last executing test programs: 1m30.139249604s ago: executing program 1 (id=1898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) 1m30.130502925s ago: executing program 1 (id=1901): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote, 0x4}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m29.971812878s ago: executing program 1 (id=1907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m29.920912732s ago: executing program 1 (id=1910): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m29.831272449s ago: executing program 1 (id=1914): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socket(0xa, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 1m29.82232455s ago: executing program 1 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsgid(0x0) 1m29.800310112s ago: executing program 32 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsgid(0x0) 1m20.838133849s ago: executing program 0 (id=2301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) shutdown(r0, 0x1) 1m20.779209384s ago: executing program 0 (id=2302): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32], 0x44}}, 0x8000) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e640000000048000280"], 0x78}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 1m20.778951794s ago: executing program 0 (id=2303): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1m20.671210103s ago: executing program 0 (id=2307): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m20.670636533s ago: executing program 0 (id=2310): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) close(r0) 1m20.57158126s ago: executing program 0 (id=2317): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 1m20.553327012s ago: executing program 33 (id=2317): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 1.423938685s ago: executing program 5 (id=5609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.23910935s ago: executing program 5 (id=5614): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 943.863223ms ago: executing program 6 (id=5627): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0, 0x1, 0x3, 0x2, 0xf, "db815bbc2d4caa5eae1a33b7b1d518146aeeb03b113a01b0e03810415ec6c6e1dbdb9a6f9da81a345a9ec712b2764d4c13b8e0420fba2828ce47e28c56e373", 0x32}, 0x60) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 870.97981ms ago: executing program 6 (id=5629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 865.82891ms ago: executing program 6 (id=5631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x45}}}}}, 0x28}}, 0x4000054) 769.308158ms ago: executing program 6 (id=5636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) statfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000c00)=""/232) 718.941982ms ago: executing program 6 (id=5638): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 611.266421ms ago: executing program 6 (id=5643): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) sendmmsg$inet6(r0, &(0x7f0000003880)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0xc1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x4, 0x202, 0x17558e07, 0x90e, 0x7c26, 0xffffffff, 0x7, r2}, 0x20) 516.085048ms ago: executing program 2 (id=5651): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000600)="3b256c0600ff8cf30d776a89d5cfc3ce7467bd24f9ec048278a452c0266879008bd0ee21149e5f348acec316", 0x2c}], 0x1, 0x2) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 455.241143ms ago: executing program 2 (id=5653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 454.860433ms ago: executing program 2 (id=5655): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r1, 0x0, 0x0, 0x1, 0x0, 0x1, r1}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 444.169004ms ago: executing program 3 (id=5656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a00081"], 0x72) 433.430555ms ago: executing program 2 (id=5657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 371.19072ms ago: executing program 2 (id=5658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) 361.124781ms ago: executing program 3 (id=5661): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) 353.862852ms ago: executing program 5 (id=5662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 283.196037ms ago: executing program 4 (id=5663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 282.908127ms ago: executing program 5 (id=5664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 282.750707ms ago: executing program 4 (id=5665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 282.548217ms ago: executing program 5 (id=5666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 266.646649ms ago: executing program 3 (id=5667): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) fsync(0xffffffffffffffff) 252.952ms ago: executing program 4 (id=5668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 179.302316ms ago: executing program 5 (id=5669): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x305d, 0x20000000, 0x21, 0x0, 0x0) 179.046936ms ago: executing program 4 (id=5670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 178.846656ms ago: executing program 3 (id=5671): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000000180)) 178.674156ms ago: executing program 3 (id=5672): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x4004}, 0x48084) 94.723052ms ago: executing program 4 (id=5673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 94.154633ms ago: executing program 3 (id=5674): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 53.405536ms ago: executing program 4 (id=5675): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x10001}, 0x14) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 0s ago: executing program 2 (id=5676): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): ugfs directory [ 92.450015][ T8446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.459818][ T8446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.469614][ T8446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.479229][ T8446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.517373][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.535246][ T8446] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.546938][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.554816][ T6754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.566151][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.573817][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.644827][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.753124][ T8446] veth0_vlan: entered promiscuous mode [ 92.762335][ T8446] veth1_vlan: entered promiscuous mode [ 92.779125][ T8446] veth0_macvtap: entered promiscuous mode [ 92.787936][ T8446] veth1_macvtap: entered promiscuous mode [ 92.800021][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.815355][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.827674][ T6756] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.838088][ T6756] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.851256][ T6756] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.860889][ T6756] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.880803][ T29] audit: type=1400 audit(1755835803.666:2296): avc: denied { mounton } for pid=8446 comm="syz-executor" path="/root/syzkaller.ndqjrH/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 92.908037][ T29] audit: type=1400 audit(1755835803.666:2297): avc: denied { mounton } for pid=8446 comm="syz-executor" path="/root/syzkaller.ndqjrH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.936519][ T29] audit: type=1400 audit(1755835803.666:2298): avc: denied { mounton } for pid=8446 comm="syz-executor" path="/root/syzkaller.ndqjrH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 92.966316][ T29] audit: type=1400 audit(1755835803.696:2299): avc: denied { mounton } for pid=8446 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 92.990571][ T29] audit: type=1400 audit(1755835803.696:2300): avc: denied { mount } for pid=8446 comm="syz-executor" name="/" dev="gadgetfs" ino=3853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 93.014616][ T29] audit: type=1400 audit(1755835803.706:2301): avc: denied { add_name } for pid=8446 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 93.500538][ T8593] openvswitch: netlink: Message has 6 unknown bytes. [ 93.524736][ T8595] block device autoloading is deprecated and will be removed. [ 93.814389][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 93.935842][ T8653] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 93.951301][ T8653] team0: Device hsr_slave_0 failed to register rx_handler [ 94.093152][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1999'. [ 94.106926][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1999'. [ 94.550932][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'. [ 94.951401][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.958841][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.016431][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.027708][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.070600][ T6706] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.082388][ T6706] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.091819][ T6706] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.103237][ T6706] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.714820][ T8796] lo speed is unknown, defaulting to 1000 [ 95.721115][ T8796] lo speed is unknown, defaulting to 1000 [ 95.727397][ T8796] lo speed is unknown, defaulting to 1000 [ 95.734318][ T8796] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.749844][ T8796] lo speed is unknown, defaulting to 1000 [ 95.756715][ T8796] lo speed is unknown, defaulting to 1000 [ 95.764775][ T8796] lo speed is unknown, defaulting to 1000 [ 95.772663][ T8796] lo speed is unknown, defaulting to 1000 [ 95.784637][ T8796] lo speed is unknown, defaulting to 1000 [ 96.062616][ T8839] random: crng reseeded on system resumption [ 96.092455][ T8852] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2067'. [ 96.113738][ T8839] vhci_hcd: invalid port number 23 [ 96.181401][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.195138][ T8861] netlink: 'syz.4.2070': attribute type 1 has an invalid length. [ 96.203589][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.254170][ T8868] netlink: 'syz.0.2073': attribute type 13 has an invalid length. [ 96.262363][ T8868] netlink: 'syz.0.2073': attribute type 17 has an invalid length. [ 96.310843][ T8876] 9pnet: p9_errstr2errno: server reported unknown error W~uZz&4 [ 96.343109][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 96.571222][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.581199][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.737902][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 96.737916][ T29] audit: type=1400 audit(1755835807.516:2495): avc: denied { create } for pid=8932 comm="syz.0.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.769415][ T29] audit: type=1400 audit(1755835807.546:2496): avc: denied { bind } for pid=8932 comm="syz.0.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.815694][ T29] audit: type=1326 audit(1755835807.596:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8936 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 96.842529][ T29] audit: type=1326 audit(1755835807.596:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8936 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 96.866494][ T29] audit: type=1326 audit(1755835807.596:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8936 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 96.890965][ T29] audit: type=1326 audit(1755835807.596:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8936 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 96.915253][ T29] audit: type=1326 audit(1755835807.596:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8936 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 96.939638][ T29] audit: type=1326 audit(1755835807.596:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8936 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 96.963538][ T29] audit: type=1326 audit(1755835807.596:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8936 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 96.988460][ T29] audit: type=1326 audit(1755835807.596:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8936 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 97.082099][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 97.206744][ T8957] infiniband syz!: set down [ 97.211702][ T8957] infiniband syz!: added team_slave_0 [ 97.233963][ T8957] RDS/IB: syz!: added [ 97.246256][ T8957] smc: adding ib device syz! with port count 1 [ 97.263280][ T8957] smc: ib device syz! port 1 has pnetid [ 97.547184][ T8981] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 98.066353][ T9037] vlan2: entered allmulticast mode [ 98.094271][ T9043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9043 comm=syz.4.2154 [ 98.332586][ T9082] lo speed is unknown, defaulting to 1000 [ 98.339689][ T9082] lo speed is unknown, defaulting to 1000 [ 98.536921][ T9103] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 98.570264][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 98.656640][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'. [ 98.666226][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'. [ 98.764454][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 98.828906][ T9147] netlink: 'syz.2.2199': attribute type 183 has an invalid length. [ 98.858516][ T9152] netlink: 'syz.0.2202': attribute type 10 has an invalid length. [ 98.868450][ T9152] team0: Port device dummy0 added [ 98.875872][ T9152] netlink: 'syz.0.2202': attribute type 10 has an invalid length. [ 98.885249][ T9152] team0: Port device dummy0 removed [ 98.893810][ T9152] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.074387][ T9181] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 99.209329][ T9190] new mount options do not match the existing superblock, will be ignored [ 99.251330][ T9195] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2223'. [ 99.271526][ T9197] program syz.0.2224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.381516][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 99.431777][ T9224] netlink: 'syz.2.2237': attribute type 5 has an invalid length. [ 99.442704][ T9226] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2238'. [ 99.971242][ T9296] netlink: 'syz.0.2271': attribute type 30 has an invalid length. [ 100.169777][ T9325] syzkaller1: entered promiscuous mode [ 100.176179][ T9325] syzkaller1: entered allmulticast mode [ 100.346280][ T9340] loop0: detected capacity change from 0 to 1764 [ 100.448720][ T9355] wireguard0: entered promiscuous mode [ 100.454750][ T9355] wireguard0: entered allmulticast mode [ 100.536119][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2302'. [ 100.545581][ T9371] bond0: option downdelay: invalid value (18446744073709551615) [ 100.553837][ T9371] bond0: option downdelay: allowed values 0 - 2147483647 [ 100.629203][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2305'. [ 100.973196][ T9406] lo speed is unknown, defaulting to 1000 [ 100.987895][ T9427] 9pnet: Could not find request transport: 0xffffffffffffffff [ 100.999315][ T9406] lo speed is unknown, defaulting to 1000 [ 101.025741][ T6763] bridge_slave_1: left allmulticast mode [ 101.031607][ T6763] bridge_slave_1: left promiscuous mode [ 101.037333][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.061091][ T6763] bridge_slave_0: left promiscuous mode [ 101.071028][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.144087][ T6763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.156640][ T6763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.170060][ T6763] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 101.170187][ T9443] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 101.191365][ T6763] bond0 (unregistering): Released all slaves [ 101.201252][ T6763] bond1 (unregistering): Released all slaves [ 101.238936][ T9449] hsr_slave_1 (unregistering): left promiscuous mode [ 101.295336][ T6763] hsr_slave_0: left promiscuous mode [ 101.305171][ T6763] hsr_slave_1: left promiscuous mode [ 101.313053][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.322505][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.369152][ T6763] team0 (unregistering): Port device team_slave_1 removed [ 101.381468][ T6763] team0 (unregistering): Port device team_slave_0 removed [ 101.435755][ T9466] vxcan3: entered promiscuous mode [ 101.441085][ T9466] vxcan3: entered allmulticast mode [ 101.446832][ T9466] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.467597][ T9466] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 101.506060][ T9406] chnl_net:caif_netlink_parms(): no params data found [ 101.668032][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.676147][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.711797][ T9406] bridge_slave_0: entered allmulticast mode [ 101.723796][ T9406] bridge_slave_0: entered promiscuous mode [ 101.733851][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.741382][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.750172][ T9406] bridge_slave_1: entered allmulticast mode [ 101.758718][ T9406] bridge_slave_1: entered promiscuous mode [ 101.793933][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 101.793950][ T29] audit: type=1400 audit(1755835812.576:2857): avc: denied { remount } for pid=9502 comm="syz.2.2357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.794021][ T9406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.836960][ T9406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.872549][ T9406] team0: Port device team_slave_0 added [ 101.880745][ T9406] team0: Port device team_slave_1 added [ 101.897376][ T29] audit: type=1400 audit(1755835812.676:2858): avc: denied { read } for pid=9506 comm="syz.2.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.927222][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.934728][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.964109][ T9406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.994024][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.001320][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.027915][ T9406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.104057][ T9406] hsr_slave_0: entered promiscuous mode [ 102.119487][ T9406] hsr_slave_1: entered promiscuous mode [ 102.125995][ T9406] debugfs: 'hsr0' already exists in 'hsr' [ 102.131983][ T9406] Cannot create hsr debugfs directory [ 102.256126][ T9406] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.282608][ T9406] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.293929][ T9406] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.313340][ T9406] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.372536][ T9406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.404601][ T9406] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.416299][ T29] audit: type=1400 audit(1755835813.206:2859): avc: denied { create } for pid=9519 comm="syz.2.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.441697][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.450113][ T6754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.460391][ T29] audit: type=1400 audit(1755835813.206:2860): avc: denied { bind } for pid=9519 comm="syz.2.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.480007][ T29] audit: type=1400 audit(1755835813.226:2861): avc: denied { write } for pid=9519 comm="syz.2.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.503521][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.511157][ T6763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.521014][ T9522] 9pnet_fd: Insufficient options for proto=fd [ 102.552560][ T9406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.563526][ T9406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.643585][ T29] audit: type=1326 audit(1755835813.416:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 102.669495][ T29] audit: type=1326 audit(1755835813.416:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 102.694162][ T29] audit: type=1400 audit(1755835813.426:2864): avc: denied { shutdown } for pid=9523 comm="syz.5.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.714135][ T9406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.721945][ T29] audit: type=1326 audit(1755835813.456:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 102.746418][ T29] audit: type=1326 audit(1755835813.456:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 103.025655][ T9576] 9pnet_fd: Insufficient options for proto=fd [ 103.045062][ T9406] veth0_vlan: entered promiscuous mode [ 103.071818][ T9406] veth1_vlan: entered promiscuous mode [ 103.093792][ T9406] veth0_macvtap: entered promiscuous mode [ 103.103136][ T9584] block device autoloading is deprecated and will be removed. [ 103.121449][ T9406] veth1_macvtap: entered promiscuous mode [ 103.136597][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.148321][ T9590] vhci_hcd: invalid port number 96 [ 103.153698][ T9590] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 103.162751][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.185016][ T6763] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.224127][ T6763] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.251076][ T6763] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272100][ T9599] netlink: 'syz.5.2392': attribute type 3 has an invalid length. [ 103.273872][ T6763] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.364538][ T9613] pimreg: entered allmulticast mode [ 103.381197][ T9613] pimreg: left allmulticast mode [ 103.455847][ T9625] netlink: 'syz.4.2403': attribute type 1 has an invalid length. [ 103.484466][ T9630] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 103.545750][ T9637] program syz.3.2409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.735532][ T9656] netlink: 'syz.6.2415': attribute type 3 has an invalid length. [ 104.216107][ T9689] lo speed is unknown, defaulting to 1000 [ 104.449946][ T9709] netlink: 'syz.5.2437': attribute type 13 has an invalid length. [ 104.522069][ T9709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.539435][ T9709] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.559454][ T9709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.658331][ T9724] ipvlan2: entered promiscuous mode [ 104.664552][ T9724] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.673068][ T9724] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.772776][ T9743] netlink: 'syz.3.2455': attribute type 1 has an invalid length. [ 104.781666][ T9743] netlink: 'syz.3.2455': attribute type 6 has an invalid length. [ 104.789643][ T9743] netlink: 'syz.3.2455': attribute type 3 has an invalid length. [ 104.797445][ T9743] __nla_validate_parse: 2 callbacks suppressed [ 104.797466][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2455'. [ 104.909821][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2463'. [ 104.967942][ T9773] syzkaller1: entered promiscuous mode [ 104.973807][ T9773] syzkaller1: entered allmulticast mode [ 105.433008][ T9821] SELinux: failed to load policy [ 106.050017][ T9912] openvswitch: netlink: Message has 6 unknown bytes. [ 106.334987][ T9942] openvswitch: netlink: Message has 6 unknown bytes. [ 106.582546][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2560'. [ 106.600639][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2558'. [ 106.605953][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2560'. [ 106.812267][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 106.812287][ T29] audit: type=1326 audit(1755835817.596:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 106.862337][ T29] audit: type=1326 audit(1755835817.626:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 106.891105][ T29] audit: type=1326 audit(1755835817.626:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 106.917540][ T29] audit: type=1326 audit(1755835817.626:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 106.942482][ T29] audit: type=1326 audit(1755835817.626:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 106.967494][ T29] audit: type=1326 audit(1755835817.626:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 106.994774][ T29] audit: type=1326 audit(1755835817.636:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 107.021098][ T29] audit: type=1326 audit(1755835817.636:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 107.134135][ T29] audit: type=1400 audit(1755835817.916:3100): avc: denied { create } for pid=9997 comm="syz.2.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.185402][ T29] audit: type=1400 audit(1755835817.916:3101): avc: denied { setopt } for pid=9997 comm="syz.2.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.239847][T10007] block device autoloading is deprecated and will be removed. [ 107.505287][T10042] block device autoloading is deprecated and will be removed. [ 107.834475][T10080] netlink: 'syz.5.2612': attribute type 10 has an invalid length. [ 107.844530][T10080] team0: Device hsr_slave_0 failed to register rx_handler [ 107.937690][T10098] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 108.016413][T10105] netlink: 'syz.4.2621': attribute type 13 has an invalid length. [ 108.133255][T10112] team0: Device hsr_slave_0 failed to register rx_handler [ 108.525022][T10151] validate_nla: 2 callbacks suppressed [ 108.525044][T10151] netlink: 'syz.2.2642': attribute type 10 has an invalid length. [ 108.553911][T10151] team0: Device hsr_slave_0 failed to register rx_handler [ 109.269495][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2653'. [ 109.343643][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'. [ 110.457801][T10272] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 112.437410][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 112.437428][ T29] audit: type=1400 audit(1755835823.216:3201): avc: denied { create } for pid=10368 comm="syz.2.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.514907][ T29] audit: type=1400 audit(1755835823.246:3202): avc: denied { bind } for pid=10368 comm="syz.2.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.598892][ T29] audit: type=1400 audit(1755835823.326:3203): avc: denied { write } for pid=10368 comm="syz.2.2744" path="socket:[26587]" dev="sockfs" ino=26587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.618325][T10381] lo speed is unknown, defaulting to 1000 [ 112.623123][ T29] audit: type=1400 audit(1755835823.376:3204): avc: denied { read } for pid=10368 comm="syz.2.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.656192][ T29] audit: type=1326 audit(1755835823.436:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.4.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 112.681405][ T29] audit: type=1326 audit(1755835823.436:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.4.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 112.705208][ T29] audit: type=1326 audit(1755835823.436:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.4.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 112.729263][ T29] audit: type=1326 audit(1755835823.436:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.4.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 112.753166][ T29] audit: type=1326 audit(1755835823.436:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.4.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 112.895279][ T29] audit: type=1326 audit(1755835823.676:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10389 comm="syz.6.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 112.951663][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2742'. [ 113.051513][T10403] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 113.380182][T10430] vlan2: entered allmulticast mode [ 113.585809][T10450] lo speed is unknown, defaulting to 1000 [ 113.720506][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2773'. [ 113.752040][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2773'. [ 114.104787][T10488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10488 comm=syz.2.2784 [ 114.183521][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2786'. [ 114.193228][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2786'. [ 114.708658][T10532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10532 comm=syz.5.2802 [ 114.887623][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.896822][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.986090][T10555] loop4: detected capacity change from 0 to 128 [ 115.104019][T10562] netlink: 'syz.5.2814': attribute type 30 has an invalid length. [ 115.558185][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'. [ 115.730622][T10616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.740868][T10616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.854899][T10630] netlink: 'syz.6.2847': attribute type 10 has an invalid length. [ 115.869738][T10630] team0: Port device dummy0 added [ 115.880708][T10630] netlink: 'syz.6.2847': attribute type 10 has an invalid length. [ 115.891641][T10630] team0: Port device dummy0 removed [ 115.899343][T10630] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.946491][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2839'. [ 116.276858][T10678] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 116.313722][T10682] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2860'. [ 116.426368][T10692] netlink: 'syz.5.2865': attribute type 5 has an invalid length. [ 116.744855][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2886'. [ 116.773808][T10733] hsr_slave_1 (unregistering): left promiscuous mode [ 116.884694][T10757] new mount options do not match the existing superblock, will be ignored [ 117.075838][T10768] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2900'. [ 117.178264][T10780] netlink: 'syz.3.2908': attribute type 5 has an invalid length. [ 117.764511][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 117.764528][ T29] audit: type=1400 audit(1755835828.546:3397): avc: denied { watch watch_reads } for pid=10785 comm="syz.3.2911" path="/598" dev="tmpfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.821377][ T29] audit: type=1326 audit(1755835828.586:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 117.845266][ T29] audit: type=1326 audit(1755835828.586:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 117.869878][ T29] audit: type=1326 audit(1755835828.596:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 117.894093][ T29] audit: type=1326 audit(1755835828.596:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 117.918183][ T29] audit: type=1326 audit(1755835828.596:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 117.941958][ T29] audit: type=1326 audit(1755835828.596:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 117.966036][ T29] audit: type=1326 audit(1755835828.596:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 117.990429][ T29] audit: type=1326 audit(1755835828.596:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 118.014854][ T29] audit: type=1326 audit(1755835828.596:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 118.589228][T10848] program syz.2.2938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.703600][T10871] pimreg: entered allmulticast mode [ 118.721978][T10871] pimreg: left allmulticast mode [ 118.962400][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.974020][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.217678][T10932] __nla_validate_parse: 2 callbacks suppressed [ 119.217699][T10932] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2977'. [ 119.234268][T10932] bond0: option downdelay: invalid value (18446744073709551615) [ 119.242015][T10932] bond0: option downdelay: allowed values 0 - 2147483647 [ 119.615543][T10967] wireguard0: entered promiscuous mode [ 119.621129][T10967] wireguard0: entered allmulticast mode [ 119.639762][T10970] ipvlan2: entered promiscuous mode [ 119.646324][T10970] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.654756][T10970] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 119.976081][ T6756] batadv1: left allmulticast mode [ 119.981311][ T6756] batadv1: left promiscuous mode [ 119.986790][ T6756] bridge0: port 4(batadv1) entered disabled state [ 119.994896][ T6756] macvlan2: left promiscuous mode [ 120.000889][ T6756] bridge0: port 3(macvlan2) entered disabled state [ 120.008984][ T6756] bridge_slave_1: left allmulticast mode [ 120.014968][ T6756] bridge_slave_1: left promiscuous mode [ 120.020928][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.029190][ T6756] bridge_slave_0: left promiscuous mode [ 120.035046][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.094408][ T6756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.105974][ T6756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.115144][ T6756] bond0 (unregistering): Released all slaves [ 120.124182][ T6756] bond1 (unregistering): Released all slaves [ 120.149896][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3005'. [ 120.150870][T10977] lo speed is unknown, defaulting to 1000 [ 120.252983][ T6756] hsr_slave_0: left promiscuous mode [ 120.263495][ T6756] hsr_slave_1: left promiscuous mode [ 120.270934][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.273057][T11012] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 120.289293][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.349471][ T6756] team0 (unregistering): Port device team_slave_1 removed [ 120.361776][ T6756] team0 (unregistering): Port device team_slave_0 removed [ 120.488613][T10977] chnl_net:caif_netlink_parms(): no params data found [ 120.536206][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3021'. [ 120.571221][T11038] hsr_slave_1 (unregistering): left promiscuous mode [ 120.598018][T11047] vxcan3: entered promiscuous mode [ 120.603816][T11047] vxcan3: entered allmulticast mode [ 120.613090][T10977] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.620942][T10977] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.628232][T10977] bridge_slave_0: entered allmulticast mode [ 120.636231][T10977] bridge_slave_0: entered promiscuous mode [ 120.643618][T10977] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.650924][T10977] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.658632][T10977] bridge_slave_1: entered allmulticast mode [ 120.665485][T10977] bridge_slave_1: entered promiscuous mode [ 120.684935][T10977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.696271][T10977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.724677][T10977] team0: Port device team_slave_0 added [ 120.732056][T10977] team0: Port device team_slave_1 added [ 120.747963][T10977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.755106][T10977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.782143][T10977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.793625][T10977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.801110][T10977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.827252][T10977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.854442][T10977] hsr_slave_0: entered promiscuous mode [ 120.860900][T10977] hsr_slave_1: entered promiscuous mode [ 120.866972][T10977] debugfs: 'hsr0' already exists in 'hsr' [ 120.872837][T10977] Cannot create hsr debugfs directory [ 121.103584][T10977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.112567][T10977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.121483][T10977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.131012][T10977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.146761][T10977] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.153953][T10977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.161486][T10977] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.168697][T10977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.197007][T10977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.210085][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.218058][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.230130][T10977] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.240474][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.247830][ T6725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.258675][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.265988][ T6754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.343458][T10977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.484897][T10977] veth0_vlan: entered promiscuous mode [ 121.495375][T10977] veth1_vlan: entered promiscuous mode [ 121.532885][T10977] veth0_macvtap: entered promiscuous mode [ 121.552365][T10977] veth1_macvtap: entered promiscuous mode [ 121.575737][T10977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.602856][T10977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.616174][ T6725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.629444][ T6725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.663390][ T6754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.681344][ T6754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.716837][T11096] vhci_hcd: invalid port number 96 [ 121.722132][T11096] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 121.802128][T11105] 9pnet_fd: Insufficient options for proto=fd [ 121.877960][T11111] wireguard0: entered promiscuous mode [ 121.883702][T11111] wireguard0: entered allmulticast mode [ 122.025207][T11132] netlink: 'syz.5.3051': attribute type 1 has an invalid length. [ 122.086221][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3057'. [ 122.115661][T11140] hsr_slave_1 (unregistering): left promiscuous mode [ 122.162677][T11150] pimreg: entered allmulticast mode [ 122.183432][T11150] pimreg: left allmulticast mode [ 122.304902][T11164] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.313382][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 122.339786][T11165] hsr_slave_1 (unregistering): left promiscuous mode [ 122.360457][T11169] wireguard0: entered promiscuous mode [ 122.366002][T11169] wireguard0: entered allmulticast mode [ 122.686325][T11203] ipvlan2: entered promiscuous mode [ 122.692134][T11203] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 122.700318][T11203] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.757408][T11210] wireguard0: entered promiscuous mode [ 122.763505][T11210] wireguard0: entered allmulticast mode [ 122.831817][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 122.831836][ T29] audit: type=1326 audit(1755835833.616:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 122.862114][ T29] audit: type=1326 audit(1755835833.616:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 122.886059][ T29] audit: type=1326 audit(1755835833.616:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 122.909994][ T29] audit: type=1326 audit(1755835833.616:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 122.934050][ T29] audit: type=1326 audit(1755835833.616:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 122.975827][ T29] audit: type=1326 audit(1755835833.756:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 123.002573][ T29] audit: type=1326 audit(1755835833.756:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 123.026379][ T29] audit: type=1326 audit(1755835833.766:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 123.050369][ T29] audit: type=1326 audit(1755835833.766:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 123.074557][ T29] audit: type=1326 audit(1755835833.766:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f9a78ebe9 code=0x7ffc0000 [ 123.186218][T11231] wireguard0: entered promiscuous mode [ 123.191808][T11231] wireguard0: entered allmulticast mode [ 123.253135][T11245] netlink: 'syz.4.3104': attribute type 13 has an invalid length. [ 123.284532][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.295252][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.311340][T11245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.337651][T11248] syzkaller1: entered promiscuous mode [ 123.343371][T11248] syzkaller1: entered allmulticast mode [ 123.384359][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3109'. [ 123.393861][T11253] wireguard0: entered promiscuous mode [ 123.399467][T11253] wireguard0: entered allmulticast mode [ 123.522286][T11263] syzkaller1: entered promiscuous mode [ 123.527847][T11263] syzkaller1: entered allmulticast mode [ 123.589373][T11272] netlink: 'syz.3.3122': attribute type 13 has an invalid length. [ 123.664470][T11272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.673117][T11272] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.683030][T11272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.698903][ T3400] lo speed is unknown, defaulting to 1000 [ 123.704701][ T3400] syz0: Port: 1 Link ACTIVE [ 123.813678][T11288] netlink: 'syz.2.3132': attribute type 13 has an invalid length. [ 123.894020][T11288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.956753][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'. [ 123.988234][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3125'. [ 124.047854][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3143'. [ 124.273115][T11327] netlink: 'syz.6.3140': attribute type 13 has an invalid length. [ 124.313395][T11327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.465001][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3145'. [ 124.737740][T11394] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3165'. [ 124.747894][T11394] netem: change failed [ 124.770327][ T6725] nci: nci_rsp_packet: unknown rsp opcode 0x211 [ 125.075530][T11423] SELinux: failed to load policy [ 125.615186][T11450] syzkaller1: entered promiscuous mode [ 125.620815][T11450] syzkaller1: entered allmulticast mode [ 125.646442][T11453] SELinux: failed to load policy [ 125.817713][T11465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3205'. [ 125.826999][T11465] netem: change failed [ 125.852671][T11470] atomic_op ffff888103eb5128 conn xmit_atomic 0000000000000000 [ 125.943675][T11481] SELinux: failed to load policy [ 125.995228][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3207'. [ 126.010052][T11493] netem: change failed [ 126.032111][T11495] syzkaller1: entered promiscuous mode [ 126.037846][T11495] syzkaller1: entered allmulticast mode [ 126.545384][T11512] 0{X: left allmulticast mode [ 126.559464][T11512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.562581][T11510] SELinux: failed to load policy [ 126.768343][ T6765] nci: nci_rsp_packet: unknown rsp opcode 0x211 [ 126.833046][T11545] SELinux: failed to load policy [ 127.008176][T11571] atomic_op ffff888105824d28 conn xmit_atomic 0000000000000000 [ 127.612624][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3248'. [ 127.621922][T11585] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3248'. [ 127.631204][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3248'. [ 127.641761][T11585] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3248'. [ 127.776215][T11613] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 127.791009][T11612] IPVS: stopping master sync thread 11613 ... [ 127.966932][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3272'. [ 127.976426][T11637] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3272'. [ 127.998129][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 127.998147][ T29] audit: type=1326 audit(1755835838.776:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 128.028607][ T29] audit: type=1326 audit(1755835838.776:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 128.053506][ T29] audit: type=1326 audit(1755835838.836:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 128.077488][ T29] audit: type=1326 audit(1755835838.836:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 128.102279][ T29] audit: type=1326 audit(1755835838.836:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 128.127358][ T29] audit: type=1326 audit(1755835838.916:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 128.152061][ T29] audit: type=1326 audit(1755835838.916:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 128.176429][ T29] audit: type=1326 audit(1755835838.916:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 128.254768][ T29] audit: type=1400 audit(1755835839.036:3829): avc: denied { relabelfrom } for pid=11660 comm="syz.2.3291" name="" dev="pipefs" ino=31376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 128.279074][ T6706] nci: nci_rsp_packet: unknown rsp opcode 0x211 [ 128.308226][ T29] audit: type=1400 audit(1755835839.086:3830): avc: denied { lock } for pid=11664 comm="syz.6.3283" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=32011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.358712][T11676] hub 9-0:1.0: USB hub found [ 128.363549][T11676] hub 9-0:1.0: 8 ports detected [ 128.583859][T11710] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 128.592815][T11710] SELinux: failed to load policy [ 129.062217][T11731] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 129.074408][T11729] IPVS: stopping master sync thread 11731 ... [ 129.135469][T11742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.144819][T11742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.339106][T11764] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 129.402777][ T6756] nci: nci_rsp_packet: unknown rsp opcode 0x211 [ 129.490681][T11785] __nla_validate_parse: 2 callbacks suppressed [ 129.490714][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3337'. [ 130.318941][ T10] IPVS: starting estimator thread 0... [ 130.334873][T11836] smc: net device bond0 applied user defined pnetid SYZ0 [ 130.347473][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3360'. [ 130.358995][T11841] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3360'. [ 130.368313][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3360'. [ 130.384142][T11836] smc: net device bond0 erased user defined pnetid SYZ0 [ 130.419123][T11834] IPVS: using max 2256 ests per chain, 112800 per kthread [ 130.574749][T11867] smc: net device bond0 applied user defined pnetid SYZ0 [ 130.590028][T11867] smc: net device bond0 erased user defined pnetid SYZ0 [ 130.590841][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 130.608584][T11871] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3378'. [ 130.618392][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 130.848032][ T10] IPVS: starting estimator thread 0... [ 130.917759][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3398'. [ 130.938933][T11910] IPVS: using max 1920 ests per chain, 96000 per kthread [ 131.011386][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 131.026804][T11937] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3407'. [ 131.134942][T11951] batadv_slave_1: entered promiscuous mode [ 131.141907][T11950] batadv_slave_1: left promiscuous mode [ 131.280846][T11977] 9pnet_fd: Insufficient options for proto=fd [ 131.443348][T11998] SELinux: failed to load policy [ 131.515502][T12012] 9pnet_fd: Insufficient options for proto=fd [ 131.620234][T12032] batadv_slave_1: entered promiscuous mode [ 131.630947][T12030] batadv_slave_1: left promiscuous mode [ 131.683976][T12031] SELinux: failed to load policy [ 131.798802][T12053] 9pnet_fd: Insufficient options for proto=fd [ 131.887511][T12062] lo speed is unknown, defaulting to 1000 [ 131.900721][T12067] batadv_slave_1: entered promiscuous mode [ 131.941793][T12066] batadv_slave_1: left promiscuous mode [ 132.034150][T12077] SELinux: failed to load policy [ 132.232485][T12100] wireguard0: entered promiscuous mode [ 132.238011][T12100] wireguard0: entered allmulticast mode [ 132.423539][T12125] SELinux: failed to load policy [ 133.088587][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 133.088606][ T29] audit: type=1400 audit(1755835843.866:4137): avc: denied { create } for pid=12220 comm="syz.2.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 133.117505][ T29] audit: type=1400 audit(1755835843.896:4138): avc: denied { write } for pid=12220 comm="syz.2.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 133.191388][T12225] lo speed is unknown, defaulting to 1000 [ 133.356033][ T29] audit: type=1326 audit(1755835844.136:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.6.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 133.380171][ T29] audit: type=1326 audit(1755835844.136:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.6.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 133.407561][ T29] audit: type=1326 audit(1755835844.186:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.6.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 133.431881][ T29] audit: type=1326 audit(1755835844.186:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.6.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 133.455608][ T29] audit: type=1326 audit(1755835844.186:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.6.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 133.479924][ T29] audit: type=1326 audit(1755835844.186:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.6.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 133.504094][ T29] audit: type=1326 audit(1755835844.186:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.6.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 133.528147][ T29] audit: type=1326 audit(1755835844.186:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.6.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 133.694271][T12260] lo speed is unknown, defaulting to 1000 [ 134.320130][T12332] 1{X: renamed from 30{X (while UP) [ 134.341092][T12332] 1{X: entered allmulticast mode [ 134.358021][T12332] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 134.377627][T12336] netlink: 'syz.5.3589': attribute type 3 has an invalid length. [ 134.415085][T12338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12338 comm=syz.2.3600 [ 134.492840][T12350] sd 0:0:1:0: device reset [ 134.599638][T12372] __nla_validate_parse: 8 callbacks suppressed [ 134.599658][T12372] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3613'. [ 134.795790][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3619'. [ 134.826820][T12401] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3621'. [ 134.864844][T12407] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3623'. [ 134.874549][T12405] tipc: Started in network mode [ 134.880210][T12405] tipc: Node identity ac14140f, cluster identity 4711 [ 134.890179][T12405] tipc: New replicast peer: 255.255.255.255 [ 134.896840][T12405] tipc: Enabled bearer , priority 10 [ 135.587081][T12417] Set syz1 is full, maxelem 65536 reached [ 135.676909][T12440] netlink: 268 bytes leftover after parsing attributes in process `syz.3.3637'. [ 135.704989][T12445] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3639'. [ 135.715175][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3639'. [ 135.748185][T12449] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3642'. [ 135.781260][T12455] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12455 comm=syz.4.3645 [ 135.865157][T12468] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3653'. [ 135.898862][ T8276] tipc: Node number set to 2886997007 [ 135.929089][T12479] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3658'. [ 135.960958][T12485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12485 comm=syz.5.3661 [ 136.611414][T12495] Set syz1 is full, maxelem 65536 reached [ 136.821095][T12530] hub 9-0:1.0: USB hub found [ 136.837204][T12530] hub 9-0:1.0: 8 ports detected [ 137.131180][T12559] blktrace: Concurrent blktraces are not allowed on sg0 [ 137.358280][T12581] IPVS: Error connecting to the multicast addr [ 137.582503][T12533] Set syz1 is full, maxelem 65536 reached [ 137.783926][T12608] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 137.783926][T12608] program syz.3.3720 not setting count and/or reply_len properly [ 138.142705][T12648] netlink: 'syz.2.3740': attribute type 21 has an invalid length. [ 138.164333][ T6706] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.174811][T12648] netlink: 'syz.2.3740': attribute type 21 has an invalid length. [ 138.188034][ T6706] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.207556][ T6706] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.217525][ T6706] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.464405][T12620] Set syz1 is full, maxelem 65536 reached [ 138.565842][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 138.565920][ T29] audit: type=1326 audit(1755835849.346:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.5.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 138.612036][ T29] audit: type=1326 audit(1755835849.366:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.5.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 138.637861][ T29] audit: type=1326 audit(1755835849.366:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.5.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 138.650659][T12681] tipc: Enabled bearer , priority 0 [ 138.662505][ T29] audit: type=1326 audit(1755835849.376:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.5.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 138.696561][ T29] audit: type=1326 audit(1755835849.376:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.5.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 138.721768][ T29] audit: type=1326 audit(1755835849.376:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.5.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bca8a14a5 code=0x7ffc0000 [ 138.757642][ T29] audit: type=1400 audit(1755835849.396:4326): avc: denied { write } for pid=12677 comm="syz.3.3753" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 138.782403][ T29] audit: type=1326 audit(1755835849.536:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.5.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 138.807998][T12681] tipc: Disabling bearer [ 138.918250][ T29] audit: type=1400 audit(1755835849.696:4328): avc: denied { read write } for pid=12696 comm="syz.5.3770" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.929787][ T10] hid_parser_main: 16 callbacks suppressed [ 138.929846][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 138.943350][ T29] audit: type=1400 audit(1755835849.696:4329): avc: denied { open } for pid=12696 comm="syz.5.3770" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.949238][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 138.988549][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 138.996336][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 139.004183][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 139.012075][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 139.020036][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 139.028410][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 139.036268][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 139.044080][ T10] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 139.065368][ T10] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 139.618658][T12727] Set syz1 is full, maxelem 65536 reached [ 139.848509][T12707] Set syz1 is full, maxelem 65536 reached [ 139.863077][T12735] sd 0:0:1:0: device reset [ 139.910380][T12740] __nla_validate_parse: 6 callbacks suppressed [ 139.910432][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3782'. [ 140.373571][T12799] binfmt_misc: register: failed to install interpreter file ./file0 [ 140.402768][T12803] lo speed is unknown, defaulting to 1000 [ 140.645914][T12829] netlink: 'syz.5.3824': attribute type 1 has an invalid length. [ 140.728438][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3829'. [ 140.770133][T12839] veth1_macvtap: left promiscuous mode [ 140.775673][T12839] macsec0: entered promiscuous mode [ 140.889681][T12854] netlink: 'syz.5.3835': attribute type 3 has an invalid length. [ 140.942338][T12861] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3838'. [ 141.260710][T12892] syzkaller0: entered promiscuous mode [ 141.266657][T12892] syzkaller0: entered allmulticast mode [ 141.285735][T12897] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 141.460847][T12927] block device autoloading is deprecated and will be removed. [ 141.575164][T12942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3876'. [ 141.585398][T12942] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3876'. [ 141.610942][T12942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3876'. [ 141.620423][T12942] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3876'. [ 141.629835][T12942] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3876'. [ 141.737861][T12951] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12951 comm=syz.4.3879 [ 141.750940][T12951] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12951 comm=syz.4.3879 [ 141.765533][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3875'. [ 141.806437][T12954] netlink: 'syz.3.3880': attribute type 13 has an invalid length. [ 141.816405][T12954] 1{X: left allmulticast mode [ 141.839718][T12954] 1{X: refused to change device tx_queue_len [ 141.849129][T12954] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 142.669125][T13072] macvtap0: refused to change device tx_queue_len [ 142.719392][T13079] syz_tun: entered allmulticast mode [ 142.755159][T13077] syz_tun: left allmulticast mode [ 142.842429][T13094] netlink: 'syz.6.3943': attribute type 4 has an invalid length. [ 142.850334][T13094] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3943'. [ 142.927743][T13116] netlink: 'gtp': attribute type 1 has an invalid length. [ 142.974709][T13124] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 142.993531][T13124] SELinux: failed to load policy [ 143.158322][T13144] smc: net device bond0 applied user defined pnetid SYZ0 [ 143.175462][T13144] smc: net device bond0 erased user defined pnetid SYZ0 [ 143.544937][T13177] netlink: 'syz.2.3978': attribute type 1 has an invalid length. [ 143.587004][T13180] block device autoloading is deprecated and will be removed. [ 143.641974][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 143.641993][ T29] audit: type=1326 audit(1755835854.426:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 143.674928][ T29] audit: type=1326 audit(1755835854.426:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 143.699630][ T29] audit: type=1326 audit(1755835854.426:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 143.727043][ T29] audit: type=1326 audit(1755835854.426:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 143.755647][ T29] audit: type=1326 audit(1755835854.426:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 143.781510][ T29] audit: type=1326 audit(1755835854.426:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 143.806466][ T29] audit: type=1326 audit(1755835854.426:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 143.831691][ T29] audit: type=1326 audit(1755835854.426:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 143.856683][ T29] audit: type=1400 audit(1755835854.426:4582): avc: denied { read } for pid=13192 comm="syz.2.3985" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.884780][ T29] audit: type=1326 audit(1755835854.566:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13188 comm="syz.6.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 144.029541][T13215] ALSA: seq fatal error: cannot create timer (-22) [ 144.039161][T13221] program syz.4.3998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.327355][T13261] sd 0:0:1:0: device reset [ 144.357592][T13267] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 144.536867][T13279] SELinux: failed to load policy [ 144.631715][T13295] block device autoloading is deprecated and will be removed. [ 144.922277][T13346] __nla_validate_parse: 5 callbacks suppressed [ 144.922298][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4059'. [ 144.938074][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4059'. [ 144.976088][T13354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4064'. [ 145.009779][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4059'. [ 145.019871][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4059'. [ 145.053971][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 145.105514][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4059'. [ 145.115242][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4059'. [ 145.245498][T13396] netlink: 'syz.4.4083': attribute type 1 has an invalid length. [ 145.253832][T13396] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4083'. [ 145.347978][T13401] team0 (unregistering): Port device team_slave_0 removed [ 145.361361][T13401] team0 (unregistering): Port device team_slave_1 removed [ 145.398589][T13410] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4090'. [ 145.743792][T13459] netlink: 'syz.4.4112': attribute type 3 has an invalid length. [ 145.754198][T13461] bond_slave_0: entered promiscuous mode [ 145.760248][T13461] bond_slave_1: entered promiscuous mode [ 145.801883][T13461] bond_slave_0: left promiscuous mode [ 145.807469][T13461] bond_slave_1: left promiscuous mode [ 145.937895][T13482] netlink: 'syz.3.4124': attribute type 3 has an invalid length. [ 146.062590][T13510] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 146.116318][T13519] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 146.177610][T13522] lo speed is unknown, defaulting to 1000 [ 146.473171][T13557] rdma_op ffff88812da25d80 conn xmit_rdma 0000000000000000 [ 146.505306][T13558] lo speed is unknown, defaulting to 1000 [ 146.638136][T13568] lo speed is unknown, defaulting to 1000 [ 146.661939][T13572] SELinux: security_context_str_to_sid () failed with errno=-22 [ 146.816320][T13587] loop5: detected capacity change from 0 to 2048 [ 146.818874][T13594] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 146.870912][T13587] loop5: p1 < > p4 [ 146.877796][T13587] loop5: p4 size 8388608 extends beyond EOD, truncated [ 146.927238][T13600] netlink: 'syz.6.4176': attribute type 10 has an invalid length. [ 146.959218][T13600] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.967814][T13600] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.995525][T13600] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.003235][T13600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.011405][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.019040][T13600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.043411][T13600] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 147.092421][T13623] loop5: detected capacity change from 0 to 1024 [ 147.111325][T13623] EXT4-fs: Ignoring removed orlov option [ 147.150313][T13623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.165262][T13629] SELinux: failed to load policy [ 147.207279][ T8446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.256812][T13640] loop5: detected capacity change from 0 to 512 [ 147.278460][ T6706] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.287645][ T6706] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.297923][ T6706] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.308024][T13640] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4193: bg 0: block 248: padding at end of block bitmap is not set [ 147.309416][ T6706] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.332774][T13640] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4193: Failed to acquire dquot type 1 [ 147.354508][T13640] EXT4-fs (loop5): 1 truncate cleaned up [ 147.363088][T13640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.394087][ T8446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.405162][ T6706] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 1 [ 147.460640][T13660] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 148.124111][T13729] lo speed is unknown, defaulting to 1000 [ 148.661641][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 148.661660][ T29] audit: type=1400 audit(148.634:4961): avc: granted { setsecparam } for pid=13776 comm="syz.5.4255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 148.712003][ T29] audit: type=1400 audit(148.684:4962): avc: denied { create } for pid=13780 comm="syz.5.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.732883][ T29] audit: type=1400 audit(148.684:4963): avc: denied { write } for pid=13780 comm="syz.5.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.773292][T13783] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 148.795797][ T29] audit: type=1326 audit(148.764:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 148.818697][ T29] audit: type=1326 audit(148.764:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 148.850068][ T29] audit: type=1326 audit(148.764:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 148.873727][ T29] audit: type=1326 audit(148.764:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 148.897973][ T29] audit: type=1326 audit(148.764:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 148.921617][ T29] audit: type=1326 audit(148.764:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 148.944386][ T29] audit: type=1326 audit(148.764:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bca86ebe9 code=0x7ffc0000 [ 148.999680][T13796] netlink: 'syz.6.4264': attribute type 30 has an invalid length. [ 149.015299][ T6756] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.024630][ T6756] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.037210][ T6756] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.046590][ T6756] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.188257][T13813] serio: Serial port ptm0 [ 149.915863][T13880] netlink: 'syz.5.4299': attribute type 13 has an invalid length. [ 149.928821][T13880] gretap0: refused to change device tx_queue_len [ 149.935601][T13880] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 150.079625][T13891] __nla_validate_parse: 19 callbacks suppressed [ 150.079647][T13891] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 150.102793][T13891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.123652][T13894] ipip0: entered promiscuous mode [ 150.234370][T13911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.241772][T13911] IPv6: NLM_F_CREATE should be set when creating new route [ 150.249100][T13911] IPv6: NLM_F_CREATE should be set when creating new route [ 150.329267][T13928] tipc: Failed to remove unknown binding: 66,1,1/0:2563846667/2563846669 [ 150.338062][T13928] tipc: Failed to remove unknown binding: 66,1,1/0:2563846667/2563846669 [ 150.414703][T13939] SELinux: failed to load policy [ 150.650487][T13963] bridge0: entered allmulticast mode [ 150.992400][T14015] program syz.6.4360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.004823][T14015] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 151.103122][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.112313][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.180817][T14053] pim6reg: entered allmulticast mode [ 151.186961][T14053] pim6reg: left allmulticast mode [ 151.566265][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4384'. [ 151.576274][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4384'. [ 151.585588][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4384'. [ 151.594851][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4384'. [ 151.604359][T14078] netlink: 'syz.6.4384': attribute type 6 has an invalid length. [ 151.712843][T14092] sctp: [Deprecated]: syz.3.4394 (pid 14092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.712843][T14092] Use struct sctp_sack_info instead [ 151.986089][T14123] bridge0: entered allmulticast mode [ 151.992508][T14122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4409'. [ 152.002945][T14123] bridge0: left allmulticast mode [ 152.283838][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4430'. [ 152.308400][T14169] bridge0: entered promiscuous mode [ 152.314816][T14169] bridge0: port 3(macvlan2) entered blocking state [ 152.321677][T14169] bridge0: port 3(macvlan2) entered disabled state [ 152.329093][T14169] macvlan2: entered allmulticast mode [ 152.334529][T14169] bridge0: entered allmulticast mode [ 152.389310][T14169] macvlan2: left allmulticast mode [ 152.395154][T14169] bridge0: left allmulticast mode [ 152.403358][T14169] bridge0: left promiscuous mode [ 152.456785][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 152.479458][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 152.491468][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 152.642030][T14215] loop5: detected capacity change from 0 to 512 [ 152.682739][T14215] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.700509][T14215] EXT4-fs (loop5): mount failed [ 152.750320][T14231] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 153.697178][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 153.697222][ T29] audit: type=1400 audit(153.664:5246): avc: denied { name_bind } for pid=14341 comm="syz.2.4507" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 153.728861][ T29] audit: type=1400 audit(153.664:5247): avc: denied { node_bind } for pid=14341 comm="syz.2.4507" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 153.771723][ T29] audit: type=1400 audit(153.744:5248): avc: denied { block_suspend } for pid=14344 comm="syz.6.4508" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.888426][ T29] audit: type=1326 audit(153.854:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.3.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 153.913182][ T29] audit: type=1326 audit(153.854:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.3.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 153.937312][ T29] audit: type=1326 audit(153.864:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.3.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 153.962240][ T29] audit: type=1326 audit(153.864:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.3.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 153.985635][ T29] audit: type=1326 audit(153.864:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.3.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 154.009025][ T29] audit: type=1326 audit(153.864:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.3.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 154.032692][ T29] audit: type=1326 audit(153.864:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.3.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454b4eebe9 code=0x7ffc0000 [ 154.163524][T14366] netlink: 'syz.6.4517': attribute type 10 has an invalid length. [ 154.174061][T14366] bond0: (slave dummy0): Releasing backup interface [ 154.184576][T14366] team0: Port device dummy0 added [ 154.200304][T14366] netlink: 'syz.6.4517': attribute type 10 has an invalid length. [ 154.211966][T14366] team0: Port device dummy0 removed [ 154.223685][T14366] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 154.239914][T14370] loop5: detected capacity change from 0 to 1024 [ 154.253650][T14370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.276964][T14370] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 154.305884][ T8446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.603147][T14393] netlink: 'syz.2.4529': attribute type 5 has an invalid length. [ 154.623985][T14398] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 154.981360][T14455] netlink: 'syz.6.4559': attribute type 83 has an invalid length. [ 155.095066][T14460] rdma_op ffff88813ac17580 conn xmit_rdma 0000000000000000 [ 155.227561][T14469] loop9: detected capacity change from 0 to 7 [ 155.233928][T14469] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.242092][T14469] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.250156][T14469] loop9: unable to read partition table [ 155.256267][T14469] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 155.256267][T14469] ) failed (rc=-5) [ 155.298634][T14474] pim6reg: entered allmulticast mode [ 155.305367][T14474] pim6reg: left allmulticast mode [ 155.719613][T14515] __nla_validate_parse: 10 callbacks suppressed [ 155.719631][T14515] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4587'. [ 155.823910][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4592'. [ 155.932801][T14537] netlink: 'syz.5.4597': attribute type 7 has an invalid length. [ 155.941755][T14537] netlink: 'syz.5.4597': attribute type 6 has an invalid length. [ 156.045471][T14549] Falling back ldisc for ptm0. [ 156.096839][T14561] hub 6-0:1.0: USB hub found [ 156.101967][T14561] hub 6-0:1.0: 8 ports detected [ 156.122762][T14564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14564 comm=syz.6.4610 [ 156.187075][ T3411] kernel write not supported for file bpf-prog (pid: 3411 comm: kworker/0:4) [ 156.277106][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4620'. [ 156.287985][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4620'. [ 156.303636][T14586] bridge0: port 3(vlan0) entered blocking state [ 156.310962][T14586] bridge0: port 3(vlan0) entered disabled state [ 156.318266][T14586] vlan0: entered allmulticast mode [ 156.323861][T14586] bridge0: entered allmulticast mode [ 156.341005][T14586] vlan0: left allmulticast mode [ 156.346099][T14586] bridge0: left allmulticast mode [ 156.776883][ T10] hid_parser_main: 6 callbacks suppressed [ 156.776902][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 156.790628][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.798326][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.805964][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.813968][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.821712][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.829363][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 156.836956][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.845161][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.852732][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.902419][T14622] binfmt_misc: register: failed to install interpreter file ./file0 [ 156.947793][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 157.022493][T14631] sd 0:0:1:0: device reset [ 157.080756][T14636] lo speed is unknown, defaulting to 1000 [ 157.172250][T14643] sd 0:0:1:0: device reset [ 157.625512][ T3411] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 157.686068][T14684] sd 0:0:1:0: device reset [ 157.798142][T14703] binfmt_misc: register: failed to install interpreter file ./file0 [ 157.942883][T14724] tipc: Started in network mode [ 157.947867][T14724] tipc: Node identity ac14140f, cluster identity 4711 [ 157.956204][T14724] tipc: New replicast peer: 255.255.255.255 [ 157.962544][T14724] tipc: Enabled bearer , priority 10 [ 157.978897][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4677'. [ 158.153479][T14739] sd 0:0:1:0: device reset [ 158.319327][T14753] hub 9-0:1.0: USB hub found [ 158.333135][T14753] hub 9-0:1.0: 8 ports detected [ 158.405577][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4694'. [ 158.439001][T14764] sd 0:0:1:0: device reset [ 158.586404][T14772] tipc: Started in network mode [ 158.592085][T14772] tipc: Node identity ac14140f, cluster identity 4711 [ 158.618989][T14772] tipc: New replicast peer: 255.255.255.255 [ 158.625033][T14772] tipc: Enabled bearer , priority 10 [ 158.810989][T14793] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 158.812216][T14788] IPVS: stopping master sync thread 14793 ... [ 158.938823][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 158.938841][ T29] audit: type=1400 audit(158.914:5499): avc: denied { getopt } for pid=14804 comm="syz.6.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.971891][ T8276] tipc: Node number set to 2886997007 [ 158.980744][ T29] audit: type=1400 audit(158.944:5500): avc: denied { mounton } for pid=14801 comm="syz.5.4716" path="/566/file0" dev="tmpfs" ino=2928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 158.986087][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4723'. [ 159.023819][ T29] audit: type=1400 audit(158.954:5501): avc: denied { append } for pid=14812 comm="syz.4.4722" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.097963][ T29] audit: type=1326 audit(159.064:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14816 comm="syz.6.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 159.121527][ T29] audit: type=1326 audit(159.064:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14816 comm="syz.6.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 159.161763][ T29] audit: type=1326 audit(159.064:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14816 comm="syz.6.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 159.187147][ T29] audit: type=1400 audit(159.064:5505): avc: denied { create } for pid=14816 comm="syz.6.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 159.209799][ T29] audit: type=1326 audit(159.064:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14816 comm="syz.6.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 159.233310][ T29] audit: type=1326 audit(159.064:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14816 comm="syz.6.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 159.252761][T14824] tipc: Started in network mode [ 159.257519][ T29] audit: type=1326 audit(159.064:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14816 comm="syz.6.4734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 159.262496][T14824] tipc: Node identity ac14140f, cluster identity 4711 [ 159.307897][T14824] tipc: New replicast peer: 255.255.255.255 [ 159.314261][T14824] tipc: Enabled bearer , priority 10 [ 159.380678][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4732'. [ 159.422331][T14847] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 159.422331][T14847] program syz.4.4737 not setting count and/or reply_len properly [ 159.639045][ T8272] tipc: Node number set to 2886997007 [ 159.663110][T14888] netlink: 'syz.6.4752': attribute type 21 has an invalid length. [ 159.671176][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4752'. [ 159.749598][T14888] netlink: 'syz.6.4752': attribute type 21 has an invalid length. [ 159.757836][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4752'. [ 159.961253][T14922] tipc: Started in network mode [ 159.966485][T14922] tipc: Node identity 3292da4e1a85, cluster identity 4711 [ 159.973961][T14922] tipc: Enabled bearer , priority 0 [ 159.997010][T14922] tipc: Disabling bearer [ 160.105794][ T10] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.428782][ T10] tipc: Node number set to 2886997007 [ 161.012964][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4803'. [ 161.056787][T14981] sd 0:0:1:0: device reset [ 162.156695][T15078] macsec0: entered promiscuous mode [ 162.179990][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4840'. [ 162.197649][T15082] netlink: 'syz.6.4843': attribute type 3 has an invalid length. [ 162.277437][T15090] 9pnet_fd: p9_fd_create_tcp (15090): problem connecting socket to 127.0.0.1 [ 162.421956][T15111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4858'. [ 162.431263][T15111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4858'. [ 162.499603][T15117] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 162.535089][T15120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4864'. [ 162.544547][T15120] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4864'. [ 162.553702][T15120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4864'. [ 162.611821][T15120] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4864'. [ 162.744408][T15153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4878'. [ 162.754102][T15153] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4878'. [ 162.815667][T15164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15164 comm=syz.3.4883 [ 162.828698][T15164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15164 comm=syz.3.4883 [ 163.771936][T15225] netlink: 'syz.3.4908': attribute type 3 has an invalid length. [ 164.054986][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 164.055003][ T29] audit: type=1400 audit(164.024:5739): avc: denied { read } for pid=15244 comm="syz.4.4918" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.085792][ T29] audit: type=1400 audit(164.024:5740): avc: denied { open } for pid=15244 comm="syz.4.4918" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.240390][ T29] audit: type=1400 audit(164.214:5741): avc: denied { create } for pid=15250 comm="syz.6.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.296319][ T29] audit: type=1400 audit(164.264:5742): avc: denied { setopt } for pid=15250 comm="syz.6.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.334461][ T29] audit: type=1326 audit(164.304:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 164.358403][ T29] audit: type=1326 audit(164.304:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 164.381583][ T29] audit: type=1326 audit(164.304:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 164.405282][ T29] audit: type=1326 audit(164.304:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 164.429015][ T29] audit: type=1326 audit(164.304:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.6.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 164.474767][ T29] audit: type=1400 audit(164.444:5748): avc: denied { watch_reads } for pid=15259 comm="syz.6.4923" path="/523" dev="tmpfs" ino=2698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.596641][T15279] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.708141][T15291] macvtap0: refused to change device tx_queue_len [ 164.836026][T15307] netlink: 'syz.2.4947': attribute type 10 has an invalid length. [ 164.850096][T15307] team0: Port device dummy0 added [ 164.856256][T15310] syz_tun: entered allmulticast mode [ 164.865447][T15307] netlink: 'syz.2.4947': attribute type 10 has an invalid length. [ 164.866638][T15309] syz_tun: left allmulticast mode [ 164.888871][T15307] team0: Port device dummy0 removed [ 164.911243][T15307] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.045611][T15337] netlink: 'gtp': attribute type 1 has an invalid length. [ 165.100585][T15345] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 165.114961][T15345] SELinux: failed to load policy [ 165.142948][T15355] smc: net device bond0 applied user defined pnetid SYZ0 [ 165.150875][T15355] smc: net device bond0 erased user defined pnetid SYZ0 [ 165.311485][T15383] netlink: 'syz.5.4981': attribute type 1 has an invalid length. [ 165.703966][T15428] ALSA: seq fatal error: cannot create timer (-22) [ 165.716190][T15430] program syz.2.5001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.031283][T15464] sd 0:0:1:0: device reset [ 166.112815][T15474] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 166.265524][T15486] SELinux: failed to load policy [ 166.516949][T15515] __nla_validate_parse: 10 callbacks suppressed [ 166.517018][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5039'. [ 166.606848][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5042'. [ 166.616869][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5042'. [ 166.697575][T15533] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5059'. [ 166.706652][T15533] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5059'. [ 166.740131][T15541] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5051'. [ 166.740212][T15533] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5059'. [ 166.740238][T15533] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5059'. [ 166.811072][T15533] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5059'. [ 166.820274][T15533] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5059'. [ 166.962151][T15580] netlink: 'syz.6.5070': attribute type 1 has an invalid length. [ 167.070332][T15582] team0 (unregistering): Port device team_slave_0 removed [ 167.091555][T15582] team0 (unregistering): Port device team_slave_1 removed [ 167.258873][T15615] netlink: 'syz.2.5087': attribute type 3 has an invalid length. [ 167.415904][T15641] netlink: 'syz.5.5098': attribute type 3 has an invalid length. [ 167.698490][T15692] rdma_op ffff88810db66180 conn xmit_rdma 0000000000000000 [ 167.714890][T15689] lo speed is unknown, defaulting to 1000 [ 168.009483][T15708] SELinux: security_context_str_to_sid () failed with errno=-22 [ 168.031752][T15706] lo speed is unknown, defaulting to 1000 [ 168.162201][T15728] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 168.184284][T15720] lo speed is unknown, defaulting to 1000 [ 168.456452][T15751] netlink: 'syz.3.5147': attribute type 10 has an invalid length. [ 168.619271][T15758] SELinux: failed to load policy [ 168.815686][T15792] serio: Serial port ptm0 [ 168.934497][T15805] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 169.067198][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 169.067217][ T29] audit: type=1400 audit(169.036:6133): avc: denied { map_create } for pid=15826 comm="syz.5.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.110388][ T29] audit: type=1400 audit(169.036:6134): avc: denied { map_read map_write } for pid=15826 comm="syz.5.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.130275][ T29] audit: type=1400 audit(169.036:6135): avc: denied { prog_load } for pid=15826 comm="syz.5.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.149380][ T29] audit: type=1400 audit(169.036:6136): avc: denied { perfmon } for pid=15826 comm="syz.5.5183" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.170649][ T29] audit: type=1400 audit(169.046:6137): avc: denied { create } for pid=15826 comm="syz.5.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.192767][ T29] audit: type=1400 audit(169.046:6138): avc: denied { write } for pid=15826 comm="syz.5.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.213100][ T29] audit: type=1400 audit(169.046:6139): avc: denied { read } for pid=15826 comm="syz.5.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.234224][ T29] audit: type=1400 audit(169.066:6140): avc: denied { create } for pid=15828 comm="syz.5.5184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.256139][ T29] audit: type=1400 audit(169.066:6141): avc: denied { write } for pid=15828 comm="syz.5.5184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.286115][ T29] audit: type=1400 audit(169.106:6142): avc: denied { allowed } for pid=15830 comm="syz.2.5185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.596817][T15868] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 169.713111][T15887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.720657][T15887] IPv6: NLM_F_CREATE should be set when creating new route [ 169.728035][T15887] IPv6: NLM_F_CREATE should be set when creating new route [ 169.736358][T15882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.748372][T15886] ipip0: entered promiscuous mode [ 169.821429][T15891] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2446835547/2446835549 [ 169.830925][T15891] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2446835547/2446835549 [ 169.952837][T15907] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.960324][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.989003][T15907] bridge0: entered allmulticast mode [ 170.002427][T15907] bridge_slave_1: left allmulticast mode [ 170.008147][T15907] bridge_slave_1: left promiscuous mode [ 170.014402][T15907] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.041396][T15907] bridge_slave_0: left allmulticast mode [ 170.047245][T15907] bridge_slave_0: left promiscuous mode [ 170.053177][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.064234][T15907] bond0: (slave bridge0): Releasing backup interface [ 170.252685][T15921] program syz.3.5224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.265419][T15921] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 171.544455][T16087] __nla_validate_parse: 18 callbacks suppressed [ 171.544473][T16087] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5296'. [ 171.669570][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5304'. [ 171.681115][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5304'. [ 171.784368][T16121] netlink: 'syz.2.5312': attribute type 83 has an invalid length. [ 171.968035][T16123] rdma_op ffff888111cdc580 conn xmit_rdma 0000000000000000 [ 171.999167][T16129] loop9: detected capacity change from 0 to 7 [ 172.005926][T16129] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.014617][T16129] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.022626][T16129] loop9: unable to read partition table [ 172.028604][T16129] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 172.028604][T16129] ) failed (rc=-5) [ 172.260176][T16150] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5326'. [ 172.287003][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5328'. [ 172.361525][T16167] netlink: 'syz.4.5334': attribute type 7 has an invalid length. [ 172.369396][T16167] netlink: 'syz.4.5334': attribute type 6 has an invalid length. [ 172.407272][T16168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16168 comm=syz.5.5336 [ 172.564568][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5344'. [ 172.573807][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5344'. [ 172.598506][T16187] bridge0: port 3(vlan2) entered blocking state [ 172.605015][T16187] bridge0: port 3(vlan2) entered disabled state [ 172.613104][T16187] vlan2: entered allmulticast mode [ 172.618355][T16187] bridge0: entered allmulticast mode [ 172.630512][T16187] vlan2: left allmulticast mode [ 172.635498][T16187] bridge0: left allmulticast mode [ 172.666695][T16194] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5348'. [ 172.667473][T16190] netlink: 'syz.3.5347': attribute type 3 has an invalid length. [ 172.684968][T16194] 0{X: renamed from gretap0 (while UP) [ 172.709929][T16194] 0{X: entered allmulticast mode [ 172.719402][T16194] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 172.777974][T16204] Falling back ldisc for ptm0. [ 172.852309][T16215] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 172.864614][T16213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5356'. [ 173.604416][T16268] netlink: 'syz.3.5382': attribute type 10 has an invalid length. [ 173.614874][T16268] team0: Port device dummy0 added [ 173.626378][T16268] netlink: 'syz.3.5382': attribute type 10 has an invalid length. [ 173.636768][T16268] team0: Port device dummy0 removed [ 174.018162][T16293] hub 9-0:1.0: USB hub found [ 174.022998][T16293] hub 9-0:1.0: 8 ports detected [ 174.124482][T16310] IPVS: Error connecting to the multicast addr [ 174.584401][T16317] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5414'. [ 174.593806][T16317] 0{X: renamed from gretap0 (while UP) [ 174.605146][T16317] 0{X: entered allmulticast mode [ 174.615849][T16317] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 174.618329][T16323] hub 9-0:1.0: USB hub found [ 174.646680][T16323] hub 9-0:1.0: 8 ports detected [ 174.695695][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 174.695711][ T29] audit: type=1400 audit(174.666:6484): avc: denied { relabelfrom } for pid=16328 comm="syz.6.5409" name="NETLINK" dev="sockfs" ino=47397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 174.718076][T16336] hub 9-0:1.0: USB hub found [ 174.725931][ T29] audit: type=1400 audit(174.666:6485): avc: denied { relabelto } for pid=16328 comm="syz.6.5409" name="NETLINK" dev="sockfs" ino=47397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 174.731545][T16334] netlink: 'syz.2.5412': attribute type 3 has an invalid length. [ 174.776668][T16336] hub 9-0:1.0: 8 ports detected [ 174.824094][ T29] audit: type=1326 audit(174.786:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.6.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 174.824810][T16342] IPVS: Error connecting to the multicast addr [ 174.847414][ T29] audit: type=1326 audit(174.786:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.6.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 174.877406][ T29] audit: type=1326 audit(174.786:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.6.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 174.900967][ T29] audit: type=1326 audit(174.786:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.6.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 174.924261][ T29] audit: type=1326 audit(174.786:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.6.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 174.947320][ T29] audit: type=1326 audit(174.786:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.6.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 174.970621][ T29] audit: type=1326 audit(174.786:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.6.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 174.994516][ T29] audit: type=1326 audit(174.786:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.6.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f9a585aebe9 code=0x7ffc0000 [ 175.040750][T16354] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 175.040750][T16354] program syz.5.5419 not setting count and/or reply_len properly [ 175.093572][T16358] 0{X: renamed from gretap0 (while UP) [ 175.101622][T16358] 0{X: entered allmulticast mode [ 175.108550][T16358] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 175.202996][T16368] netlink: 'syz.4.5428': attribute type 3 has an invalid length. [ 175.264758][T16380] hub 9-0:1.0: USB hub found [ 175.273984][T16380] hub 9-0:1.0: 8 ports detected [ 175.283410][T16385] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 175.294993][T16384] IPVS: stopping master sync thread 16385 ... [ 175.354276][T16396] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 175.354276][T16396] program syz.2.5438 not setting count and/or reply_len properly [ 176.110331][T16411] netlink: 'syz.6.5445': attribute type 3 has an invalid length. [ 176.168113][T16422] hub 9-0:1.0: USB hub found [ 176.173775][T16422] hub 9-0:1.0: 8 ports detected [ 176.251225][T16433] hub 9-0:1.0: USB hub found [ 176.260610][T16433] hub 9-0:1.0: 8 ports detected [ 176.463904][T16463] sd 0:0:1:0: device reset [ 176.534479][T16476] hub 9-0:1.0: USB hub found [ 176.541650][T16476] hub 9-0:1.0: 8 ports detected [ 176.725777][T16504] sd 0:0:1:0: device reset [ 176.916145][T16528] block device autoloading is deprecated and will be removed. [ 177.089360][T16555] lo speed is unknown, defaulting to 1000 [ 177.107765][T16550] loop4: detected capacity change from 0 to 8192 [ 177.152595][T16550] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 177.162019][T16550] FAT-fs (loop4): Filesystem has been set read-only [ 177.179403][T16550] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 177.209429][T16550] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 177.230380][T16550] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 177.240463][T16559] lo speed is unknown, defaulting to 1000 [ 177.398840][T16571] __nla_validate_parse: 2 callbacks suppressed [ 177.398857][T16571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5524'. [ 177.548294][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5529'. [ 177.599244][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5529'. [ 177.687523][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5534'. [ 177.708329][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5534'. [ 177.758670][T16605] netlink: 'syz.2.5540': attribute type 1 has an invalid length. [ 177.793931][T16613] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 177.841515][T16620] vlan2: entered allmulticast mode [ 178.107216][T16660] loop4: detected capacity change from 0 to 512 [ 178.134507][T16660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.205217][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.789319][T16708] loop4: detected capacity change from 0 to 1024 [ 178.813018][T16708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.852468][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.882367][T16714] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 178.997948][T16670] syz.6.5567 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 179.013646][T16670] CPU: 1 UID: 0 PID: 16670 Comm: syz.6.5567 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.013788][T16670] Tainted: [W]=WARN [ 179.013797][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.013818][T16670] Call Trace: [ 179.013825][T16670] [ 179.013834][T16670] __dump_stack+0x1d/0x30 [ 179.013862][T16670] dump_stack_lvl+0xe8/0x140 [ 179.013917][T16670] dump_stack+0x15/0x1b [ 179.013939][T16670] dump_header+0x81/0x220 [ 179.014061][T16670] oom_kill_process+0x342/0x400 [ 179.014107][T16670] out_of_memory+0x979/0xb80 [ 179.014157][T16670] try_charge_memcg+0x5e6/0x9e0 [ 179.014294][T16670] obj_cgroup_charge_pages+0xa6/0x150 [ 179.014335][T16670] __memcg_kmem_charge_page+0x9f/0x170 [ 179.014427][T16670] __alloc_frozen_pages_noprof+0x188/0x360 [ 179.014499][T16670] alloc_pages_mpol+0xb3/0x250 [ 179.014541][T16670] alloc_pages_noprof+0x90/0x130 [ 179.014627][T16670] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 179.014684][T16670] __kvmalloc_node_noprof+0x30f/0x4e0 [ 179.014789][T16670] ? ip_set_alloc+0x1f/0x30 [ 179.014827][T16670] ? ip_set_alloc+0x1f/0x30 [ 179.014863][T16670] ? __kmalloc_cache_noprof+0x189/0x320 [ 179.014986][T16670] ip_set_alloc+0x1f/0x30 [ 179.015020][T16670] hash_netiface_create+0x282/0x740 [ 179.015056][T16670] ? __pfx_hash_netiface_create+0x10/0x10 [ 179.015170][T16670] ip_set_create+0x3cc/0x960 [ 179.015201][T16670] ? __nla_parse+0x40/0x60 [ 179.015264][T16670] nfnetlink_rcv_msg+0x4c6/0x590 [ 179.015395][T16670] netlink_rcv_skb+0x120/0x220 [ 179.015415][T16670] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 179.015454][T16670] nfnetlink_rcv+0x16b/0x1690 [ 179.015486][T16670] ? nlmon_xmit+0x4f/0x60 [ 179.015562][T16670] ? consume_skb+0x49/0x150 [ 179.015698][T16670] ? nlmon_xmit+0x4f/0x60 [ 179.015776][T16670] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 179.015812][T16670] ? __dev_queue_xmit+0x1200/0x2000 [ 179.015836][T16670] ? __dev_queue_xmit+0x182/0x2000 [ 179.015901][T16670] ? ref_tracker_free+0x37d/0x3e0 [ 179.015933][T16670] ? __netlink_deliver_tap+0x4dc/0x500 [ 179.015961][T16670] netlink_unicast+0x5c0/0x690 [ 179.016003][T16670] netlink_sendmsg+0x58b/0x6b0 [ 179.016045][T16670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.016070][T16670] __sock_sendmsg+0x145/0x180 [ 179.016101][T16670] ____sys_sendmsg+0x31e/0x4e0 [ 179.016129][T16670] ___sys_sendmsg+0x17b/0x1d0 [ 179.016223][T16670] __x64_sys_sendmsg+0xd4/0x160 [ 179.016313][T16670] x64_sys_call+0x191e/0x2ff0 [ 179.016338][T16670] do_syscall_64+0xd2/0x200 [ 179.016368][T16670] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.016395][T16670] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.016445][T16670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.016468][T16670] RIP: 0033:0x7f9a585aebe9 [ 179.016486][T16670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.016507][T16670] RSP: 002b:00007f9a5700f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.016559][T16670] RAX: ffffffffffffffda RBX: 00007f9a587d5fa0 RCX: 00007f9a585aebe9 [ 179.016572][T16670] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 179.016584][T16670] RBP: 00007f9a58631e19 R08: 0000000000000000 R09: 0000000000000000 [ 179.016597][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.016610][T16670] R13: 00007f9a587d6038 R14: 00007f9a587d5fa0 R15: 00007ffcea92e208 [ 179.016631][T16670] [ 179.016725][T16670] memory: usage 307200kB, limit 307200kB, failcnt 202 [ 179.273594][T16734] tipc: New replicast peer: 100.1.1.1 [ 179.274308][T16670] memory+swap: usage 311092kB, limit 9007199254740988kB, failcnt 0 [ 179.279609][T16734] tipc: Enabled bearer , priority 10 [ 179.286289][T16670] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 179.286313][T16670] Memory cgroup stats for /syz6: [ 179.417208][T16670] cache 4096 [ 179.425520][T16670] rss 4096 [ 179.428653][T16670] shmem 0 [ 179.431725][T16670] mapped_file 0 [ 179.435377][T16670] dirty 0 [ 179.438782][T16670] writeback 0 [ 179.442085][T16670] workingset_refault_anon 1321 [ 179.447034][T16670] workingset_refault_file 0 [ 179.452182][T16670] swap 3985408 [ 179.455915][T16670] swapcached 28672 [ 179.460193][T16670] pgpgin 84798 [ 179.463836][T16670] pgpgout 84790 [ 179.467481][T16670] pgfault 120052 [ 179.471263][T16670] pgmajfault 186 [ 179.475077][T16670] inactive_anon 28672 [ 179.479174][T16670] active_anon 0 [ 179.483241][T16670] inactive_file 0 [ 179.487062][T16670] active_file 4096 [ 179.491443][T16670] unevictable 0 [ 179.495225][T16670] hierarchical_memory_limit 314572800 [ 179.500804][T16670] hierarchical_memsw_limit 9223372036854771712 [ 179.508106][T16670] total_cache 4096 [ 179.512192][T16670] total_rss 4096 [ 179.516017][T16670] total_shmem 0 [ 179.519564][T16670] total_mapped_file 0 [ 179.523722][T16670] total_dirty 0 [ 179.527346][T16670] total_writeback 0 [ 179.532067][T16670] total_workingset_refault_anon 1321 [ 179.537669][T16670] total_workingset_refault_file 0 [ 179.543283][T16670] total_swap 3985408 [ 179.548405][T16670] total_swapcached 28672 [ 179.553502][T16670] total_pgpgin 84798 [ 179.558036][T16670] total_pgpgout 84790 [ 179.562731][T16670] total_pgfault 120052 [ 179.566919][T16670] total_pgmajfault 186 [ 179.571035][T16670] total_inactive_anon 28672 [ 179.575745][T16670] total_active_anon 0 [ 179.579797][T16670] total_inactive_file 0 [ 179.584052][T16670] total_active_file 4096 [ 179.588324][T16670] total_unevictable 0 [ 179.592522][T16670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5567,pid=16669,uid=0 [ 179.609206][T16670] Memory cgroup out of memory: Killed process 16669 (syz.6.5567) total-vm:93636kB, anon-rss:952kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 179.703313][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 179.703332][ T29] audit: type=1400 audit(179.676:6777): avc: denied { create } for pid=16739 comm="syz.2.5598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.870817][ T29] audit: type=1400 audit(179.846:6778): avc: denied { map } for pid=16759 comm="syz.5.5608" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.894771][ T29] audit: type=1400 audit(179.846:6779): avc: denied { read write } for pid=16759 comm="syz.5.5608" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.978079][ T29] audit: type=1400 audit(179.846:6780): avc: denied { execute } for pid=16759 comm="syz.5.5608" path="/714/cpuset.memory_pressure" dev="tmpfs" ino=3685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.002587][ T29] audit: type=1400 audit(179.906:6781): avc: denied { setopt } for pid=16760 comm="syz.4.5607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.022098][ T29] audit: type=1400 audit(179.936:6782): avc: denied { create } for pid=16767 comm="syz.4.5611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.041612][ T29] audit: type=1400 audit(179.936:6783): avc: denied { setopt } for pid=16767 comm="syz.4.5611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.059319][T16747] lo speed is unknown, defaulting to 1000 [ 180.062258][ T29] audit: type=1400 audit(179.936:6784): avc: denied { write } for pid=16767 comm="syz.4.5611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.136794][T16670] syz.6.5567 (16670) used greatest stack depth: 7304 bytes left [ 180.190179][ T29] audit: type=1400 audit(180.166:6785): avc: denied { create } for pid=16785 comm="syz.6.5618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.193676][T16787] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 180.211415][ T29] audit: type=1400 audit(180.166:6786): avc: denied { setopt } for pid=16785 comm="syz.6.5618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.240564][T16786] IPVS: stopping master sync thread 16787 ... [ 180.290095][T16794] block device autoloading is deprecated and will be removed. [ 180.480366][T16811] netlink: 288 bytes leftover after parsing attributes in process `syz.3.5628'. [ 180.741068][T16844] vhci_hcd: invalid port number 96 [ 180.746377][T16844] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 180.893274][T16869] SELinux: failed to load policy [ 180.973721][T16881] IPv6: Can't replace route, no match found [ 181.300058][T16914] loop4: detected capacity change from 0 to 512 [ 181.331063][T16901] ================================================================== [ 181.339498][T16901] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 181.346922][T16901] [ 181.349277][T16901] read-write to 0xffff888102370388 of 8 bytes by interrupt on cpu 1: [ 181.357558][T16901] rtc_pie_update_irq+0x93/0xf0 [ 181.362631][T16901] __hrtimer_run_queues+0x20c/0x5a0 [ 181.367860][T16901] hrtimer_interrupt+0x21a/0x460 [ 181.373467][T16901] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 181.379580][T16901] sysvec_apic_timer_interrupt+0x6f/0x80 [ 181.385242][T16901] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.391252][T16901] kcsan_setup_watchpoint+0x415/0x430 [ 181.396660][T16901] link_path_walk+0x793/0x900 [ 181.401373][T16901] __filename_parentat+0x15c/0x3f0 [ 181.406528][T16901] filename_create+0x78/0x230 [ 181.411361][T16901] do_symlinkat+0x65/0x3c0 [ 181.415889][T16901] __x64_sys_symlinkat+0x5a/0x70 [ 181.420869][T16901] x64_sys_call+0x293d/0x2ff0 [ 181.425571][T16901] do_syscall_64+0xd2/0x200 [ 181.430181][T16901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.436175][T16901] [ 181.438509][T16901] read to 0xffff888102370388 of 8 bytes by task 16901 on cpu 0: [ 181.446438][T16901] rtc_dev_poll+0x78/0xb0 [ 181.450890][T16901] __io_read+0x2e4/0xc20 [ 181.455410][T16901] io_read+0x1c/0x60 [ 181.459431][T16901] __io_issue_sqe+0xfe/0x2e0 [ 181.464129][T16901] io_issue_sqe+0x53/0x970 [ 181.468562][T16901] io_req_task_submit+0x6b/0xd0 [ 181.473576][T16901] io_handle_tw_list+0x190/0x1c0 [ 181.478547][T16901] tctx_task_work_run+0x6d/0x1a0 [ 181.483599][T16901] tctx_task_work+0x3f/0x80 [ 181.488211][T16901] task_work_run+0x131/0x1a0 [ 181.492823][T16901] get_signal+0xe13/0xf70 [ 181.497192][T16901] arch_do_signal_or_restart+0x96/0x480 [ 181.502760][T16901] exit_to_user_mode_loop+0x7a/0x100 [ 181.508237][T16901] do_syscall_64+0x1d6/0x200 [ 181.512856][T16901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.518771][T16901] [ 181.521592][T16901] value changed: 0x000000000000c5c0 -> 0x000000000000c6c0 [ 181.529231][T16901] [ 181.531568][T16901] Reported by Kernel Concurrency Sanitizer on: [ 181.537735][T16901] CPU: 0 UID: 0 PID: 16901 Comm: syz.5.5669 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.549383][T16901] Tainted: [W]=WARN [ 181.553298][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.563543][T16901] ================================================================== [ 181.588538][T16914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.725806][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.