last executing test programs: 2.081790714s ago: executing program 1 (id=4019): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) fsetxattr$security_ima(r2, &(0x7f0000000500), 0x0, 0x0, 0x2) 2.065836486s ago: executing program 1 (id=4022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.867450893s ago: executing program 0 (id=4026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 1.866857833s ago: executing program 0 (id=4027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) shutdown(r1, 0x0) ppoll(&(0x7f0000000340)=[{r1, 0x420e}], 0x1, 0x0, 0x0, 0x0) 1.771702262s ago: executing program 1 (id=4028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 1.770967992s ago: executing program 0 (id=4038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='kfree\x00', r0, 0x0, 0x9}, 0x18) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000780)={0x0, 0x0, 0x400, 0x2, 0x80000216}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r2, 0x47f4, 0xffff7fff, 0x3, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r1, 0x0, 0x0, 0x0, 0x44040001, 0x1}) 1.538365583s ago: executing program 0 (id=4033): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) umount2(0x0, 0x800000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.435751072s ago: executing program 1 (id=4036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x47813, 0x3, 0x2, 0x81, 0x1ff, 0x2, 0xfffe}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1.408735115s ago: executing program 2 (id=4037): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.290837085s ago: executing program 2 (id=4040): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 1.194969343s ago: executing program 3 (id=4045): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 955.916685ms ago: executing program 4 (id=4047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 884.671651ms ago: executing program 3 (id=4048): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) 853.985994ms ago: executing program 0 (id=4049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 807.715718ms ago: executing program 4 (id=4050): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 807.345198ms ago: executing program 4 (id=4051): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xd3b330b2dabe9819) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x6b, 0x17, 0x4002, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) 641.459123ms ago: executing program 0 (id=4052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)) 593.905287ms ago: executing program 3 (id=4053): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 582.218679ms ago: executing program 1 (id=4054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 528.633263ms ago: executing program 3 (id=4055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r1, r2, 0x0) 528.368103ms ago: executing program 4 (id=4056): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = creat(0x0, 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) fallocate(r2, 0x0, 0x9, 0x2000403) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x2, 0xfffefffffdffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 527.939183ms ago: executing program 1 (id=4057): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x8000000000}, 0x18) 390.887835ms ago: executing program 3 (id=4058): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 387.077726ms ago: executing program 2 (id=4059): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 329.923041ms ago: executing program 4 (id=4060): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 329.353061ms ago: executing program 3 (id=4061): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 273.393496ms ago: executing program 2 (id=4062): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) syz_io_uring_setup(0x4e0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x33) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)={0x24, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}]}]}, 0x24}}, 0x0) 259.333957ms ago: executing program 2 (id=4063): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x101, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 165.126716ms ago: executing program 4 (id=4064): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) utimes(&(0x7f0000000200)='./file1\x00', 0x0) 0s ago: executing program 2 (id=4065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x8000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): an0: entered promiscuous mode [ 118.304766][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.314111][ T3985] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.329919][ T7940] pimreg: entered allmulticast mode [ 118.362353][ T7940] pimreg: left allmulticast mode [ 118.394014][ T3985] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.412459][ T3985] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.421492][ T3985] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.492566][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1774'. [ 119.140478][ T7999] tipc: Started in network mode [ 119.145658][ T7999] tipc: Node identity ac14140f, cluster identity 4711 [ 119.168331][ T7999] tipc: New replicast peer: 255.255.255.255 [ 119.174616][ T7999] tipc: Enabled bearer , priority 10 [ 119.199404][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'. [ 119.208576][ T8000] tipc: Disabling bearer [ 119.515886][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1805'. [ 119.535357][ T8020] IPVS: Error connecting to the multicast addr [ 119.588173][ T8024] xt_hashlimit: max too large, truncated to 1048576 [ 119.715145][ T8035] loop4: detected capacity change from 0 to 128 [ 119.837041][ T8028] syz.4.1809: attempt to access beyond end of device [ 119.837041][ T8028] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 119.860816][ T8028] syz.4.1809: attempt to access beyond end of device [ 119.860816][ T8028] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 119.874928][ T8028] syz.4.1809: attempt to access beyond end of device [ 119.874928][ T8028] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 119.891536][ T8028] syz.4.1809: attempt to access beyond end of device [ 119.891536][ T8028] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 119.908307][ T8028] syz.4.1809: attempt to access beyond end of device [ 119.908307][ T8028] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 119.925918][ T8028] syz.4.1809: attempt to access beyond end of device [ 119.925918][ T8028] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 119.940432][ T8028] syz.4.1809: attempt to access beyond end of device [ 119.940432][ T8028] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 119.956654][ T8028] syz.4.1809: attempt to access beyond end of device [ 119.956654][ T8028] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 120.003169][ T8028] syz.4.1809: attempt to access beyond end of device [ 120.003169][ T8028] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 120.048957][ T8028] syz.4.1809: attempt to access beyond end of device [ 120.048957][ T8028] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 120.150022][ T3799] IPVS: starting estimator thread 0... [ 120.157189][ T8050] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1818'. [ 120.166449][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1818'. [ 120.252938][ T8049] IPVS: using max 2448 ests per chain, 122400 per kthread [ 120.640291][ T29] kauditd_printk_skb: 1304 callbacks suppressed [ 120.640306][ T29] audit: type=1326 audit(1767940928.055:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 120.671890][ T29] audit: type=1326 audit(1767940928.055:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3eb45df90 code=0x7ffc0000 [ 120.695439][ T29] audit: type=1326 audit(1767940928.055:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 120.719048][ T29] audit: type=1326 audit(1767940928.055:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 120.742660][ T29] audit: type=1326 audit(1767940928.065:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 120.766318][ T29] audit: type=1326 audit(1767940928.065:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 120.790080][ T29] audit: type=1326 audit(1767940928.125:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 120.814154][ T29] audit: type=1326 audit(1767940928.125:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 120.856310][ T8078] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1828'. [ 120.890197][ T29] audit: type=1400 audit(1767940928.305:4334): avc: denied { mounton } for pid=8080 comm="syz.1.1829" path="/375/file0" dev="tmpfs" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 120.992945][ T29] audit: type=1326 audit(1767940928.405:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 121.030906][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 121.040176][ T8093] netlink: 'syz.4.1832': attribute type 11 has an invalid length. [ 121.048335][ T8093] netlink: 'syz.4.1832': attribute type 13 has an invalid length. [ 121.096664][ T8093] vxlan0: entered promiscuous mode [ 121.103296][ T3985] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.111615][ T3985] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.121298][ T3985] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.135672][ T3985] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.149867][ T8096] netlink: 'syz.2.1836': attribute type 10 has an invalid length. [ 121.158041][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1836'. [ 121.171670][ T8096] : entered promiscuous mode [ 121.178291][ T8096] bridge0: port 3() entered blocking state [ 121.184524][ T8096] bridge0: port 3() entered disabled state [ 121.190953][ T8096] : entered allmulticast mode [ 121.195804][ T8096] bridge0: entered allmulticast mode [ 121.202062][ T8096] : left allmulticast mode [ 121.206645][ T8096] bridge0: left allmulticast mode [ 121.320089][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1839'. [ 121.329375][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1839'. [ 121.357251][ T8110] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1840'. [ 121.464584][ T8119] xt_hashlimit: max too large, truncated to 1048576 [ 121.721152][ T8130] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1852'. [ 121.761598][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 121.782275][ T8134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.789770][ T8134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.802080][ T8134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.810259][ T8134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.848320][ T8142] loop4: detected capacity change from 0 to 164 [ 121.861263][ T8142] Unsupported NM flag settings (240) [ 121.940244][ T8146] loop4: detected capacity change from 0 to 1024 [ 121.979939][ T8146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.100663][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.147830][ T8168] loop4: detected capacity change from 0 to 128 [ 122.305258][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 122.314891][ T8186] netlink: 'syz.3.1869': attribute type 11 has an invalid length. [ 122.323332][ T8186] netlink: 'syz.3.1869': attribute type 13 has an invalid length. [ 122.334768][ T8186] vxlan0: entered promiscuous mode [ 122.375622][ T8187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.386055][ T8187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.405144][ T8189] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 122.427670][ T8189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.444582][ T8187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.454966][ T8187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.462180][ T8192] rdma_op ffff88810c8f5180 conn xmit_rdma 0000000000000000 [ 122.482168][ T8189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.490511][ T8189] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.503853][ T8189] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 122.530453][ T8187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.540915][ T8187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.591289][ T8187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.601931][ T8187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.625127][ T4006] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.673723][ T4006] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.682112][ T4006] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.703349][ T4006] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.711562][ T4006] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.719813][ T4006] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.728064][ T4006] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.738456][ T4006] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.746693][ T4006] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.197787][ T8211] Set syz1 is full, maxelem 6117 reached [ 123.608607][ T8242] netlink: 'syz.0.1896': attribute type 12 has an invalid length. [ 123.701186][ T8239] infiniband syz!: set active [ 123.706632][ T8239] infiniband syz!: added team_slave_0 [ 123.802093][ T8239] RDS/IB: syz!: added [ 123.822156][ T8239] smc: adding ib device syz! with port count 1 [ 123.829908][ T8239] smc: ib device syz! port 1 has no pnetid [ 123.845221][ T8253] pimreg: entered allmulticast mode [ 123.857494][ T8253] pimreg: left allmulticast mode [ 123.941891][ T8258] lo speed is unknown, defaulting to 1000 [ 124.299912][ T8277] sch_fq: defrate 0 ignored. [ 124.646461][ T3629] Bluetooth: hci0: command 0x1003 tx timeout [ 124.652807][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.793876][ T8288] netlink: 'syz.0.1917': attribute type 3 has an invalid length. [ 125.394723][ T8344] netlink: 'syz.3.1940': attribute type 29 has an invalid length. [ 125.569882][ T8361] netlink: 'syz.0.1949': attribute type 1 has an invalid length. [ 125.592318][ T8361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.617342][ T8361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.625702][ T8361] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 125.638131][ T8361] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 125.851900][ T8378] sch_fq: defrate 0 ignored. [ 125.900759][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 125.900773][ T29] audit: type=1400 audit(1767940933.315:4642): avc: denied { write } for pid=8383 comm="syz.4.1960" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.951979][ T8388] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1962'. [ 126.145010][ T29] audit: type=1400 audit(1767940933.565:4643): avc: denied { watch } for pid=8405 comm="syz.2.1978" path="/456/file0" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 126.282417][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 126.295912][ T8425] validate_nla: 1 callbacks suppressed [ 126.295950][ T8425] netlink: 'syz.1.1977': attribute type 3 has an invalid length. [ 126.348814][ T8432] loop4: detected capacity change from 0 to 128 [ 126.359441][ T8432] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 126.376286][ T8432] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.454706][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.588709][ T8449] loop4: detected capacity change from 0 to 8192 [ 126.667444][ T8464] netlink: 'syz.2.1996': attribute type 10 has an invalid length. [ 126.706661][ T8464] team0: Port device dummy0 added [ 126.717067][ T8466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8466 comm=syz.1.1995 [ 126.780918][ T8470] tipc: Enabling of bearer rejected, failed to enable media [ 126.911306][ T8478] lo speed is unknown, defaulting to 1000 [ 127.398646][ T8498] netlink: 1900 bytes leftover after parsing attributes in process `syz.3.2009'. [ 127.407888][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2009'. [ 127.646619][ T29] audit: type=1326 audit(1767940935.065:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 127.661760][ T8500] loop4: detected capacity change from 0 to 1024 [ 127.719315][ T29] audit: type=1326 audit(1767940935.065:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 127.742949][ T29] audit: type=1326 audit(1767940935.065:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3eb45f783 code=0x7ffc0000 [ 127.766691][ T8500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.766723][ T29] audit: type=1326 audit(1767940935.075:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3eb45e1ff code=0x7ffc0000 [ 127.802224][ T29] audit: type=1326 audit(1767940935.075:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff3eb45f7d7 code=0x7ffc0000 [ 127.825637][ T29] audit: type=1326 audit(1767940935.075:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3eb45df90 code=0x7ffc0000 [ 127.849350][ T29] audit: type=1326 audit(1767940935.075:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3eb45f34b code=0x7ffc0000 [ 127.872729][ T29] audit: type=1326 audit(1767940935.105:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff3eb45e3aa code=0x7ffc0000 [ 127.957307][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.213839][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 128.223289][ T8528] syz_tun: entered promiscuous mode [ 128.231348][ T8528] syz_tun: refused to change device tx_queue_len [ 128.301713][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'. [ 128.314125][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.321583][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.332478][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.340021][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.146684][ T8566] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 129.419267][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 129.428458][ T8582] netlink: 'syz.0.2036': attribute type 11 has an invalid length. [ 129.436766][ T8582] netlink: 'syz.0.2036': attribute type 13 has an invalid length. [ 129.536491][ T8582] vxlan0: entered promiscuous mode [ 129.571327][ T3951] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.588158][ T3951] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.615561][ T3951] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.625044][ T3951] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.955699][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2051'. [ 130.044973][ T8613] bridge0: entered promiscuous mode [ 130.062693][ T8613] macsec1: entered promiscuous mode [ 130.079693][ T8613] bridge0: port 3(macsec1) entered blocking state [ 130.086252][ T8613] bridge0: port 3(macsec1) entered disabled state [ 130.095972][ T8613] macsec1: entered allmulticast mode [ 130.101313][ T8613] bridge0: entered allmulticast mode [ 130.108456][ T8613] macsec1: left allmulticast mode [ 130.113552][ T8613] bridge0: left allmulticast mode [ 130.146140][ T8613] bridge0: left promiscuous mode [ 130.285289][ T8628] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 130.389276][ T8631] netlink: 'syz.2.2060': attribute type 13 has an invalid length. [ 130.406106][ T8628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.681199][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.688719][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.879523][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.926621][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.211552][ T8648] dvmrp0: entered allmulticast mode [ 131.240280][ T8650] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2065'. [ 131.264352][ T3995] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.306704][ T3995] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.356054][ T3995] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.380408][ T3995] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.574367][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 131.574383][ T29] audit: type=1326 audit(1767940938.995:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.672653][ T29] audit: type=1326 audit(1767940939.035:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.696361][ T29] audit: type=1326 audit(1767940939.035:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.719849][ T29] audit: type=1400 audit(1767940939.035:4755): avc: denied { unmount } for pid=8677 comm="syz.0.2076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 131.739602][ T29] audit: type=1326 audit(1767940939.045:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.763092][ T29] audit: type=1326 audit(1767940939.045:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.786580][ T29] audit: type=1326 audit(1767940939.045:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.810384][ T29] audit: type=1326 audit(1767940939.045:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.833983][ T29] audit: type=1326 audit(1767940939.045:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.857675][ T29] audit: type=1326 audit(1767940939.045:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.3.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 131.998589][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2086'. [ 132.044566][ T8701] lo speed is unknown, defaulting to 1000 [ 132.591079][ T8740] lo speed is unknown, defaulting to 1000 [ 133.861010][ T8792] bridge0: entered promiscuous mode [ 133.877202][ T8792] macsec1: entered promiscuous mode [ 133.890792][ T8792] bridge0: port 4(macsec1) entered blocking state [ 133.897935][ T8792] bridge0: port 4(macsec1) entered disabled state [ 133.915597][ T8792] macsec1: entered allmulticast mode [ 133.920958][ T8792] bridge0: entered allmulticast mode [ 133.929360][ T8792] macsec1: left allmulticast mode [ 133.934825][ T8792] bridge0: left allmulticast mode [ 133.966202][ T8792] bridge0: left promiscuous mode [ 134.057837][ T8809] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 134.667864][ T8831] lo speed is unknown, defaulting to 1000 [ 135.072024][ T8849] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 135.242807][ T8859] netlink: 'syz.1.2148': attribute type 13 has an invalid length. [ 135.253379][ T8849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.338635][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.354593][ T8854] bond1: (slave batadv0): making interface the new active one [ 135.369099][ T8854] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 135.471091][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.478455][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.645428][ T4006] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.653894][ T4006] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.667553][ T4006] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.677737][ T4006] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.697580][ T8875] dvmrp0: entered allmulticast mode [ 135.704207][ T8857] lo speed is unknown, defaulting to 1000 [ 135.705129][ T4006] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.718421][ T4006] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.745039][ T4006] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.753491][ T4006] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.837954][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 135.847778][ T8888] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2162'. [ 136.019244][ T8899] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 136.405458][ T8913] bridge0: entered promiscuous mode [ 136.410750][ T8913] macsec1: entered promiscuous mode [ 136.423690][ T8913] bridge0: port 4(macsec1) entered blocking state [ 136.430249][ T8913] bridge0: port 4(macsec1) entered disabled state [ 136.442233][ T8913] macsec1: entered allmulticast mode [ 136.447781][ T8913] bridge0: entered allmulticast mode [ 136.454715][ T8913] macsec1: left allmulticast mode [ 136.459797][ T8913] bridge0: left allmulticast mode [ 136.465925][ T8913] bridge0: left promiscuous mode [ 136.485753][ T8915] dvmrp0: entered allmulticast mode [ 136.717228][ T8931] lo speed is unknown, defaulting to 1000 [ 137.202818][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 137.202836][ T29] audit: type=1326 audit(1767940944.605:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ceeaf749 code=0x7ffc0000 [ 137.233730][ T29] audit: type=1326 audit(1767940944.605:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ceeaf749 code=0x7ffc0000 [ 137.258015][ T29] audit: type=1326 audit(1767940944.615:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ceeaf749 code=0x7ffc0000 [ 137.282115][ T29] audit: type=1326 audit(1767940944.615:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f94ceeaf749 code=0x7ffc0000 [ 137.377872][ T29] audit: type=1326 audit(1767940944.625:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ceeaf749 code=0x7ffc0000 [ 137.401404][ T29] audit: type=1326 audit(1767940944.625:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ceeaf749 code=0x7ffc0000 [ 137.456909][ T3798] IPVS: starting estimator thread 0... [ 137.543281][ T8955] IPVS: using max 2352 ests per chain, 117600 per kthread [ 137.611360][ T29] audit: type=1326 audit(1767940945.015:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 137.635201][ T29] audit: type=1326 audit(1767940945.015:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 137.658949][ T29] audit: type=1326 audit(1767940945.015:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 137.682801][ T29] audit: type=1326 audit(1767940945.015:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.3.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 137.811351][ T8970] netlink: 'syz.4.2196': attribute type 1 has an invalid length. [ 137.922115][ T8970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.960360][ T8976] netlink: 'syz.4.2196': attribute type 13 has an invalid length. [ 137.971955][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 137.983479][ T8973] bond4: (slave batadv2): making interface the new active one [ 137.992547][ T8973] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 138.147675][ T8976] bridge0: port 3(dummy0) entered disabled state [ 138.154236][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.161621][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.332896][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.371573][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.445066][ T8976] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 138.559041][ T3970] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.567521][ T3970] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.602802][ T3970] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.611302][ T3970] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.653239][ T3970] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.661646][ T3970] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.724592][ T3970] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.733330][ T3970] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.946623][ T9029] xt_hashlimit: max too large, truncated to 1048576 [ 138.984211][ T9029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.078405][ T9036] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2225'. [ 139.633637][ T9072] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2241'. [ 139.643959][ T9072] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2241'. [ 140.373264][ T9109] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2257'. [ 140.382419][ T9109] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2257'. [ 140.767761][ T9140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.902564][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2274'. [ 141.377789][ T9169] loop4: detected capacity change from 0 to 128 [ 141.393575][ T9169] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.413022][ T9169] ext4 filesystem being mounted at /385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.490415][ T9169] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 63: comm syz.4.2282: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 141.511562][ T9175] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 141.520079][ T9175] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 141.532320][ T9169] EXT4-fs (loop4): Remounting filesystem read-only [ 141.573324][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.617222][ T9182] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 141.641352][ T9184] loop4: detected capacity change from 0 to 512 [ 141.648622][ T9184] EXT4-fs: Ignoring removed bh option [ 141.672638][ T9184] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 141.684059][ T9184] EXT4-fs (loop4): 1 truncate cleaned up [ 141.690569][ T9184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.705673][ T9184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.557611][ T9229] macsec1: entered promiscuous mode [ 142.562958][ T9229] bridge0: entered promiscuous mode [ 142.574691][ T9229] bridge0: port 4(macsec1) entered blocking state [ 142.581314][ T9229] bridge0: port 4(macsec1) entered disabled state [ 142.625664][ T9229] macsec1: entered allmulticast mode [ 142.631154][ T9229] bridge0: entered allmulticast mode [ 142.639713][ T9229] macsec1: left allmulticast mode [ 142.644814][ T9229] bridge0: left allmulticast mode [ 142.653298][ T9229] bridge0: left promiscuous mode [ 142.830606][ T9252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2315'. [ 142.970779][ T9260] lo speed is unknown, defaulting to 1000 [ 143.192894][ T9276] bridge0: entered promiscuous mode [ 143.206608][ T9276] bridge0: port 4(macvtap1) entered blocking state [ 143.214192][ T9276] bridge0: port 4(macvtap1) entered disabled state [ 143.237990][ T9276] macvtap1: entered allmulticast mode [ 143.243485][ T9276] bridge0: entered allmulticast mode [ 143.251828][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 143.251841][ T29] audit: type=1400 audit(1767940950.665:5024): avc: denied { listen } for pid=9277 comm="syz.4.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.261593][ T9276] macvtap1: left allmulticast mode [ 143.283143][ T9276] bridge0: left allmulticast mode [ 143.383870][ T9276] bridge0: left promiscuous mode [ 143.567756][ T69] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.600333][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2332'. [ 143.622704][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2331'. [ 143.631733][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2331'. [ 143.713503][ T9299] IPVS: Error connecting to the multicast addr [ 144.386036][ T9347] __nla_validate_parse: 2 callbacks suppressed [ 144.386052][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2352'. [ 144.442799][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2352'. [ 144.855261][ T29] audit: type=1326 audit(1767940952.275:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 144.878910][ T29] audit: type=1326 audit(1767940952.275:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 144.922698][ T29] audit: type=1326 audit(1767940952.325:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 144.946150][ T29] audit: type=1326 audit(1767940952.325:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 144.969751][ T29] audit: type=1326 audit(1767940952.325:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 144.993140][ T29] audit: type=1326 audit(1767940952.325:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 145.147137][ T9375] veth12: entered promiscuous mode [ 145.152328][ T9375] veth12: entered allmulticast mode [ 145.602676][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.608158][ T3629] Bluetooth: hci0: command 0x1003 tx timeout [ 145.699040][ T9387] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2368'. [ 145.763891][ T8640] IPVS: starting estimator thread 0... [ 145.801032][ T29] audit: type=1400 audit(1767940953.215:5031): avc: denied { read } for pid=9389 comm="syz.2.2370" lport=35117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.852731][ T9392] IPVS: using max 1968 ests per chain, 98400 per kthread [ 146.222479][ T9425] netlink: 'syz.1.2383': attribute type 4 has an invalid length. [ 146.234132][ T9425] netlink: 'syz.1.2383': attribute type 4 has an invalid length. [ 146.310726][ T29] audit: type=1400 audit(1767940953.725:5032): avc: denied { map } for pid=9427 comm="syz.1.2385" path="socket:[23611]" dev="sockfs" ino=23611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 146.450334][ T29] audit: type=1326 audit(1767940953.855:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.2.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ceeaf749 code=0x7ffc0000 [ 146.513927][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 146.577757][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 146.614246][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 146.637514][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 146.681161][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 146.731253][ T9447] loop4: detected capacity change from 0 to 512 [ 146.902082][ T9447] ------------[ cut here ]------------ [ 146.907767][ T9447] EA inode 11 i_nlink=2 [ 146.907796][ T9447] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.4.2393/9447 [ 146.922983][ T9447] Modules linked in: [ 146.926958][ T9447] CPU: 0 UID: 0 PID: 9447 Comm: syz.4.2393 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.936832][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.946974][ T9447] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 146.953650][ T9447] Code: 61 e1 9c ff 4c 8d 2d fa ec 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c 8b ba 03 66 66 66 2e 0f 1f 84 [ 146.973333][ T9447] RSP: 0018:ffffc900030d3778 EFLAGS: 00010246 [ 146.979448][ T9447] RAX: ffff888103469b10 RBX: ffff888100620ee0 RCX: ffffffff81bb1ecb [ 146.987566][ T9447] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 146.995639][ T9447] RBP: 000000000000000b R08: 0001888100620e93 R09: 0000000000000000 [ 147.003691][ T9447] R10: ffffc900030d36a8 R11: 0001c900030d36a8 R12: ffff888100620e90 [ 147.011813][ T9447] R13: ffffffff86dc0bb0 R14: ffff888100620e48 R15: 0000000000000001 [ 147.019843][ T9447] FS: 00007ff3e9ebf6c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 147.028960][ T9447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.035602][ T9447] CR2: 0000001b3421dff8 CR3: 000000013a7fc000 CR4: 00000000003506f0 [ 147.043870][ T9447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.051875][ T9447] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 147.059910][ T9447] Call Trace: [ 147.063228][ T9447] [ 147.066211][ T9447] ext4_xattr_inode_dec_ref_all+0x57c/0x870 [ 147.072278][ T9447] ? errseq_check+0x2c/0x50 [ 147.076940][ T9447] ext4_xattr_delete_inode+0x6b7/0x790 [ 147.082457][ T9447] ? ext4_truncate+0x92b/0xae0 [ 147.087406][ T9447] ext4_evict_inode+0xa20/0xd40 [ 147.092298][ T9447] ? __pfx_ext4_evict_inode+0x10/0x10 [ 147.097724][ T9447] evict+0x2af/0x510 [ 147.101672][ T9447] ? __dquot_initialize+0x146/0x7c0 [ 147.107037][ T9447] iput+0x4bd/0x650 [ 147.110901][ T9447] ext4_process_orphan+0x1a9/0x1c0 [ 147.116111][ T9447] ext4_orphan_cleanup+0x6a8/0xa00 [ 147.121293][ T9447] ext4_fill_super+0x3411/0x37a0 [ 147.126317][ T9447] ? set_blocksize+0x1a8/0x310 [ 147.131105][ T9447] ? sb_set_blocksize+0xfc/0x170 [ 147.136136][ T9447] ? setup_bdev_super+0x30e/0x370 [ 147.141196][ T9447] ? __pfx_ext4_fill_super+0x10/0x10 [ 147.146535][ T9447] get_tree_bdev_flags+0x291/0x300 [ 147.151679][ T9447] ? __pfx_ext4_fill_super+0x10/0x10 [ 147.157025][ T9447] get_tree_bdev+0x1f/0x30 [ 147.161497][ T9447] ext4_get_tree+0x1c/0x30 [ 147.165983][ T9447] vfs_get_tree+0x57/0x1d0 [ 147.170432][ T9447] do_new_mount+0x24d/0x6a0 [ 147.175040][ T9447] path_mount+0x4ab/0xb80 [ 147.179405][ T9447] ? user_path_at+0xbf/0x130 [ 147.184112][ T9447] __se_sys_mount+0x28c/0x2e0 [ 147.188833][ T9447] __x64_sys_mount+0x67/0x80 [ 147.193477][ T9447] x64_sys_call+0x2cca/0x3000 [ 147.198251][ T9447] do_syscall_64+0xca/0x2b0 [ 147.202845][ T9447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.208760][ T9447] RIP: 0033:0x7ff3eb460eea [ 147.213361][ T9447] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.233156][ T9447] RSP: 002b:00007ff3e9ebee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.241673][ T9447] RAX: ffffffffffffffda RBX: 00007ff3e9ebeef0 RCX: 00007ff3eb460eea [ 147.249705][ T9447] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff3e9ebeeb0 [ 147.257737][ T9447] RBP: 0000200000000180 R08: 00007ff3e9ebeef0 R09: 0000000000800718 [ 147.265978][ T9447] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 147.274018][ T9447] R13: 00007ff3e9ebeeb0 R14: 000000000000047f R15: 0000200000000200 [ 147.282052][ T9447] [ 147.285137][ T9447] ---[ end trace 0000000000000000 ]--- [ 147.290974][ T9447] EXT4-fs (loop4): 1 orphan inode deleted [ 147.298179][ T9447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.338704][ T9447] lo speed is unknown, defaulting to 1000 [ 147.717799][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.411584][ T9477] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2403'. [ 148.780676][ T9515] veth6: entered promiscuous mode [ 148.786275][ T9515] veth6: entered allmulticast mode [ 148.877710][ T9518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2419'. [ 149.035611][ T9527] vlan2: entered allmulticast mode [ 149.166428][ T9535] netlink: 'syz.3.2424': attribute type 1 has an invalid length. [ 149.235992][ T9535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.310543][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 149.330194][ T9543] bond2: (slave batadv2): making interface the new active one [ 149.377699][ T9546] loop4: detected capacity change from 0 to 512 [ 149.388484][ T9546] EXT4-fs: dax option not supported [ 149.389040][ T9543] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 149.411506][ T9548] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 149.421391][ T9548] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 149.432911][ T9535] netlink: 'syz.3.2424': attribute type 13 has an invalid length. [ 149.443537][ T9548] __nla_validate_parse: 6 callbacks suppressed [ 149.443553][ T9548] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2428'. [ 149.458871][ T9548] unsupported nla_type 58 [ 149.555276][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.562645][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.603894][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2430'. [ 149.636067][ T9535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.655971][ T9535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.700349][ T9556] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.733131][ T3965] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.741612][ T3965] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.761909][ T9554] xt_hashlimit: max too large, truncated to 1048576 [ 149.810061][ T3965] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.818525][ T3965] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.846604][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 149.846620][ T29] audit: type=1400 audit(1767940957.265:5037): avc: denied { read open } for pid=9560 comm="syz.1.2433" path="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.856086][ T3965] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.883719][ T3965] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.918311][ T9563] vlan2: entered allmulticast mode [ 149.934657][ T9565] tipc: Started in network mode [ 149.939634][ T9565] tipc: Node identity ac14140f, cluster identity 4711 [ 149.968068][ T9565] tipc: New replicast peer: 255.255.255.255 [ 149.975129][ T9565] tipc: Enabled bearer , priority 10 [ 149.981571][ T3965] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.990049][ T3965] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.016239][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2437'. [ 150.025403][ T9572] tipc: Disabling bearer [ 150.234903][ T9587] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.2448'. [ 150.260631][ T9587] netlink: zone id is out of range [ 150.265962][ T9587] netlink: zone id is out of range [ 150.293550][ T9587] netlink: zone id is out of range [ 150.304713][ T9587] netlink: zone id is out of range [ 150.314115][ T9587] netlink: zone id is out of range [ 150.319263][ T9587] netlink: zone id is out of range [ 150.324616][ T9587] netlink: zone id is out of range [ 150.329745][ T9587] netlink: zone id is out of range [ 150.334902][ T9587] netlink: zone id is out of range [ 150.340117][ T9587] netlink: zone id is out of range [ 150.376463][ T29] audit: type=1400 audit(1767940957.795:5038): avc: denied { name_bind } for pid=9590 comm="syz.2.2449" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 150.681275][ T9604] macvtap1: entered promiscuous mode [ 150.687262][ T9604] macvtap1: entered allmulticast mode [ 150.784822][ T9611] veth4: entered promiscuous mode [ 150.790060][ T9611] veth4: entered allmulticast mode [ 150.841449][ T29] audit: type=1326 audit(1767940958.255:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 150.871159][ T29] audit: type=1326 audit(1767940958.285:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 150.894768][ T29] audit: type=1326 audit(1767940958.285:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f356fbee3aa code=0x7ffc0000 [ 150.918143][ T29] audit: type=1326 audit(1767940958.285:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f356fc22005 code=0x7ffc0000 [ 151.069470][ T29] audit: type=1326 audit(1767940958.485:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 151.112732][ T29] audit: type=1326 audit(1767940958.505:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 151.136388][ T29] audit: type=1326 audit(1767940958.505:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 151.160485][ T29] audit: type=1326 audit(1767940958.505:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 151.251770][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2469'. [ 151.656566][ T9655] veth0_vlan: left promiscuous mode [ 151.661905][ T9655] veth0_vlan: entered allmulticast mode [ 151.668612][ T9655] veth0_vlan: entered promiscuous mode [ 151.918707][ T9683] veth0_vlan: left promiscuous mode [ 151.925775][ T9683] veth0_vlan: entered allmulticast mode [ 151.934232][ T9683] veth0_vlan: entered promiscuous mode [ 152.239055][ T9728] netlink: 'syz.2.2504': attribute type 10 has an invalid length. [ 152.264957][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'. [ 152.276965][ T9728] veth0_vlan: left promiscuous mode [ 152.283595][ T9728] veth0_vlan: entered promiscuous mode [ 152.290186][ T9728] team0: Device veth0_vlan failed to register rx_handler [ 152.648101][ T9745] bridge: RTM_NEWNEIGH with invalid ether address [ 152.791093][ T9747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.801643][ T9747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.872319][ T9747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.882913][ T9747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.951475][ T9747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.962414][ T9747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.126429][ T9747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.136786][ T9747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.240314][ T9766] veth0: entered promiscuous mode [ 153.261355][ T9766] veth0: left promiscuous mode [ 153.310165][ T3975] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.318618][ T3975] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.346235][ T3975] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.354589][ T3975] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.376072][ T3975] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.384478][ T3975] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.401535][ T3975] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.409792][ T3975] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.659580][ T9788] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 153.696428][ T9788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.717965][ T9788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.727576][ T9788] bond3: (slave batadv0): making interface the new active one [ 153.736708][ T9788] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 153.753055][ T9788] netlink: 'syz.0.2534': attribute type 13 has an invalid length. [ 153.873672][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 153.900509][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.907889][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.208103][ T8639] lo speed is unknown, defaulting to 1000 [ 154.213950][ T8639] syz0: Port: 1 Link DOWN [ 154.228917][ T3970] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.237437][ T3970] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.248946][ T3970] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.257727][ T3970] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.281462][ T9802] lo speed is unknown, defaulting to 1000 [ 154.282355][ T3970] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.295685][ T3970] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.304271][ T3970] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.312714][ T3970] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.771590][ T9833] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2553'. [ 154.874306][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 154.874322][ T29] audit: type=1400 audit(1767940962.295:5103): avc: denied { nlmsg_tty_audit } for pid=9844 comm="syz.3.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 155.662735][ T29] audit: type=1326 audit(1767940963.055:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 155.686680][ T29] audit: type=1326 audit(1767940963.055:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 155.710135][ T29] audit: type=1326 audit(1767940963.055:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 155.733593][ T29] audit: type=1326 audit(1767940963.055:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 155.757131][ T29] audit: type=1326 audit(1767940963.055:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 155.780592][ T29] audit: type=1326 audit(1767940963.055:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 155.804138][ T29] audit: type=1326 audit(1767940963.055:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 155.827590][ T29] audit: type=1326 audit(1767940963.055:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 155.851127][ T29] audit: type=1326 audit(1767940963.055:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 156.948046][ T9938] tipc: New replicast peer: 255.255.255.32 [ 156.954023][ T9938] tipc: Enabled bearer , priority 10 [ 157.350002][ T9953] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 157.489011][ T9958] netlink: 'syz.3.2608': attribute type 10 has an invalid length. [ 157.659618][ T9958] veth0_vlan: left promiscuous mode [ 157.677878][ T9958] veth0_vlan: entered promiscuous mode [ 157.709679][ T9958] team0: Device veth0_vlan failed to register rx_handler [ 157.875418][ T9965] netlink: 'syz.2.2611': attribute type 30 has an invalid length. [ 158.072816][ T3485] tipc: Node number set to 2886997007 [ 159.892704][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 159.892725][ T29] audit: type=1326 audit(1767940967.285:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 159.922505][ T29] audit: type=1326 audit(1767940967.285:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 159.946151][ T29] audit: type=1326 audit(1767940967.285:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 159.969779][ T29] audit: type=1326 audit(1767940967.285:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 159.993374][ T29] audit: type=1326 audit(1767940967.285:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 160.016912][ T29] audit: type=1326 audit(1767940967.285:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 160.040445][ T29] audit: type=1326 audit(1767940967.285:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 160.064083][ T29] audit: type=1326 audit(1767940967.285:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 160.087735][ T29] audit: type=1326 audit(1767940967.285:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 160.111354][ T29] audit: type=1326 audit(1767940967.285:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 161.838307][T10004] net_ratelimit: 3 callbacks suppressed [ 161.838321][T10004] Set syz1 is full, maxelem 65536 reached [ 161.965939][T10066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2652'. [ 161.983360][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'. [ 161.994237][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'. [ 162.040497][T10074] loop4: detected capacity change from 0 to 2048 [ 162.062453][T10074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.114685][T10083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10083 comm=syz.3.2659 [ 162.127812][T10083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10083 comm=syz.3.2659 [ 162.148122][T10074] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 162.177538][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.208230][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2660'. [ 162.231047][T10086] team1: entered promiscuous mode [ 162.236168][T10086] team1: entered allmulticast mode [ 162.241801][T10086] 8021q: adding VLAN 0 to HW filter on device team1 [ 162.487607][T10095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2664'. [ 162.591496][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2666'. [ 162.605491][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'. [ 162.621315][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'. [ 162.708057][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 162.721215][T10113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2673'. [ 162.786094][T10117] bond5: entered promiscuous mode [ 162.791532][T10117] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.834430][T10122] SELinux: Context @ is not valid (left unmapped). [ 163.040493][T10141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10141 comm=syz.4.2686 [ 163.129728][T10150] loop4: detected capacity change from 0 to 764 [ 163.143162][T10150] Symlink component flag not implemented [ 163.148844][T10150] Symlink component flag not implemented [ 163.155245][T10150] Symlink component flag not implemented (129) [ 163.161472][T10150] Symlink component flag not implemented (6) [ 163.170790][T10150] rock: directory entry would overflow storage [ 163.177118][T10150] rock: sig=0x4f50, size=4, remaining=3 [ 163.182752][T10150] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 163.585699][T10179] tipc: New replicast peer: 255.255.255.255 [ 163.591825][T10179] tipc: Enabled bearer , priority 10 [ 163.599764][T10179] tipc: Disabling bearer [ 163.770081][T10197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10197 comm=syz.3.2719 [ 163.783711][T10197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10197 comm=syz.3.2719 [ 164.159403][ T3798] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.176017][ T3798] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.249217][T10243] netlink: 'syz.1.2731': attribute type 1 has an invalid length. [ 164.336186][T10243] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 164.372612][T10243] bond2: (slave batadv1): making interface the new active one [ 164.406607][T10243] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 165.152873][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 165.152892][ T29] audit: type=1400 audit(1767940972.575:5301): avc: denied { bind } for pid=10286 comm="syz.1.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.613434][T10298] bridge0: port 4(macvtap1) entered blocking state [ 165.620000][T10298] bridge0: port 4(macvtap1) entered disabled state [ 165.626908][T10298] macvtap1: entered allmulticast mode [ 165.632334][T10298] bridge0: entered allmulticast mode [ 165.665806][T10298] macvtap1: left allmulticast mode [ 165.670998][T10298] bridge0: left allmulticast mode [ 165.905414][T10304] netlink: 'syz.4.2755': attribute type 1 has an invalid length. [ 165.954063][ T29] audit: type=1326 audit(1767940973.375:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.2756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a7e8f749 code=0x0 [ 166.132658][T10323] lo speed is unknown, defaulting to 1000 [ 166.422627][ T29] audit: type=1400 audit(1767940973.835:5303): avc: denied { getopt } for pid=10326 comm="syz.3.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.460625][T10341] bridge0: port 3(macvtap1) entered blocking state [ 166.467420][T10341] bridge0: port 3(macvtap1) entered disabled state [ 166.474323][T10341] macvtap1: entered allmulticast mode [ 166.479723][T10341] bridge0: entered allmulticast mode [ 166.485833][T10341] macvtap1: left allmulticast mode [ 166.491001][T10341] bridge0: left allmulticast mode [ 166.561370][T10347] loop4: detected capacity change from 0 to 1024 [ 166.613782][T10347] EXT4-fs: Ignoring removed bh option [ 166.654292][T10347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.684040][ T29] audit: type=1400 audit(1767940974.105:5304): avc: denied { read write } for pid=10346 comm="syz.4.2772" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.707050][ T29] audit: type=1400 audit(1767940974.105:5305): avc: denied { open } for pid=10346 comm="syz.4.2772" path="/493/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.844307][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.862190][ T29] audit: type=1400 audit(1767940974.275:5306): avc: denied { getopt } for pid=10358 comm="syz.3.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 166.884959][ T29] audit: type=1326 audit(1767940974.305:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 166.912634][ T29] audit: type=1326 audit(1767940974.305:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 166.936309][ T29] audit: type=1326 audit(1767940974.305:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 166.959949][ T29] audit: type=1326 audit(1767940974.305:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 167.036164][T10367] __nla_validate_parse: 5 callbacks suppressed [ 167.036219][T10367] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2779'. [ 167.130006][T10369] loop4: detected capacity change from 0 to 8192 [ 167.256160][ T3324] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 167.264065][ T3324] FAT-fs (loop4): Filesystem has been set read-only [ 167.688025][T10401] netlink: 'syz.4.2795': attribute type 6 has an invalid length. [ 167.840052][T10407] lo speed is unknown, defaulting to 1000 [ 168.450797][T10431] lo speed is unknown, defaulting to 1000 [ 169.041807][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 169.052523][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2819'. [ 169.070970][T10455] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2819'. [ 169.119994][T10462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2822'. [ 169.623849][T10506] batman_adv: batadv0: Adding interface: dummy0 [ 169.630207][T10506] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 169.649820][T10506] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 169.759870][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. [ 169.768857][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. [ 170.189861][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 170.189878][ T29] audit: type=1326 audit(1767940977.605:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.255125][ T29] audit: type=1326 audit(1767940977.635:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.279625][ T29] audit: type=1326 audit(1767940977.635:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.303826][ T29] audit: type=1326 audit(1767940977.635:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.328293][ T29] audit: type=1326 audit(1767940977.635:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.352512][ T29] audit: type=1326 audit(1767940977.635:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.377258][ T29] audit: type=1326 audit(1767940977.635:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.401411][ T29] audit: type=1326 audit(1767940977.645:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.425491][ T29] audit: type=1326 audit(1767940977.645:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.449546][ T29] audit: type=1326 audit(1767940977.645:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 170.600929][T10571] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2868'. [ 170.610430][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2868'. [ 171.135247][T10582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2874'. [ 171.590612][T10600] bridge0: port 3(dummy0) entered disabled state [ 171.611296][T10600] bridge_slave_0: left promiscuous mode [ 171.617232][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.662723][T10600] bridge_slave_1: left allmulticast mode [ 171.668433][T10600] bridge_slave_1: left promiscuous mode [ 171.674291][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.724604][T10600] bond0: (slave bond_slave_0): Releasing backup interface [ 171.765288][T10600] bond0: (slave bond_slave_1): Releasing backup interface [ 171.809474][T10600] team0: Port device team_slave_0 removed [ 171.845249][T10600] team0: Port device team_slave_1 removed [ 171.851718][T10600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.870883][T10600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.879080][T10600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.939847][T10604] lo speed is unknown, defaulting to 1000 [ 172.381220][T10647] lo speed is unknown, defaulting to 1000 [ 172.465695][T10653] batman_adv: batadv0: Removing interface: dummy0 [ 172.473133][T10653] bridge_slave_0: left allmulticast mode [ 172.478871][T10653] bridge_slave_0: left promiscuous mode [ 172.487308][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.634864][T10653] bridge_slave_1: left allmulticast mode [ 172.640616][T10653] bridge_slave_1: left promiscuous mode [ 172.646401][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.656376][T10653] bond0: (slave bond_slave_0): Releasing backup interface [ 172.678816][T10653] bond0: (slave bond_slave_1): Releasing backup interface [ 172.690272][T10653] team0: Port device team_slave_0 removed [ 172.701704][T10653] team0: Port device team_slave_1 removed [ 172.711293][T10653] bond1: (slave batadv0): Releasing active interface [ 172.721105][T10653] bond2: (slave batadv1): Releasing active interface [ 173.025107][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 173.178578][T10688] bridge_slave_0: left promiscuous mode [ 173.184866][T10688] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.195950][T10688] bridge_slave_1: left allmulticast mode [ 173.201650][T10688] bridge_slave_1: left promiscuous mode [ 173.207429][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.218656][T10688] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 173.226648][T10688] bond_slave_0: left promiscuous mode [ 173.236377][T10688] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 173.244785][T10688] bond_slave_1: left promiscuous mode [ 173.255045][T10688] team0: Port device team_slave_0 removed [ 173.262978][T10688] team0: Port device team_slave_1 removed [ 173.274575][T10688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.295568][T10688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.315354][T10688] bond0: (slave veth3): Releasing active interface [ 173.324774][T10688] bond1: (slave wireguard0): Releasing backup interface [ 173.331879][T10688] wireguard0: left promiscuous mode [ 173.337661][T10688] wireguard0: left allmulticast mode [ 173.353386][T10688] batadv1: left allmulticast mode [ 173.358485][T10688] batadv1: left promiscuous mode [ 173.363838][T10688] bridge0: port 3(batadv1) entered disabled state [ 173.385058][T10688] bond2: (slave batadv2): Releasing active interface [ 173.475166][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 173.793035][T10734] macvtap1: entered promiscuous mode [ 173.798402][T10734] macvtap1: entered allmulticast mode [ 173.891021][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2945'. [ 174.233653][T10785] loop4: detected capacity change from 0 to 1024 [ 174.240986][T10785] EXT4-fs: inline encryption not supported [ 174.255456][T10785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.273435][T10785] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2965: Allocating blocks 385-513 which overlap fs metadata [ 174.290258][T10785] EXT4-fs (loop4): pa ffff88810048c5b0: logic 16, phys. 129, len 24 [ 174.299087][T10785] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 174.311850][T10785] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 174.373762][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.583817][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 174.597201][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 174.608424][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 174.624899][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 174.646242][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 174.891378][T10826] bridge_slave_0: left promiscuous mode [ 174.897241][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.923796][T10826] bridge_slave_1: left allmulticast mode [ 174.929551][T10826] bridge_slave_1: left promiscuous mode [ 174.936535][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.959706][T10826] bond0: (slave bond_slave_0): Releasing backup interface [ 174.970399][T10826] bond0: (slave bond_slave_1): Releasing backup interface [ 174.988801][T10826] team0: Port device team_slave_0 removed [ 174.996724][T10826] team0: Port device team_slave_1 removed [ 175.022546][T10826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.129684][T10841] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 175.379804][T10861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2999'. [ 175.383398][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 175.383502][ T29] audit: type=1326 audit(1767940982.805:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.0.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 175.437538][ T29] audit: type=1326 audit(1767940982.845:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.0.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 175.461145][ T29] audit: type=1326 audit(1767940982.845:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.0.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 175.484757][ T29] audit: type=1326 audit(1767940982.845:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.0.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 175.511995][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2999'. [ 175.623318][T10869] lo speed is unknown, defaulting to 1000 [ 176.045894][T10887] IPVS: Error connecting to the multicast addr [ 176.705515][T10915] lo speed is unknown, defaulting to 1000 [ 177.196458][ T29] audit: type=1326 audit(1767940984.615:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 177.220132][ T29] audit: type=1326 audit(1767940984.615:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 177.243789][ T29] audit: type=1326 audit(1767940984.615:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 177.481816][ T29] audit: type=1326 audit(1767940984.695:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 177.652922][ T29] audit: type=1326 audit(1767940985.055:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.4.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 177.668815][T10951] loop4: detected capacity change from 0 to 256 [ 177.678170][ T29] audit: type=1326 audit(1767940985.065:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.4.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 178.397991][T10978] sch_tbf: burst 22 is lower than device wg0 mtu (1420) ! [ 178.508185][T10984] __nla_validate_parse: 4 callbacks suppressed [ 178.508203][T10984] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.3053'. [ 178.523751][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3053'. [ 178.907777][T11007] tipc: New replicast peer: 255.255.255.255 [ 178.914453][T11007] tipc: Enabled bearer , priority 10 [ 178.924377][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3062'. [ 178.933476][T11007] tipc: Disabling bearer [ 179.266702][T11026] lo speed is unknown, defaulting to 1000 [ 179.309158][T11029] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3071'. [ 179.574235][T11051] syzkaller0: entered allmulticast mode [ 179.691881][T11051] syzkaller0 (unregistering): left allmulticast mode [ 180.237689][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3096'. [ 180.247970][T11083] batadv1: left allmulticast mode [ 180.253466][T11083] batadv1: left promiscuous mode [ 180.258710][T11083] bridge0: port 3(batadv1) entered disabled state [ 180.462568][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3102'. [ 180.893955][T11158] vlan2: entered allmulticast mode [ 180.903771][T11158] dummy0: entered allmulticast mode [ 181.144479][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 181.144496][ T29] audit: type=1400 audit(1767940988.565:6117): avc: denied { create } for pid=11191 comm="syz.2.3112" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 181.577118][T11250] lo speed is unknown, defaulting to 1000 [ 181.900309][T11255] loop4: detected capacity change from 0 to 32768 [ 182.017180][T11250] pimreg: entered allmulticast mode [ 182.024523][T11250] pimreg: left allmulticast mode [ 182.286770][T11255] loop4: p1 p2 p3 < p5 p6 > [ 182.303779][T11255] loop4: p2 size 16775168 extends beyond EOD, truncated [ 182.323809][T11255] loop4: p5 start 4294970168 is beyond EOD, truncated [ 182.486576][ T29] audit: type=1326 audit(1767940989.905:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 182.586915][ T29] audit: type=1326 audit(1767940989.935:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 182.611096][ T29] audit: type=1326 audit(1767940989.935:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 182.634682][ T29] audit: type=1326 audit(1767940989.935:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 182.643557][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'. [ 182.658341][ T29] audit: type=1326 audit(1767940989.935:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 182.789842][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3129'. [ 182.955806][T11314] Cannot find del_set index 3 as target [ 183.093413][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 183.724499][T11354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3153'. [ 183.927576][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 183.992690][ T29] audit: type=1326 audit(1767940991.395:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 184.016458][ T29] audit: type=1326 audit(1767940991.395:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 184.040070][ T29] audit: type=1326 audit(1767940991.395:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 184.063700][ T29] audit: type=1326 audit(1767940991.395:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 184.095869][T11360] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3155'. [ 184.156961][T11321] kexec: Could not allocate control_code_buffer [ 184.793977][T11388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3166'. [ 185.162236][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3171'. [ 185.171797][T11400] netem: change failed [ 186.467275][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 186.575317][T11457] loop4: detected capacity change from 0 to 164 [ 186.586008][T11457] bio_check_eod: 7270 callbacks suppressed [ 186.586023][T11457] syz.4.3196: attempt to access beyond end of device [ 186.586023][T11457] loop4: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 186.664766][T11457] syz.4.3196: attempt to access beyond end of device [ 186.664766][T11457] loop4: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 186.938524][T11479] lo speed is unknown, defaulting to 1000 [ 187.503706][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 187.503724][ T29] audit: type=1400 audit(1767940994.925:6187): avc: denied { bind } for pid=11504 comm="syz.2.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.717897][T11479] pimreg: entered allmulticast mode [ 187.739788][T11479] pimreg: left allmulticast mode [ 187.991677][T11519] team0: Port device dummy0 removed [ 188.077942][T11519] batman_adv: batadv0: Adding interface: dummy0 [ 188.084738][T11519] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.110477][T11519] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 188.301706][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3225'. [ 188.331032][ T29] audit: type=1326 audit(1767940995.745:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.383108][ T29] audit: type=1326 audit(1767940995.775:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.406793][ T29] audit: type=1326 audit(1767940995.775:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.430490][ T29] audit: type=1326 audit(1767940995.775:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.454097][ T29] audit: type=1326 audit(1767940995.785:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.477810][ T29] audit: type=1326 audit(1767940995.785:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.501488][ T29] audit: type=1326 audit(1767940995.785:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.525103][ T29] audit: type=1326 audit(1767940995.785:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.548697][ T29] audit: type=1326 audit(1767940995.785:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 188.830922][T11553] loop4: detected capacity change from 0 to 2048 [ 188.902275][T11553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.960701][T11553] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.019471][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 189.251455][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.405565][T11596] lo speed is unknown, defaulting to 1000 [ 189.426039][T11598] netlink: 'syz.0.3251': attribute type 12 has an invalid length. [ 189.623344][T11596] pimreg: entered allmulticast mode [ 189.674660][T11596] pimreg: left allmulticast mode [ 189.677236][T11617] netlink: 'syz.0.3257': attribute type 1 has an invalid length. [ 189.721973][T11617] bond4: entered promiscuous mode [ 189.727258][T11617] bond4: entered allmulticast mode [ 189.733512][T11617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.754402][T11617] macvlan2: entered promiscuous mode [ 189.759804][T11617] macvlan2: entered allmulticast mode [ 189.767196][T11617] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.125775][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3267'. [ 190.634372][T11661] batman_adv: batadv0: Adding interface: dummy0 [ 190.640684][T11661] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 190.660351][T11661] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 190.882646][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'. [ 190.893856][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3285'. [ 191.439602][T11699] batman_adv: batadv0: Adding interface: dummy0 [ 191.446040][T11699] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.471323][T11699] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 191.485544][T11701] netlink: 'syz.0.3301': attribute type 29 has an invalid length. [ 191.523652][T11701] netlink: 'syz.0.3301': attribute type 29 has an invalid length. [ 191.545921][T11701] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3301'. [ 191.613096][T11707] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 191.796842][T11722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11722 comm=syz.2.3303 [ 192.713256][T11761] 9pnet: p9_errstr2errno: server reported unknown error [ 192.790526][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3323'. [ 193.225310][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 193.225327][ T29] audit: type=1326 audit(1767941000.645:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.300349][ T29] audit: type=1326 audit(1767941000.685:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.324503][ T29] audit: type=1326 audit(1767941000.685:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.348102][ T29] audit: type=1326 audit(1767941000.685:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.371966][ T29] audit: type=1326 audit(1767941000.685:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.395778][ T29] audit: type=1326 audit(1767941000.685:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.419438][ T29] audit: type=1326 audit(1767941000.695:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.443122][ T29] audit: type=1326 audit(1767941000.695:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.466688][ T29] audit: type=1326 audit(1767941000.695:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 193.490274][ T29] audit: type=1326 audit(1767941000.695:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 194.034297][T11822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3346'. [ 194.187944][T11826] futex_wake_op: syz.0.3349 tries to shift op by 144; fix this program [ 194.400416][T11836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.468046][T11839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3354'. [ 194.588693][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'. [ 194.624076][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'. [ 195.138311][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3370'. [ 195.213506][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3370'. [ 195.883889][T11907] lo speed is unknown, defaulting to 1000 [ 197.572954][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 197.693323][T11981] netlink: 'syz.2.3408': attribute type 21 has an invalid length. [ 197.701357][T11981] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3408'. [ 197.730792][T11981] netlink: 'syz.2.3408': attribute type 5 has an invalid length. [ 197.738724][T11981] netlink: 'syz.2.3408': attribute type 6 has an invalid length. [ 197.746503][T11981] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3408'. [ 198.763680][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3435'. [ 199.017825][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 199.017842][ T29] audit: type=1326 audit(1767941006.435:6298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.082674][ T29] audit: type=1326 audit(1767941006.485:6299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.106347][ T29] audit: type=1326 audit(1767941006.485:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.129976][ T29] audit: type=1326 audit(1767941006.485:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.153571][ T29] audit: type=1326 audit(1767941006.485:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.177119][ T29] audit: type=1326 audit(1767941006.485:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.200657][ T29] audit: type=1326 audit(1767941006.485:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.224577][ T29] audit: type=1326 audit(1767941006.485:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.248179][ T29] audit: type=1326 audit(1767941006.485:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.272008][ T29] audit: type=1326 audit(1767941006.485:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 199.376220][T12074] __nla_validate_parse: 2 callbacks suppressed [ 199.376237][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3448'. [ 199.447748][T12077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3451'. [ 199.851985][T12107] loop4: detected capacity change from 0 to 164 [ 199.987324][T12107] syz.4.3463: attempt to access beyond end of device [ 199.987324][T12107] loop4: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 200.001557][T12107] syz.4.3463: attempt to access beyond end of device [ 200.001557][T12107] loop4: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 200.098130][T12113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3465'. [ 200.121227][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3465'. [ 200.155453][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'. [ 200.791369][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3480'. [ 201.035710][T12164] netlink: 'syz.2.3487': attribute type 3 has an invalid length. [ 201.043816][T12164] netlink: 'syz.2.3487': attribute type 3 has an invalid length. [ 201.175239][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3492'. [ 201.185709][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3492'. [ 201.410578][T12194] sctp: [Deprecated]: syz.2.3501 (pid 12194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.410578][T12194] Use struct sctp_sack_info instead [ 201.427649][T12194] sctp: [Deprecated]: syz.2.3501 (pid 12194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.427649][T12194] Use struct sctp_sack_info instead [ 201.442417][T12191] lo speed is unknown, defaulting to 1000 [ 202.124036][T12239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3518'. [ 202.647172][T12258] syz!: rxe_newlink: already configured on team_slave_0 [ 202.707164][T12262] loop4: detected capacity change from 0 to 128 [ 202.845701][T12272] netlink: 'syz.2.3534': attribute type 39 has an invalid length. [ 202.877936][T12274] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3535'. [ 202.914984][T12278] loop4: detected capacity change from 0 to 2048 [ 202.975616][T12278] Alternate GPT is invalid, using primary GPT. [ 202.981963][T12278] loop4: p1 p2 p3 [ 202.986187][T12278] loop4: partition table partially beyond EOD, truncated [ 203.576563][T12313] netlink: 'syz.0.3553': attribute type 10 has an invalid length. [ 203.585971][T12313] batman_adv: batadv0: Removing interface: dummy0 [ 203.616663][T12313] team0: Port device dummy0 added [ 204.205898][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 204.205916][ T29] audit: type=1400 audit(1767941011.625:6442): avc: denied { nlmsg_read } for pid=12337 comm="syz.4.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.961009][T12397] __nla_validate_parse: 4 callbacks suppressed [ 204.961030][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'. [ 205.049698][T12403] netlink: 'syz.0.3592': attribute type 39 has an invalid length. [ 205.112685][ T29] audit: type=1400 audit(1767941012.495:6443): avc: denied { read } for pid=12406 comm="syz.4.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.206862][ T29] audit: type=1326 audit(1767941012.625:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 205.215581][T12413] pim6reg: entered allmulticast mode [ 205.267634][T12413] pim6reg: left allmulticast mode [ 205.270504][ T29] audit: type=1326 audit(1767941012.655:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 205.296751][ T29] audit: type=1326 audit(1767941012.655:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 205.320620][ T29] audit: type=1326 audit(1767941012.655:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 205.344286][ T29] audit: type=1326 audit(1767941012.655:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 205.367916][ T29] audit: type=1326 audit(1767941012.655:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4a7ec2005 code=0x7ffc0000 [ 205.391604][ T29] audit: type=1326 audit(1767941012.655:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 205.415148][ T29] audit: type=1326 audit(1767941012.665:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 205.716717][T12449] vlan3: entered allmulticast mode [ 205.822473][T12453] loop4: detected capacity change from 0 to 2048 [ 205.866841][T12453] loop4: p1 < > p4 [ 205.876605][T12453] loop4: p4 size 8388608 extends beyond EOD, truncated [ 206.544989][T12513] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3640'. [ 207.504829][T12537] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3649'. [ 207.540921][T12541] netlink: 'syz.0.3650': attribute type 1 has an invalid length. [ 207.566058][T12541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.608785][T12541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.624792][T12541] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 207.644069][T12541] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 207.813679][T12582] bridge: RTM_NEWNEIGH with invalid ether address [ 207.844475][T12587] netlink: 'syz.0.3660': attribute type 3 has an invalid length. [ 208.454744][T12665] lo speed is unknown, defaulting to 1000 [ 208.618626][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'. [ 209.582064][T12765] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.628853][T12767] tipc: Started in network mode [ 209.635586][T12767] tipc: Node identity ac14140f, cluster identity 4711 [ 209.669619][T12767] tipc: New replicast peer: 255.255.255.83 [ 209.676449][T12767] tipc: Enabled bearer , priority 10 [ 209.740771][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 209.740785][ T29] audit: type=1326 audit(1767941017.155:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 209.844591][ T29] audit: type=1326 audit(1767941017.205:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 209.868096][ T29] audit: type=1326 audit(1767941017.205:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 209.891698][ T29] audit: type=1326 audit(1767941017.205:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 209.915512][ T29] audit: type=1326 audit(1767941017.205:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 209.939064][ T29] audit: type=1326 audit(1767941017.205:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 209.962741][ T29] audit: type=1326 audit(1767941017.205:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 209.986389][ T29] audit: type=1326 audit(1767941017.205:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a7e8f749 code=0x7ffc0000 [ 210.010018][ T29] audit: type=1326 audit(1767941017.205:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 210.033677][ T29] audit: type=1326 audit(1767941017.205:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 210.190425][T12796] tipc: New replicast peer: 255.255.255.83 [ 210.197726][T12796] tipc: Enabled bearer , priority 10 [ 210.219743][T12798] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3707'. [ 210.380047][T12819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3715'. [ 210.389082][T12819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3715'. [ 210.398065][T12819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3715'. [ 210.407257][T12819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3715'. [ 210.684509][T12834] loop4: detected capacity change from 0 to 128 [ 210.702722][ T8639] tipc: Node number set to 2886997007 [ 211.478420][ T8639] tipc: Node number set to 2886997007 [ 211.565995][T12853] xt_hashlimit: max too large, truncated to 1048576 [ 211.580947][T12853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.371822][T12874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3739'. [ 212.529506][T12880] netlink: 'syz.1.3741': attribute type 83 has an invalid length. [ 213.096367][T12809] Set syz1 is full, maxelem 65536 reached [ 213.526287][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3762'. [ 213.552244][T12954] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3762'. [ 213.840988][T12991] loop4: detected capacity change from 0 to 512 [ 213.861197][T12991] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3768: EA inode hash validation failed [ 213.899829][T12991] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.3768: corrupted inode contents [ 213.941664][T12991] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.3768: mark_inode_dirty error [ 213.972321][T12991] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.3768: corrupted inode contents [ 214.002923][T12991] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.3768: mark_inode_dirty error [ 214.022955][T12991] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.3768: mark inode dirty (error -117) [ 214.053774][T12991] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 214.076243][T12991] EXT4-fs (loop4): 1 orphan inode deleted [ 214.088875][T12991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.115387][T12991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.239588][T13037] atomic_op ffff88810c89e128 conn xmit_atomic 0000000000000000 [ 214.874800][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 214.874817][ T29] audit: type=1326 audit(1767941022.295:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 214.905759][ T29] audit: type=1326 audit(1767941022.295:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 214.931088][ T29] audit: type=1326 audit(1767941022.345:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 214.955056][ T29] audit: type=1326 audit(1767941022.345:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 214.978831][ T29] audit: type=1326 audit(1767941022.345:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 215.002427][ T29] audit: type=1326 audit(1767941022.345:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 215.026100][ T29] audit: type=1326 audit(1767941022.355:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 215.049660][ T29] audit: type=1326 audit(1767941022.355:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 215.073822][ T29] audit: type=1326 audit(1767941022.405:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13110 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e635f749 code=0x7ffc0000 [ 215.155426][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3790'. [ 215.165846][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3790'. [ 215.317287][T13133] loop4: detected capacity change from 0 to 4096 [ 215.358243][T13133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.492055][T13144] veth12: left promiscuous mode [ 215.497031][T13144] veth12: left allmulticast mode [ 215.543736][ T29] audit: type=1400 audit(1767941022.965:6565): avc: denied { setattr } for pid=13132 comm="syz.4.3793" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.570682][T13133] EXT4-fs (loop4): shut down requested (2) [ 215.599893][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.807994][T13159] netlink: 'syz.0.3803': attribute type 10 has an invalid length. [ 215.824900][T13159] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.840007][T13159] bond0: (slave team0): Enslaving as an active interface with an up link [ 216.095910][T13178] 0ªî{X¹¦: left allmulticast mode [ 216.102325][T13178] $Hÿ: left promiscuous mode [ 216.121539][T13178] bond1: left promiscuous mode [ 216.127544][T13178] vxlan0: left promiscuous mode [ 216.132794][T13178] veth6: left promiscuous mode [ 216.137579][T13178] veth6: left allmulticast mode [ 217.528899][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 217.675589][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 217.716926][T13272] netlink: 'syz.4.3854': attribute type 10 has an invalid length. [ 217.732742][T13272] dummy0: left promiscuous mode [ 217.740062][T13272] team0: Failed to send options change via netlink (err -105) [ 217.747595][T13272] team0: Port device dummy0 added [ 217.883048][T13273] netlink: 'syz.4.3854': attribute type 10 has an invalid length. [ 217.899050][T13273] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 218.366625][T13280] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 218.589154][T13273] team0: Port device dummy0 removed [ 218.611745][T13273] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 219.174825][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 219.214986][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 219.313826][T13318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13318 comm=syz.1.3872 [ 219.326918][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3871'. [ 219.392679][T13316] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 219.849239][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 220.059712][T13377] loop4: detected capacity change from 0 to 512 [ 220.090792][T13377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.116313][T13377] ext4 filesystem being mounted at /676/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.409927][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 220.409945][ T29] audit: type=1326 audit(1767941027.825:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.470211][ T29] audit: type=1326 audit(1767941027.825:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.493940][ T29] audit: type=1326 audit(1767941027.825:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.517429][ T29] audit: type=1326 audit(1767941027.825:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.541063][ T29] audit: type=1326 audit(1767941027.825:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.564645][ T29] audit: type=1326 audit(1767941027.825:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.588664][ T29] audit: type=1326 audit(1767941027.825:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.612356][ T29] audit: type=1326 audit(1767941027.825:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.635904][ T29] audit: type=1326 audit(1767941027.825:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.659407][ T29] audit: type=1326 audit(1767941027.825:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356fbef749 code=0x7ffc0000 [ 220.765296][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.243711][T13435] netlink: 'syz.1.3920': attribute type 2 has an invalid length. [ 223.156308][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3966'. [ 223.175454][T13544] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3966'. [ 223.184756][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3966'. [ 223.381389][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3971'. [ 223.701307][T13577] netlink: 'syz.1.3976': attribute type 10 has an invalid length. [ 223.716292][T13577] team0: Failed to send options change via netlink (err -105) [ 223.724504][T13577] team0: Port device dummy0 added [ 223.733195][T13577] netlink: 'syz.1.3976': attribute type 10 has an invalid length. [ 223.742195][T13577] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 223.771356][T13577] team0: Failed to send options change via netlink (err -105) [ 223.779179][T13577] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 223.789657][T13577] team0: Port device dummy0 removed [ 223.799651][T13577] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 223.863698][T13590] netlink: 'syz.0.3983': attribute type 2 has an invalid length. [ 224.116343][T13602] ref_ctr_offset mismatch. inode: 0x1104 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 224.148192][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 224.157249][T13604] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3989'. [ 224.166374][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 224.785159][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4023'. [ 224.804100][T13682] hsr_slave_1 (unregistering): left promiscuous mode [ 225.426385][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'. [ 225.444076][T13716] hsr_slave_1 (unregistering): left promiscuous mode [ 225.700607][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 225.700621][ T29] audit: type=1326 audit(1767941033.115:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 225.770680][ T29] audit: type=1326 audit(1767941033.145:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 225.794275][ T29] audit: type=1326 audit(1767941033.155:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 225.817906][ T29] audit: type=1326 audit(1767941033.155:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 225.841611][ T29] audit: type=1326 audit(1767941033.155:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 225.865277][ T29] audit: type=1326 audit(1767941033.155:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 225.888991][ T29] audit: type=1326 audit(1767941033.155:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.4.4046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3eb45f749 code=0x7ffc0000 [ 226.053988][ T8639] Process accounting resumed [ 226.305126][T13763] loop4: detected capacity change from 0 to 512 [ 226.312162][T13763] EXT4-fs: Ignoring removed i_version option [ 226.318442][T13763] EXT4-fs: Ignoring removed bh option [ 226.353167][T13763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.366244][T13763] ext4 filesystem being mounted at /712/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.432017][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.492166][T13778] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 226.501651][T13779] loop4: detected capacity change from 0 to 128 [ 226.511548][T13779] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.544317][T13779] ext4 filesystem being mounted at /713/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.573325][T13782] geneve2: entered promiscuous mode [ 226.578590][T13782] geneve2: entered allmulticast mode [ 226.632197][ T29] audit: type=1400 audit(1767941034.025:6753): avc: denied { rename } for pid=13776 comm="syz.4.4060" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 226.654345][ T29] audit: type=1400 audit(1767941034.025:6754): avc: denied { create } for pid=13776 comm="syz.4.4060" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 226.696529][ T29] audit: type=1400 audit(1767941034.035:6755): avc: denied { link } for pid=13776 comm="syz.4.4060" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 226.781000][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.810031][T13775] ================================================================== [ 226.818167][T13775] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 226.825224][T13775] [ 226.827892][T13775] read-write to 0xffff888237c2a524 of 4 bytes by task 8639 on cpu 0: [ 226.835954][T13775] wq_worker_running+0x95/0x120 [ 226.840842][T13775] synchronize_rcu_expedited+0x5ef/0x770 [ 226.846480][T13775] synchronize_rcu+0x35/0x2e0 [ 226.851168][T13775] xfrm_state_gc_task+0x98/0x650 [ 226.856109][T13775] process_scheduled_works+0x4ce/0x9d0 [ 226.861572][T13775] worker_thread+0x582/0x770 [ 226.866187][T13775] kthread+0x489/0x510 [ 226.870267][T13775] ret_from_fork+0x149/0x290 [ 226.874869][T13775] ret_from_fork_asm+0x1a/0x30 [ 226.879630][T13775] [ 226.881949][T13775] read to 0xffff888237c2a524 of 4 bytes by task 13775 on cpu 1: [ 226.889572][T13775] kick_pool+0x49/0x2d0 [ 226.893739][T13775] __queue_work+0x897/0xae0 [ 226.898247][T13775] queue_work_on+0xa9/0x130 [ 226.902756][T13775] xfrm_state_find+0x1a17/0x3070 [ 226.907688][T13775] xfrm_resolve_and_create_bundle+0x575/0x1ef0 [ 226.913843][T13775] xfrm_lookup_with_ifid+0x1da/0x1360 [ 226.919218][T13775] xfrm_lookup_route+0x3a/0x110 [ 226.924094][T13775] ip_route_output_flow+0xdb/0x110 [ 226.929220][T13775] udp_sendmsg+0x11b0/0x13c0 [ 226.933808][T13775] inet_sendmsg+0xac/0xd0 [ 226.938130][T13775] __sock_sendmsg+0x102/0x180 [ 226.942797][T13775] ____sys_sendmsg+0x345/0x4a0 [ 226.947572][T13775] ___sys_sendmsg+0x17b/0x1d0 [ 226.952256][T13775] __sys_sendmmsg+0x178/0x300 [ 226.956936][T13775] __x64_sys_sendmmsg+0x57/0x70 [ 226.961790][T13775] x64_sys_call+0x1e28/0x3000 [ 226.966470][T13775] do_syscall_64+0xca/0x2b0 [ 226.970993][T13775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.976884][T13775] [ 226.979198][T13775] value changed: 0x00000000 -> 0x00000001 [ 226.984905][T13775] [ 226.987220][T13775] Reported by Kernel Concurrency Sanitizer on: [ 226.993365][T13775] CPU: 1 UID: 0 PID: 13775 Comm: syz.3.4061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.004728][T13775] Tainted: [W]=WARN [ 227.008541][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.018598][T13775] ==================================================================