.173359][ T7524] ip6gretap2: entered allmulticast mode [ 140.179568][ T7524] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 140.191286][ T7527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1393'. [ 140.192711][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 140.218197][ T7532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.318882][ T7536] syzkaller0: entered promiscuous mode [ 140.324502][ T7536] syzkaller0: entered allmulticast mode [ 140.530935][ T7551] syz_tun: entered allmulticast mode [ 140.631834][ T7558] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1405'. [ 140.767216][ T6492] IPVS: starting estimator thread 0... [ 140.774066][ T7548] IPVS: lc: FWM 3 0x00000003 - no destination available [ 140.842347][ T7570] netlink: 'syz.3.1411': attribute type 83 has an invalid length. [ 140.892591][ T7565] IPVS: using max 2592 ests per chain, 129600 per kthread [ 141.054469][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'. [ 141.080669][ T7585] team1: entered promiscuous mode [ 141.087216][ T7585] team1: entered allmulticast mode [ 141.092924][ T7585] 8021q: adding VLAN 0 to HW filter on device team1 [ 141.110094][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'. [ 141.119544][ T7585] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 141.139541][ T7585] team2: entered promiscuous mode [ 141.145582][ T7585] team2: entered allmulticast mode [ 141.150978][ T7585] 8021q: adding VLAN 0 to HW filter on device team2 [ 141.243811][ T7593] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1421'. [ 141.296128][ T28] audit: type=1400 audit(1779102211.379:852): avc: denied { bind } for pid=7596 comm="syz.2.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.341586][ T28] audit: type=1400 audit(1779102211.379:853): avc: denied { write } for pid=7596 comm="syz.2.1423" path="socket:[20282]" dev="sockfs" ino=20282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.366691][ T7601] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 141.381697][ T7601] bond6: entered promiscuous mode [ 141.388456][ T7601] 8021q: adding VLAN 0 to HW filter on device bond6 [ 141.434168][ T28] audit: type=1400 audit(1779102211.509:854): avc: denied { ioctl } for pid=7603 comm="syz.0.1426" path="socket:[20304]" dev="sockfs" ino=20304 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.482847][ T7601] 8021q: adding VLAN 0 to HW filter on device bond6 [ 141.503147][ T7601] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 141.516998][ T7601] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 141.575178][ T7601] bond6: (slave ip6gre2): making interface the new active one [ 141.596536][ T7601] ip6gre2: entered promiscuous mode [ 141.617150][ T7601] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 141.632046][ T7606] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1427'. [ 141.660439][ T7609] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 141.694460][ T7609] ip6gre2: left promiscuous mode [ 141.714699][ T7609] bond6 (unregistering): Released all slaves [ 141.866674][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 141.910870][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 142.084244][ T117] IPVS: stop unused estimator thread 0... [ 142.125912][ T7623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=7623 comm=syz.3.1434 [ 142.300184][ T7635] tipc: Failed to remove unknown binding: 66,2,2/0:2796982192/2796982196 [ 142.478557][ T7645] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1444'. [ 142.514123][ T7645] gretap0: entered promiscuous mode [ 142.536592][ T28] audit: type=1400 audit(1779102212.619:855): avc: denied { bind } for pid=7648 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.980161][ T7673] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 143.618464][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 143.645850][ T7680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.355876][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 144.365728][ T7709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.411340][ T6492] IPVS: starting estimator thread 0... [ 144.418080][ T7695] IPVS: lc: FWM 3 0x00000003 - no destination available [ 144.488567][ T7707] loop2: detected capacity change from 0 to 512 [ 144.513612][ T7707] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 144.523617][ T7713] IPVS: using max 2544 ests per chain, 127200 per kthread [ 144.542280][ T7707] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 144.550384][ T7707] System zones: 0-1, 15-15, 18-18, 34-34 [ 144.556430][ T7707] EXT4-fs (loop2): orphan cleanup on readonly fs [ 144.562866][ T7707] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 144.572582][ T7707] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.575767][ T7725] tipc: Failed to remove unknown binding: 66,0,0/0:2586074798/2586074799 [ 144.609231][ T7707] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 144.617769][ T7707] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1469: bg 0: block 40: padding at end of block bitmap is not set [ 144.642168][ T7707] loop2: lost filesystem error report for type 5 error -117 [ 144.642425][ T7707] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 144.642511][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 144.665011][ C1] EXT4-fs (loop2): initial error at time 1779102214: ext4_validate_block_bitmap:441 [ 144.674511][ C1] EXT4-fs (loop2): last error at time 1779102214: ext4_validate_block_bitmap:441 [ 144.684153][ T7707] loop2: lost filesystem error report for type 5 error -117 [ 144.685617][ T7707] EXT4-fs (loop2): 1 truncate cleaned up [ 144.698932][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.721890][ T7730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1474'. [ 144.725168][ T7707] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 145.095065][ T3661] IPVS: stop unused estimator thread 0... [ 145.198443][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.512701][ T7754] syz_tun: entered allmulticast mode [ 145.531061][ T7754] syz_tun: left allmulticast mode [ 145.829924][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1492'. [ 145.943042][ T7771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7771 comm=syz.4.1492 [ 146.163893][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 146.208290][ T7776] dummy0: left promiscuous mode [ 146.228897][ T7776] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 146.260315][ T7776] bond4: entered promiscuous mode [ 146.276080][ T7776] dummy0: entered promiscuous mode [ 146.303370][ T7776] gretap0: left allmulticast mode [ 146.318649][ T7776] gretap0: left promiscuous mode [ 146.329781][ T7776] bridge0: port 3(gretap0) entered disabled state [ 146.708058][ T7776] bond4: (slave dummy0): Releasing backup interface [ 146.727370][ T7776] dummy0: left promiscuous mode [ 146.733416][ T7776] bridge_slave_0: left allmulticast mode [ 146.739212][ T7776] bridge_slave_0: left promiscuous mode [ 146.751946][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.915301][ T7776] bridge_slave_1: left promiscuous mode [ 146.921238][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.935861][ T7776] .`: (slave bond_slave_0): Releasing backup interface [ 146.973843][ T7776] .`: (slave bond_slave_1): Releasing backup interface [ 147.008653][ T7776] team0: Port device team_slave_0 removed [ 147.028964][ T7776] team0: Port device team_slave_1 removed [ 147.036374][ T7776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.054010][ T7774] bond4: left promiscuous mode [ 147.506796][ T7841] IPVS: sed: FWM 3 0x00000003 - no destination available [ 147.511562][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 147.675412][ T7844] loop2: detected capacity change from 0 to 8192 [ 148.419927][ T7857] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1520'. [ 148.476957][ T7857] unsupported nlmsg_type 40 [ 148.754332][ T7865] bond6: option min_links: invalid value (18446744073709551612) [ 148.779645][ T7865] bond6: option min_links: allowed values 0 - 2147483647 [ 149.185536][ T7865] bond6 (unregistering): Released all slaves [ 149.666891][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 149.808836][ T7901] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1534'. [ 150.105134][ T7901] loop2: detected capacity change from 0 to 512 [ 150.455253][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1535'. [ 150.486005][ T7901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.797751][ T7901] EXT4-fs (loop2): 1 truncate cleaned up [ 151.016596][ T7901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.324860][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.396407][ T28] audit: type=1326 audit(1779102221.479:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b4a9ce59 code=0x7ffc0000 [ 151.453522][ T28] audit: type=1326 audit(1779102221.479:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b4a9ce59 code=0x7ffc0000 [ 151.514442][ T28] audit: type=1326 audit(1779102221.479:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b4a9ce59 code=0x7ffc0000 [ 151.573923][ T28] audit: type=1326 audit(1779102221.479:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b4a9ce59 code=0x7ffc0000 [ 151.641030][ T28] audit: type=1326 audit(1779102221.479:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b4a9ce59 code=0x7ffc0000 [ 151.717711][ T28] audit: type=1326 audit(1779102221.479:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f29b4a9ce59 code=0x7ffc0000 [ 151.780317][ T28] audit: type=1326 audit(1779102221.529:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29b4a5d68e code=0x7ffc0000 [ 151.865291][ T28] audit: type=1326 audit(1779102221.539:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29b4a5d68e code=0x7ffc0000 [ 151.964972][ T28] audit: type=1326 audit(1779102221.539:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29b4a5d68e code=0x7ffc0000 [ 152.031682][ T28] audit: type=1326 audit(1779102221.539:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29b4a5d68e code=0x7ffc0000 [ 152.161556][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.188201][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.400279][ T7915] kexec: Could not allocate control_code_buffer [ 152.850018][ T7968] loop2: detected capacity change from 0 to 512 [ 152.877970][ T7968] EXT4-fs: test_dummy_encryption option not supported [ 153.908424][ T7998] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1566'. [ 154.116771][ T8010] syz_tun: entered allmulticast mode [ 154.139492][ T8009] syz_tun: left allmulticast mode [ 154.545903][ T7989] loop0: detected capacity change from 0 to 1024 [ 154.651902][ T7989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.723761][ T7989] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 154.964770][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.004899][ T8033] syz_tun: entered allmulticast mode [ 155.025293][ T8033] syz_tun: left allmulticast mode [ 155.031976][ T8035] loop0: detected capacity change from 0 to 256 [ 155.057254][ T8035] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.181733][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1581'. [ 156.373405][ T8055] netem: change failed [ 156.548607][ T8062] loop2: detected capacity change from 0 to 512 [ 156.729713][ T8062] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.1587: Bad quota inum: 2, type: 1 [ 156.812985][ T8062] loop2: lost filesystem error report for type 5 error -117 [ 156.813208][ T8062] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 156.835765][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 156.835791][ C1] EXT4-fs (loop2): initial error at time 1779102226: ext4_quota_enable:7221 [ 156.835818][ C1] EXT4-fs (loop2): last error at time 1779102226: ext4_quota_enable:7221 [ 157.044119][ T8062] EXT4-fs (loop2): mount failed [ 157.367969][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1592'. [ 157.774120][ T8087] netlink: 'syz.3.1596': attribute type 1 has an invalid length. [ 157.791214][ T8087] netlink: 'syz.3.1596': attribute type 2 has an invalid length. [ 157.809438][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 158.005342][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 158.098087][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'. [ 158.277060][ T8108] loop0: detected capacity change from 0 to 512 [ 158.326956][ T8108] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 158.337379][ T8108] EXT4-fs (loop0): orphan cleanup on readonly fs [ 158.349342][ T8108] __quota_error: 17 callbacks suppressed [ 158.349362][ T8108] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 158.365938][ T8108] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 158.381621][ T8108] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 158.389697][ T8108] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1605: bg 0: block 64: padding at end of block bitmap is not set [ 158.405075][ T8108] loop0: lost filesystem error report for type 5 error -117 [ 158.405357][ T8108] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 158.412747][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 158.412787][ C0] EXT4-fs (loop0): initial error at time 1779102228: ext4_validate_block_bitmap:441 [ 158.412829][ C0] EXT4-fs (loop0): last error at time 1779102228: ext4_validate_block_bitmap:441 [ 158.450750][ T8108] loop0: lost filesystem error report for type 5 error -117 [ 158.451273][ T8108] EXT4-fs (loop0): 1 truncate cleaned up [ 158.473132][ T8108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.558683][ T8108] xt_connbytes: Forcing CT accounting to be enabled [ 158.582703][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1606'. [ 158.802025][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.812282][ T8126] ref_ctr_offset mismatch. inode: 0x629 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 158.873718][ T8126] xt_hashlimit: size too large, truncated to 1048576 [ 158.900660][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 159.123293][ T8142] netlink: 'syz.3.1614': attribute type 29 has an invalid length. [ 159.147239][ T8142] netlink: 'syz.3.1614': attribute type 29 has an invalid length. [ 159.521363][ T8166] syzkaller0: entered promiscuous mode [ 159.541897][ T8166] syzkaller0: entered allmulticast mode [ 159.602526][ T28] audit: type=1400 audit(1779102229.679:883): avc: denied { accept } for pid=8167 comm="syz.4.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.841794][ T8199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.858782][ T8199] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.876195][ T8199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.911624][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.924975][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.935221][ T8199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.945827][ T8199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.971422][ T8199] veth1_vlan: left promiscuous mode [ 160.977685][ T8199] veth0_vlan: left promiscuous mode [ 160.983708][ T8199] veth0_vlan: entered promiscuous mode [ 160.999705][ T8199] veth1_vlan: entered promiscuous mode [ 161.009318][ T8199] veth1_macvtap: left promiscuous mode [ 161.015614][ T8199] veth0_macvtap: left promiscuous mode [ 161.021663][ T8199] veth0_macvtap: entered promiscuous mode [ 161.028259][ T8199] veth1_macvtap: entered promiscuous mode [ 161.036408][ T8199] 8021q: adding VLAN 0 to HW filter on device team1 [ 161.045334][ T8199] 8021q: adding VLAN 0 to HW filter on device team2 [ 161.053859][ T8199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.064475][ T8199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.075268][ T8199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.084764][ T8199] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.093443][ T8199] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.101961][ T8199] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.108711][ T117] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.120490][ T8199] 8021q: adding VLAN 0 to HW filter on device bond7 [ 161.129662][ T8199] 8021q: adding VLAN 0 to HW filter on device eth0 [ 161.136297][ T117] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.157676][ T8199] 8021q: adding VLAN 0 to HW filter on device eth1 [ 161.164781][ T117] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.185501][ T8199] 8021q: adding VLAN 0 to HW filter on device eth2 [ 161.193069][ T3637] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.202810][ T8199] 8021q: adding VLAN 0 to HW filter on device eth3 [ 161.215639][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.222831][ T3651] bridge0: port 2(bridge_slave_1) entered listening state [ 161.237468][ T3657] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.262549][ T3657] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.292549][ T117] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.313534][ T117] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.353535][ T117] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.375672][ T8206] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1639'. [ 161.392865][ T3651] bond3: (slave ip6gretap1): link status up again after 0 ms [ 161.432840][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.450249][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.480707][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.505370][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.539104][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.551273][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.562115][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.570835][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.583901][ T3651] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 161.603672][ T3651] bond1: (slave veth3): making interface the new active one [ 161.645711][ T8219] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1644'. [ 161.651199][ T3651] bond1: active interface up! [ 161.678692][ T8213] team0 (unregistering): Port device team_slave_0 removed [ 161.714072][ T8213] team0 (unregistering): Port device team_slave_1 removed [ 162.526426][ T8240] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 162.894540][ T28] audit: type=1400 audit(1779102232.969:884): avc: denied { write } for pid=8245 comm="syz.2.1655" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.462313][ T8269] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 163.708659][ T8274] tipc: Failed to remove unknown binding: 66,0,0/4:3792291951/3792291952 [ 163.881488][ T8279] sit0: entered promiscuous mode [ 163.907641][ T8279] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 163.943859][ T8279] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1668'. [ 164.573591][ T28] audit: type=1400 audit(1779102234.649:885): avc: denied { getopt } for pid=8304 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.145284][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1683'. [ 165.155504][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1683'. [ 166.006743][ T8345] netlink: 'syz.2.1691': attribute type 4 has an invalid length. [ 166.177216][ T117] net_ratelimit: 56 callbacks suppressed [ 166.177237][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 166.391431][ T3637] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 166.692609][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 166.778090][ T28] audit: type=1400 audit(1779102236.859:886): avc: denied { write } for pid=8352 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.838720][ T3651] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 166.987640][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.122637][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.242511][ T3651] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.352613][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.435340][ T8370] uprobe: syz.1.1701:8370 failed to unregister, leaking uprobe [ 167.473603][ T3651] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.594131][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.817073][ T8334] ================================================================== [ 167.825203][ T8334] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 167.832191][ T8334] [ 167.834524][ T8334] read-write to 0xffff888118cee2a4 of 4 bytes by task 8335 on cpu 1: [ 167.842601][ T8334] fifo_open+0x86/0x5d0 [ 167.846784][ T8334] do_dentry_open+0x4be/0xa90 [ 167.851479][ T8334] vfs_open+0x37/0x1e0 [ 167.855566][ T8334] path_openat+0x1b70/0x2050 [ 167.860177][ T8334] do_file_open+0x16c/0x290 [ 167.864705][ T8334] do_sys_openat2+0x94/0x130 [ 167.869313][ T8334] __x64_sys_openat+0xf2/0x120 [ 167.874096][ T8334] x64_sys_call+0x1e39/0x3020 [ 167.878803][ T8334] do_syscall_64+0x12c/0x3b0 [ 167.883413][ T8334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.889324][ T8334] [ 167.891666][ T8334] read to 0xffff888118cee2a4 of 4 bytes by task 8334 on cpu 0: [ 167.899224][ T8334] wait_for_partner+0xd5/0x1e0 [ 167.904026][ T8334] fifo_open+0x462/0x5d0 [ 167.908310][ T8334] do_dentry_open+0x4be/0xa90 [ 167.913005][ T8334] vfs_open+0x37/0x1e0 [ 167.917093][ T8334] path_openat+0x1b70/0x2050 [ 167.921709][ T8334] do_file_open+0x16c/0x290 [ 167.926235][ T8334] do_sys_openat2+0x94/0x130 [ 167.930844][ T8334] __se_sys_openat2+0x193/0x1f0 [ 167.935716][ T8334] __x64_sys_openat2+0x55/0x70 [ 167.940495][ T8334] x64_sys_call+0x2170/0x3020 [ 167.945191][ T8334] do_syscall_64+0x12c/0x3b0 [ 167.949812][ T8334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.955727][ T8334] [ 167.958064][ T8334] value changed: 0x00000001 -> 0x00000002 [ 167.963789][ T8334] [ 167.966118][ T8334] Reported by Kernel Concurrency Sanitizer on: [ 167.972287][ T8334] CPU: 0 UID: 0 PID: 8334 Comm: syz.4.1686 Tainted: G W syzkaller #0 PREEMPT(full) [ 167.983165][ T8334] Tainted: [W]=WARN [ 167.986978][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.997219][ T8334] ================================================================== [ 171.283347][ T117] net_ratelimit: 30 callbacks suppressed [ 171.283366][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 171.402674][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 171.512952][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 171.623309][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 171.733359][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 171.843280][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 171.963335][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 172.073267][ T3645] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 172.193264][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 172.313282][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 176.362546][ T3645] net_ratelimit: 35 callbacks suppressed [ 176.362567][ T3645] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 176.483846][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 176.593449][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 176.712546][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 176.833258][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 176.943353][ T3657] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 177.063285][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 177.173314][ T3645] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 177.293297][ T117] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 177.403270][ T3645] bond3: (slave ip6gretap1): failed to get link speed/duplex