last executing test programs: 2.237494693s ago: executing program 2 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 2.210148165s ago: executing program 2 (id=1776): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], 0xf4}}, 0x0) 2.051351965s ago: executing program 3 (id=1780): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 1.97743974s ago: executing program 2 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 1.97722622s ago: executing program 3 (id=1782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f0000000200), 0x4) 1.97696979s ago: executing program 2 (id=1783): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0xc) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="636865636b3d7374726963742c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c007db9b87a3b22e5cdbfd3408bf7f26c6f9e2e5a33a3de79757cd012da0fa08b018021308de4ff8e18c85136d66ca70f9e0202d9f4ae6ea8be44247a411f017b3641e72534ed28887e107245165398cb2190b1c94e503b9496f8a547d22bd1f5389f7d4c9888f5cf2358d4258a2647e5563c5bf7447ab02ee8751259a8c6ee852e305393a69052893580c4820d1ce2dcfccf9b1f8250ea0de206b8ef12366ebe20bc74087f57f579b70bd08afcf902e41a55b58f624e5ce5a03cf74baddfb64769c330584e79449ff96c074b0065a305dd039b056c50c00d1d6a"], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001240), 0x4) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000003180)) 1.953113602s ago: executing program 3 (id=1784): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.885424556s ago: executing program 3 (id=1785): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xb7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) 1.52477821s ago: executing program 4 (id=1795): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x17c, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14c, 0x2, [@TCA_CGROUP_ACT={0x5b}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 1.412962667s ago: executing program 4 (id=1798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) 1.349423561s ago: executing program 4 (id=1799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.2186741s ago: executing program 1 (id=1801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x1800, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1.196083852s ago: executing program 1 (id=1802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.162486954s ago: executing program 4 (id=1803): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.161922534s ago: executing program 1 (id=1804): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f0000000080)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.109076487s ago: executing program 1 (id=1806): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000002000000, 0x2) 1.039893882s ago: executing program 2 (id=1808): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) 976.048386ms ago: executing program 1 (id=1809): lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000001480)={{}, {0x4}, [], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0x2}, {0x8, 0x7}, {}, {0x8, 0x3}]}, 0x4c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) 944.689268ms ago: executing program 3 (id=1810): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, 0x80000, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 869.902763ms ago: executing program 0 (id=1812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 869.197383ms ago: executing program 2 (id=1813): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 809.356267ms ago: executing program 4 (id=1814): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800", @ANYRES32], 0x0}, 0x94) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 805.003027ms ago: executing program 0 (id=1815): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 433.140742ms ago: executing program 0 (id=1820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 160.3733ms ago: executing program 1 (id=1821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x7fff, r0}, 0x38) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) fallocate(r2, 0x20, 0x2000, 0x8000) 0s ago: executing program 3 (id=1822): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.4.84'. [ 42.773501][ T3699] loop3: detected capacity change from 0 to 8192 [ 42.825031][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.850639][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.192576][ T3733] netlink: 240 bytes leftover after parsing attributes in process `syz.4.101'. [ 43.513080][ T3751] loop2: detected capacity change from 0 to 2048 [ 43.590735][ T3695] loop2: p1 < > p4 [ 43.600406][ T3695] loop2: p4 size 8388608 extends beyond EOD, truncated [ 43.608265][ T3763] netlink: 'syz.1.116': attribute type 13 has an invalid length. [ 43.634220][ T3766] loop3: detected capacity change from 0 to 256 [ 43.636339][ T3751] loop2: p1 < > p4 [ 43.641625][ T3766] vfat: Deprecated parameter 'posix' [ 43.649801][ T3766] FAT-fs: "posix" option is obsolete, not supported now [ 43.657530][ T3751] loop2: p4 size 8388608 extends beyond EOD, truncated [ 43.776659][ T3763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.809211][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 43.821442][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 43.833427][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 43.833443][ T29] audit: type=1326 audit(1759925445.624:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 43.863331][ T29] audit: type=1326 audit(1759925445.624:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 43.886831][ T29] audit: type=1326 audit(1759925445.624:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 43.910684][ T29] audit: type=1326 audit(1759925445.624:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 43.925858][ T3780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 43.966996][ T3779] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 43.986924][ T29] audit: type=1326 audit(1759925445.624:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 44.010736][ T29] audit: type=1326 audit(1759925445.624:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 44.035118][ T29] audit: type=1326 audit(1759925445.624:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 44.058791][ T29] audit: type=1326 audit(1759925445.624:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 44.082138][ T29] audit: type=1326 audit(1759925445.624:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 44.105760][ T29] audit: type=1326 audit(1759925445.624:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 44.375848][ T3799] bond1: entered promiscuous mode [ 44.381084][ T3799] bond1: entered allmulticast mode [ 44.396298][ T3799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.426534][ T3799] bond1 (unregistering): Released all slaves [ 44.555326][ C0] hrtimer: interrupt took 27138 ns [ 44.604869][ T3823] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 44.618608][ T3819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3819 comm=syz.3.141 [ 44.855265][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 44.989857][ T3857] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.145321][ T3871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3871 comm=syz.1.164 [ 45.621300][ T3891] loop2: detected capacity change from 0 to 512 [ 45.698804][ T3891] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.172: Failed to acquire dquot type 1 [ 45.712432][ T3891] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.172: Failed to acquire dquot type 1 [ 45.725033][ T3891] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.172: bg 0: block 248: padding at end of block bitmap is not set [ 45.739946][ T3891] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 45.749365][ T3891] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.172: Failed to acquire dquot type 1 [ 45.761215][ T3891] EXT4-fs (loop2): 1 orphan inode deleted [ 45.767902][ T3891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.780821][ T3891] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.913736][ T3876] Set syz1 is full, maxelem 65536 reached [ 45.926616][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.975263][ T3899] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.065644][ T3899] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.135009][ T3899] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.206629][ T3899] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.422928][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.431374][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.442039][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.458650][ T123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.668412][ T3932] pim6reg: entered allmulticast mode [ 46.859090][ T3936] netlink: 'syz.3.188': attribute type 10 has an invalid length. [ 46.866207][ T3934] pim6reg: left allmulticast mode [ 46.926757][ T3936] team0: Port device dummy0 added [ 46.927746][ T3937] netlink: 'syz.3.188': attribute type 10 has an invalid length. [ 47.020048][ T3937] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.103037][ T3937] team0: Failed to send options change via netlink (err -105) [ 47.129983][ T3937] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.161648][ T3937] team0: Port device dummy0 removed [ 47.177766][ T3937] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.235734][ T3936] syz.3.188 (3936) used greatest stack depth: 10672 bytes left [ 47.437821][ T3967] __nla_validate_parse: 3 callbacks suppressed [ 47.437844][ T3967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 47.459296][ T3969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 48.176883][ T4026] syz_tun: entered allmulticast mode [ 48.200077][ T4026] dvmrp8: entered allmulticast mode [ 48.216281][ T4025] syz_tun: left allmulticast mode [ 48.410281][ T4053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.234'. [ 48.419293][ T4053] netlink: 108 bytes leftover after parsing attributes in process `syz.3.234'. [ 48.456250][ T4053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.234'. [ 48.465953][ T4053] netlink: 108 bytes leftover after parsing attributes in process `syz.3.234'. [ 48.475131][ T4053] netlink: 84 bytes leftover after parsing attributes in process `syz.3.234'. [ 48.567983][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 48.608685][ T4060] netlink: 324 bytes leftover after parsing attributes in process `syz.0.238'. [ 48.885470][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 48.885490][ T29] audit: type=1326 audit(1759925450.674:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 48.933542][ T29] audit: type=1326 audit(1759925450.674:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 48.959971][ T29] audit: type=1326 audit(1759925450.754:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 48.983347][ T29] audit: type=1326 audit(1759925450.754:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 49.009049][ T29] audit: type=1326 audit(1759925450.754:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 49.046309][ T29] audit: type=1326 audit(1759925450.824:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 49.069894][ T29] audit: type=1326 audit(1759925450.824:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 49.093276][ T29] audit: type=1326 audit(1759925450.824:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57f2335d67 code=0x7ffc0000 [ 49.116620][ T29] audit: type=1326 audit(1759925450.824:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57f22daf79 code=0x7ffc0000 [ 49.139868][ T29] audit: type=1326 audit(1759925450.824:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 49.186139][ T4085] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 49.193942][ T4085] netlink: 198116 bytes leftover after parsing attributes in process `syz.2.247'. [ 49.733784][ T4100] loop2: detected capacity change from 0 to 8192 [ 49.809375][ T4100] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 49.818031][ T4100] FAT-fs (loop2): Filesystem has been set read-only [ 50.059644][ T4123] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 50.080445][ T4127] tipc: Started in network mode [ 50.085394][ T4127] tipc: Node identity 92ab586a6599, cluster identity 4711 [ 50.092781][ T4127] tipc: Enabled bearer , priority 0 [ 50.120491][ T4127] tipc: Disabling bearer [ 50.208821][ T4141] netlink: 'syz.0.273': attribute type 21 has an invalid length. [ 50.270059][ T4148] loop0: detected capacity change from 0 to 512 [ 50.296474][ T4148] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.346739][ T4148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.386114][ T4148] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.020654][ T4193] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 51.030710][ T4195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.059845][ T4195] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 51.108837][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.169655][ T4206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.857168][ T4234] loop1: detected capacity change from 0 to 2048 [ 51.891045][ T4234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.939390][ T4244] loop2: detected capacity change from 0 to 1024 [ 51.977681][ T4244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.016998][ T4244] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.316: Allocating blocks 449-513 which overlap fs metadata [ 52.055067][ T4243] EXT4-fs (loop2): pa ffff8881072635b0: logic 48, phys. 177, len 21 [ 52.063169][ T4243] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 52.081296][ T4244] syz.2.316 (4244) used greatest stack depth: 10576 bytes left [ 52.099267][ T4254] loop4: detected capacity change from 0 to 512 [ 52.122140][ T4254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.157337][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.176205][ T4254] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.212461][ T4254] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.320: corrupted inode contents [ 52.345898][ T4254] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #2: comm syz.4.320: mark_inode_dirty error [ 52.379956][ T4254] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.320: corrupted inode contents [ 52.392219][ T4254] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.320: mark_inode_dirty error [ 52.457465][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.469963][ T4269] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 52.503111][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.527450][ T4269] macvlan2: entered promiscuous mode [ 52.532865][ T4269] macvlan2: entered allmulticast mode [ 52.539136][ T4269] bond1: entered promiscuous mode [ 52.544539][ T4269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 52.553763][ T4269] bond1: left promiscuous mode [ 52.910536][ T4299] __nla_validate_parse: 7 callbacks suppressed [ 52.910561][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'. [ 52.926273][ T4299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 52.951218][ T4299] bridge0: port 3(vlan2) entered blocking state [ 52.957697][ T4299] bridge0: port 3(vlan2) entered disabled state [ 52.970999][ T4299] vlan2: entered allmulticast mode [ 52.976268][ T4299] bridge0: entered allmulticast mode [ 52.990410][ T4299] vlan2: left allmulticast mode [ 52.995334][ T4299] bridge0: left allmulticast mode [ 53.202097][ T4326] loop4: detected capacity change from 0 to 1024 [ 53.218952][ T4326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.335783][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.374694][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 53.486287][ T4358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 53.864184][ T4386] loop2: detected capacity change from 0 to 1024 [ 53.881804][ T4386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.921604][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 53.921663][ T29] audit: type=1400 audit(1759925455.714:985): avc: denied { create } for pid=4385 comm="syz.2.375" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.987035][ T4386] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.375: Allocating blocks 449-513 which overlap fs metadata [ 54.011833][ T4394] sch_fq: defrate 8 ignored. [ 54.023658][ T4385] EXT4-fs (loop2): pa ffff888107263620: logic 48, phys. 177, len 21 [ 54.031997][ T4385] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 54.082445][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.155195][ T29] audit: type=1326 audit(1759925455.944:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 54.178632][ T29] audit: type=1326 audit(1759925455.944:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 54.202487][ T29] audit: type=1326 audit(1759925455.944:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 54.235564][ T29] audit: type=1326 audit(1759925455.974:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 54.258939][ T29] audit: type=1326 audit(1759925455.974:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 54.282346][ T29] audit: type=1326 audit(1759925455.974:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff113fe1785 code=0x7ffc0000 [ 54.305625][ T29] audit: type=1326 audit(1759925456.024:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 54.329148][ T29] audit: type=1326 audit(1759925456.024:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 54.352663][ T29] audit: type=1326 audit(1759925456.024:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 54.584335][ T4429] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 54.620435][ T4432] loop3: detected capacity change from 0 to 1024 [ 54.646520][ T4432] ext2: Bad value for 'mb_optimize_scan' [ 54.653073][ T4438] mmap: syz.1.398 (4438) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.669945][ T1028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1028 comm=kworker/1:2 [ 54.683039][ T4440] 9pnet: p9_errstr2errno: server reported unknown error [ 54.775360][ T4449] 9pnet: p9_errstr2errno: server reported unknown error [ 54.967356][ T4461] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 54.987560][ T4464] netlink: 64 bytes leftover after parsing attributes in process `syz.0.410'. [ 54.994462][ T4461] netlink: 14 bytes leftover after parsing attributes in process `syz.1.409'. [ 55.074677][ T4474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 55.089792][ T4474] netlink: 108 bytes leftover after parsing attributes in process `syz.1.415'. [ 55.099566][ T4474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 55.128343][ T4474] netlink: 108 bytes leftover after parsing attributes in process `syz.1.415'. [ 55.421525][ T4507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.473383][ T4507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.528546][ T4507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.643400][ T4507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.719627][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752901][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.769019][ T123] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.783119][ T123] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.062526][ T4542] syzkaller0: entered promiscuous mode [ 56.068328][ T4542] syzkaller0: entered allmulticast mode [ 56.115247][ T4552] netlink: 'syz.1.449': attribute type 7 has an invalid length. [ 56.167239][ T4552] syz.1.449 (4552) used greatest stack depth: 10424 bytes left [ 56.766590][ T4597] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 57.091003][ T4607] loop1: detected capacity change from 0 to 1024 [ 57.184414][ T4607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.210749][ T4616] loop3: detected capacity change from 0 to 512 [ 57.239319][ T4616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.256390][ T4616] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.298456][ T4607] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.483: Allocating blocks 449-513 which overlap fs metadata [ 57.316894][ T4616] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.473: corrupted inode contents [ 57.344706][ T4616] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.473: mark_inode_dirty error [ 57.359809][ T4606] EXT4-fs (loop1): pa ffff888107209000: logic 48, phys. 177, len 21 [ 57.367961][ T4606] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 57.408554][ T4616] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.473: corrupted inode contents [ 57.427577][ T4616] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.473: mark_inode_dirty error [ 57.448823][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.643841][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.702812][ T4628] bridge0: port 3(vlan2) entered blocking state [ 57.709345][ T4628] bridge0: port 3(vlan2) entered disabled state [ 57.732888][ T4628] vlan2: entered allmulticast mode [ 57.738235][ T4628] bridge0: entered allmulticast mode [ 57.759109][ T4628] vlan2: left allmulticast mode [ 57.764053][ T4628] bridge0: left allmulticast mode [ 59.189387][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 59.189408][ T29] audit: type=1326 audit(1759925460.984:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 59.266122][ T29] audit: type=1326 audit(1759925460.984:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 59.289832][ T29] audit: type=1326 audit(1759925460.984:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 59.313916][ T29] audit: type=1326 audit(1759925460.984:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 59.337571][ T29] audit: type=1326 audit(1759925461.014:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 59.361735][ T29] audit: type=1326 audit(1759925461.014:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 59.385393][ T29] audit: type=1326 audit(1759925461.034:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 59.408770][ T29] audit: type=1326 audit(1759925461.044:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 59.573552][ T4697] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 59.673380][ T29] audit: type=1326 audit(1759925461.464:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 59.738591][ T29] audit: type=1326 audit(1759925461.504:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 60.079804][ T4720] __nla_validate_parse: 9 callbacks suppressed [ 60.079824][ T4720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.514'. [ 60.254935][ T4731] syz.3.514 (4731) used greatest stack depth: 10368 bytes left [ 60.274210][ T4730] syzkaller0: entered promiscuous mode [ 60.279859][ T4730] syzkaller0: entered allmulticast mode [ 60.318574][ T4735] loop2: detected capacity change from 0 to 1024 [ 60.351466][ T4735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.449553][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.653318][ T4769] loop1: detected capacity change from 0 to 1024 [ 60.686274][ T4769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.787281][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.925437][ T4764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'. [ 60.944601][ T4782] syzkaller0: entered promiscuous mode [ 60.950216][ T4782] syzkaller0: entered allmulticast mode [ 61.010116][ T4764] syz.2.532 (4764) used greatest stack depth: 10336 bytes left [ 61.581783][ T4797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.554'. [ 61.688346][ T4809] bridge: RTM_NEWNEIGH with invalid ether address [ 61.797360][ T4825] 9p: Unknown access argument ¿: -22 [ 62.279648][ T4867] netlink: 96 bytes leftover after parsing attributes in process `syz.4.586'. [ 62.829764][ T4914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4914 comm=syz.2.595 [ 62.934962][ T4912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'. [ 63.086562][ T4925] netlink: 'syz.3.602': attribute type 10 has an invalid length. [ 63.458137][ T4938] loop3: detected capacity change from 0 to 256 [ 63.469704][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 63.809112][ T4960] loop2: detected capacity change from 0 to 512 [ 63.836260][ T4960] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.849654][ T4960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.956665][ T4960] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.990133][ T4960] EXT4-fs (loop2): 1 truncate cleaned up [ 64.008134][ T4960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.099526][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.126948][ T4978] loop3: detected capacity change from 0 to 512 [ 64.134116][ T4978] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.140723][ T4978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.160898][ T4978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.169672][ T4978] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.217152][ T4978] EXT4-fs (loop3): failed to initialize system zone (-117) [ 64.234460][ T4978] EXT4-fs (loop3): mount failed [ 64.266050][ T29] kauditd_printk_skb: 1201 callbacks suppressed [ 64.266070][ T29] audit: type=1326 audit(1759925466.054:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.318031][ T29] audit: type=1326 audit(1759925466.114:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.341641][ T29] audit: type=1326 audit(1759925466.114:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.365170][ T29] audit: type=1326 audit(1759925466.114:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.388534][ T29] audit: type=1326 audit(1759925466.114:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.397068][ T4978] loop3: detected capacity change from 0 to 2048 [ 64.411986][ T29] audit: type=1326 audit(1759925466.114:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.412050][ T29] audit: type=1326 audit(1759925466.114:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.412077][ T29] audit: type=1326 audit(1759925466.114:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.412103][ T29] audit: type=1326 audit(1759925466.114:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.512577][ T29] audit: type=1326 audit(1759925466.114:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 64.551262][ T4978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.640313][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.696774][ T4991] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 64.813393][ T4998] vlan2: entered allmulticast mode [ 64.991868][ T5009] capability: warning: `syz.3.636' uses 32-bit capabilities (legacy support in use) [ 65.200615][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 65.325289][ T5044] netlink: 240 bytes leftover after parsing attributes in process `syz.2.651'. [ 65.430987][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 65.442758][ T5054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.461878][ T5054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.709207][ T5075] bridge: RTM_NEWNEIGH with invalid ether address [ 66.479128][ T5146] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 66.525123][ T5149] netlink: 96 bytes leftover after parsing attributes in process `syz.0.702'. [ 66.536955][ T5153] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 66.656445][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 66.667174][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 66.858788][ T5201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5201 comm=syz.4.720 [ 66.968947][ T5212] loop4: detected capacity change from 0 to 1024 [ 66.976068][ T5212] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.982803][ T5212] EXT4-fs: Ignoring removed bh option [ 66.989194][ T5212] ext3: Unknown parameter 'subj_type' [ 67.924467][ T5264] syzkaller1: entered promiscuous mode [ 67.930242][ T5264] syzkaller1: entered allmulticast mode [ 67.993034][ T5243] Set syz1 is full, maxelem 65536 reached [ 68.148642][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 68.194902][ T5286] team1: entered promiscuous mode [ 68.200244][ T5286] team1: entered allmulticast mode [ 68.226675][ T5286] 8021q: adding VLAN 0 to HW filter on device team1 [ 68.618827][ T5347] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.468013][ T5423] syzkaller1: entered promiscuous mode [ 69.473708][ T5423] syzkaller1: entered allmulticast mode [ 69.573057][ T5433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5433 comm=syz.0.775 [ 69.787867][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 69.787894][ T29] audit: type=1326 audit(1759925471.584:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.0.779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f233eec9 code=0x0 [ 70.027958][ T5482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5482 comm=syz.3.785 [ 70.193300][ T5486] pim6reg: entered allmulticast mode [ 70.214982][ T5486] pim6reg: left allmulticast mode [ 70.729593][ T5478] Set syz1 is full, maxelem 65536 reached [ 71.056721][ T5513] netlink: 'syz.4.796': attribute type 10 has an invalid length. [ 71.073918][ T29] audit: type=1326 audit(1759925472.864:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.3.807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff113faeec9 code=0x0 [ 71.101956][ T5513] team0: Port device dummy0 added [ 71.126979][ T5513] netlink: 'syz.4.796': attribute type 10 has an invalid length. [ 71.139319][ T5513] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 71.183915][ T5513] team0: Failed to send options change via netlink (err -105) [ 71.195332][ T5513] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 71.204547][ T5513] team0: Port device dummy0 removed [ 71.213050][ T5513] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.729548][ T5541] Set syz1 is full, maxelem 65536 reached [ 72.843504][ T5556] loop2: detected capacity change from 0 to 256 [ 73.488788][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.496203][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.566413][ T5592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5592 comm=syz.0.816 [ 73.614392][ T5596] netlink: 'syz.2.821': attribute type 10 has an invalid length. [ 73.666016][ T5597] netlink: 'syz.2.821': attribute type 10 has an invalid length. [ 73.992750][ T29] audit: type=1326 audit(1759925475.784:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 74.032997][ T29] audit: type=1326 audit(1759925475.784:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 74.057397][ T29] audit: type=1326 audit(1759925475.784:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 74.080899][ T29] audit: type=1326 audit(1759925475.814:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 74.104318][ T29] audit: type=1326 audit(1759925475.824:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 74.127733][ T29] audit: type=1326 audit(1759925475.824:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 74.151294][ T29] audit: type=1326 audit(1759925475.824:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 74.175053][ T29] audit: type=1326 audit(1759925475.824:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 74.300014][ T5568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.376977][ T5568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.645771][ T5596] team0: Port device dummy0 added [ 74.665620][ T5597] team0: Port device dummy0 removed [ 74.687508][ T5597] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.706454][ T5604] syz_tun: entered allmulticast mode [ 74.719671][ T5607] dvmrp8: entered allmulticast mode [ 74.746211][ T5602] syz_tun: left allmulticast mode [ 74.751784][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.781589][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.833667][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.871319][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.194970][ T5643] 9p: Unknown access argument ¿: -22 [ 75.206445][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 75.206465][ T29] audit: type=1326 audit(1759925476.994:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.256048][ T29] audit: type=1326 audit(1759925477.034:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.279541][ T29] audit: type=1326 audit(1759925477.034:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.303260][ T29] audit: type=1326 audit(1759925477.034:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.311032][ T5650] bridge: RTM_NEWNEIGH with invalid ether address [ 75.326792][ T29] audit: type=1326 audit(1759925477.034:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.326831][ T29] audit: type=1326 audit(1759925477.034:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.380015][ T29] audit: type=1326 audit(1759925477.034:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.403429][ T29] audit: type=1326 audit(1759925477.034:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.427019][ T29] audit: type=1326 audit(1759925477.034:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.451180][ T29] audit: type=1326 audit(1759925477.034:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c6c5eec9 code=0x7ffc0000 [ 75.511911][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 75.613524][ T5671] program syz.3.855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.650687][ T5673] program syz.2.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.706791][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 75.808508][ T5690] bridge: RTM_NEWNEIGH with invalid ether address [ 75.868161][ T5701] sch_fq: defrate 8 ignored. [ 76.436104][ T5723] netlink: 64 bytes leftover after parsing attributes in process `syz.4.887'. [ 76.788767][ T5733] tipc: Started in network mode [ 76.793709][ T5733] tipc: Node identity 0a1f919e07e, cluster identity 4711 [ 76.800841][ T5733] tipc: Enabled bearer , priority 0 [ 76.810493][ T5733] tipc: Disabling bearer [ 76.915790][ T5740] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 77.067544][ T5752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 77.076558][ T5752] netlink: 108 bytes leftover after parsing attributes in process `syz.4.889'. [ 77.095952][ T5752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 77.105036][ T5752] netlink: 108 bytes leftover after parsing attributes in process `syz.4.889'. [ 77.114061][ T5752] netlink: 84 bytes leftover after parsing attributes in process `syz.4.889'. [ 77.245014][ T5762] loop0: detected capacity change from 0 to 1024 [ 77.265928][ T5762] ext2: Bad value for 'mb_optimize_scan' [ 77.697069][ T5797] loop3: detected capacity change from 0 to 2048 [ 77.709026][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.724107][ T5801] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 77.947652][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.189061][ T5828] tipc: Started in network mode [ 78.194040][ T5828] tipc: Node identity 7aab15ef9563, cluster identity 4711 [ 78.201407][ T5828] tipc: Enabled bearer , priority 0 [ 78.219499][ T5828] tipc: Disabling bearer [ 78.707307][ T5840] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 78.908653][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.915941][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.962907][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.974162][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.023733][ T1686] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.032297][ T1686] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.047246][ T1686] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.066028][ T1686] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.795242][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.936'. [ 79.804278][ T5881] netlink: 108 bytes leftover after parsing attributes in process `syz.2.936'. [ 80.593663][ T5887] Set syz1 is full, maxelem 65536 reached [ 80.950120][ T5898] netlink: 'syz.4.939': attribute type 13 has an invalid length. [ 81.016752][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.026693][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.038233][ T5898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.058526][ T5901] tipc: Started in network mode [ 81.063581][ T5901] tipc: Node identity 0eb732434361, cluster identity 4711 [ 81.070949][ T5901] tipc: Enabled bearer , priority 0 [ 81.098634][ T5900] tipc: Disabling bearer [ 81.207555][ T5905] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 81.233856][ T5907] netlink: 'syz.0.956': attribute type 13 has an invalid length. [ 81.286898][ T5907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.349496][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 81.349517][ T29] audit: type=1326 audit(1759925483.144:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 81.384876][ T5912] loop3: detected capacity change from 0 to 512 [ 81.398902][ T29] audit: type=1326 audit(1759925483.174:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 81.422507][ T29] audit: type=1326 audit(1759925483.174:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 81.424212][ T5912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.446286][ T29] audit: type=1326 audit(1759925483.174:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 81.480557][ T29] audit: type=1326 audit(1759925483.174:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff113faef03 code=0x7ffc0000 [ 81.504336][ T29] audit: type=1326 audit(1759925483.174:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff113fad97f code=0x7ffc0000 [ 81.527779][ T29] audit: type=1326 audit(1759925483.174:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff113faef57 code=0x7ffc0000 [ 81.551171][ T29] audit: type=1326 audit(1759925483.174:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff113fad710 code=0x7ffc0000 [ 81.574818][ T29] audit: type=1326 audit(1759925483.174:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff113faeacb code=0x7ffc0000 [ 81.614437][ T5912] EXT4-fs (loop3): 1 truncate cleaned up [ 81.620888][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.638811][ T29] audit: type=1326 audit(1759925483.214:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff113fadb2a code=0x7ffc0000 [ 81.707066][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.872791][ T5937] __nla_validate_parse: 3 callbacks suppressed [ 81.872812][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'. [ 82.267608][ T5957] loop0: detected capacity change from 0 to 512 [ 82.376426][ T5957] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.402031][ T5957] EXT4-fs (loop0): 1 truncate cleaned up [ 82.409222][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.456823][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.508276][ T5976] netlink: 'syz.3.973': attribute type 13 has an invalid length. [ 82.657751][ T5976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.696231][ T5991] netlink: 96 bytes leftover after parsing attributes in process `syz.1.981'. [ 82.770732][ T5998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5998 comm=syz.3.986 [ 84.072627][ T6049] loop0: detected capacity change from 0 to 512 [ 84.080717][ T6049] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.087731][ T6049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.095073][ T6049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.103604][ T6049] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.104417][ T6053] loop1: detected capacity change from 0 to 512 [ 84.120610][ T6053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.132718][ T6049] EXT4-fs (loop0): failed to initialize system zone (-117) [ 84.132875][ T6053] EXT4-fs (loop1): 1 truncate cleaned up [ 84.146726][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.151050][ T6049] EXT4-fs (loop0): mount failed [ 84.184608][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.224087][ T6066] netlink: '+}[@': attribute type 3 has an invalid length. [ 84.329362][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 84.465902][ T6094] loop4: detected capacity change from 0 to 512 [ 84.476120][ T6094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.499974][ T6094] EXT4-fs (loop4): 1 truncate cleaned up [ 84.506547][ T6094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.543849][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.032880][ T6135] loop4: detected capacity change from 0 to 512 [ 85.054333][ T6135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.090976][ T6135] EXT4-fs (loop4): 1 truncate cleaned up [ 85.107779][ T6135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.141952][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.198564][ T6139] netlink: 'syz.4.1041': attribute type 83 has an invalid length. [ 85.323177][ T6145] loop4: detected capacity change from 0 to 1035 [ 85.350409][ T6145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.372389][ T6145] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.406619][ T6154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6154 comm=syz.0.1047 [ 85.420242][ T6154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6154 comm=syz.0.1047 [ 85.443595][ T6145] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1044: corrupted xattr block 128: invalid header [ 85.467124][ T6145] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 85.485462][ T6145] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1044: corrupted xattr block 128: invalid header [ 85.499818][ T6145] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 85.511399][ T6145] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1044: corrupted xattr block 128: invalid header [ 85.524978][ T6145] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 85.549968][ T6163] loop1: detected capacity change from 0 to 512 [ 85.557596][ T6163] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.569188][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.569263][ T6163] EXT4-fs (loop1): 1 truncate cleaned up [ 85.584465][ T6163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.610598][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 85.627215][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.636757][ T6170] vxlan0: entered promiscuous mode [ 85.646426][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.655224][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.663769][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.685485][ T31] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.751043][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 85.760457][ T6180] loop1: detected capacity change from 0 to 512 [ 85.782924][ T6180] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.796808][ T6180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.804080][ T6180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.812668][ T6180] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.830358][ T6180] EXT4-fs (loop1): failed to initialize system zone (-117) [ 85.837896][ T6180] EXT4-fs (loop1): mount failed [ 85.903887][ T6188] loop3: detected capacity change from 0 to 512 [ 85.919241][ T6188] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.942363][ T6188] EXT4-fs (loop3): mount failed [ 86.174978][ T6209] syzkaller0: entered promiscuous mode [ 86.180754][ T6209] syzkaller0: entered allmulticast mode [ 86.581377][ T6230] netlink: 'syz.1.1088': attribute type 83 has an invalid length. [ 86.893067][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 86.893090][ T29] audit: type=1400 audit(1759925488.294:3108): avc: denied { mounton } for pid=6231 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.934441][ T12] bridge_slave_1: left allmulticast mode [ 86.940174][ T12] bridge_slave_1: left promiscuous mode [ 86.945933][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.969713][ T12] bridge_slave_0: left allmulticast mode [ 86.975443][ T12] bridge_slave_0: left promiscuous mode [ 86.981217][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.065898][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 87.114153][ T12] dvmrp8 (unregistering): left allmulticast mode [ 87.147632][ T29] audit: type=1326 audit(1759925488.944:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.171375][ T29] audit: type=1326 audit(1759925488.944:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.227040][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.246967][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.251219][ T29] audit: type=1326 audit(1759925488.994:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.279795][ T29] audit: type=1326 audit(1759925488.994:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.303509][ T29] audit: type=1326 audit(1759925488.994:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.327424][ T29] audit: type=1326 audit(1759925488.994:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.351448][ T29] audit: type=1326 audit(1759925488.994:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.375039][ T29] audit: type=1326 audit(1759925488.994:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.398557][ T29] audit: type=1326 audit(1759925488.994:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa36bedeec9 code=0x7ffc0000 [ 87.425596][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 87.446353][ T12] bond0 (unregistering): Released all slaves [ 87.455153][ T12] bond1 (unregistering): Released all slaves [ 87.464463][ T12] bond2 (unregistering): Released all slaves [ 87.527435][ T12] tipc: Left network mode [ 87.656548][ T12] hsr_slave_0: left promiscuous mode [ 87.662479][ T12] hsr_slave_1: left promiscuous mode [ 87.668642][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.676488][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.720151][ T12] team0 (unregistering): Port device team_slave_1 removed [ 87.732553][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.744918][ T6281] loop2: detected capacity change from 0 to 512 [ 87.761555][ T6281] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.778801][ T6281] EXT4-fs (loop2): mount failed [ 87.793016][ T6231] chnl_net:caif_netlink_parms(): no params data found [ 87.829579][ T6286] wg2: entered promiscuous mode [ 87.834656][ T6286] wg2: entered allmulticast mode [ 87.929702][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.936937][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.947115][ T6231] bridge_slave_0: entered allmulticast mode [ 87.953831][ T6231] bridge_slave_0: entered promiscuous mode [ 87.961574][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.968825][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.976351][ T6231] bridge_slave_1: entered allmulticast mode [ 87.982970][ T6231] bridge_slave_1: entered promiscuous mode [ 88.003719][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.014763][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.046173][ T6231] team0: Port device team_slave_0 added [ 88.056066][ T6231] team0: Port device team_slave_1 added [ 88.090951][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.098095][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.124203][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.153369][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.160465][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.186757][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.235481][ T6231] hsr_slave_0: entered promiscuous mode [ 88.244788][ T6231] hsr_slave_1: entered promiscuous mode [ 88.254405][ T6231] debugfs: 'hsr0' already exists in 'hsr' [ 88.261489][ T6231] Cannot create hsr debugfs directory [ 88.306918][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 88.611911][ T6231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.621398][ T6231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.630691][ T6231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.639996][ T6231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.678099][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.692071][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.701818][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.708984][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.720282][ T1686] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.727448][ T1686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.793653][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.993822][ T6231] veth0_vlan: entered promiscuous mode [ 89.002420][ T6231] veth1_vlan: entered promiscuous mode [ 89.019032][ T6231] veth0_macvtap: entered promiscuous mode [ 89.026861][ T6231] veth1_macvtap: entered promiscuous mode [ 89.038367][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.051311][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.065666][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.075491][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.084911][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.094868][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.153211][ T6371] netlink: '+}[@': attribute type 3 has an invalid length. [ 89.535082][ T6386] Set syz1 is full, maxelem 65536 reached [ 89.615425][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 89.629668][ T6399] vxlan0: entered promiscuous mode [ 89.635923][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.646417][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.655393][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.664293][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.056749][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 90.392420][ T6435] loop3: detected capacity change from 0 to 1035 [ 90.429996][ T6435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.447241][ T6435] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.458351][ T6444] loop4: detected capacity change from 0 to 1024 [ 90.471577][ T6435] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1147: corrupted xattr block 128: invalid header [ 90.500926][ T6435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 90.510992][ T6435] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1147: corrupted xattr block 128: invalid header [ 90.527077][ T6435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 90.527686][ T6444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.546304][ T6435] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1147: corrupted xattr block 128: invalid header [ 90.578899][ T6435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 90.633634][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.651175][ T6451] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1149: Allocating blocks 449-513 which overlap fs metadata [ 90.677614][ T6443] EXT4-fs (loop4): pa ffff888107263540: logic 48, phys. 177, len 21 [ 90.685740][ T6443] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 90.716668][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.938672][ T6469] loop3: detected capacity change from 0 to 8192 [ 91.186918][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 91.196218][ T6477] bridge_slave_1: left allmulticast mode [ 91.201907][ T6477] bridge_slave_1: left promiscuous mode [ 91.208721][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.219303][ T6477] bridge_slave_0: left allmulticast mode [ 91.225043][ T6477] bridge_slave_0: left promiscuous mode [ 91.230997][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.683676][ T6517] loop2: detected capacity change from 0 to 8192 [ 91.791062][ T6533] vlan2: entered allmulticast mode [ 91.796413][ T6533] bridge_slave_0: entered allmulticast mode [ 91.874086][ T6549] netlink: 'syz.3.1189': attribute type 10 has an invalid length. [ 91.884787][ T6549] bond0: (slave dummy0): Releasing backup interface [ 91.894587][ T6549] team0: Port device dummy0 added [ 91.906775][ T6549] netlink: 'syz.3.1189': attribute type 10 has an invalid length. [ 92.022670][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 92.022686][ T29] audit: type=1326 audit(1759925493.814:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.053205][ T6549] team0: Port device dummy0 removed [ 92.061308][ T6549] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.109279][ T29] audit: type=1326 audit(1759925493.864:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.132821][ T29] audit: type=1326 audit(1759925493.864:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.156341][ T29] audit: type=1326 audit(1759925493.864:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.180600][ T29] audit: type=1326 audit(1759925493.864:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.204268][ T29] audit: type=1326 audit(1759925493.864:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.228059][ T29] audit: type=1326 audit(1759925493.864:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.251529][ T29] audit: type=1326 audit(1759925493.864:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.274992][ T29] audit: type=1326 audit(1759925493.864:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.298654][ T29] audit: type=1326 audit(1759925493.864:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 92.529357][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1198'. [ 92.927132][ T6589] program syz.4.1206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.120200][ T6602] infiniband syz!: set active [ 93.124982][ T6602] infiniband syz!: added team_slave_0 [ 93.138168][ T6602] RDS/IB: syz!: added [ 93.145377][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 93.220996][ T6619] loop4: detected capacity change from 0 to 1024 [ 93.228814][ T6619] EXT4-fs: Ignoring removed orlov option [ 93.360294][ T6619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.525116][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.738074][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1234'. [ 94.299058][ T6737] vlan2: entered allmulticast mode [ 94.635898][ T6780] vhci_hcd: invalid port number 96 [ 94.641889][ T6780] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 94.929470][ T6816] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.932248][ T6821] loop3: detected capacity change from 0 to 128 [ 94.949050][ T6818] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 94.964580][ T6818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.980532][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 94.994933][ T6818] bond2 (unregistering): Released all slaves [ 95.038534][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 95.080820][ T6836] vlan2: entered allmulticast mode [ 95.255653][ T6845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1261'. [ 95.335908][ T6860] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.372251][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 95.414161][ T6869] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 95.468789][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 95.469109][ T6869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.548409][ T6874] bond1 (unregistering): Released all slaves [ 95.933306][ T6933] pimreg: entered allmulticast mode [ 95.939532][ T6933] pimreg: left allmulticast mode [ 96.043384][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.050763][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.066164][ T6953] bridge0: entered allmulticast mode [ 96.077020][ T6953] bridge_slave_1: left allmulticast mode [ 96.082750][ T6953] bridge_slave_1: left promiscuous mode [ 96.088621][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.107985][ T6953] bridge_slave_0: left promiscuous mode [ 96.113854][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.181003][ T6965] netlink: 'syz.2.1281': attribute type 10 has an invalid length. [ 96.203575][ T6965] bond0: (slave dummy0): Releasing backup interface [ 96.230400][ T6965] team0: Port device dummy0 added [ 96.248231][ T6965] netlink: 'syz.2.1281': attribute type 10 has an invalid length. [ 96.282143][ T6965] team0: Port device dummy0 removed [ 96.308488][ T6965] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.839345][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1297'. [ 97.025341][ T7060] sg_write: data in/out 8156/120 bytes for SCSI command 0x0-- guessing data in; [ 97.025341][ T7060] program syz.2.1302 not setting count and/or reply_len properly [ 97.125856][ T7065] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 97.153109][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 97.153130][ T29] audit: type=1326 audit(1759925498.944:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 97.185004][ T29] audit: type=1326 audit(1759925498.944:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 97.209389][ T29] audit: type=1326 audit(1759925498.944:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 97.232950][ T29] audit: type=1326 audit(1759925498.944:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 97.256581][ T29] audit: type=1326 audit(1759925498.954:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 97.280029][ T29] audit: type=1326 audit(1759925498.954:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 97.303664][ T29] audit: type=1326 audit(1759925498.974:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 97.872133][ T7090] pimreg: entered allmulticast mode [ 97.880166][ T7090] pimreg: left allmulticast mode [ 97.957705][ T29] audit: type=1400 audit(1759925499.754:3335): avc: denied { recv } for pid=1008 comm="kworker/u8:5" saddr=10.128.0.163 src=30036 daddr=10.128.0.122 dest=54280 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 97.992539][ T7103] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 98.114959][ T29] audit: type=1400 audit(1759925499.904:3336): avc: denied { execute } for pid=7110 comm="syz.4.1325" path="/50/cpu.stat" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.496893][ T29] audit: type=1400 audit(1759925500.294:3337): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 98.735633][ T7143] loop0: detected capacity change from 0 to 128 [ 98.746022][ T7143] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.760878][ T7143] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.800909][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.870618][ T7160] loop2: detected capacity change from 0 to 512 [ 100.047907][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 100.194254][ T7336] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1367'. [ 100.234526][ T7341] atomic_op ffff88813c523d28 conn xmit_atomic 0000000000000000 [ 101.642011][ T7407] loop4: detected capacity change from 0 to 512 [ 101.650547][ T7407] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1400: casefold flag without casefold feature [ 101.664183][ T7407] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1400: couldn't read orphan inode 15 (err -117) [ 101.688171][ T7407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.735739][ T7414] loop3: detected capacity change from 0 to 1024 [ 101.783333][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.852175][ T7420] netlink: 'syz.1.1403': attribute type 10 has an invalid length. [ 101.863162][ T7420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1403'. [ 101.921213][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.039474][ T7415] loop0: detected capacity change from 0 to 32768 [ 102.056917][ T7420] team0: Port device geneve1 added [ 102.071530][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.101024][ T1686] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.109948][ T1686] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.122893][ T7431] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1409'. [ 102.128657][ T7415] loop0: p1 p3 < > [ 102.136286][ T1686] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.137339][ T7431] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1409'. [ 102.148164][ T7420] syz.1.1403 (7420) used greatest stack depth: 9288 bytes left [ 102.162951][ T1686] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.204447][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 102.204467][ T29] audit: type=1326 audit(1759925503.994:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.236147][ T29] audit: type=1326 audit(1759925503.994:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.261721][ T29] audit: type=1326 audit(1759925504.034:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.285434][ T29] audit: type=1326 audit(1759925504.034:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.309239][ T29] audit: type=1326 audit(1759925504.034:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.334445][ T29] audit: type=1326 audit(1759925504.034:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.359248][ T29] audit: type=1326 audit(1759925504.034:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.383446][ T29] audit: type=1326 audit(1759925504.034:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.407865][ T29] audit: type=1326 audit(1759925504.034:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.432240][ T29] audit: type=1326 audit(1759925504.054:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 102.463309][ T7444] hsr0: entered promiscuous mode [ 102.476371][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 102.505844][ T7444] hsr_slave_0: left promiscuous mode [ 102.513222][ T7444] hsr_slave_1: left promiscuous mode [ 102.527216][ T7444] hsr0 (unregistering): left promiscuous mode [ 102.558695][ T7446] loop4: detected capacity change from 0 to 512 [ 102.588959][ T7446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.605600][ T7452] loop1: detected capacity change from 0 to 128 [ 102.612640][ T7446] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.637209][ T7452] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.658208][ T7452] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.715683][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.774172][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.932071][ T7412] syz.0.1401 (7412) used greatest stack depth: 7288 bytes left [ 103.178403][ T7499] hsr0: entered promiscuous mode [ 103.188911][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 103.198644][ T7499] hsr_slave_0: left promiscuous mode [ 103.204633][ T7499] hsr_slave_1: left promiscuous mode [ 103.215762][ T7499] hsr0 (unregistering): left promiscuous mode [ 103.305334][ T7505] loop3: detected capacity change from 0 to 512 [ 103.329609][ T7506] macvtap0: refused to change device tx_queue_len [ 103.346150][ T7505] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1438: casefold flag without casefold feature [ 103.494799][ T7505] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1438: couldn't read orphan inode 15 (err -117) [ 103.523831][ T7505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.893244][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.956316][ T7515] loop3: detected capacity change from 0 to 128 [ 104.008907][ T7515] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.038756][ T7515] ext4 filesystem being mounted at /313/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.297116][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.453834][ T7513] loop2: detected capacity change from 0 to 32768 [ 104.602559][ T7513] loop2: p1 p3 < > [ 104.802058][ T7512] syz.2.1439 (7512) used greatest stack depth: 7032 bytes left [ 104.894915][ T7533] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1447'. [ 104.904259][ T7533] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1447'. [ 104.993246][ T5855] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.007909][ T5855] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.060259][ T7546] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1454'. [ 105.228029][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 105.237939][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 105.264299][ T7563] netlink: '+}[@': attribute type 10 has an invalid length. [ 105.295090][ T7563] team0 (unregistering): Port device team_slave_0 removed [ 105.357093][ T7563] team0 (unregistering): Port device team_slave_1 removed [ 105.417715][ T7573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.428296][ T7573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.457615][ T7575] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1468'. [ 105.517891][ T7573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.528479][ T7573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.623627][ T7573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.634235][ T7573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.645738][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 105.673828][ T5856] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.706885][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 105.748048][ T7573] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.758500][ T7573] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.758899][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 105.825195][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.833823][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.847078][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.855375][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.868437][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.876891][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.888949][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.897352][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.102411][ T7628] loop0: detected capacity change from 0 to 1024 [ 106.128070][ T7628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.157402][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.194774][ T7636] loop2: detected capacity change from 0 to 128 [ 106.207437][ T7637] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.264494][ T7645] loop4: detected capacity change from 0 to 128 [ 106.273692][ T7645] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.287292][ T7637] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.299563][ T7645] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.354599][ T6231] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.368404][ T7637] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.391697][ T7652] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 106.432641][ T7637] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.485884][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.503041][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.517834][ T1686] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.530855][ T1686] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.557461][ T7666] loop1: detected capacity change from 0 to 512 [ 106.578194][ T7666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.591273][ T7666] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.645827][ T7666] SELinux: Context @ is not valid (left unmapped). [ 106.677880][ T7695] macvtap0: refused to change device tx_queue_len [ 106.730622][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.228914][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 107.228934][ T29] audit: type=1400 audit(1759925509.024:3505): avc: denied { ioctl } for pid=7755 comm="syz.4.1523" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.299147][ T7768] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.350325][ T7768] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.386980][ T29] audit: type=1326 audit(1759925509.184:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1345775d67 code=0x7ffc0000 [ 107.389038][ T7768] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.416912][ T29] audit: type=1326 audit(1759925509.184:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f134571af79 code=0x7ffc0000 [ 107.444945][ T29] audit: type=1326 audit(1759925509.214:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1345775d67 code=0x7ffc0000 [ 107.469086][ T29] audit: type=1326 audit(1759925509.214:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f134571af79 code=0x7ffc0000 [ 107.492475][ T29] audit: type=1326 audit(1759925509.214:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 107.517016][ T29] audit: type=1326 audit(1759925509.214:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 107.582806][ T29] audit: type=1326 audit(1759925509.234:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 107.607359][ T29] audit: type=1326 audit(1759925509.234:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 107.631308][ T29] audit: type=1326 audit(1759925509.234:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 107.683703][ T7768] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.745132][ T7694] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.761663][ T7694] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.782820][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'. [ 107.784825][ T7694] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.832270][ T7694] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.499590][ T7801] loop1: detected capacity change from 0 to 32768 [ 108.573136][ T7801] loop1: p1 p3 < > [ 108.963875][ T7793] syz.1.1536 (7793) used greatest stack depth: 6168 bytes left [ 109.894948][ T7944] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.155410][ T7944] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.182381][ T7960] loop3: detected capacity change from 0 to 1024 [ 110.189518][ T7960] EXT4-fs: Ignoring removed orlov option [ 110.217506][ T7944] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.241408][ T7965] syz_tun: refused to change device tx_queue_len [ 110.267114][ T7960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.281246][ T7944] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.384803][ T7684] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.398949][ T7684] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.430241][ T7684] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.455806][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.467579][ T7684] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.559540][ T7971] SELinux: failed to load policy [ 110.908462][ T8001] vlan2: entered allmulticast mode [ 110.920285][ T8001] dummy0: entered allmulticast mode [ 111.814867][ T8037] netlink: 'syz.2.1586': attribute type 10 has an invalid length. [ 111.823650][ T8037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1586'. [ 111.920607][ T8039] netlink: 'syz.0.1587': attribute type 4 has an invalid length. [ 112.290941][ T8016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.355759][ T8016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.774565][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 112.774586][ T29] audit: type=1400 audit(1759925514.564:3532): avc: denied { bind } for pid=8058 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.924113][ T8037] dummy0: entered promiscuous mode [ 112.930794][ T8037] bond0: (slave dummy0): Releasing backup interface [ 112.938985][ T8037] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 112.977606][ T7701] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.994900][ T7701] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.020464][ T7701] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.034751][ T7701] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.478803][ T8093] netlink: 'syz.2.1610': attribute type 4 has an invalid length. [ 113.948815][ T8103] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 113.956763][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1614'. [ 113.966285][ T8103] dummy0: entered promiscuous mode [ 113.982129][ T8103] bridge0: port 3(dummy0) entered blocking state [ 113.988762][ T8103] bridge0: port 3(dummy0) entered disabled state [ 114.249094][ T8109] loop1: detected capacity change from 0 to 1024 [ 114.275551][ T8109] EXT4-fs: Ignoring removed orlov option [ 114.304334][ T8109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.435700][ T8114] loop2: detected capacity change from 0 to 1024 [ 114.459926][ T8114] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 114.522157][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.004198][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.158881][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.167792][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.196200][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.214069][ T8134] netlink: 'syz.4.1626': attribute type 10 has an invalid length. [ 115.222348][ T8134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1626'. [ 115.224552][ T29] audit: type=1400 audit(1759925517.014:3533): avc: denied { read } for pid=8133 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.231799][ T8134] dummy0: entered promiscuous mode [ 115.232669][ T8134] bridge0: port 3(dummy0) entered blocking state [ 115.267972][ T8134] bridge0: port 3(dummy0) entered disabled state [ 115.300175][ T8134] dummy0: entered allmulticast mode [ 115.307871][ T8134] bridge0: port 3(dummy0) entered blocking state [ 115.314383][ T8134] bridge0: port 3(dummy0) entered forwarding state [ 115.847784][ T29] audit: type=1326 audit(1759925517.634:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 115.872055][ T29] audit: type=1326 audit(1759925517.634:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 115.895755][ T29] audit: type=1326 audit(1759925517.634:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 115.920311][ T29] audit: type=1326 audit(1759925517.634:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 115.944921][ T29] audit: type=1326 audit(1759925517.634:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 115.969093][ T29] audit: type=1326 audit(1759925517.634:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 115.992563][ T29] audit: type=1326 audit(1759925517.634:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 116.016917][ T29] audit: type=1326 audit(1759925517.634:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 116.093525][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 116.115680][ T8169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.122976][ T8169] IPv6: NLM_F_CREATE should be set when creating new route [ 116.138799][ T8169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.146117][ T8169] IPv6: NLM_F_CREATE should be set when creating new route [ 116.268124][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 116.296474][ T8186] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1651'. [ 116.312262][ T8186] 0ªX¹¦À: renamed from caif0 [ 116.331316][ T8186] 0ªX¹¦À: entered allmulticast mode [ 116.336642][ T8186] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 116.409875][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 116.456521][ T8200] loop0: detected capacity change from 0 to 128 [ 116.475717][ T8200] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 116.483691][ T8200] FAT-fs (loop0): Filesystem has been set read-only [ 116.526784][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.526784][ T8200] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 116.541486][ T8200] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 116.550326][ T8200] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 116.558922][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.558922][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.572608][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.572608][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.608387][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.608387][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.648472][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.648472][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.662653][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.662653][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.682409][ T8216] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1665'. [ 116.692821][ T8216] 0ªX¹¦À: renamed from caif0 [ 116.696717][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.696717][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.712196][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.712196][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.726023][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.726023][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.726105][ T8200] syz.0.1658: attempt to access beyond end of device [ 116.726105][ T8200] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.818531][ T8216] 0ªX¹¦À: entered allmulticast mode [ 116.823844][ T8216] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 116.885158][ T8225] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 116.952768][ T8227] dummy0: left promiscuous mode [ 117.056084][ T8227] wg2: left promiscuous mode [ 117.086022][ T8227] team1: left promiscuous mode [ 117.121074][ T8227] vxlan0: left promiscuous mode [ 117.151588][ T7714] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.178886][ T7714] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.196206][ T7714] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.208069][ T7714] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.289935][ T8252] loop1: detected capacity change from 0 to 1024 [ 117.297519][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 117.318146][ T8252] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 117.824475][ T8290] syzkaller0: entered allmulticast mode [ 117.834902][ T8290] syzkaller0 (unregistering): left allmulticast mode [ 118.158884][ T8293] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1694'. [ 118.159010][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 118.159097][ T29] audit: type=1326 audit(1759925519.954:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 118.168366][ T8293] 0ªX¹¦À: renamed from caif0 [ 118.175217][ T29] audit: type=1326 audit(1759925519.964:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 118.227389][ T29] audit: type=1326 audit(1759925519.994:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 118.250917][ T29] audit: type=1326 audit(1759925519.994:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 118.250962][ T29] audit: type=1326 audit(1759925520.004:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 118.298663][ T29] audit: type=1326 audit(1759925520.004:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 118.298711][ T29] audit: type=1326 audit(1759925520.004:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134577eec9 code=0x7ffc0000 [ 118.349667][ T8293] 0ªX¹¦À: entered allmulticast mode [ 118.355022][ T8293] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 118.408689][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 118.462776][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 118.481479][ T8302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.488840][ T8302] IPv6: NLM_F_CREATE should be set when creating new route [ 118.498362][ T8302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.505815][ T8302] IPv6: NLM_F_CREATE should be set when creating new route [ 118.537453][ T8304] loop2: detected capacity change from 0 to 128 [ 118.547051][ T8304] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 118.555185][ T8304] FAT-fs (loop2): Filesystem has been set read-only [ 118.562476][ T8304] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 118.570425][ T8304] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 119.278849][ T8326] loop4: detected capacity change from 0 to 1024 [ 119.300063][ T8326] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 119.417105][ T29] audit: type=1400 audit(1759925521.214:3632): avc: denied { mounton } for pid=8332 comm="syz.3.1711" path="/file0" dev="ramfs" ino=20316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 119.447282][ T8331] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1709'. [ 119.456657][ T8331] 0ªX¹¦À: renamed from caif0 [ 119.548316][ T8331] 0ªX¹¦À: entered allmulticast mode [ 119.554027][ T8331] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 119.570729][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 119.648067][ T29] audit: type=1326 audit(1759925521.444:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 119.709009][ T29] audit: type=1326 audit(1759925521.474:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff113faeec9 code=0x7ffc0000 [ 119.734028][ T8341] netlink: 'syz.0.1716': attribute type 4 has an invalid length. [ 119.785689][ T8345] netlink: 'syz.0.1716': attribute type 4 has an invalid length. [ 120.289342][ T8357] bridge: RTM_NEWNEIGH with invalid ether address [ 120.807537][ T8366] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.1724'. [ 120.831540][ T8368] loop4: detected capacity change from 0 to 1024 [ 120.838494][ T8368] EXT4-fs: Ignoring removed orlov option [ 120.847373][ T8368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.962523][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.288322][ T8385] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 121.649004][ T8400] dummy0: left promiscuous mode [ 121.654088][ T8400] bridge0: port 3(dummy0) entered disabled state [ 121.693609][ T8400] batman_adv: batadv0: Adding interface: dummy0 [ 121.699971][ T8400] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.726147][ T8400] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 121.750529][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 121.860862][ T8410] ip6gre1: entered allmulticast mode [ 122.389365][ T8432] pimreg: entered allmulticast mode [ 122.406984][ T8432] pimreg: left allmulticast mode [ 122.453390][ T8434] loop4: detected capacity change from 0 to 512 [ 122.463144][ T8434] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.1753: ea_inode file size=0 entry size=6 [ 122.477282][ T8434] ------------[ cut here ]------------ [ 122.482817][ T8434] EA inode 11 i_nlink=2 [ 122.483088][ T8434] WARNING: CPU: 0 PID: 8434 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 122.497699][ T8434] Modules linked in: [ 122.501862][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.4.1753 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.511827][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.522113][ T8434] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 122.528889][ T8434] Code: 90 49 8d 7e 40 e8 26 03 b9 ff 4d 8b 6e 40 4c 89 e7 e8 3a fe b8 ff 41 8b 56 48 48 c7 c7 43 4c 55 86 4c 89 ee e8 a7 15 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 e8 73 b0 03 0f 1f 84 00 00 00 00 00 [ 122.548999][ T8434] RSP: 0018:ffffc9000efa7778 EFLAGS: 00010246 [ 122.555218][ T8434] RAX: 9f3431f891607100 RBX: ffff88811a1f3a20 RCX: 0000000000080000 [ 122.563375][ T8434] RDX: ffffc9000b7ae000 RSI: 00000000000042fe RDI: 00000000000042ff [ 122.571551][ T8434] RBP: 0000000000000002 R08: 0001c9000efa75f7 R09: 0000000000000000 [ 122.579745][ T8434] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a1f39d0 [ 122.588063][ T8434] R13: 000000000000000b R14: ffff88811a1f3988 R15: 0000000000000001 [ 122.596103][ T8434] FS: 00007f13441df6c0(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 122.605100][ T8434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.611816][ T8434] CR2: 00007f13457621e0 CR3: 0000000147da4000 CR4: 00000000003506f0 [ 122.620231][ T8434] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.628468][ T8434] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 122.636640][ T8434] Call Trace: [ 122.640002][ T8434] [ 122.642985][ T8434] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 122.649021][ T8434] ? errseq_check+0x2c/0x50 [ 122.653588][ T8434] ext4_xattr_delete_inode+0x6b7/0x790 [ 122.659126][ T8434] ? ext4_truncate+0x92e/0xae0 [ 122.663959][ T8434] ext4_evict_inode+0xa6a/0xd90 [ 122.668978][ T8434] ? __pfx_ext4_evict_inode+0x10/0x10 [ 122.674484][ T8434] evict+0x2e0/0x550 [ 122.678560][ T8434] ? __dquot_initialize+0x146/0x7c0 [ 122.683962][ T8434] iput+0x4ed/0x650 [ 122.687851][ T8434] ext4_process_orphan+0x1a9/0x1c0 [ 122.693009][ T8434] ext4_orphan_cleanup+0x6a8/0xa00 [ 122.698273][ T8434] ext4_fill_super+0x3483/0x3810 [ 122.703277][ T8434] ? snprintf+0x86/0xb0 [ 122.707580][ T8434] ? set_blocksize+0x1a8/0x310 [ 122.712389][ T8434] ? sb_set_blocksize+0xe3/0x100 [ 122.717494][ T8434] ? setup_bdev_super+0x30e/0x370 [ 122.722623][ T8434] ? __pfx_ext4_fill_super+0x10/0x10 [ 122.728001][ T8434] get_tree_bdev_flags+0x28e/0x300 [ 122.733165][ T8434] ? __pfx_ext4_fill_super+0x10/0x10 [ 122.738550][ T8434] get_tree_bdev+0x1f/0x30 [ 122.743225][ T8434] ext4_get_tree+0x1c/0x30 [ 122.747816][ T8434] vfs_get_tree+0x57/0x1d0 [ 122.752463][ T8434] do_new_mount+0x24d/0x660 [ 122.757240][ T8434] path_mount+0x4a5/0xb70 [ 122.761812][ T8434] ? user_path_at+0x109/0x130 [ 122.766655][ T8434] __se_sys_mount+0x28c/0x2e0 [ 122.771489][ T8434] __x64_sys_mount+0x67/0x80 [ 122.776282][ T8434] x64_sys_call+0x2b51/0x3000 [ 122.781014][ T8434] do_syscall_64+0xd2/0x200 [ 122.785703][ T8434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.791980][ T8434] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.797814][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.803736][ T8434] RIP: 0033:0x7f134578066a [ 122.808545][ T8434] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.828399][ T8434] RSP: 002b:00007f13441dee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.836843][ T8434] RAX: ffffffffffffffda RBX: 00007f13441deef0 RCX: 00007f134578066a [ 122.844894][ T8434] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f13441deeb0 [ 122.852994][ T8434] RBP: 0000200000000180 R08: 00007f13441deef0 R09: 0000000000800700 [ 122.860997][ T8434] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 122.869197][ T8434] R13: 00007f13441deeb0 R14: 0000000000000473 R15: 0000200000000680 [ 122.877242][ T8434] [ 122.880328][ T8434] ---[ end trace 0000000000000000 ]--- [ 122.886643][ T8434] EXT4-fs (loop4): 1 orphan inode deleted [ 122.892959][ T8434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.942235][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.997117][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 123.118940][ T8479] SELinux: failed to load policy [ 123.458026][ T8527] wg2: entered promiscuous mode [ 123.462983][ T8527] wg2: entered allmulticast mode [ 123.487522][ T8529] loop2: detected capacity change from 0 to 512 [ 123.668740][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 123.678028][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 123.768462][ T8548] loop0: detected capacity change from 0 to 1024 [ 123.775618][ T8548] EXT4-fs: Ignoring removed orlov option [ 123.782416][ T8548] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 123.807899][ T8548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.847687][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.878864][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'. [ 123.912890][ T8554] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1795'. [ 123.943268][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 123.943287][ T29] audit: type=1326 audit(1759925525.734:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 124.016975][ T29] audit: type=1326 audit(1759925525.734:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 124.040959][ T29] audit: type=1326 audit(1759925525.734:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 124.064549][ T29] audit: type=1326 audit(1759925525.734:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 124.091576][ T29] audit: type=1326 audit(1759925525.884:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 124.115153][ T29] audit: type=1326 audit(1759925525.884:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f233eec9 code=0x7ffc0000 [ 124.266682][ T8576] Falling back ldisc for ptm0. [ 124.287244][ T29] audit: type=1326 audit(1759925526.084:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.1.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 124.310832][ T29] audit: type=1326 audit(1759925526.084:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.1.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 124.383608][ T29] audit: type=1326 audit(1759925526.084:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.1.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 124.405383][ T8587] syzkaller0: entered promiscuous mode [ 124.408050][ T29] audit: type=1326 audit(1759925526.084:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.1.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44510beec9 code=0x7ffc0000 [ 124.412524][ T8587] syzkaller0: entered allmulticast mode [ 124.686989][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 124.704781][ T8613] loop4: detected capacity change from 0 to 2048 [ 124.746562][ T8613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.767330][ T8613] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.803207][ T7714] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:45: bg 0: block 345: padding at end of block bitmap is not set [ 124.859879][ T7714] EXT4-fs (loop4): Remounting filesystem read-only [ 125.240523][ T8622] loop1: detected capacity change from 0 to 512 [ 125.268313][ T8622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.281856][ T8622] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.413337][ T8607] syz.4.1817 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 125.428523][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.4.1817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.428708][ T8607] Tainted: [W]=WARN [ 125.428717][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.428734][ T8607] Call Trace: [ 125.428744][ T8607] [ 125.428762][ T8607] __dump_stack+0x1d/0x30 [ 125.428792][ T8607] dump_stack_lvl+0xe8/0x140 [ 125.428814][ T8607] dump_stack+0x15/0x1b [ 125.428907][ T8607] dump_header+0x81/0x220 [ 125.428950][ T8607] oom_kill_process+0x342/0x400 [ 125.428988][ T8607] out_of_memory+0x979/0xb80 [ 125.429090][ T8607] try_charge_memcg+0x5e6/0x9e0 [ 125.429183][ T8607] ? update_load_avg+0x1da/0x820 [ 125.429231][ T8607] obj_cgroup_charge_pages+0xa6/0x150 [ 125.429309][ T8607] __memcg_kmem_charge_page+0x9f/0x170 [ 125.429428][ T8607] __alloc_frozen_pages_noprof+0x188/0x360 [ 125.429477][ T8607] alloc_pages_mpol+0xb3/0x260 [ 125.429522][ T8607] ? alloc_pages_noprof+0x61/0x130 [ 125.429565][ T8607] alloc_pages_noprof+0x90/0x130 [ 125.429585][ T8607] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 125.429627][ T8607] __kvmalloc_node_noprof+0x483/0x670 [ 125.429708][ T8607] ? ip_set_alloc+0x24/0x30 [ 125.429740][ T8607] ? ip_set_alloc+0x24/0x30 [ 125.429784][ T8607] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 125.429813][ T8607] ip_set_alloc+0x24/0x30 [ 125.429890][ T8607] hash_netiface_create+0x282/0x740 [ 125.429923][ T8607] ? __pfx_hash_netiface_create+0x10/0x10 [ 125.429950][ T8607] ip_set_create+0x3c9/0x970 [ 125.430046][ T8607] ? __nla_parse+0x40/0x60 [ 125.430077][ T8607] nfnetlink_rcv_msg+0x4c3/0x590 [ 125.430132][ T8607] netlink_rcv_skb+0x123/0x220 [ 125.430166][ T8607] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 125.430194][ T8607] nfnetlink_rcv+0x167/0x16c0 [ 125.430291][ T8607] ? kmem_cache_free+0xe4/0x3d0 [ 125.430330][ T8607] ? __kfree_skb+0x109/0x150 [ 125.430392][ T8607] ? nlmon_xmit+0x4f/0x60 [ 125.430419][ T8607] ? consume_skb+0x49/0x150 [ 125.430519][ T8607] ? nlmon_xmit+0x4f/0x60 [ 125.430546][ T8607] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 125.430644][ T8607] ? __dev_queue_xmit+0x1200/0x2000 [ 125.430677][ T8607] ? __dev_queue_xmit+0x182/0x2000 [ 125.430726][ T8607] ? ref_tracker_free+0x37d/0x3e0 [ 125.430776][ T8607] ? __netlink_deliver_tap+0x4dc/0x500 [ 125.430807][ T8607] netlink_unicast+0x5bd/0x690 [ 125.430885][ T8607] netlink_sendmsg+0x58b/0x6b0 [ 125.431068][ T8607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.431107][ T8607] __sock_sendmsg+0x142/0x180 [ 125.431133][ T8607] ____sys_sendmsg+0x31e/0x4e0 [ 125.431236][ T8607] ___sys_sendmsg+0x17b/0x1d0 [ 125.431321][ T8607] __x64_sys_sendmsg+0xd4/0x160 [ 125.431363][ T8607] x64_sys_call+0x191e/0x3000 [ 125.431423][ T8607] do_syscall_64+0xd2/0x200 [ 125.431450][ T8607] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.431515][ T8607] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.431616][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.431639][ T8607] RIP: 0033:0x7f134577eec9 [ 125.431657][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.431681][ T8607] RSP: 002b:00007f13441df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.431707][ T8607] RAX: ffffffffffffffda RBX: 00007f13459d5fa0 RCX: 00007f134577eec9 [ 125.431723][ T8607] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 125.431752][ T8607] RBP: 00007f1345801f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.431765][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.431781][ T8607] R13: 00007f13459d6038 R14: 00007f13459d5fa0 R15: 00007ffea364d568 [ 125.431875][ T8607] [ 125.431884][ T8607] memory: usage 307200kB, limit 307200kB, failcnt 347 [ 125.447177][ T8605] ================================================================== [ 125.458168][ T8607] memory+swap: usage 308424kB, limit 9007199254740988kB, failcnt 0 [ 125.460551][ T8605] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 125.463526][ T8607] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 125.467874][ T8605] [ 125.467886][ T8605] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 125.467909][ T8605] tick_do_update_jiffies64+0x113/0x1c0 [ 125.467951][ T8605] tick_nohz_handler+0x7f/0x2d0 [ 125.467977][ T8605] __hrtimer_run_queues+0x20c/0x5a0 [ 125.472703][ T8607] Memory cgroup stats for /syz4 [ 125.476871][ T8605] hrtimer_interrupt+0x21a/0x460 [ 125.481400][ T8607] : [ 125.486183][ T8605] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 125.486225][ T8605] sysvec_apic_timer_interrupt+0x6f/0x80 [ 125.486270][ T8605] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.486299][ T8605] console_flush_all+0x51b/0x6a0 [ 125.486328][ T8605] console_unlock+0xa1/0x2e0 [ 125.486351][ T8605] vprintk_emit+0x3b5/0x580 [ 125.486374][ T8605] vprintk_default+0x26/0x30 [ 125.486398][ T8605] vprintk+0x1d/0x30 [ 125.486427][ T8605] _printk+0x79/0xa0 [ 125.486462][ T8605] mem_cgroup_print_oom_meminfo+0x84/0x250 [ 125.486489][ T8605] dump_header+0xa0/0x220 [ 125.486524][ T8605] oom_kill_process+0x342/0x400 [ 125.486557][ T8605] out_of_memory+0x979/0xb80 [ 125.486590][ T8605] try_charge_memcg+0x5e6/0x9e0 [ 125.486619][ T8605] obj_cgroup_charge_pages+0xa6/0x150 [ 125.486655][ T8605] __memcg_kmem_charge_page+0x9f/0x170 [ 125.486693][ T8605] __alloc_frozen_pages_noprof+0x188/0x360 [ 125.486732][ T8605] alloc_pages_mpol+0xb3/0x260 [ 125.486768][ T8605] alloc_pages_noprof+0x90/0x130 [ 125.486789][ T8605] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 125.486822][ T8605] __kvmalloc_node_noprof+0x483/0x670 [ 125.486860][ T8605] ip_set_alloc+0x24/0x30 [ 125.486891][ T8605] hash_netiface_create+0x282/0x740 [ 125.486920][ T8605] ip_set_create+0x3c9/0x970 [ 125.486953][ T8605] nfnetlink_rcv_msg+0x4c3/0x590 [ 125.486979][ T8605] netlink_rcv_skb+0x123/0x220 [ 125.487019][ T8605] nfnetlink_rcv+0x167/0x16c0 [ 125.487044][ T8605] netlink_unicast+0x5bd/0x690 [ 125.487071][ T8605] netlink_sendmsg+0x58b/0x6b0 [ 126.015137][ T8605] __sock_sendmsg+0x142/0x180 [ 126.019848][ T8605] ____sys_sendmsg+0x31e/0x4e0 [ 126.024666][ T8605] ___sys_sendmsg+0x17b/0x1d0 [ 126.029393][ T8605] __x64_sys_sendmsg+0xd4/0x160 [ 126.034475][ T8605] x64_sys_call+0x191e/0x3000 [ 126.039197][ T8605] do_syscall_64+0xd2/0x200 [ 126.043736][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.049667][ T8605] [ 126.052013][ T8605] read to 0xffffffff868099c0 of 8 bytes by task 8605 on cpu 0: [ 126.059670][ T8605] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 126.066051][ T8605] count_shadow_nodes+0x6a/0x230 [ 126.071018][ T8605] do_shrink_slab+0x63/0x680 [ 126.075633][ T8605] shrink_slab+0x448/0x760 [ 126.080247][ T8605] shrink_node+0x6c3/0x2120 [ 126.084773][ T8605] do_try_to_free_pages+0x3f6/0xcd0 [ 126.090169][ T8605] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 126.096130][ T8605] try_charge_memcg+0x358/0x9e0 [ 126.101381][ T8605] charge_memcg+0x51/0xc0 [ 126.105744][ T8605] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 126.111801][ T8605] __read_swap_cache_async+0x17b/0x2d0 [ 126.117316][ T8605] swap_cluster_readahead+0x362/0x3c0 [ 126.122744][ T8605] swapin_readahead+0xde/0x6f0 [ 126.127718][ T8605] do_swap_page+0x2ae/0x2370 [ 126.132428][ T8605] handle_mm_fault+0x9a5/0x2be0 [ 126.137288][ T8605] do_user_addr_fault+0x630/0x1080 [ 126.142423][ T8605] exc_page_fault+0x62/0xa0 [ 126.147051][ T8605] asm_exc_page_fault+0x26/0x30 [ 126.151917][ T8605] [ 126.154266][ T8605] value changed: 0x00000000ffffbb87 -> 0x00000000ffffbb88 [ 126.161580][ T8605] [ 126.163939][ T8605] Reported by Kernel Concurrency Sanitizer on: [ 126.170217][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: syz.4.1817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 126.181623][ T8605] Tainted: [W]=WARN [ 126.185434][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.195583][ T8605] ================================================================== [ 126.206585][ T8607] cache 20480 [ 126.209941][ T8607] rss 0 [ 126.212766][ T8607] shmem 0 [ 126.215720][ T8607] mapped_file 0 [ 126.219286][ T8607] dirty 8192 [ 126.222517][ T8607] writeback 0 [ 126.225828][ T8607] workingset_refault_anon 1481 [ 126.230716][ T8607] workingset_refault_file 128 [ 126.235409][ T8607] swap 1253376 [ 126.238828][ T8607] swapcached 0 [ 126.242230][ T8607] pgpgin 73655 [ 126.245653][ T8607] pgpgout 73649 [ 126.249246][ T8607] pgfault 101629 [ 126.252823][ T8607] pgmajfault 228 [ 126.256520][ T8607] inactive_anon 0 [ 126.260184][ T8607] active_anon 0 [ 126.263947][ T8607] inactive_file 24576 [ 126.268438][ T8607] active_file 0 [ 126.272537][ T8607] unevictable 0 [ 126.276159][ T8607] hierarchical_memory_limit 314572800 [ 126.281866][ T8607] hierarchical_memsw_limit 9223372036854771712 [ 126.288266][ T8607] total_cache 20480 [ 126.292178][ T8607] total_rss 0 [ 126.295648][ T8607] total_shmem 0 [ 126.299255][ T8607] total_mapped_file 0 [ 126.303254][ T8607] total_dirty 8192 [ 126.307483][ T8607] total_writeback 0 [ 126.311339][ T8607] total_workingset_refault_anon 1481 [ 126.316648][ T8607] total_workingset_refault_file 128 [ 126.321862][ T8607] total_swap 1253376 [ 126.326437][ T8607] total_swapcached 0 [ 126.330547][ T8607] total_pgpgin 73655 [ 126.334595][ T8607] total_pgpgout 73649 [ 126.338618][ T8607] total_pgfault 101629 [ 126.342702][ T8607] total_pgmajfault 228 [ 126.346916][ T8607] total_inactive_anon 0 [ 126.351247][ T8607] total_active_anon 0 [ 126.355344][ T8607] total_inactive_file 24576 [ 126.360063][ T8607] total_active_file 0 [ 126.364150][ T8607] total_unevictable 0 [ 126.368231][ T8607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1817,pid=8605,uid=0 [ 126.382854][ T8607] Memory cgroup out of memory: Killed process 8605 (syz.4.1817) total-vm:96004kB, anon-rss:1264kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 126.422972][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.701544][ T6231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.