last executing test programs: 764.969783ms ago: executing program 4 (id=1099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@loopback, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x4000, 0x3c}, 0xa, @in=@remote, 0x3500, 0x4, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x200000, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3503, 0x3, 0x0, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x3, 0x0, 0x1, 0x0, 0xabf, 0x1000004}, {{@in6=@loopback, 0x4d0, 0x2b}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x9, 0x0, 0x4}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x3}, 0x0, 0x3c}, 0x8, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 696.457719ms ago: executing program 3 (id=1101): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000)) 683.88969ms ago: executing program 0 (id=1102): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) 644.238743ms ago: executing program 4 (id=1103): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x9) 601.032997ms ago: executing program 0 (id=1104): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) 600.709517ms ago: executing program 2 (id=1105): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000006880)={0x0, 0x0, &(0x7f0000006840)={&(0x7f0000006780)={0x2, 0x7, 0x2, 0xe, 0x5, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x6c, 0x80, 0x0, @in={0x2, 0x4e20, @loopback}}]}, 0x28}}, 0x40010) 580.818969ms ago: executing program 3 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 516.687505ms ago: executing program 0 (id=1108): r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r0) 516.260905ms ago: executing program 4 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x932d, 0xe5, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0xff, 0x0, 0xfffffffc}}) 502.519916ms ago: executing program 2 (id=1111): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002f80)=""/61) 480.180618ms ago: executing program 3 (id=1112): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x50, 0x12, 0x101, 0x0, 0x0, {0x0, 0xfe, 0x0, 0x0, {0x0, 0x2000, [0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x100]}, 0x400}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x4004) 465.684149ms ago: executing program 1 (id=1113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x1170, 0x1170, 0x178, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x178, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x3, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x48a, 0x5, 0x4, 0x1, 0x0, "f342a67c2c8839f34dc41410843d9d5b6c0bffd9272e2a6bbb41043c26f552454c4da82330ce9be65548dea046d85e62aee4e92396bc1c01a84b1d197d6754c2"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 420.699063ms ago: executing program 0 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 401.080845ms ago: executing program 4 (id=1115): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0xcc, 0x0, &(0x7f0000000600)) 397.074035ms ago: executing program 2 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) sync_file_range(r0, 0x5, 0x8001, 0x6) 373.993137ms ago: executing program 1 (id=1117): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)="0202000002000000e4a17c455b3a89e079d558e8278a", 0x16}, {&(0x7f00000006c0)="b0ad", 0x2}], 0x2}, 0x0) 360.838258ms ago: executing program 3 (id=1118): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8948, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 audit_backlog_limit=64 [ 40.423148][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 40.497061][ T4285] FAT-fs (loop3): Directory bread(block 64) failed [ 40.525238][ T4285] FAT-fs (loop3): Directory bread(block 65) failed [ 40.528698][ T4294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.389'. [ 40.571788][ T4285] FAT-fs (loop3): Directory bread(block 66) failed [ 40.621764][ T4285] FAT-fs (loop3): Directory bread(block 67) failed [ 40.667414][ T4285] FAT-fs (loop3): Directory bread(block 68) failed [ 40.674035][ T4285] FAT-fs (loop3): Directory bread(block 69) failed [ 40.725999][ T4285] FAT-fs (loop3): Directory bread(block 70) failed [ 40.736607][ T4285] FAT-fs (loop3): Directory bread(block 71) failed [ 40.759272][ T4285] FAT-fs (loop3): Directory bread(block 72) failed [ 40.771537][ T4285] FAT-fs (loop3): Directory bread(block 73) failed [ 40.900904][ T4312] loop0: detected capacity change from 0 to 512 [ 40.951048][ T4312] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.018466][ T4312] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.036117][ T4315] loop1: detected capacity change from 0 to 4096 [ 41.056557][ T4312] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.407: Allocating blocks 41-42 which overlap fs metadata [ 41.071740][ T4312] loop0: lost filesystem error report for type 5 error -117 [ 41.071962][ T4312] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.407: Allocating blocks 41-42 which overlap fs metadata [ 41.079579][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 41.079613][ C0] EXT4-fs (loop0): initial error at time 1771671949: ext4_mb_mark_diskspace_used:4224 [ 41.079636][ C0] EXT4-fs (loop0): last error at time 1771671949: ext4_mb_mark_diskspace_used:4224 [ 41.124346][ T4312] loop0: lost filesystem error report for type 5 error -117 [ 41.124560][ T4312] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.407: Failed to acquire dquot type 1 [ 41.190853][ T4312] loop0: lost filesystem error report for type 5 error -117 [ 41.208256][ T4312] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 41.236488][ T4315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.262593][ T4329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 41.279857][ T4312] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #12: comm syz.0.407: corrupted inode contents [ 41.385988][ T4312] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.387516][ T4312] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #12: comm syz.0.407: mark_inode_dirty error [ 41.414315][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.435785][ T2123] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.436110][ T4312] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.466409][ T4312] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #12: comm syz.0.407: corrupted inode contents [ 41.558055][ T4312] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.558390][ T4312] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.407: mark_inode_dirty error [ 41.597352][ T4342] bond2: option min_links: invalid value (18446744073709551601) [ 41.605201][ T4342] bond2: option min_links: allowed values 0 - 2147483647 [ 41.695698][ T4312] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.697207][ T4312] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #12: comm syz.0.407: corrupted inode contents [ 41.719152][ T4312] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.719465][ T4312] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 41.739189][ T4342] bond2 (unregistering): Released all slaves [ 41.748265][ T4312] loop0: lost filesystem error report for type 5 error -117 [ 41.748523][ T4312] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #12: comm syz.0.407: corrupted inode contents [ 41.796459][ T4312] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.796622][ T4312] EXT4-fs error (device loop0): ext4_truncate:4587: inode #12: comm syz.0.407: mark_inode_dirty error [ 41.861520][ T4312] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.863235][ T4312] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 41.934468][ T4312] loop0: lost filesystem error report for type 5 error -117 [ 41.934827][ T4312] EXT4-fs (loop0): 1 truncate cleaned up [ 41.997878][ T4312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.077025][ T4365] IPv6: Can't replace route, no match found [ 42.184558][ T4312] syz.0.407 (4312) used greatest stack depth: 10024 bytes left [ 42.217574][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.427811][ T4382] tc_dump_action: action bad kind [ 42.555999][ T4380] loop4: detected capacity change from 0 to 8192 [ 42.606274][ T4380] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.662376][ T4394] loop1: detected capacity change from 0 to 128 [ 42.743620][ T4394] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.780895][ T4394] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.977262][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.366725][ T4433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.455'. [ 43.373101][ T4430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'. [ 43.404109][ T4433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.455'. [ 43.409107][ T4435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.446073][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.482805][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.491200][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.500614][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.509163][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.509505][ T4441] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 43.517503][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.550891][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.560861][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.571205][ T4436] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 43.777345][ T4461] ipt_REJECT: TCP_RESET invalid for non-tcp [ 43.957727][ T4484] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 44.193464][ T4517] netlink: 144 bytes leftover after parsing attributes in process `syz.4.496'. [ 44.540474][ T4555] bond2: option min_links: invalid value (18446744073709551601) [ 44.563779][ T4555] bond2: option min_links: allowed values 0 - 2147483647 [ 44.605770][ T4555] bond2 (unregistering): Released all slaves [ 44.635785][ T4624] capability: warning: `syz.4.514' uses 32-bit capabilities (legacy support in use) [ 44.735975][ T28] kauditd_printk_skb: 1434 callbacks suppressed [ 44.735993][ T28] audit: type=1400 audit(1771671952.870:14940): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 44.778062][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 44.787691][ T3322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 44.793652][ T28] audit: type=1400 audit(1771671952.870:14941): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 44.794226][ T3322] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 44.816183][ T28] audit: type=1400 audit(1771671952.870:14942): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 44.844450][ T3039] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 44.844471][ T3039] audit: backlog limit exceeded [ 44.845115][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 44.845129][ T3039] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 44.990331][ T4653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.525'. [ 45.076664][ T4663] syz.4.529 (4663): /proc/4662/oom_adj is deprecated, please use /proc/4662/oom_score_adj instead. [ 45.708732][ T4722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.557'. [ 46.202776][ T4760] syz.4.574 uses obsolete (PF_INET,SOCK_PACKET) [ 46.503156][ T4780] netlink: 72 bytes leftover after parsing attributes in process `syz.3.584'. [ 46.550713][ T4782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 46.567753][ T4782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 46.756437][ T4798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.593'. [ 46.775656][ T4800] Cannot find set identified by id 0 to match [ 46.900376][ T4810] bond1: option lp_interval: invalid value (0) [ 46.908814][ T4810] bond1: option lp_interval: allowed values 1 - 2147483647 [ 46.926134][ T4810] bond1 (unregistering): Released all slaves [ 47.448247][ T4916] xt_l2tp: missing protocol rule (udp|l2tpip) [ 47.873581][ T4949] batadv2: entered promiscuous mode [ 47.888154][ T4948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.392840][ T4999] gtp0: entered promiscuous mode [ 48.408213][ T4999] gtp0: entered allmulticast mode [ 48.573357][ T5013] TCP: TCP_TX_DELAY enabled [ 48.608877][ T5022] __nla_validate_parse: 6 callbacks suppressed [ 48.608903][ T5022] netlink: 156 bytes leftover after parsing attributes in process `syz.0.663'. [ 48.939069][ T5051] validate_nla: 52 callbacks suppressed [ 48.939086][ T5051] netlink: 'syz.0.677': attribute type 21 has an invalid length. [ 49.251913][ T5082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 49.286012][ T5082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 49.746275][ T28] kauditd_printk_skb: 11653 callbacks suppressed [ 49.746292][ T28] audit: type=1400 audit(1771671957.880:26066): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 49.763898][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 49.774978][ T5126] audit: audit_backlog=65 > audit_backlog_limit=64 [ 49.795633][ T3322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 49.796025][ T3039] audit: audit_lost=190 audit_rate_limit=0 audit_backlog_limit=64 [ 49.805445][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 49.818585][ T3322] audit: audit_lost=191 audit_rate_limit=0 audit_backlog_limit=64 [ 49.827584][ T5126] audit: audit_lost=192 audit_rate_limit=0 audit_backlog_limit=64 [ 49.830487][ T3039] audit: backlog limit exceeded [ 49.838264][ T3319] audit: audit_lost=193 audit_rate_limit=0 audit_backlog_limit=64 [ 50.010225][ T5139] bond1: option lp_interval: invalid value (0) [ 50.046301][ T5139] bond1: option lp_interval: allowed values 1 - 2147483647 [ 50.061925][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 50.078906][ T5139] bond1 (unregistering): Released all slaves [ 50.090357][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 50.177781][ T5211] bond2: option ad_actor_sys_prio: invalid value (0) [ 50.193213][ T5211] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 50.214767][ T5211] bond2 (unregistering): Released all slaves [ 50.232172][ T5247] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 50.241238][ T5247] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 50.468309][ T5340] netlink: 'syz.4.732': attribute type 4 has an invalid length. [ 50.495821][ T5340] netlink: 168 bytes leftover after parsing attributes in process `syz.4.732'. [ 50.603165][ T5354] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 50.867140][ T5384] bond2: option lp_interval: invalid value (0) [ 50.873355][ T5384] bond2: option lp_interval: allowed values 1 - 2147483647 [ 50.887583][ T5384] bond2 (unregistering): Released all slaves [ 50.935299][ T5455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.017591][ T5461] netlink: 132 bytes leftover after parsing attributes in process `syz.4.759'. [ 51.342840][ T5494] xt_cgroup: path and classid specified [ 51.426886][ T5504] xt_hashlimit: max too large, truncated to 1048576 [ 51.690454][ T5531] netlink: 'syz.1.786': attribute type 10 has an invalid length. [ 51.785863][ T5542] ipt_ECN: cannot use operation on non-tcp rule [ 51.899041][ T5559] bond2: option lp_interval: invalid value (0) [ 51.920485][ T5559] bond2: option lp_interval: allowed values 1 - 2147483647 [ 51.950830][ T5559] bond2 (unregistering): Released all slaves [ 52.000593][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 52.254394][ T5649] bond1: option min_links: invalid value (18446744073709551601) [ 52.264010][ T5649] bond1: option min_links: allowed values 0 - 2147483647 [ 52.267832][ T5685] netlink: 'syz.4.809': attribute type 6 has an invalid length. [ 52.286931][ T5649] bond1 (unregistering): Released all slaves [ 52.470150][ T5732] »»»»»»: renamed from veth0_vlan (while UP) [ 52.512269][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 52.527898][ T5735] netlink: 'syz.3.819': attribute type 30 has an invalid length. [ 52.825282][ T5796] bond2: option min_links: invalid value (18446744073709551601) [ 52.851588][ T5796] bond2: option min_links: allowed values 0 - 2147483647 [ 52.873039][ T5796] bond2 (unregistering): Released all slaves [ 53.095880][ T5887] xt_hashlimit: overflow, try lower: 6/0 [ 53.188113][ T5896] netlink: 'syz.2.850': attribute type 17 has an invalid length. [ 53.206060][ T5896] netlink: 148 bytes leftover after parsing attributes in process `syz.2.850'. [ 53.300814][ T5905] xt_NFQUEUE: number of total queues is 0 [ 53.860787][ T5949] netlink: 'syz.3.874': attribute type 7 has an invalid length. [ 53.882949][ T5949] netlink: 140 bytes leftover after parsing attributes in process `syz.3.874'. [ 54.050985][ T5963] bond2: option min_links: invalid value (18446744073709551601) [ 54.076095][ T5963] bond2: option min_links: allowed values 0 - 2147483647 [ 54.108159][ T5963] bond2 (unregistering): Released all slaves [ 54.309883][ T6049] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 54.375962][ T6049] netlink: 164 bytes leftover after parsing attributes in process `syz.2.892'. [ 54.447870][ T6064] netlink: 'syz.1.899': attribute type 3 has an invalid length. [ 54.462291][ T6064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.899'. [ 54.651897][ T6086] netlink: 'syz.4.908': attribute type 11 has an invalid length. [ 54.685967][ T6086] netlink: 140 bytes leftover after parsing attributes in process `syz.4.908'. [ 54.757715][ T28] kauditd_printk_skb: 11792 callbacks suppressed [ 54.757735][ T28] audit: type=1400 audit(1771671962.900:37646): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.818856][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.825070][ T28] audit: type=1400 audit(1771671962.900:37647): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.835691][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.854671][ T3039] audit: audit_lost=264 audit_rate_limit=0 audit_backlog_limit=64 [ 54.859226][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.875945][ T3039] audit: backlog limit exceeded [ 54.879090][ T3311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.882346][ T3315] audit: audit_lost=265 audit_rate_limit=0 audit_backlog_limit=64 [ 54.888523][ T3319] audit: audit_lost=266 audit_rate_limit=0 audit_backlog_limit=64 [ 55.109456][ T6128] netlink: 'syz.0.930': attribute type 29 has an invalid length. [ 55.355807][ T6154] bond2: entered promiscuous mode [ 55.361239][ T6154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.610462][ T6208] netlink: 404 bytes leftover after parsing attributes in process `syz.2.951'. [ 55.634763][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 55.661534][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 55.674397][ T6213] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.681809][ T6216] netlink: 'syz.4.954': attribute type 21 has an invalid length. [ 55.683300][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 55.706371][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 55.756304][ T6211] bond2: entered promiscuous mode [ 55.770518][ T6211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.793596][ T6252] netlink: 72 bytes leftover after parsing attributes in process `syz.1.957'. [ 56.244608][ T6291] IPv6: sit1: Disabled Multicast RS [ 56.268442][ T6291] sit1: entered allmulticast mode [ 56.953255][ T6378] No such timeout policy "syz1" [ 57.070062][ T6388] xfrm0: entered promiscuous mode [ 57.070083][ T6388] xfrm0: entered allmulticast mode [ 58.467299][ T6489] Cannot find set identified by id 0 to match [ 58.644364][ T6500] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 58.917004][ T6526] netlink: 'syz.2.1069': attribute type 21 has an invalid length. [ 59.131145][ T6544] syz.0.1079 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.767165][ T28] kauditd_printk_skb: 11378 callbacks suppressed [ 59.767182][ T28] audit: type=1400 audit(1771671967.910:49022): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.823114][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.834534][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.837543][ T3039] audit: audit_lost=268 audit_rate_limit=0 audit_backlog_limit=64 [ 59.847117][ T7053] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.856098][ T28] audit: type=1400 audit(1771671967.930:49023): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.877943][ T3319] audit: audit_lost=269 audit_rate_limit=0 audit_backlog_limit=64 [ 59.877962][ T3319] audit: backlog limit exceeded [ 59.878893][ T3039] audit: backlog limit exceeded [ 59.879582][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 60.819552][ T50] ================================================================== [ 60.827672][ T50] BUG: KCSAN: data-race in alloc_pid / copy_process [ 60.834294][ T50] [ 60.836642][ T50] read-write to 0xffffffff86c61f68 of 4 bytes by task 12 on cpu 1: [ 60.844718][ T50] alloc_pid+0x651/0x940 [ 60.849079][ T50] copy_process+0xf37/0x20d0 [ 60.853845][ T50] kernel_clone+0x16b/0x5d0 [ 60.858454][ T50] user_mode_thread+0x9c/0xd0 [ 60.863220][ T50] call_usermodehelper_exec_work+0x41/0x160 [ 60.869297][ T50] process_scheduled_works+0x4de/0x9e0 [ 60.874960][ T50] worker_thread+0x581/0x770 [ 60.879558][ T50] kthread+0x22a/0x280 [ 60.883629][ T50] ret_from_fork+0x150/0x360 [ 60.888236][ T50] ret_from_fork_asm+0x1a/0x30 [ 60.893011][ T50] [ 60.895363][ T50] read to 0xffffffff86c61f68 of 4 bytes by task 50 on cpu 0: [ 60.902822][ T50] copy_process+0x1895/0x20d0 [ 60.907507][ T50] kernel_clone+0x16b/0x5d0 [ 60.912020][ T50] user_mode_thread+0x9c/0xd0 [ 60.916712][ T50] call_usermodehelper_exec_work+0x41/0x160 [ 60.922610][ T50] process_scheduled_works+0x4de/0x9e0 [ 60.928164][ T50] worker_thread+0x581/0x770 [ 60.932762][ T50] kthread+0x22a/0x280 [ 60.936827][ T50] ret_from_fork+0x150/0x360 [ 60.941430][ T50] ret_from_fork_asm+0x1a/0x30 [ 60.946199][ T50] [ 60.948521][ T50] value changed: 0x800000fb -> 0x800000fc [ 60.954317][ T50] [ 60.956639][ T50] Reported by Kernel Concurrency Sanitizer on: [ 60.962967][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 60.972255][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.982307][ T50] Workqueue: events_unbound call_usermodehelper_exec_work [ 60.989524][ T50] ================================================================== [ 64.775934][ T28] kauditd_printk_skb: 34555 callbacks suppressed [ 64.776031][ T28] audit: type=1400 audit(1771671972.910:83089): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.792298][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.804881][ T28] audit: type=1400 audit(1771671972.910:83090): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.811367][ T3039] audit: audit_lost=434 audit_rate_limit=0 audit_backlog_limit=64 [ 64.832498][ T28] audit: type=1400 audit(1771671972.910:83091): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.840817][ T3039] audit: backlog limit exceeded [ 64.862068][ T28] audit: type=1400 audit(1771671972.910:83092): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.868407][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.888753][ T28] audit: type=1400 audit(1771671972.910:83093): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.896144][ T3039] audit: audit_lost=435 audit_rate_limit=0 audit_backlog_limit=64 [ 69.786145][ T28] kauditd_printk_skb: 43806 callbacks suppressed [ 69.786163][ T28] audit: type=1400 audit(1771671977.930:126806): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.794069][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.815602][ T28] audit: type=1400 audit(1771671977.930:126807): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.821196][ T3039] audit: audit_lost=467 audit_rate_limit=0 audit_backlog_limit=64 [ 69.847923][ T28] audit: type=1400 audit(1771671977.930:126808): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.850356][ T3039] audit: backlog limit exceeded [ 69.871637][ T28] audit: type=1400 audit(1771671977.930:126809): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.899007][ T28] audit: type=1400 audit(1771671977.930:126810): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.902090][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.921926][ T28] audit: type=1400 audit(1771671977.930:126811): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0