last executing test programs: 4m19.483801147s ago: executing program 1 (id=389): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m19.443804707s ago: executing program 1 (id=392): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000100)=0xe1) 4m19.410854288s ago: executing program 1 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',dont_measure,defcontext=']) 4m19.22431212s ago: executing program 1 (id=396): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31005, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2205080, 0x0) 4m19.089322913s ago: executing program 1 (id=399): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xfffffff5, 0xb) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f00000001c0)) 4m18.744061998s ago: executing program 1 (id=418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 4m18.706241378s ago: executing program 32 (id=418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 3m54.546468117s ago: executing program 4 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000440)={@local, 0x5a, r1}) 3m54.492424048s ago: executing program 4 (id=1269): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f0000000340), 0x4d}}], 0x30}, 0x0) 3m54.431637049s ago: executing program 4 (id=1272): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r1, &(0x7f0000000080)='./mnt\x00', r1, &(0x7f0000000100)='./mnt\x00') 3m54.38681055s ago: executing program 4 (id=1275): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 3m54.35106288s ago: executing program 4 (id=1278): setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) 3m54.221878542s ago: executing program 4 (id=1280): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 3m54.218874762s ago: executing program 33 (id=1280): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 1m11.292635402s ago: executing program 6 (id=8788): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0xfffffffffffffff9}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[], 0x120) sendfile(r1, r0, 0x0, 0x7ffff03f) 1m10.968248467s ago: executing program 6 (id=8802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, 0x0, 0x0, 0x7c00, 0x0, 0x3) 1m10.885308978s ago: executing program 6 (id=8805): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 1m10.005616621s ago: executing program 6 (id=8834): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m9.980444051s ago: executing program 6 (id=8836): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r3, 0x0, 0x2}, 0x18) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 1m9.456911409s ago: executing program 6 (id=8855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 1m9.38737257s ago: executing program 34 (id=8855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 1.019872175s ago: executing program 3 (id=11946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 987.203246ms ago: executing program 3 (id=11947): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c8}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) 986.668106ms ago: executing program 3 (id=11949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(r0) 928.130747ms ago: executing program 3 (id=11953): r0 = syz_io_uring_setup(0x3e, &(0x7f0000000500)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002123}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) 436.393354ms ago: executing program 0 (id=11973): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r1) 364.535605ms ago: executing program 0 (id=11977): r0 = syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 363.986805ms ago: executing program 2 (id=11978): io_uring_setup(0x668c, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lstat(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) dup2(r1, r1) 321.244006ms ago: executing program 0 (id=11981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x2}, 0x43) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0xfd, 0x4}) 320.954976ms ago: executing program 0 (id=11982): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 317.934516ms ago: executing program 2 (id=11984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 292.695406ms ago: executing program 0 (id=11985): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 285.430187ms ago: executing program 7 (id=11986): syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) 270.853697ms ago: executing program 2 (id=11987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x8020, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffffb9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 263.812327ms ago: executing program 5 (id=11988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(r0) 245.222797ms ago: executing program 7 (id=11989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r1) 235.179907ms ago: executing program 0 (id=11999): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) munmap(&(0x7f00009ad000/0x4000)=nil, 0x4000) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x4000, 0x0) 224.061488ms ago: executing program 7 (id=11990): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 208.493268ms ago: executing program 7 (id=11991): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0) 188.366178ms ago: executing program 7 (id=11992): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) 187.834668ms ago: executing program 5 (id=12003): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0) 159.765918ms ago: executing program 2 (id=11993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x2}, 0x43) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0xfd, 0x4}) 155.497298ms ago: executing program 5 (id=11994): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x68, r2, 0x213, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}}, 0x68}}, 0x4048080) 124.184469ms ago: executing program 2 (id=11995): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 101.301009ms ago: executing program 5 (id=11996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r2, &(0x7f00000000c0), &(0x7f0000000780)=@udp6=r3}, 0x20) close(r3) 82.062619ms ago: executing program 2 (id=12008): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @loopback={0x5f2d, 0x3a}, 0x33a}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 81.58649ms ago: executing program 5 (id=11997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 28.59158ms ago: executing program 3 (id=11998): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) unshare(0x22020400) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x36) fcntl$notify(r0, 0x402, 0x2) 28.01311ms ago: executing program 7 (id=12000): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 25.2278ms ago: executing program 5 (id=12001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r1) 0s ago: executing program 3 (id=12002): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfffe}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80) kernel console output (not intermixed with test programs): 35: inode #15: comm syz.5.8225: corrupted in-inode xattr: e_value size too large [ 223.161318][T22653] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.8225: couldn't read orphan inode 15 (err -117) [ 223.217510][T22675] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 223.283310][T22692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8241'. [ 223.312770][T22681] loop6: detected capacity change from 0 to 512 [ 223.334589][T22681] EXT4-fs: Ignoring removed orlov option [ 223.362570][T22681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.397711][T22681] EXT4-fs (loop6): orphan cleanup on readonly fs [ 223.413086][T22705] loop5: detected capacity change from 0 to 8192 [ 223.422159][T22681] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8239: bg 0: block 248: padding at end of block bitmap is not set [ 223.439013][T22715] futex_wake_op: syz.2.8253 tries to shift op by -1; fix this program [ 223.439827][T22681] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8239: Failed to acquire dquot type 1 [ 223.453679][T22717] hub 9-0:1.0: USB hub found [ 223.460159][T22681] EXT4-fs (loop6): 1 truncate cleaned up [ 223.470222][T22705] syz.5.8247: attempt to access beyond end of device [ 223.470222][T22705] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 223.483826][T22705] Buffer I/O error on dev loop5, logical block 57847, async page read [ 223.495933][T22717] hub 9-0:1.0: 8 ports detected [ 223.708362][T22758] futex_wake_op: syz.3.8267 tries to shift op by -1; fix this program [ 223.772386][T22765] SELinux: Context '8 is not valid (left unmapped). [ 223.843837][T22780] loop5: detected capacity change from 0 to 1024 [ 223.857111][T22780] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 223.868232][T22780] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 223.885254][T22780] JBD2: no valid journal superblock found [ 223.891087][T22780] EXT4-fs (loop5): Could not load journal inode [ 223.907806][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8277'. [ 224.064810][T22809] 9p: Unknown access argument 18446744073709551615: -34 [ 224.109657][T22815] bond4: entered promiscuous mode [ 224.114759][T22815] bond4: entered allmulticast mode [ 224.121143][T22815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.137247][T22815] bond4 (unregistering): Released all slaves [ 224.177000][T22890] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 224.211028][T22892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22892 comm=syz.3.8296 [ 224.323574][T22907] loop2: detected capacity change from 0 to 1024 [ 224.543049][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 224.543067][ T29] audit: type=1326 audit(1752491606.565:11705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22925 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 224.596072][ T29] audit: type=1326 audit(1752491606.595:11706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22925 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 224.620327][ T29] audit: type=1326 audit(1752491606.595:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22925 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 224.644023][ T29] audit: type=1326 audit(1752491606.605:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22925 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 224.668529][ T29] audit: type=1326 audit(1752491606.605:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22925 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 224.692851][ T29] audit: type=1326 audit(1752491606.605:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22925 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 224.717330][ T29] audit: type=1326 audit(1752491606.605:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22925 comm="syz.2.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 224.810116][ T29] audit: type=1400 audit(1752491606.785:11712): avc: denied { lock } for pid=22931 comm="syz.6.8311" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=63981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.880103][ T29] audit: type=1326 audit(1752491606.905:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22944 comm="syz.2.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 224.947923][ T29] audit: type=1326 audit(1752491606.935:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22944 comm="syz.2.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f9ce929 code=0x7ffc0000 [ 225.396862][T22985] loop5: detected capacity change from 0 to 1024 [ 225.536731][T15623] kernel write not supported for file bpf-prog (pid: 15623 comm: kworker/1:10) [ 225.718231][T23024] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 226.128653][T23070] tipc: New replicast peer: 255.255.255.255 [ 226.134891][T23070] tipc: Enabled bearer , priority 10 [ 226.212721][T23073] loop5: detected capacity change from 0 to 2048 [ 226.276652][T23073] Alternate GPT is invalid, using primary GPT. [ 226.283145][T23073] loop5: p2 p3 p7 [ 226.697637][T23151] syzkaller1: entered promiscuous mode [ 226.703333][T23151] syzkaller1: entered allmulticast mode [ 227.146510][T23219] loop2: detected capacity change from 0 to 164 [ 227.168571][T23219] syz.2.8409: attempt to access beyond end of device [ 227.168571][T23219] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 227.197874][T23219] syz.2.8409: attempt to access beyond end of device [ 227.197874][T23219] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 227.390134][T23256] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8422'. [ 227.413487][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8410'. [ 227.427398][T23265] loop6: detected capacity change from 0 to 512 [ 227.433433][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8410'. [ 227.449838][T23265] EXT4-fs (loop6): orphan cleanup on readonly fs [ 227.460956][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8410'. [ 227.470579][T23265] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8425: Failed to acquire dquot type 1 [ 227.472232][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8410'. [ 227.494917][T23265] EXT4-fs (loop6): 1 truncate cleaned up [ 227.503229][T23265] EXT4-fs mount: 18 callbacks suppressed [ 227.503250][T23265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.590384][ T6647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.709462][T23305] loop0: detected capacity change from 0 to 128 [ 227.726447][T23305] EXT4-fs: Ignoring removed nobh option [ 227.746772][T23305] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.772426][T23316] batadv_slave_0: entered promiscuous mode [ 227.779298][T23316] batadv_slave_0: left promiscuous mode [ 227.780118][T23305] ext4 filesystem being mounted at /1699/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.799916][T23319] loop5: detected capacity change from 0 to 164 [ 227.810685][T23319] syz.5.8445: attempt to access beyond end of device [ 227.810685][T23319] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 227.842600][T23319] syz.5.8445: attempt to access beyond end of device [ 227.842600][T23319] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 228.038402][T23341] loop2: detected capacity change from 0 to 2048 [ 228.055752][T23341] EXT4-fs (loop2): failed to initialize system zone (-117) [ 228.063179][T23341] EXT4-fs (loop2): mount failed [ 228.069722][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.176860][T23369] 9pnet: p9_errstr2errno: server reported unknown error pA; [ 228.605217][T23396] netlink: 'syz.5.8467': attribute type 13 has an invalid length. [ 228.740171][T23412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8473'. [ 228.996893][T23465] loop5: detected capacity change from 0 to 128 [ 229.010232][T23465] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.026478][T23465] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.079107][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.086628][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.106250][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.114448][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.122035][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.129526][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.138052][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.138622][T23489] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.8503'. [ 229.145738][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.163312][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.171451][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.179635][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.187859][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.197095][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.204667][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.212245][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.220593][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.228304][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.236518][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.244031][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.251653][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.259761][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.267452][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.275596][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.283048][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.290467][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.298793][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.306480][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 229.315606][ T36] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 229.374086][T23514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8508'. [ 229.383193][T23514] netlink: 196 bytes leftover after parsing attributes in process `syz.2.8508'. [ 229.393627][T23514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8508'. [ 229.405446][T23514] netlink: 196 bytes leftover after parsing attributes in process `syz.2.8508'. [ 229.454307][T23528] 9pnet: p9_errstr2errno: server reported unknown error pA; [ 229.486511][T23532] openvswitch: netlink: Message has 6 unknown bytes. [ 229.689447][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 229.689466][ T29] audit: type=1107 audit(1752491611.707:11955): pid=23566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 229.925895][ T29] audit: type=1326 audit(1752491611.947:11956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 229.949668][ T29] audit: type=1326 audit(1752491611.947:11957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 229.988211][ T29] audit: type=1326 audit(1752491611.997:11958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 230.012673][ T29] audit: type=1326 audit(1752491611.997:11959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 230.037137][ T29] audit: type=1326 audit(1752491611.997:11960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 230.060796][ T29] audit: type=1326 audit(1752491611.997:11961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 230.085396][ T29] audit: type=1326 audit(1752491611.997:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 230.109895][ T29] audit: type=1326 audit(1752491611.997:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 230.134088][ T29] audit: type=1326 audit(1752491611.997:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23571 comm="syz.0.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f013722e929 code=0x7ffc0000 [ 230.168557][T23578] batadv_slave_0: entered promiscuous mode [ 230.179785][T23578] batadv_slave_0: left promiscuous mode [ 230.374622][T23612] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 230.432257][T23616] loop5: detected capacity change from 0 to 1024 [ 230.455130][T23616] EXT4-fs: Ignoring removed bh option [ 230.460904][T23616] EXT4-fs: inline encryption not supported [ 230.467340][T23616] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.487459][T23616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 230.519178][T23616] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm GPL: lblock 2 mapped to illegal pblock 2 (length 1) [ 230.548604][T23616] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm GPL: lblock 0 mapped to illegal pblock 48 (length 1) [ 230.572320][T23616] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm GPL: Failed to acquire dquot type 0 [ 230.592717][T23616] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 230.628180][T23616] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm GPL: mark_inode_dirty error [ 230.664184][T23616] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 230.694982][T23616] EXT4-fs (loop5): 1 orphan inode deleted [ 230.706482][T23616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.719242][ T384] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 230.735569][ T384] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 230.771003][ T4453] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.788172][ T4453] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 230.821594][ T4453] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 230.831400][T23645] syzkaller1: entered promiscuous mode [ 230.837067][T23645] syzkaller1: entered allmulticast mode [ 230.853062][ T4453] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 230.894668][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8558'. [ 230.956950][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8558'. [ 230.968689][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8558'. [ 230.978727][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8558'. [ 231.012325][T23666] loop5: detected capacity change from 0 to 128 [ 231.023854][T23666] EXT4-fs: Ignoring removed nobh option [ 231.080424][T23666] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.103611][T23666] ext4 filesystem being mounted at /1524/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.284496][T23685] SELinux: failed to load policy [ 231.331315][T23687] loop0: detected capacity change from 0 to 1024 [ 231.339216][T23687] EXT4-fs: Ignoring removed bh option [ 231.345182][T23687] EXT4-fs: inline encryption not supported [ 231.351863][T23687] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.363866][T23687] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 231.377046][T23687] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm GPL: lblock 2 mapped to illegal pblock 2 (length 1) [ 231.394865][T23687] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm GPL: lblock 0 mapped to illegal pblock 48 (length 1) [ 231.424264][T23687] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm GPL: Failed to acquire dquot type 0 [ 231.446328][T23687] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 231.457329][T23687] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm GPL: mark_inode_dirty error [ 231.469230][T23687] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 231.482468][ T4453] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.493737][T23687] EXT4-fs (loop0): 1 orphan inode deleted [ 231.500958][T23687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.513784][ T4826] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 231.534947][ T4826] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 231.563309][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.573436][T23695] Invalid ELF header magic: != ELF [ 231.583197][ T3306] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 231.608470][ T3306] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 231.618255][ T3306] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 231.903562][T23724] loop2: detected capacity change from 0 to 128 [ 231.910349][T23724] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 231.922586][T23724] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.947346][T23727] xt_hashlimit: size too large, truncated to 1048576 [ 232.002736][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8593'. [ 232.115739][T23747] loop2: detected capacity change from 0 to 512 [ 232.123112][T23747] EXT4-fs: Ignoring removed orlov option [ 232.131749][T23747] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 232.152999][T23747] EXT4-fs (loop2): 1 orphan inode deleted [ 232.158823][T23747] EXT4-fs (loop2): 1 truncate cleaned up [ 232.175532][T23747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.194699][T23747] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 232.210656][T23747] EXT4-fs (loop2): Remounting filesystem read-only [ 232.218792][T23747] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1597: inode #17: comm syz.2.8597: cleanup dec ref error -28 [ 232.244004][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.256185][T23759] netlink: 'syz.6.8603': attribute type 1 has an invalid length. [ 232.459999][T23797] loop6: detected capacity change from 0 to 512 [ 232.470513][T23799] loop5: detected capacity change from 0 to 1024 [ 232.472728][T23797] EXT4-fs: Ignoring removed bh option [ 232.483904][T23797] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 232.493946][T23797] EXT4-fs (loop6): 1 truncate cleaned up [ 232.500444][T23797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.515431][T23799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.520695][T23806] loop2: detected capacity change from 0 to 2048 [ 232.527632][T23799] ext4 filesystem being mounted at /1537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.534169][T23799] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8622: bg 0: block 393: padding at end of block bitmap is not set [ 232.582025][T23806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.594562][ T4453] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.617848][ T6647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.722915][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.736866][T23838] IPVS: Unknown mcast interface: vcan0 [ 232.780658][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.788855][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.796473][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.804057][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.812308][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.819832][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.827304][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.835436][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.843084][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.850693][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.858913][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.866502][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.874714][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.882286][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.889697][T15623] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 232.898872][T15623] hid-generic 00A0:0008:0003.000D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 232.964447][T23881] xt_hashlimit: size too large, truncated to 1048576 [ 232.987743][T23883] netlink: 'syz.0.8647': attribute type 8 has an invalid length. [ 233.057685][T23892] : renamed from vxcan1 [ 233.155535][T23902] loop0: detected capacity change from 0 to 1024 [ 233.166112][T23907] loop2: detected capacity change from 0 to 128 [ 233.167764][T23902] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 233.185336][T23907] EXT4-fs: Ignoring removed nobh option [ 233.189346][T23902] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 233.206742][T23907] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.251821][T23907] ext4 filesystem being mounted at /1776/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.438497][T23918] loop0: detected capacity change from 0 to 256 [ 233.449048][T23918] FAT-fs (loop0): bogus number of FAT sectors [ 233.455261][T23918] FAT-fs (loop0): Can't find a valid FAT filesystem [ 233.813207][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.856803][T23956] block device autoloading is deprecated and will be removed. [ 233.929158][T23964] loop6: detected capacity change from 0 to 512 [ 233.946514][T23964] EXT4-fs: Ignoring removed orlov option [ 233.954050][T23964] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 233.969492][T23964] EXT4-fs (loop6): 1 orphan inode deleted [ 233.975609][T23964] EXT4-fs (loop6): 1 truncate cleaned up [ 233.997358][T23964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.019528][T23964] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 234.035531][T23964] EXT4-fs (loop6): Remounting filesystem read-only [ 234.042705][T23964] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.6.8679: cleanup dec ref error -28 [ 234.070007][ T6647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.161507][T23999] __nla_validate_parse: 4 callbacks suppressed [ 234.161522][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8692'. [ 234.177918][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8692'. [ 234.208456][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8696'. [ 234.217601][T24006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8696'. [ 234.226821][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8696'. [ 234.240553][T24006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8696'. [ 234.249665][T24006] netlink: 'syz.5.8696': attribute type 6 has an invalid length. [ 234.409282][T24037] loop5: detected capacity change from 0 to 128 [ 234.421632][T24037] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.435373][T24037] ext4 filesystem being mounted at /1552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.476499][T24043] loop0: detected capacity change from 0 to 164 [ 234.484820][T24043] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 234.495556][T24043] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 234.505033][T24043] Symlink component flag not implemented [ 234.510813][T24043] Symlink component flag not implemented [ 234.516838][T24043] Symlink component flag not implemented (7) [ 234.523565][T24043] Symlink component flag not implemented (116) [ 234.533841][ T4453] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.611663][T24068] netlink: 292 bytes leftover after parsing attributes in process `syz.5.8717'. [ 234.641498][T24070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8718'. [ 234.650610][T24070] netlink: 'syz.0.8718': attribute type 1 has an invalid length. [ 234.742733][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 234.742750][ T29] audit: type=1400 audit(1752491616.770:12094): avc: denied { cpu } for pid=24087 comm="syz.0.8727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.751939][T24090] loop5: detected capacity change from 0 to 512 [ 234.779237][T24090] EXT4-fs: Ignoring removed orlov option [ 234.786189][T24090] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 234.802529][T24093] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.8730'. [ 234.831105][T24090] EXT4-fs (loop5): 1 orphan inode deleted [ 234.837005][T24090] EXT4-fs (loop5): 1 truncate cleaned up [ 234.862473][T24090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.915055][ T29] audit: type=1400 audit(1752491616.940:12095): avc: denied { module_request } for pid=24103 comm="syz.3.8733" kmod="iptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 234.926876][T24090] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 234.936843][ T29] audit: type=1400 audit(1752491616.950:12096): avc: denied { setattr } for pid=24089 comm="syz.5.8728" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.990771][ T29] audit: type=1400 audit(1752491617.010:12097): avc: denied { read write } for pid=6647 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.015429][ T29] audit: type=1400 audit(1752491617.010:12098): avc: denied { open } for pid=6647 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.039685][ T29] audit: type=1400 audit(1752491617.010:12099): avc: denied { ioctl } for pid=6647 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.083729][T24090] EXT4-fs (loop5): Remounting filesystem read-only [ 235.115032][T24090] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1597: inode #17: comm syz.5.8728: cleanup dec ref error -28 [ 235.139056][ T29] audit: type=1400 audit(1752491617.140:12100): avc: denied { create } for pid=24107 comm="syz.6.8734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 235.159542][ T29] audit: type=1400 audit(1752491617.140:12101): avc: denied { read } for pid=24107 comm="syz.6.8734" path="socket:[66424]" dev="sockfs" ino=66424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 235.165574][T24127] netlink: 240 bytes leftover after parsing attributes in process `syz.6.8734'. [ 235.208272][ T29] audit: type=1400 audit(1752491617.190:12102): avc: denied { write } for pid=24107 comm="syz.6.8734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 235.231794][ T4453] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.395398][ T29] audit: type=1400 audit(1752491617.420:12103): avc: denied { create } for pid=24140 comm="syz.5.8739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 235.627280][T24158] loop5: detected capacity change from 0 to 2048 [ 235.699438][T24158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.775890][T24188] loop2: detected capacity change from 0 to 164 [ 235.783339][T24188] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.792693][T24188] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.796630][ T4453] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.801181][T24188] Symlink component flag not implemented [ 235.801189][T24188] Symlink component flag not implemented [ 235.801284][T24188] Symlink component flag not implemented (7) [ 235.801299][T24188] Symlink component flag not implemented (116) [ 236.102409][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 236.110185][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 236.120738][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.128486][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.136218][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.143985][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.151697][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.159384][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.167166][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.174929][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.182681][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.190447][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.198126][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.205854][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.213587][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.221361][ T3395] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 236.232149][ T3395] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 236.558153][T24259] loop6: detected capacity change from 0 to 2048 [ 236.570960][T24259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.636923][ T6647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.907227][T24286] loop6: detected capacity change from 0 to 128 [ 236.912947][T24285] loop2: detected capacity change from 0 to 1024 [ 236.914331][T24286] EXT4-fs: Ignoring removed nobh option [ 236.922391][T24285] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 236.928527][T24286] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.947751][T24286] ext4 filesystem being mounted at /1520/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.016971][T24297] netlink: 'syz.0.8791': attribute type 2 has an invalid length. [ 237.025015][T24297] netlink: 'syz.0.8791': attribute type 1 has an invalid length. [ 237.117609][T24304] loop0: detected capacity change from 0 to 2048 [ 237.133789][T24304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.225145][ T6647] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.338395][T24338] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 237.346711][T24338] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 237.630469][T24388] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 237.660534][T24319] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 237.698780][T24319] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 237.711328][T24319] EXT4-fs (loop0): This should not happen!! Data will be lost [ 237.711328][T24319] [ 237.721137][T24319] EXT4-fs (loop0): Total free blocks count 0 [ 237.727172][T24319] EXT4-fs (loop0): Free/Dirty block details [ 237.733141][T24319] EXT4-fs (loop0): free_blocks=2415919104 [ 237.738953][T24319] EXT4-fs (loop0): dirty_blocks=8208 [ 237.744280][T24319] EXT4-fs (loop0): Block reservation details [ 237.750383][T24319] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 237.802017][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 238.071212][T24443] loop2: detected capacity change from 0 to 2048 [ 238.115779][T24443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.710662][T24469] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 238.733053][T24469] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 238.745737][T24469] EXT4-fs (loop2): This should not happen!! Data will be lost [ 238.745737][T24469] [ 238.755531][T24469] EXT4-fs (loop2): Total free blocks count 0 [ 238.761740][T24469] EXT4-fs (loop2): Free/Dirty block details [ 238.767695][T24469] EXT4-fs (loop2): free_blocks=2415919104 [ 238.773605][T24469] EXT4-fs (loop2): dirty_blocks=8208 [ 238.778960][T24469] EXT4-fs (loop2): Block reservation details [ 238.784971][T24469] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 238.892368][ T384] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 239.081704][T24560] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 239.124132][T24514] chnl_net:caif_netlink_parms(): no params data found [ 239.171363][T24642] loop0: detected capacity change from 0 to 764 [ 239.196358][T24642] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 239.273879][T24514] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.281212][T24514] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.314972][T24514] bridge_slave_0: entered allmulticast mode [ 239.324581][T24514] bridge_slave_0: entered promiscuous mode [ 239.344550][T24514] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.351910][T24514] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.368821][T24514] bridge_slave_1: entered allmulticast mode [ 239.375888][T24514] bridge_slave_1: entered promiscuous mode [ 239.399118][T24514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.448047][T24514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.458981][T24751] loop5: detected capacity change from 0 to 256 [ 239.469293][T24751] FAT-fs (loop5): bogus sectors per cluster 30 [ 239.475653][T24751] FAT-fs (loop5): Can't find a valid FAT filesystem [ 239.512598][T24514] team0: Port device team_slave_0 added [ 239.518617][T24779] vhci_hcd: invalid port number 0 [ 239.521208][T24514] team0: Port device team_slave_1 added [ 239.594864][T24514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.602013][T24514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.628157][T24514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.656078][T24514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.663425][T24514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.689493][T24514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.703425][T24822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24822 comm=syz.0.8880 [ 239.716241][T24822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24822 comm=syz.0.8880 [ 239.759028][T24514] hsr_slave_0: entered promiscuous mode [ 239.778647][T24514] hsr_slave_1: entered promiscuous mode [ 239.786511][T24514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.794767][T24514] Cannot create hsr debugfs directory [ 239.830243][T24858] __nla_validate_parse: 6 callbacks suppressed [ 239.830260][T24858] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8884'. [ 239.932807][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 239.932826][ T29] audit: type=1400 audit(1752491621.962:12252): avc: denied { read } for pid=24910 comm="syz.5.8888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 239.981035][ T29] audit: type=1400 audit(1752491622.002:12253): avc: denied { getattr } for pid=24922 comm="syz.3.8889" name="/" dev="aio" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 240.007270][T24937] loop9: detected capacity change from 0 to 7 [ 240.014388][T24937] Buffer I/O error on dev loop9, logical block 0, async page read [ 240.028989][T24514] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 240.031569][T24937] Buffer I/O error on dev loop9, logical block 0, async page read [ 240.043739][T24937] loop9: unable to read partition table [ 240.051015][T24937] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 240.051015][T24937] ) failed (rc=-5) [ 240.053196][T24514] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 240.101111][T24514] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 240.118945][T24514] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 240.179584][T24514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.194093][T24514] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.203884][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.211079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.222439][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.229550][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.299492][T24514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.406288][T24514] veth0_vlan: entered promiscuous mode [ 240.414366][T24514] veth1_vlan: entered promiscuous mode [ 240.430443][T24514] veth0_macvtap: entered promiscuous mode [ 240.438580][T24514] veth1_macvtap: entered promiscuous mode [ 240.449945][T24514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.461865][T24514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.471521][T24514] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.480280][T24514] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.489088][T24514] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.497942][T24514] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.519335][ T29] audit: type=1400 audit(1752491622.543:12254): avc: denied { mounton } for pid=24514 comm="syz-executor" path="/root/syzkaller.C5UFRl/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 240.544842][ T29] audit: type=1400 audit(1752491622.553:12255): avc: denied { mount } for pid=24514 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.567923][ T29] audit: type=1400 audit(1752491622.553:12256): avc: denied { mount } for pid=24514 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 240.590657][ T29] audit: type=1400 audit(1752491622.553:12257): avc: denied { mounton } for pid=24514 comm="syz-executor" path="/root/syzkaller.C5UFRl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 240.620348][ T29] audit: type=1400 audit(1752491622.553:12258): avc: denied { mounton } for pid=24514 comm="syz-executor" path="/root/syzkaller.C5UFRl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=69142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 240.648956][ T29] audit: type=1400 audit(1752491622.653:12259): avc: denied { mounton } for pid=24514 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 240.673185][ T29] audit: type=1400 audit(1752491622.653:12260): avc: denied { mount } for pid=24514 comm="syz-executor" name="/" dev="gadgetfs" ino=4266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 240.696891][ T29] audit: type=1400 audit(1752491622.653:12261): avc: denied { add_name } for pid=24514 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 240.725167][T24987] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 240.732705][T24987] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 240.749249][T24993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8911'. [ 240.765046][T24990] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 240.779122][T24993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8911'. [ 240.948955][T25019] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 241.004691][T25035] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 241.046836][T25035] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 242.305944][T25181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8963'. [ 242.528048][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8978'. [ 242.907316][T25287] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 243.475995][T25381] SELinux: syz.5.9049 (25381) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 244.114455][T25451] netem: change failed [ 244.140883][T25456] bridge_slave_0: left allmulticast mode [ 244.146668][T25456] bridge_slave_0: left promiscuous mode [ 244.152458][T25456] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.167324][T25456] bridge_slave_1: left allmulticast mode [ 244.173164][T25456] bridge_slave_1: left promiscuous mode [ 244.179629][T25456] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.190946][T25462] netlink: 'syz.2.9081': attribute type 10 has an invalid length. [ 244.201221][T25456] team0: Port device team_slave_0 removed [ 244.218673][T25456] team0: Port device team_slave_1 removed [ 244.224702][T25456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.232820][T25456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.470720][T25510] netem: incorrect ge model size [ 244.476536][T25510] netem: change failed [ 244.707074][T25553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9125'. [ 244.944813][ T29] kauditd_printk_skb: 1037 callbacks suppressed [ 244.944854][ T29] audit: type=1400 audit(1752491626.975:13299): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 244.981679][ T29] audit: type=1400 audit(1752491627.015:13300): avc: denied { map_create } for pid=25584 comm="syz.5.9139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 245.021363][ T29] audit: type=1400 audit(1752491627.035:13301): avc: denied { prog_load } for pid=25584 comm="syz.5.9139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 245.041233][ T29] audit: type=1400 audit(1752491627.035:13302): avc: denied { prog_load } for pid=25584 comm="syz.5.9139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 245.060599][ T29] audit: type=1400 audit(1752491627.055:13303): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 245.085793][ T29] audit: type=1400 audit(1752491627.105:13304): avc: denied { name_bind } for pid=25586 comm="syz.5.9140" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 245.279449][ T29] audit: type=1400 audit(1752491627.315:13305): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 245.317624][ T29] audit: type=1400 audit(1752491627.355:13306): avc: denied { prog_load } for pid=25588 comm="syz.7.9141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 245.338068][ T29] audit: type=1400 audit(1752491627.375:13307): avc: denied { prog_load } for pid=25588 comm="syz.7.9141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 245.357453][ T29] audit: type=1400 audit(1752491627.375:13308): avc: denied { prog_load } for pid=25588 comm="syz.7.9141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 245.379569][T25589] netlink: 'syz.7.9141': attribute type 10 has an invalid length. [ 245.388174][T25589] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9141'. [ 245.397408][T25589] team0: entered promiscuous mode [ 245.402824][T25589] team_slave_0: entered promiscuous mode [ 245.409350][T25589] team_slave_1: entered promiscuous mode [ 245.415128][T25589] team0: entered allmulticast mode [ 245.420409][T25589] team_slave_0: entered allmulticast mode [ 245.427056][T25589] team_slave_1: entered allmulticast mode [ 245.433994][T25589] bridge0: port 3(team0) entered blocking state [ 245.440433][T25589] bridge0: port 3(team0) entered disabled state [ 245.449047][T25589] bridge0: port 3(team0) entered blocking state [ 245.455462][T25589] bridge0: port 3(team0) entered forwarding state [ 245.759109][T25649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9167'. [ 245.791955][T25652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9168'. [ 245.835049][T25656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9170'. [ 246.055165][T25699] netlink: 'syz.5.9188': attribute type 3 has an invalid length. [ 246.063014][T25699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9188'. [ 246.103349][T25703] netlink: 'syz.2.9190': attribute type 1 has an invalid length. [ 246.137039][T25703] bond2: entered promiscuous mode [ 246.142551][T25703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.161930][T25703] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 246.171961][T25703] bond2: (slave batadv1): making interface the new active one [ 246.179518][T25703] batadv1: entered promiscuous mode [ 246.187180][T25703] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 246.567470][T25812] netlink: 'syz.2.9211': attribute type 11 has an invalid length. [ 246.575714][T25812] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9211'. [ 247.329193][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9244'. [ 247.329289][T25958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9244'. [ 247.329319][T25958] netlink: 'syz.7.9244': attribute type 20 has an invalid length. [ 247.335799][T25958] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.365492][T25958] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.374262][T25958] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.374302][T25958] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.379997][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9244'. [ 247.401520][T25958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9244'. [ 247.401549][T25958] netlink: 'syz.7.9244': attribute type 20 has an invalid length. [ 247.829074][T26008] netlink: 'syz.3.9268': attribute type 3 has an invalid length. [ 247.844731][T26013] syz.2.9269(26013): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 248.136020][T26066] netlink: 'syz.7.9287': attribute type 2 has an invalid length. [ 248.545303][T26056] ip6tnl1: left promiscuous mode [ 248.564817][T26056] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.573924][T26056] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.582834][T26056] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.591903][T26056] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.604806][T26056] geneve2: left promiscuous mode [ 248.609821][T26056] geneve2: left allmulticast mode [ 249.001328][T26173] xt_CT: No such helper "pptp" [ 249.916046][T26300] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 249.946143][ T29] kauditd_printk_skb: 808 callbacks suppressed [ 249.946157][ T29] audit: type=1400 audit(1752491631.977:14117): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 250.001253][ T29] audit: type=1400 audit(1752491631.987:14118): avc: denied { map_create } for pid=26303 comm="syz.3.9369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 250.021423][ T29] audit: type=1400 audit(1752491631.987:14119): avc: denied { prog_load } for pid=26303 comm="syz.3.9369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 250.041679][ T29] audit: type=1400 audit(1752491631.987:14120): avc: denied { mounton } for pid=26303 comm="syz.3.9369" path="/1911/file0" dev="tmpfs" ino=9800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 250.065266][ T29] audit: type=1400 audit(1752491632.017:14121): avc: denied { write } for pid=26305 comm="syz.3.9370" name="kcm" dev="proc" ino=4026532971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 250.088966][ T29] audit: type=1400 audit(1752491632.017:14122): avc: denied { map_create } for pid=26305 comm="syz.3.9370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 250.109006][ T29] audit: type=1400 audit(1752491632.017:14123): avc: denied { prog_load } for pid=26305 comm="syz.3.9370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 250.129180][ T29] audit: type=1400 audit(1752491632.017:14124): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 250.154164][ T29] audit: type=1400 audit(1752491632.027:14125): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 250.178267][ T29] audit: type=1400 audit(1752491632.037:14126): avc: denied { map_create } for pid=26313 comm="syz.5.9373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 250.716755][T26363] netlink: 'syz.5.9394': attribute type 10 has an invalid length. [ 250.724861][T26363] geneve1: entered promiscuous mode [ 250.730871][T26363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.739846][T26363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.748692][T26363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.757477][T26363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.767761][T26363] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 250.908752][T26380] netlink: 'syz.5.9402': attribute type 10 has an invalid length. [ 250.916677][T26380] __nla_validate_parse: 1 callbacks suppressed [ 250.916692][T26380] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9402'. [ 250.945451][T26380] team0: entered promiscuous mode [ 250.950772][T26380] team_slave_0: entered promiscuous mode [ 250.957409][T26380] team_slave_1: entered promiscuous mode [ 250.963345][T26380] team0: entered allmulticast mode [ 250.970226][T26380] team_slave_0: entered allmulticast mode [ 250.976652][T26380] team_slave_1: entered allmulticast mode [ 250.985147][T26380] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.993432][T26380] bridge0: port 3(team0) entered blocking state [ 250.999797][T26380] bridge0: port 3(team0) entered disabled state [ 251.053676][T26394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.214362][T26444] netlink: 'syz.3.9414': attribute type 10 has an invalid length. [ 251.235169][T26444] team0: Port device dummy0 added [ 251.532261][T26456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9418'. [ 252.087649][T26527] ALSA: seq fatal error: cannot create timer (-19) [ 252.261532][T26548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9458'. [ 252.404680][ T51] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.421490][T26563] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.448897][T26571] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 252.505509][T26579] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9471'. [ 252.588786][T26593] SELinux: syz.2.9477 (26593) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 252.787209][T26622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9485'. [ 252.813343][T26622] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.822212][T26622] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.831063][T26622] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.839858][T26622] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.866185][T26622] vxlan1: entered promiscuous mode [ 253.246191][T26688] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 253.820138][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9564'. [ 253.829196][T26814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9564'. [ 253.839046][T26814] netlink: 'syz.5.9564': attribute type 20 has an invalid length. [ 253.869672][T26814] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.878500][T26814] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.887278][T26814] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.896118][T26814] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.908892][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9564'. [ 253.918606][T26814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9564'. [ 253.927610][T26814] netlink: 'syz.5.9564': attribute type 20 has an invalid length. [ 254.750788][T26940] syzkaller0: tun_chr_ioctl cmd 35108 [ 254.893673][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9609'. [ 254.950199][ T5263] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 254.961072][ T29] kauditd_printk_skb: 766 callbacks suppressed [ 254.961090][ T29] audit: type=1400 audit(1752491637.000:14893): avc: denied { prog_load } for pid=26966 comm="syz.3.9612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 254.990821][ T29] audit: type=1400 audit(1752491637.000:14894): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 255.014248][ T29] audit: type=1400 audit(1752491637.030:14895): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.051103][ T29] audit: type=1400 audit(1752491637.030:14896): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 255.074544][ T29] audit: type=1400 audit(1752491637.060:14897): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 255.097946][ T29] audit: type=1400 audit(1752491637.060:14898): avc: denied { create } for pid=26966 comm="syz.3.9612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 255.117798][ T29] audit: type=1400 audit(1752491637.080:14899): avc: denied { map_create } for pid=26972 comm="syz.7.9615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 255.137282][ T29] audit: type=1400 audit(1752491637.080:14900): avc: denied { map_create } for pid=26974 comm="syz.5.9613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 255.156860][ T29] audit: type=1400 audit(1752491637.080:14901): avc: denied { read write } for pid=26976 comm="syz.2.9616" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 255.180283][ T29] audit: type=1400 audit(1752491637.090:14902): avc: denied { prog_load } for pid=26976 comm="syz.2.9616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 255.199671][ T5263] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.640516][T27078] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 255.955674][T27142] __nla_validate_parse: 2 callbacks suppressed [ 255.955693][T27142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9686'. [ 255.984692][T27142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9686'. [ 256.019643][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.027506][T27149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9689'. [ 256.039069][T27149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9689'. [ 256.264626][T27169] O3c: renamed from bridge_slave_0 [ 257.144593][T27219] netlink: 'syz.0.9721': attribute type 3 has an invalid length. [ 257.298442][T27237] netlink: 'syz.5.9728': attribute type 1 has an invalid length. [ 257.307122][T27237] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.9728'. [ 257.335185][T27239] netlink: 'syz.0.9729': attribute type 10 has an invalid length. [ 257.344838][T27239] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 257.593188][T27272] IPv6: Can't replace route, no match found [ 258.166477][T27362] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 258.579788][T27408] netlink: 'syz.7.9802': attribute type 4 has an invalid length. [ 258.593125][T27408] netlink: 'syz.7.9802': attribute type 4 has an invalid length. [ 258.621311][T27410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9803'. [ 258.630306][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9803'. [ 258.642930][T27410] wireguard0: entered promiscuous mode [ 258.648488][T27410] wireguard0: entered allmulticast mode [ 258.964765][T27446] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 259.243750][T27468] netlink: 'syz.3.9827': attribute type 6 has an invalid length. [ 259.251675][T27468] netlink: 6016 bytes leftover after parsing attributes in process `syz.3.9827'. [ 259.659167][T27487] netlink: 'syz.5.9836': attribute type 13 has an invalid length. [ 259.671678][T27481] serio: Serial port ptm0 [ 259.676386][T27487] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.685370][T27487] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.695174][T27487] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.704142][T27487] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.716515][T27487] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.725488][T27487] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.735037][T27487] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.743969][T27487] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.755705][T27493] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9837'. [ 259.801279][T27499] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.9840'. [ 259.968546][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 259.968563][ T29] audit: type=1400 audit(1752491642.002:15581): avc: denied { prog_load } for pid=27519 comm="syz.2.9846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 259.995892][ T29] audit: type=1400 audit(1752491642.012:15582): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 260.021063][ T29] audit: type=1400 audit(1752491642.012:15583): avc: denied { prog_load } for pid=27519 comm="syz.2.9846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 260.042165][ T29] audit: type=1400 audit(1752491642.042:15584): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 260.066323][ T29] audit: type=1400 audit(1752491642.042:15585): avc: denied { open } for pid=27523 comm="syz.7.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 260.085894][ T29] audit: type=1400 audit(1752491642.042:15586): avc: denied { create } for pid=27523 comm="syz.7.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 260.107383][ T29] audit: type=1400 audit(1752491642.042:15587): avc: denied { create } for pid=27523 comm="syz.7.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 260.128879][ T29] audit: type=1400 audit(1752491642.062:15588): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 260.153332][ T29] audit: type=1400 audit(1752491642.062:15589): avc: denied { prog_load } for pid=27519 comm="syz.2.9846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 260.173610][ T29] audit: type=1400 audit(1752491642.062:15590): avc: denied { prog_load } for pid=27519 comm="syz.2.9846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 260.210669][T27537] bond0: entered promiscuous mode [ 260.215784][T27537] : entered promiscuous mode [ 260.220762][T27537] bond_slave_1: entered promiscuous mode [ 260.226550][T27537] bond1: entered promiscuous mode [ 260.233982][T27537] dummy0: entered promiscuous mode [ 260.240143][T27537] bond0: entered allmulticast mode [ 260.245493][T27537] : entered allmulticast mode [ 260.250591][T27537] bond_slave_1: entered allmulticast mode [ 260.256348][T27537] bond1: entered allmulticast mode [ 260.269440][T27537] dummy0: entered allmulticast mode [ 260.274807][T27537] geneve1: entered allmulticast mode [ 260.281061][T27537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.458594][T27580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27580 comm=syz.2.9872 [ 260.747202][T27628] netlink: 'syz.5.9893': attribute type 4 has an invalid length. [ 260.775556][T27628] netlink: 'syz.5.9893': attribute type 4 has an invalid length. [ 261.456569][T27718] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 261.631888][T27738] pim6reg1: entered promiscuous mode [ 261.824980][T27758] syzkaller0: tun_chr_ioctl cmd 35108 [ 262.058387][T27783] xt_NFQUEUE: number of total queues is 0 [ 262.168326][T27797] __nla_validate_parse: 5 callbacks suppressed [ 262.168346][T27797] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9965'. [ 262.187132][T27800] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 262.225130][T27809] ALSA: seq fatal error: cannot create timer (-19) [ 262.883887][T27856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27856 comm=syz.5.9990 [ 262.984399][T27862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9992'. [ 263.793416][T27933] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10023'. [ 263.998317][T27961] netem: change failed [ 264.427315][T27998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.986875][ T29] kauditd_printk_skb: 988 callbacks suppressed [ 264.986892][ T29] audit: type=1400 audit(1752491647.035:16579): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 265.056797][ T29] audit: type=1400 audit(1752491647.075:16580): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 265.080251][ T29] audit: type=1400 audit(1752491647.075:16581): avc: denied { map_create } for pid=28101 comm="syz.5.10079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 265.099844][ T29] audit: type=1400 audit(1752491647.075:16582): avc: denied { prog_load } for pid=28101 comm="syz.5.10079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 265.119290][ T29] audit: type=1400 audit(1752491647.095:16583): avc: denied { create } for pid=28103 comm="syz.0.10080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 265.140209][ T29] audit: type=1400 audit(1752491647.095:16584): avc: denied { map_create } for pid=28103 comm="syz.0.10080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 265.159755][ T29] audit: type=1400 audit(1752491647.095:16585): avc: denied { prog_load } for pid=28103 comm="syz.0.10080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 265.179160][ T29] audit: type=1400 audit(1752491647.095:16586): avc: denied { prog_load } for pid=28103 comm="syz.0.10080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 265.203015][ T29] audit: type=1400 audit(1752491647.125:16587): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 265.226479][ T29] audit: type=1400 audit(1752491647.145:16588): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 265.411230][T28138] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10097'. [ 265.478095][T28152] netlink: 'syz.0.10103': attribute type 1 has an invalid length. [ 265.496152][T28152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.517501][T28152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.536951][T28152] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 265.549630][T28152] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 265.627625][T28210] netlink: 'syz.0.10112': attribute type 21 has an invalid length. [ 265.694241][T28218] macsec1: entered promiscuous mode [ 265.699709][T28218] bridge0: entered promiscuous mode [ 265.716074][T28218] bridge0: port 1(macsec1) entered blocking state [ 265.722630][T28218] bridge0: port 1(macsec1) entered disabled state [ 265.742877][T28218] macsec1: entered allmulticast mode [ 265.748270][T28218] bridge0: entered allmulticast mode [ 265.756776][T28218] macsec1: left allmulticast mode [ 265.761852][T28218] bridge0: left allmulticast mode [ 265.767699][T28218] bridge0: left promiscuous mode [ 265.779671][T28228] netlink: 'syz.0.10119': attribute type 4 has an invalid length. [ 265.789490][T28228] netlink: 'syz.0.10119': attribute type 4 has an invalid length. [ 265.846262][T28237] netlink: 9 bytes leftover after parsing attributes in process `syz.7.10122'. [ 265.885316][T28237] 0: renamed from hsr_slave_1 (while UP) [ 265.896139][T28237] 0: entered allmulticast mode [ 265.902066][T28237] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 266.137450][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10148'. [ 266.150176][T28291] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.159087][T28291] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.167963][T28291] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.176730][T28291] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.187217][T28291] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.196267][T28291] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.205229][T28291] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.214241][T28291] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.321896][T28324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10161'. [ 266.331215][T28324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10161'. [ 266.404775][T28340] sock: sock_set_timeout: `syz.5.10163' (pid 28340) tries to set negative timeout [ 266.424257][T28343] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 266.985328][T28405] Cannot find del_set index 4 as target [ 267.118322][T28418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10190'. [ 267.127534][T28418] netlink: 'syz.2.10190': attribute type 15 has an invalid length. [ 267.135538][T28418] netlink: 'syz.2.10190': attribute type 18 has an invalid length. [ 267.296420][T28433] netlink: 'syz.7.10198': attribute type 4 has an invalid length. [ 267.328424][T28435] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10199'. [ 267.352943][T28437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=28437 comm=syz.7.10200 [ 267.409940][T28443] netlink: 'syz.7.10203': attribute type 2 has an invalid length. [ 267.418109][T28443] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10203'. [ 267.493701][T28459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10209'. [ 267.519834][T28459] macvtap0: entered promiscuous mode [ 267.525233][T28459] erspan0: entered promiscuous mode [ 267.530541][T28459] macvtap0: entered allmulticast mode [ 267.536170][T28459] erspan0: entered allmulticast mode [ 267.604721][T28485] netlink: 'syz.5.10219': attribute type 1 has an invalid length. [ 267.631599][T28522] netlink: 'syz.7.10220': attribute type 10 has an invalid length. [ 267.641126][T28522] ipvlan0: entered allmulticast mode [ 267.646512][T28522] veth0_vlan: entered allmulticast mode [ 267.653709][T28522] team0: Device ipvlan0 failed to register rx_handler [ 267.673543][T28485] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 267.683745][T28485] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 267.714679][T28485] bond4: (slave vcan1): making interface the new active one [ 267.727446][T28485] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 268.856817][T28699] Cannot find add_set index 0 as target [ 269.043905][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10311'. [ 269.152184][T28752] ALSA: seq fatal error: cannot create timer (-19) [ 269.875134][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10342'. [ 269.892931][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10342'. [ 269.919896][T28804] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10333'. [ 269.937888][T28806] ip6gre2: entered allmulticast mode [ 269.944758][T28806] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.004947][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 270.004964][ T29] audit: type=1400 audit(1752491652.047:17383): avc: denied { create } for pid=28813 comm="syz.3.10338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 270.049791][ T29] audit: type=1400 audit(1752491652.047:17384): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 270.073931][ T29] audit: type=1400 audit(1752491652.077:17385): avc: denied { create } for pid=28815 comm="syz.2.10339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 270.094306][ T29] audit: type=1400 audit(1752491652.077:17386): avc: denied { map_create } for pid=28813 comm="syz.3.10338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.114591][ T29] audit: type=1400 audit(1752491652.077:17387): avc: denied { prog_load } for pid=28813 comm="syz.3.10338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.134756][ T29] audit: type=1400 audit(1752491652.077:17388): avc: denied { prog_load } for pid=28813 comm="syz.3.10338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.154284][ T29] audit: type=1400 audit(1752491652.077:17389): avc: denied { open } for pid=28815 comm="syz.2.10339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 270.200130][T28822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10343'. [ 270.237267][ T29] audit: type=1400 audit(1752491652.087:17390): avc: denied { map_create } for pid=28817 comm="syz.3.10340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.257590][ T29] audit: type=1400 audit(1752491652.087:17391): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 270.281049][ T29] audit: type=1400 audit(1752491652.167:17392): avc: denied { prog_load } for pid=28817 comm="syz.3.10340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.483071][T28860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10354'. [ 270.499570][T28860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10354'. [ 271.728254][T28971] validate_nla: 2 callbacks suppressed [ 271.728287][T28971] netlink: 'syz.2.10384': attribute type 1 has an invalid length. [ 271.750025][T28971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.796849][T29106] netlink: 'syz.0.10421': attribute type 14 has an invalid length. [ 272.814093][T29106] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 272.841305][T29106] netlink: 'syz.0.10421': attribute type 14 has an invalid length. [ 272.862849][T29106] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 272.920342][T29115] netem: incorrect ge model size [ 272.925451][T29115] netem: change failed [ 273.200264][T29162] serio: Serial port ptm0 [ 273.280408][T29177] netlink: 'syz.2.10444': attribute type 1 has an invalid length. [ 273.299457][T29177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.318086][T29177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.326025][T29177] bond5: (slave vxcan2): The slave device specified does not support setting the MAC address [ 273.339647][T29177] bond5: (slave vxcan2): Error -95 calling set_mac_address [ 273.417518][T29232] netlink: 'syz.3.10450': attribute type 13 has an invalid length. [ 273.561736][T29264] netlink: 'syz.3.10461': attribute type 1 has an invalid length. [ 273.580091][T29264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.597675][T29299] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 273.607642][T29264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.616300][T29264] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 273.630180][T29264] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 273.773657][T29328] __nla_validate_parse: 6 callbacks suppressed [ 273.773758][T29328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10471'. [ 273.789824][T29332] netlink: 888 bytes leftover after parsing attributes in process `syz.0.10472'. [ 273.799772][T29332] netlink: 137 bytes leftover after parsing attributes in process `syz.0.10472'. [ 273.809030][T29332] sch_tbf: burst 720 is lower than device lo mtu (11337746) ! [ 274.008923][T29371] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 274.246765][T29424] netlink: 'syz.5.10509': attribute type 13 has an invalid length. [ 275.014013][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 275.014046][ T29] audit: type=1400 audit(1752491657.060:17982): avc: denied { map_create } for pid=29488 comm="syz.7.10531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.040845][ T29] audit: type=1400 audit(1752491657.060:17983): avc: denied { prog_load } for pid=29488 comm="syz.7.10531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.061016][ T29] audit: type=1400 audit(1752491657.060:17984): avc: denied { prog_load } for pid=29488 comm="syz.7.10531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.081333][ T29] audit: type=1400 audit(1752491657.070:17985): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.106651][ T29] audit: type=1400 audit(1752491657.090:17986): avc: denied { prog_load } for pid=29490 comm="syz.7.10532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.126959][ T29] audit: type=1400 audit(1752491657.180:17987): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 275.153830][ T29] audit: type=1400 audit(1752491657.200:17988): avc: denied { read write } for pid=29492 comm="syz.2.10533" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 275.197281][ T29] audit: type=1400 audit(1752491657.200:17989): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.222449][ T29] audit: type=1400 audit(1752491657.230:17990): avc: denied { map_create } for pid=29492 comm="syz.2.10533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.242665][ T29] audit: type=1400 audit(1752491657.230:17991): avc: denied { prog_load } for pid=29492 comm="syz.2.10533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.356761][T29508] netlink: 'syz.2.10539': attribute type 1 has an invalid length. [ 275.413436][T29526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10544'. [ 275.430210][T29526] macvtap1: entered promiscuous mode [ 275.435607][T29526] erspan0: entered promiscuous mode [ 275.441130][T29526] macvtap1: entered allmulticast mode [ 275.446540][T29526] erspan0: entered allmulticast mode [ 275.480391][T29532] netlink: 'syz.0.10546': attribute type 4 has an invalid length. [ 275.488337][T29532] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10546'. [ 275.509218][T29532] : renamed from bond0 [ 275.684351][T29573] netlink: 'syz.7.10562': attribute type 4 has an invalid length. [ 275.692465][T29573] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10562'. [ 275.729990][T29573] : renamed from bond0 (while UP) [ 275.950150][T29622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.957482][T29622] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 275.961487][T29626] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10580'. [ 275.979258][T29622] bond3: (slave vcan1): Error -95 calling set_mac_address [ 276.774317][T29709] validate_nla: 2 callbacks suppressed [ 276.774331][T29709] netlink: 'syz.3.10605': attribute type 1 has an invalid length. [ 276.811026][T29709] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 276.822052][T29709] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 276.878342][T29709] bond3: (slave vcan1): making interface the new active one [ 276.908330][T29709] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 277.014186][T29764] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10615'. [ 277.125390][T29784] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 277.597625][T29843] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10642'. [ 277.630184][T29843] bond0 (unregistering): (slave 30): Releasing backup interface [ 277.642240][T29843] : left promiscuous mode [ 277.646900][T29843] : left allmulticast mode [ 277.659923][T29843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.691128][T29843] bond_slave_1: left promiscuous mode [ 277.696702][T29843] bond_slave_1: left allmulticast mode [ 277.728856][T29843] bond0 (unregistering): (slave bond1): Releasing backup interface [ 277.744718][T29843] bond1: left promiscuous mode [ 277.749909][T29843] bond1: left allmulticast mode [ 277.763656][T29863] Cannot find add_set index 0 as target [ 277.769925][T29843] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 277.798251][T29843] dummy0: left promiscuous mode [ 277.820333][T29843] dummy0: left allmulticast mode [ 277.836199][T29843] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 277.867185][T29843] geneve1: left allmulticast mode [ 277.885274][T29843] bond0 (unregistering): Released all slaves [ 277.916420][T29913] netlink: 'syz.7.10659': attribute type 13 has an invalid length. [ 277.988011][T29913] bridge0: port 3(team0) entered disabled state [ 277.994576][T29913] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.001822][T29913] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.169618][T29913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.191851][T29913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.293456][T29913] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.303279][T29913] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.312391][T29913] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.322109][T29913] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.386069][T29913] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.395143][T29913] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.404889][T29913] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.413967][T29913] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.510545][T29952] netlink: 'syz.7.10674': attribute type 1 has an invalid length. [ 278.555454][T29952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.981003][T30057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10693'. [ 279.027578][T30073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10695'. [ 279.042432][T30073] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 279.211182][T30103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10705'. [ 279.221817][T30103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10705'. [ 279.412499][T30132] 0: left allmulticast mode [ 279.417173][T30132] hsr_slave_0: left allmulticast mode [ 279.423369][T30132] hsr_slave_1: left allmulticast mode [ 279.432835][T30132] bridge1: left allmulticast mode [ 279.438998][T30132] wireguard0: left allmulticast mode [ 279.445039][T30132] vlan0: left allmulticast mode [ 279.450161][T30132] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 279.459422][T30132] ip6tnl1: left promiscuous mode [ 279.466599][T30132] bond2: left promiscuous mode [ 279.471661][T30132] batadv1: left promiscuous mode [ 279.480288][T30132] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.489441][T30132] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.499014][T30132] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.508087][T30132] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.517317][T30132] vxlan1: left promiscuous mode [ 279.524674][T30132] ip6gre2: left allmulticast mode [ 279.999210][T30165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10728'. [ 280.009203][T30165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10728'. [ 280.050518][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 280.050534][ T29] audit: type=1400 audit(1752491662.102:18597): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 280.081125][ T29] audit: type=1400 audit(1752491662.112:18598): avc: denied { prog_load } for pid=30168 comm="syz.0.10729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.101254][ T29] audit: type=1400 audit(1752491662.112:18599): avc: denied { map_create } for pid=30168 comm="syz.0.10729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.121346][ T29] audit: type=1400 audit(1752491662.112:18600): avc: denied { prog_load } for pid=30168 comm="syz.0.10729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.141293][ T29] audit: type=1400 audit(1752491662.112:18601): avc: denied { prog_load } for pid=30168 comm="syz.0.10729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.161235][ T29] audit: type=1400 audit(1752491662.112:18602): avc: denied { prog_load } for pid=30168 comm="syz.0.10729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.181229][ T29] audit: type=1400 audit(1752491662.122:18603): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 280.207134][ T29] audit: type=1400 audit(1752491662.162:18604): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 280.231038][ T29] audit: type=1400 audit(1752491662.233:18605): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 280.254971][ T29] audit: type=1400 audit(1752491662.253:18606): avc: denied { map_create } for pid=30174 comm="syz.5.10731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.601200][T30226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10752'. [ 280.615118][T30226] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10752'. [ 280.740794][T30241] netlink: 566 bytes leftover after parsing attributes in process `syz.0.10761'. [ 280.964166][T30265] netlink: 'syz.2.10772': attribute type 1 has an invalid length. [ 280.972117][T30265] netlink: 'syz.2.10772': attribute type 4 has an invalid length. [ 280.980712][T30265] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.10772'. [ 281.067587][T30269] netlink: 'syz.3.10775': attribute type 1 has an invalid length. [ 281.112605][T30269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.386374][T30340] syzkaller0: entered promiscuous mode [ 281.392016][T30340] syzkaller0: entered allmulticast mode [ 281.416202][T30340] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 281.685235][T30385] Falling back ldisc for ptm0. [ 281.944926][T30444] netlink: 'syz.2.10818': attribute type 1 has an invalid length. [ 282.007276][T30448] wireguard0: entered promiscuous mode [ 282.013014][T30448] wireguard0: entered allmulticast mode [ 282.097537][T30444] bond6: (slave gretap0): making interface the new active one [ 282.150854][T30444] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 282.328561][T30520] netlink: 'syz.2.10828': attribute type 4 has an invalid length. [ 282.499923][T30551] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 282.714720][T30578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30578 comm=syz.5.10844 [ 283.255412][T30637] netlink: 'syz.0.10867': attribute type 10 has an invalid length. [ 283.291136][T30637] : (slave bridge0): Enslaving as an active interface with an up link [ 283.311312][T30640] : (slave bridge0): Releasing backup interface [ 283.329884][T30640] bridge0 (unregistering): left allmulticast mode [ 283.766694][T30688] netlink: '+}[@': attribute type 13 has an invalid length. [ 283.800167][T30688] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.820635][T30688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.213724][T30768] netlink: 'syz.3.10912': attribute type 10 has an invalid length. [ 284.236838][T30768] __nla_validate_parse: 9 callbacks suppressed [ 284.236859][T30768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10912'. [ 284.450261][T30794] netlink: 'syz.3.10919': attribute type 4 has an invalid length. [ 284.777155][T30819] bridge0: port 3(team0) entered disabled state [ 284.785836][T30819] O3c: left allmulticast mode [ 284.790820][T30819] O3c: left promiscuous mode [ 284.796021][T30819] bridge0: port 1(O3c) entered disabled state [ 284.804844][T30819] bridge_slave_1: left allmulticast mode [ 284.810698][T30819] bridge_slave_1: left promiscuous mode [ 284.816511][T30819] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.825001][T30819] team_slave_0: left promiscuous mode [ 284.830628][T30819] team_slave_0: left allmulticast mode [ 284.838916][T30819] team0: Port device team_slave_0 removed [ 284.846041][T30819] team_slave_1: left promiscuous mode [ 284.851590][T30819] team_slave_1: left allmulticast mode [ 284.860044][T30819] team0: Port device team_slave_1 removed [ 284.866708][T30819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.874406][T30819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.884932][T30819] bond2: (slave ip6gre2): Releasing backup interface [ 284.893282][T30819] bond4: (slave vcan1): Releasing backup interface [ 285.042681][T30842] : renamed from pim6reg1 [ 285.128232][ T29] kauditd_printk_skb: 750 callbacks suppressed [ 285.128249][ T29] audit: type=1400 audit(1752491667.185:19357): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 285.187167][ T29] audit: type=1400 audit(1752491667.245:19358): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 285.212951][ T29] audit: type=1400 audit(1752491667.265:19359): avc: denied { map_create } for pid=30848 comm="syz.2.10934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.260067][ T29] audit: type=1400 audit(1752491667.295:19360): avc: denied { prog_load } for pid=30848 comm="syz.2.10934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.279555][ T29] audit: type=1400 audit(1752491667.295:19361): avc: denied { prog_load } for pid=30848 comm="syz.2.10934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.299074][ T29] audit: type=1400 audit(1752491667.295:19362): avc: denied { create } for pid=30848 comm="syz.2.10934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 285.320025][ T29] audit: type=1400 audit(1752491667.305:19363): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 285.343456][ T29] audit: type=1400 audit(1752491667.315:19364): avc: denied { prog_load } for pid=30852 comm="syz.2.10935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.362904][ T29] audit: type=1400 audit(1752491667.355:19365): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 285.386289][ T29] audit: type=1400 audit(1752491667.365:19366): avc: denied { open } for pid=30852 comm="syz.2.10935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 285.453218][T30865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10940'. [ 285.603497][T30898] netlink: 'syz.5.10951': attribute type 1 has an invalid length. [ 285.641649][T30898] bond0: (slave geneve2): Opening slave failed [ 286.000849][T30987] : renamed from pim6reg1 [ 286.521474][T31054] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10995'. [ 286.616411][T31071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11002'. [ 286.926545][T31130] serio: Serial port ptm0 [ 287.520714][T31158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31158 comm=syz.2.11040 [ 287.583840][T31168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11045'. [ 287.967603][T31187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11052'. [ 288.181517][T31212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11063'. [ 288.691237][T31292] netlink: 'syz.7.11097': attribute type 3 has an invalid length. [ 289.159962][T31296] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11099'. [ 289.230962][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11101'. [ 289.240757][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11101'. [ 289.250950][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11101'. [ 289.260481][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11101'. [ 289.270439][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11101'. [ 289.841072][T31382] ALSA: seq fatal error: cannot create timer (-22) [ 290.000219][T31408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11122'. [ 290.028567][T31414] serio: Serial port ptm0 [ 290.134189][ T29] kauditd_printk_skb: 713 callbacks suppressed [ 290.134208][ T29] audit: type=1400 audit(1752491672.187:20080): avc: denied { prog_load } for pid=31427 comm="syz.7.11128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 290.160474][ T29] audit: type=1400 audit(1752491672.187:20081): avc: denied { prog_load } for pid=31427 comm="syz.7.11128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 290.180599][ T29] audit: type=1400 audit(1752491672.187:20082): avc: denied { create } for pid=31427 comm="syz.7.11128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 290.204528][ T29] audit: type=1400 audit(1752491672.238:20083): avc: denied { map_create } for pid=31429 comm="syz.0.11129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 290.224923][ T29] audit: type=1400 audit(1752491672.238:20084): avc: denied { map_create } for pid=31429 comm="syz.0.11129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 290.245500][ T29] audit: type=1400 audit(1752491672.238:20085): avc: denied { prog_load } for pid=31429 comm="syz.0.11129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 290.264868][ T29] audit: type=1400 audit(1752491672.258:20086): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.300651][ T29] audit: type=1400 audit(1752491672.258:20087): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 290.324328][ T29] audit: type=1400 audit(1752491672.258:20088): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 290.347693][ T29] audit: type=1400 audit(1752491672.348:20089): avc: denied { prog_load } for pid=31431 comm="syz.0.11131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 290.623153][T31493] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11150'. [ 290.638628][T31481] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11150'. [ 290.654534][T31495] netlink: 'syz.3.11157': attribute type 1 has an invalid length. [ 290.663254][T31495] netlink: 'syz.3.11157': attribute type 4 has an invalid length. [ 290.671194][T31495] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11157'. [ 290.671948][T31497] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 290.717984][T31500] netlink: 304 bytes leftover after parsing attributes in process `syz.2.11159'. [ 290.734698][T31500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11159'. [ 291.333757][T31636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11196'. [ 292.733727][T31809] pim6reg1: entered promiscuous mode [ 292.739128][T31809] pim6reg1: entered allmulticast mode [ 293.178922][T31873] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.894149][T31981] macvlan1: entered promiscuous mode [ 293.903374][T31981] ipvlan0: entered promiscuous mode [ 293.909348][T31981] ipvlan0: left promiscuous mode [ 293.915189][T31981] macvlan1: left promiscuous mode [ 294.451103][T32057] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 294.457723][T32057] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 294.465557][T32057] vhci_hcd vhci_hcd.0: Device attached [ 294.474150][T32057] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 294.480783][T32057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 294.488321][T32057] vhci_hcd vhci_hcd.0: Device attached [ 294.501167][T32057] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 294.507740][T32057] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 294.515451][T32057] vhci_hcd vhci_hcd.0: Device attached [ 294.526127][T32057] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 294.535050][T32057] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 294.544125][T32057] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(13) [ 294.550792][T32057] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 294.558453][T32057] vhci_hcd vhci_hcd.0: Device attached [ 294.570350][T32057] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(15) [ 294.577096][T32057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 294.584595][T32057] vhci_hcd vhci_hcd.0: Device attached [ 294.595979][T32063] vhci_hcd: connection closed [ 294.596159][T32060] vhci_hcd: connection closed [ 294.596323][ T412] vhci_hcd: stop threads [ 294.601072][T32058] vhci_hcd: connection closed [ 294.610871][ T412] vhci_hcd: release socket [ 294.620044][ T412] vhci_hcd: disconnect device [ 294.625766][T32070] vhci_hcd: connection closed [ 294.626768][T32075] vhci_hcd: connection closed [ 294.633345][ T412] vhci_hcd: stop threads [ 294.642463][ T412] vhci_hcd: release socket [ 294.646923][ T412] vhci_hcd: disconnect device [ 294.652034][ T412] vhci_hcd: stop threads [ 294.656319][ T412] vhci_hcd: release socket [ 294.660876][ T412] vhci_hcd: disconnect device [ 294.665892][ T3395] vhci_hcd: vhci_device speed not set [ 294.673226][ T412] vhci_hcd: stop threads [ 294.677586][ T412] vhci_hcd: release socket [ 294.682869][ T412] vhci_hcd: disconnect device [ 294.687824][ T412] vhci_hcd: stop threads [ 294.692139][ T412] vhci_hcd: release socket [ 294.696578][ T412] vhci_hcd: disconnect device [ 294.718708][T32091] __nla_validate_parse: 5 callbacks suppressed [ 294.718727][T32091] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11363'. [ 295.140708][ T29] kauditd_printk_skb: 967 callbacks suppressed [ 295.140727][ T29] audit: type=1400 audit(1752491677.190:21057): avc: denied { allowed } for pid=32175 comm="syz.7.11399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 295.186551][ T29] audit: type=1400 audit(1752491677.200:21058): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 295.211954][ T29] audit: type=1400 audit(1752491677.200:21059): avc: denied { create } for pid=32177 comm="syz.7.11400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 295.232673][ T29] audit: type=1400 audit(1752491677.240:21060): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 295.257619][ T29] audit: type=1400 audit(1752491677.270:21061): avc: denied { create } for pid=32183 comm="syz.2.11401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 295.279343][ T29] audit: type=1400 audit(1752491677.270:21062): avc: denied { prog_load } for pid=32183 comm="syz.2.11401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 295.299810][ T29] audit: type=1400 audit(1752491677.270:21063): avc: denied { prog_load } for pid=32183 comm="syz.2.11401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 295.320118][ T29] audit: type=1400 audit(1752491677.270:21064): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 295.344413][ T29] audit: type=1400 audit(1752491677.320:21065): avc: denied { map_create } for pid=32186 comm="syz.2.11402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 295.364754][ T29] audit: type=1400 audit(1752491677.320:21066): avc: denied { prog_load } for pid=32186 comm="syz.2.11402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 295.674975][T32253] ip6tnl3: entered promiscuous mode [ 295.923336][T32303] serio: Serial port ptm0 [ 296.193565][T32343] netlink: 'syz.7.11465': attribute type 4 has an invalid length. [ 296.205211][T32343] netlink: 'syz.7.11465': attribute type 4 has an invalid length. [ 296.302481][T32370] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 296.309045][T32370] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 296.316854][T32370] vhci_hcd vhci_hcd.0: Device attached [ 296.324715][T32370] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 296.331547][T32370] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.339188][T32370] vhci_hcd vhci_hcd.0: Device attached [ 296.346259][T32370] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 296.352809][T32370] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 296.361086][T32370] vhci_hcd vhci_hcd.0: Device attached [ 296.367326][T32370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.376143][T32370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.385424][T32370] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 296.392053][T32370] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 296.400382][T32370] vhci_hcd vhci_hcd.0: Device attached [ 296.407078][T32370] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 296.413743][T32370] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.421849][T32370] vhci_hcd vhci_hcd.0: Device attached [ 296.427975][T32381] vhci_hcd: connection closed [ 296.428158][ T4826] vhci_hcd: stop threads [ 296.428320][T32371] vhci_hcd: connection closed [ 296.432927][ T4826] vhci_hcd: release socket [ 296.440737][T32379] vhci_hcd: connection closed [ 296.441880][ T4826] vhci_hcd: disconnect device [ 296.446451][T32376] vhci_hcd: connection closed [ 296.453192][T32374] vhci_hcd: connection closed [ 296.456232][ T4826] vhci_hcd: stop threads [ 296.470185][ T4826] vhci_hcd: release socket [ 296.474796][ T4826] vhci_hcd: disconnect device [ 296.482664][ T4826] vhci_hcd: stop threads [ 296.487018][ T4826] vhci_hcd: release socket [ 296.491513][ T4826] vhci_hcd: disconnect device [ 296.496024][T32386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11475'. [ 296.505815][ T4826] vhci_hcd: stop threads [ 296.510141][ T4826] vhci_hcd: release socket [ 296.514579][ T4826] vhci_hcd: disconnect device [ 296.519455][ T3395] vhci_hcd: vhci_device speed not set [ 296.527880][ T4826] vhci_hcd: stop threads [ 296.532208][ T4826] vhci_hcd: release socket [ 296.536684][ T4826] vhci_hcd: disconnect device [ 296.554472][T32394] netlink: 92 bytes leftover after parsing attributes in process `syz.7.11478'. [ 296.564316][T32394] netem: unknown loss type 0 [ 296.569170][T32394] netem: change failed [ 297.077053][T32470] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11502'. [ 297.139611][T32482] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 297.349501][T32520] netlink: 'syz.3.11529': attribute type 1 has an invalid length. [ 297.357449][T32520] netlink: 'syz.3.11529': attribute type 4 has an invalid length. [ 297.366490][T32520] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11529'. [ 297.751042][T32537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11525'. [ 297.764158][T32538] ip6tnl3: entered promiscuous mode [ 297.809534][T32551] sch_tbf: burst 128 is lower than device ip6tnl0 mtu (1452) ! [ 297.840536][T32556] bond0: entered promiscuous mode [ 297.845636][T32556] veth0_to_bond: entered promiscuous mode [ 297.855249][T32556] batadv0: entered promiscuous mode [ 297.862578][T32556] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 297.872552][T32556] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 297.888331][T32556] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 297.897447][T32556] bond0: left promiscuous mode [ 297.902320][T32556] veth0_to_bond: left promiscuous mode [ 297.909600][T32556] batadv0: left promiscuous mode [ 298.413850][T32656] netlink: 'syz.0.11559': attribute type 4 has an invalid length. [ 298.430073][T32656] netlink: 'syz.0.11559': attribute type 4 has an invalid length. [ 298.487009][T32664] bond0: entered promiscuous mode [ 298.505648][T32664] batadv0: entered promiscuous mode [ 298.511708][T32664] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 298.521607][T32664] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 298.532097][T32664] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 298.540777][T32664] bond0: left promiscuous mode [ 298.546538][T32664] batadv0: left promiscuous mode [ 298.573534][T32674] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11567'. [ 298.645778][T32701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11572'. [ 298.685370][T32704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11571'. [ 299.494131][T32720] netlink: 'syz.2.11579': attribute type 1 has an invalid length. [ 299.502050][T32720] netlink: 'syz.2.11579': attribute type 4 has an invalid length. [ 299.509906][T32720] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11579'. [ 299.533222][T32728] bond0: entered promiscuous mode [ 299.539915][T32728] batadv0: entered promiscuous mode [ 299.546095][T32728] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 299.555475][T32728] Cannot create hsr debugfs directory [ 299.561472][T32728] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 299.571405][T32728] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 299.599443][T32728] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 299.610694][T32728] bond0: left promiscuous mode [ 299.622747][T32728] batadv0: left promiscuous mode [ 299.639502][T32743] bond2: (slave batadv1): Releasing backup interface [ 299.649203][T32743] bond6: (slave gretap0): Releasing active interface [ 299.737901][T32755] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11589'. [ 299.747262][T32755] netlink: 204 bytes leftover after parsing attributes in process `syz.7.11589'. [ 299.927223][ T322] syzkaller0: entered promiscuous mode [ 299.932803][ T322] syzkaller0: entered allmulticast mode [ 300.020857][ T341] netlink: 112 bytes leftover after parsing attributes in process `syz.3.11601'. [ 300.152689][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 300.152708][ T29] audit: type=1400 audit(1752491682.212:21722): avc: denied { prog_load } for pid=361 comm="syz.2.11607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.179362][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11610'. [ 300.188470][ T368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11610'. [ 300.203336][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11610'. [ 300.207474][ T29] audit: type=1400 audit(1752491682.212:21723): avc: denied { map_create } for pid=365 comm="syz.3.11609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.212425][ T368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11610'. [ 300.231647][ T29] audit: type=1400 audit(1752491682.222:21724): avc: denied { prog_load } for pid=365 comm="syz.3.11609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.260186][ T29] audit: type=1400 audit(1752491682.222:21725): avc: denied { create } for pid=365 comm="syz.3.11609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 300.280152][ T29] audit: type=1400 audit(1752491682.222:21726): avc: denied { prog_load } for pid=367 comm="syz.3.11610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.299629][ T29] audit: type=1400 audit(1752491682.323:21727): avc: denied { prog_load } for pid=371 comm="syz.3.11611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.318868][ T29] audit: type=1400 audit(1752491682.343:21728): avc: denied { open } for pid=371 comm="syz.3.11611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 300.338601][ T29] audit: type=1400 audit(1752491682.343:21729): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 300.370087][ T29] audit: type=1400 audit(1752491682.403:21730): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 300.393663][ T29] audit: type=1400 audit(1752491682.403:21731): avc: denied { map } for pid=374 comm="syz.3.11621" path="socket:[88442]" dev="sockfs" ino=88442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=0 [ 300.598061][ T435] netlink: 'syz.2.11632': attribute type 10 has an invalid length. [ 300.598088][ T435] geneve1: entered promiscuous mode [ 301.034697][ T520] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 301.134133][ T533] : (slave dummy0): Releasing backup interface [ 301.140532][ T533] : (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 301.175069][ T537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11670'. [ 301.184524][ T533] : (slave bridge_slave_1): Releasing backup interface [ 301.194600][ T533] bond4: (slave veth0_to_bond): Releasing backup interface [ 301.214942][ T537] macvtap2: entered promiscuous mode [ 301.220511][ T537] macvtap2: entered allmulticast mode [ 301.231516][ T537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11670'. [ 301.577753][ T617] netlink: 'syz.5.11692': attribute type 4 has an invalid length. [ 301.668142][ T635] team0: Port device dummy0 removed [ 301.696136][ T635] bond0: (slave veth0_to_bond): Releasing backup interface [ 301.715840][ T635] bond3: (slave vcan1): Releasing backup interface [ 302.279013][ T706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11702'. [ 302.559443][ T767] syzkaller0: entered promiscuous mode [ 302.565007][ T767] syzkaller0: entered allmulticast mode [ 304.080083][ T875] netlink: 'syz.0.11759': attribute type 10 has an invalid length. [ 304.145154][ T887] macvlan4: entered promiscuous mode [ 304.150762][ T887] bond0: entered promiscuous mode [ 304.156075][ T887] macvlan4: entered allmulticast mode [ 304.161517][ T887] bond0: entered allmulticast mode [ 304.166901][ T887] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 304.175028][ T887] bond0: left allmulticast mode [ 304.180029][ T887] bond0: left promiscuous mode [ 304.281343][ T902] macvlan2: entered promiscuous mode [ 304.286875][ T902] bond0: entered promiscuous mode [ 304.292103][ T902] macvlan2: entered allmulticast mode [ 304.297605][ T902] bond0: entered allmulticast mode [ 304.303094][ T902] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 304.311670][ T902] bond0: left allmulticast mode [ 304.316802][ T902] bond0: left promiscuous mode [ 304.979366][ T957] macvlan4: entered promiscuous mode [ 304.984774][ T957] bond0: entered promiscuous mode [ 304.990028][ T957] macvlan4: entered allmulticast mode [ 304.995483][ T957] bond0: entered allmulticast mode [ 305.002437][ T957] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 305.011210][ T957] bond0: left allmulticast mode [ 305.016302][ T957] bond0: left promiscuous mode [ 305.161184][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 305.161199][ T29] audit: type=1400 audit(1752491687.225:22280): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 305.194967][ T29] audit: type=1400 audit(1752491687.225:22281): avc: denied { read write } for pid=24514 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 305.219425][ T29] audit: type=1400 audit(1752491687.255:22282): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 305.245218][ T29] audit: type=1400 audit(1752491687.315:22283): avc: denied { read write } for pid=4453 comm="syz-executor" name="loop5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 305.283839][ T984] netlink: 'syz.7.11791': attribute type 10 has an invalid length. [ 305.299447][ T984] team0: Device macvtap0 failed to register rx_handler [ 305.302554][ T29] audit: type=1400 audit(1752491687.335:22284): avc: denied { map_create } for pid=980 comm="syz.5.11794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 305.325832][ T29] audit: type=1400 audit(1752491687.335:22285): avc: denied { prog_load } for pid=980 comm="syz.5.11794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 305.345114][ T29] audit: type=1400 audit(1752491687.335:22286): avc: denied { prog_load } for pid=980 comm="syz.5.11794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 305.364825][ T29] audit: type=1400 audit(1752491687.335:22287): avc: denied { watch } for pid=980 comm="syz.5.11794" path="/2214/control" dev="tmpfs" ino=11387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 305.387832][ T29] audit: type=1400 audit(1752491687.335:22288): avc: denied { map_create } for pid=977 comm="syz.2.11793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 305.407167][ T29] audit: type=1400 audit(1752491687.345:22289): avc: denied { prog_load } for pid=978 comm="syz.0.11792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 305.915203][ T1082] netlink: 'syz.7.11846': attribute type 4 has an invalid length. [ 305.978619][ T1091] __nla_validate_parse: 4 callbacks suppressed [ 305.978635][ T1091] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11842'. [ 306.141402][ T1131] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11858'. [ 306.313298][ T1169] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11874'. [ 306.667065][ T1244] syz_tun: entered promiscuous mode [ 306.673308][ T1244] batadv_slave_0: entered promiscuous mode [ 306.681567][ T1244] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 306.690500][ T1244] Cannot create hsr debugfs directory [ 306.696289][ T1244] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 306.706461][ T1244] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.717426][ T1244] hsr1: entered allmulticast mode [ 306.722586][ T1244] syz_tun: entered allmulticast mode [ 306.727953][ T1244] batadv_slave_0: entered allmulticast mode [ 306.761661][ T1263] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11912'. [ 307.784488][ T1421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11975'. [ 307.793517][ T1421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11975'. [ 307.803909][ T1421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11975'. [ 307.812959][ T1421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11975'. [ 307.942116][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11987'. [ 308.193451][ C0] ================================================================== [ 308.201598][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 308.208836][ C0] [ 308.211190][ C0] read-write to 0xffff8881000730b8 of 8 bytes by interrupt on cpu 1: [ 308.219283][ C0] wq_worker_tick+0x60/0x230 [ 308.223899][ C0] sched_tick+0x11a/0x270 [ 308.228241][ C0] update_process_times+0x15f/0x190 [ 308.233484][ C0] tick_nohz_handler+0x249/0x2d0 [ 308.238441][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 308.243654][ C0] hrtimer_interrupt+0x21a/0x460 [ 308.248604][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 308.254518][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 308.260170][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.266685][ C0] n_tty_receive_buf_common+0x3d1/0xbe0 [ 308.272264][ C0] n_tty_receive_buf2+0x33/0x40 [ 308.277164][ C0] tty_ldisc_receive_buf+0x66/0xf0 [ 308.282305][ C0] tty_port_default_receive_buf+0x59/0x90 [ 308.288057][ C0] flush_to_ldisc+0x141/0x360 [ 308.292757][ C0] process_scheduled_works+0x4cb/0x9d0 [ 308.298239][ C0] worker_thread+0x582/0x770 [ 308.302853][ C0] kthread+0x489/0x510 [ 308.307022][ C0] ret_from_fork+0xda/0x150 [ 308.311537][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.316323][ C0] [ 308.318652][ C0] read-write to 0xffff8881000730b8 of 8 bytes by interrupt on cpu 0: [ 308.326727][ C0] wq_worker_tick+0x60/0x230 [ 308.331342][ C0] sched_tick+0x11a/0x270 [ 308.335694][ C0] update_process_times+0x15f/0x190 [ 308.340938][ C0] tick_nohz_handler+0x249/0x2d0 [ 308.345903][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 308.351121][ C0] hrtimer_interrupt+0x21a/0x460 [ 308.356083][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 308.362009][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 308.367667][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.373697][ C0] _raw_spin_unlock_irq+0x2f/0x50 [ 308.378736][ C0] process_scheduled_works+0x486/0x9d0 [ 308.384220][ C0] worker_thread+0x582/0x770 [ 308.388835][ C0] kthread+0x489/0x510 [ 308.392919][ C0] ret_from_fork+0xda/0x150 [ 308.397437][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.402218][ C0] [ 308.404548][ C0] value changed: 0x0000000000319750 -> 0x000000000031be60 [ 308.411661][ C0] [ 308.413992][ C0] Reported by Kernel Concurrency Sanitizer on: [ 308.420168][ C0] CPU: 0 UID: 0 PID: 4826 Comm: kworker/u8:13 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 308.431117][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.441190][ C0] Workqueue: events_unbound flush_to_ldisc [ 308.447032][ C0] ==================================================================