last executing test programs: 1m19.98130212s ago: executing program 3 (id=1501): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 1m19.839723046s ago: executing program 3 (id=1503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 1m19.73699568s ago: executing program 3 (id=1505): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1}, 0xfffffffe}], 0x1, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m19.554324268s ago: executing program 3 (id=1512): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m19.487892331s ago: executing program 3 (id=1515): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff82) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m19.155874544s ago: executing program 3 (id=1516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x4, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 1m19.155626885s ago: executing program 32 (id=1516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x4, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 2.060061006s ago: executing program 4 (id=4499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x32d15422}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') 1.175949462s ago: executing program 4 (id=4525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.174728192s ago: executing program 2 (id=4536): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.151288243s ago: executing program 2 (id=4528): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 701.606582ms ago: executing program 2 (id=4532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 634.413024ms ago: executing program 5 (id=4533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x8) r1 = syz_io_uring_setup(0x2a09, &(0x7f0000000000)={0x0, 0x7f36, 0x800, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 570.022697ms ago: executing program 5 (id=4534): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x5c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xffffff36}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040055}, 0x80) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb4c625f48ce6b9"}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400"], 0xa8}}, 0x0) 534.499479ms ago: executing program 2 (id=4537): r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 534.134339ms ago: executing program 5 (id=4538): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x400000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x6}, {0x9}}}, 0x24}}, 0x0) 501.88937ms ago: executing program 2 (id=4539): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) unshare(0x22020600) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf5c6}) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 487.294761ms ago: executing program 2 (id=4540): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 394.378374ms ago: executing program 5 (id=4541): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x0, 0xfffffffffffffff8, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x7, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x9, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0xff, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x6, 0x7, 0x6, 0xa, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x6, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 376.288625ms ago: executing program 5 (id=4542): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) 361.170006ms ago: executing program 5 (id=4543): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) 191.997763ms ago: executing program 0 (id=4547): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 174.551414ms ago: executing program 4 (id=4548): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r3, r1, 0x80000) 166.036774ms ago: executing program 0 (id=4549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 146.458314ms ago: executing program 1 (id=4550): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r1) 146.275104ms ago: executing program 4 (id=4551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 125.986856ms ago: executing program 0 (id=4552): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 125.735576ms ago: executing program 1 (id=4553): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x48000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 104.687977ms ago: executing program 1 (id=4554): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', '', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e'}]}, 0x98) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 97.238037ms ago: executing program 0 (id=4555): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r3) 91.522537ms ago: executing program 4 (id=4556): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 85.524917ms ago: executing program 1 (id=4557): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0xf) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) 79.646317ms ago: executing program 0 (id=4558): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 65.122308ms ago: executing program 1 (id=4559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.286008ms ago: executing program 0 (id=4560): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x113) shutdown(0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 56.449148ms ago: executing program 4 (id=4561): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) 0s ago: executing program 1 (id=4562): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): ] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=6346 comm=syz.3.1070 [ 76.480297][ T6347] loop2: detected capacity change from 0 to 512 [ 76.635956][ T6361] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1077'. [ 76.770060][ T6384] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1086'. [ 76.829816][ T6386] SELinux: failed to load policy [ 77.123205][ T6410] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.1100'. [ 77.157063][ T6410] netlink: zone id is out of range [ 77.162324][ T6410] netlink: zone id is out of range [ 77.191448][ T6410] netlink: zone id is out of range [ 77.362684][ T6429] netlink: 'syz.4.1108': attribute type 12 has an invalid length. [ 77.461726][ T6436] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 78.243761][ T6513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6513 comm=syz.2.1143 [ 78.485667][ T6534] loop2: detected capacity change from 0 to 7 [ 78.725576][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 78.725589][ T29] audit: type=1326 audit(1764291822.864:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3866f749 code=0x7ffc0000 [ 78.755120][ T29] audit: type=1326 audit(1764291822.864:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3866f749 code=0x7ffc0000 [ 78.791239][ T29] audit: type=1326 audit(1764291822.864:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f3c3866f749 code=0x7ffc0000 [ 78.814703][ T29] audit: type=1326 audit(1764291822.864:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3866f749 code=0x7ffc0000 [ 78.838134][ T29] audit: type=1326 audit(1764291822.864:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3866f749 code=0x7ffc0000 [ 79.289857][ T29] audit: type=1326 audit(1764291823.424:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288645f749 code=0x7ffc0000 [ 79.313323][ T29] audit: type=1326 audit(1764291823.424:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288645f749 code=0x7ffc0000 [ 79.337408][ T29] audit: type=1326 audit(1764291823.474:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f288645f749 code=0x7ffc0000 [ 79.360933][ T29] audit: type=1326 audit(1764291823.474:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288645f749 code=0x7ffc0000 [ 79.384596][ T29] audit: type=1326 audit(1764291823.474:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288645f749 code=0x7ffc0000 [ 79.457981][ T6581] -1: renamed from syzkaller0 [ 79.552365][ T6588] netlink: 'syz.0.1177': attribute type 21 has an invalid length. [ 79.571748][ T6588] netlink: 'syz.0.1177': attribute type 1 has an invalid length. [ 79.579861][ T6588] __nla_validate_parse: 7 callbacks suppressed [ 79.579932][ T6588] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1177'. [ 79.677208][ T6602] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1184'. [ 79.686960][ T6602] net_ratelimit: 3 callbacks suppressed [ 79.687003][ T6602] netlink: zone id is out of range [ 79.697748][ T6602] netlink: zone id is out of range [ 79.703267][ T6602] netlink: zone id is out of range [ 79.708404][ T6602] netlink: zone id is out of range [ 79.713810][ T6602] netlink: zone id is out of range [ 79.725444][ T6602] netlink: zone id is out of range [ 79.725592][ T6604] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 79.752751][ T6602] netlink: set zone limit has 8 unknown bytes [ 79.838456][ T6624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6624 comm=syz.4.1194 [ 79.866382][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 79.881226][ T6630] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.903861][ T6630] macvlan2: entered promiscuous mode [ 79.909246][ T6630] macvlan2: entered allmulticast mode [ 79.915639][ T6630] bond2: (slave macvlan2): Opening slave failed [ 80.297584][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 80.312162][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.332765][ T6683] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 80.364952][ T6690] tipc: Started in network mode [ 80.369835][ T6690] tipc: Node identity ac141413, cluster identity 4711 [ 80.378260][ T6690] tipc: New replicast peer: 10.1.1.2 [ 80.383605][ T6690] tipc: Enabled bearer , priority 10 [ 80.614139][ T6705] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1227'. [ 80.809328][ T6736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6736 comm=syz.1.1240 [ 80.885093][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1245'. [ 80.999749][ T6752] loop2: detected capacity change from 0 to 7 [ 81.206244][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 81.255995][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 81.333155][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 81.373558][ T36] tipc: Node number set to 2886997011 [ 81.424390][ T6800] loop3: detected capacity change from 0 to 512 [ 81.433477][ T6800] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 81.543863][ T6814] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 81.773110][ T6853] netlink: 'syz.4.1293': attribute type 4 has an invalid length. [ 81.784930][ T6853] netlink: 'syz.4.1293': attribute type 4 has an invalid length. [ 82.352506][ T6913] tipc: Started in network mode [ 82.357488][ T6913] tipc: Node identity 7e751b09127b, cluster identity 4711 [ 82.364652][ T6913] tipc: Enabled bearer , priority 0 [ 82.388294][ T6913] syzkaller0: entered promiscuous mode [ 82.393969][ T6913] syzkaller0: entered allmulticast mode [ 82.399815][ T6913] tipc: Resetting bearer [ 82.407442][ T6911] tipc: Resetting bearer [ 82.419486][ T6911] tipc: Disabling bearer [ 82.541708][ T6932] loop1: detected capacity change from 0 to 512 [ 82.555145][ T6932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.568279][ T6932] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.612197][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.725568][ T6955] netlink: 'syz.0.1334': attribute type 30 has an invalid length. [ 82.739185][ T6927] loop2: detected capacity change from 0 to 1024 [ 82.753990][ T6927] EXT4-fs: Ignoring removed nobh option [ 82.797286][ T6967] bridge_slave_1: left allmulticast mode [ 82.803081][ T6967] bridge_slave_1: left promiscuous mode [ 82.808924][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.817064][ T6967] bridge_slave_0: left allmulticast mode [ 82.822711][ T6967] bridge_slave_0: left promiscuous mode [ 82.828598][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.016468][ T6992] netlink: 'syz.1.1352': attribute type 1 has an invalid length. [ 83.039655][ T6992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.060641][ T6992] bond2: (slave veth3): Enslaving as an active interface with a down link [ 83.076751][ T6992] .`: (slave dummy0): Releasing backup interface [ 83.091141][ T6992] bond2: (slave dummy0): making interface the new active one [ 83.100291][ T6992] dummy0: entered promiscuous mode [ 83.105626][ T6992] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 83.126838][ T6992] bond2 (unregistering): (slave veth3): Releasing active interface [ 83.135989][ T6992] bond2 (unregistering): (slave dummy0): Releasing active interface [ 83.144998][ T6992] bond2 (unregistering): Released all slaves [ 83.384917][ T7025] loop3: detected capacity change from 0 to 4096 [ 83.394202][ T7025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.423165][ T7030] netlink: 'syz.1.1367': attribute type 11 has an invalid length. [ 83.452125][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.588050][ T7050] loop3: detected capacity change from 0 to 256 [ 83.602451][ T7050] FAT-fs (loop3): bogus number of FAT sectors [ 83.608550][ T7050] FAT-fs (loop3): Can't find a valid FAT filesystem [ 83.620519][ T7055] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 83.620519][ T7055] program syz.2.1379 not setting count and/or reply_len properly [ 84.143870][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 84.143885][ T29] audit: type=1326 audit(1764291828.286:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3866f749 code=0x7ffc0000 [ 84.177065][ T29] audit: type=1326 audit(1764291828.286:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3866f749 code=0x7ffc0000 [ 84.201637][ T29] audit: type=1326 audit(1764291828.316:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3c3866f749 code=0x7ffc0000 [ 84.225079][ T29] audit: type=1326 audit(1764291828.316:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c3866f783 code=0x7ffc0000 [ 84.248544][ T29] audit: type=1326 audit(1764291828.336:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c3866f783 code=0x7ffc0000 [ 84.271785][ T29] audit: type=1326 audit(1764291828.336:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c386665e7 code=0x7ffc0000 [ 84.295087][ T29] audit: type=1326 audit(1764291828.336:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c3860b829 code=0x7ffc0000 [ 84.318510][ T29] audit: type=1326 audit(1764291828.336:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c386665e7 code=0x7ffc0000 [ 84.341815][ T29] audit: type=1326 audit(1764291828.336:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c3860b829 code=0x7ffc0000 [ 84.365360][ T29] audit: type=1326 audit(1764291828.336:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c386665e7 code=0x7ffc0000 [ 84.668310][ T7114] __nla_validate_parse: 10 callbacks suppressed [ 84.668324][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1402'. [ 84.683682][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1402'. [ 85.238348][ T7172] loop2: detected capacity change from 0 to 512 [ 85.247217][ T7173] loop1: detected capacity change from 0 to 512 [ 85.255060][ T7172] EXT4-fs: Ignoring removed i_version option [ 85.261110][ T7172] EXT4-fs: Ignoring removed bh option [ 85.271976][ T7173] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.1423: inode #0: comm syz.1.1423: iget: illegal inode # [ 85.306488][ T7173] EXT4-fs (loop1): get orphan inode failed [ 85.319018][ T7173] EXT4-fs (loop1): mount failed [ 85.767143][ T7199] pimreg: entered allmulticast mode [ 85.812629][ T7199] pimreg: left allmulticast mode [ 86.217180][ T7211] loop2: detected capacity change from 0 to 2048 [ 86.368307][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 86.455711][ T7221] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1447'. [ 86.480309][ T7166] syz.1.1423 (7166) used greatest stack depth: 6184 bytes left [ 86.574179][ T7236] capability: warning: `syz.2.1454' uses 32-bit capabilities (legacy support in use) [ 86.587886][ T7232] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1451'. [ 86.769097][ T7252] -1: renamed from syzkaller0 [ 86.835029][ T4443] IPVS: starting estimator thread 0... [ 86.930839][ T7259] IPVS: using max 2736 ests per chain, 136800 per kthread [ 86.951760][ T7266] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1467'. [ 87.039900][ T7275] loop2: detected capacity change from 0 to 512 [ 87.067625][ T7279] vhci_hcd: default hub control req: 671e v03f8 i0007 l0 [ 87.137274][ T10] IPVS: starting estimator thread 0... [ 87.145935][ T7272] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 87.230858][ T7282] IPVS: using max 2736 ests per chain, 136800 per kthread [ 87.442035][ T5208] IPVS: stop unused estimator thread 0... [ 87.615059][ T7301] -1: renamed from syzkaller0 [ 87.663098][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.671768][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.799329][ T7317] loop3: detected capacity change from 0 to 512 [ 87.806305][ T7317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.817758][ T7317] EXT4-fs (loop3): 1 truncate cleaned up [ 87.823865][ T7317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.849620][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.081285][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.089761][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.276723][ T7327] SELinux: failed to load policy [ 88.323203][ T7337] 9pnet_virtio: no channels available for device [ 88.347119][ T7340] netlink: 'syz.0.1496': attribute type 7 has an invalid length. [ 88.354915][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 88.791553][ T7367] loop2: detected capacity change from 0 to 128 [ 89.003683][ T7383] syzkaller0: entered promiscuous mode [ 89.009332][ T7383] syzkaller0: entered allmulticast mode [ 89.028689][ T7385] loop3: detected capacity change from 0 to 1024 [ 89.035458][ T7385] EXT4-fs: Ignoring removed orlov option [ 89.042921][ T7385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.101107][ T3313] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 89.118172][ T3313] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 89.326275][ T3464] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.363164][ T7387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.402367][ T3464] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.448765][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 89.448840][ T29] audit: type=1400 audit(1764291833.589:1992): avc: denied { mounton } for pid=7393 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 89.482534][ T3464] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.532894][ T3464] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.627171][ T7409] 9pnet_virtio: no channels available for device [ 89.770733][ T3464] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.780068][ T3464] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.790558][ T3464] .` (unregistering): (slave dummy0): Releasing backup interface [ 89.799371][ T3464] .` (unregistering): Released all slaves [ 89.824152][ T7393] chnl_net:caif_netlink_parms(): no params data found [ 89.846501][ T3464] hsr_slave_0: left promiscuous mode [ 89.852211][ T3464] hsr_slave_1: left promiscuous mode [ 89.857687][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.865077][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.872864][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.880349][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.889232][ T3464] veth1_macvtap: left promiscuous mode [ 89.894692][ T3464] veth0_macvtap: left promiscuous mode [ 89.900170][ T3464] veth1_vlan: left promiscuous mode [ 89.905377][ T3464] veth0_vlan: left promiscuous mode [ 89.958771][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 89.968268][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 90.009590][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.016619][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.024409][ T7393] bridge_slave_0: entered allmulticast mode [ 90.030756][ T7393] bridge_slave_0: entered promiscuous mode [ 90.037240][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.044411][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.051617][ T7393] bridge_slave_1: entered allmulticast mode [ 90.058044][ T7393] bridge_slave_1: entered promiscuous mode [ 90.073595][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.083770][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.101357][ T7393] team0: Port device team_slave_0 added [ 90.107598][ T7393] team0: Port device team_slave_1 added [ 90.121462][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.128402][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.154315][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.165493][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.172532][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.198433][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.222876][ T7393] hsr_slave_0: entered promiscuous mode [ 90.228802][ T7393] hsr_slave_1: entered promiscuous mode [ 90.283216][ T7393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.291579][ T7393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.299838][ T7393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.308265][ T7393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.322758][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.329797][ T7393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.337069][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.344091][ T7393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.369105][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.378335][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.386345][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.398663][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.408311][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.415448][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.424988][ T5210] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.432049][ T5210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.481406][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.561346][ T7393] veth0_vlan: entered promiscuous mode [ 90.568456][ T7393] veth1_vlan: entered promiscuous mode [ 90.581905][ T7393] veth0_macvtap: entered promiscuous mode [ 90.589086][ T7393] veth1_macvtap: entered promiscuous mode [ 90.600518][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.611339][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.621389][ T5208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.630451][ T5208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.640508][ T5208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.649491][ T5208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.665857][ T29] audit: type=1400 audit(1764291834.810:1993): avc: denied { mounton } for pid=7393 comm="syz-executor" path="/root/syzkaller.QS78eb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 90.718259][ T7448] netlink: 'syz.2.1532': attribute type 13 has an invalid length. [ 90.769853][ T7442] syzkaller0: entered allmulticast mode [ 90.775705][ T7448] syz_tun: entered allmulticast mode [ 90.781068][ T7442] syzkaller0: entered promiscuous mode [ 90.786619][ T7439] syz_tun: left allmulticast mode [ 90.792966][ T7442] syzkaller0 (unregistering): left allmulticast mode [ 90.799690][ T7442] syzkaller0 (unregistering): left promiscuous mode [ 90.900895][ T4437] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 90.916756][ T7451] loop4: detected capacity change from 0 to 2048 [ 90.923589][ T4437] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.950753][ T7451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.053862][ T29] audit: type=1326 audit(1764291835.200:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.5.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeecd0f749 code=0x7ffc0000 [ 91.077330][ T29] audit: type=1326 audit(1764291835.200:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.5.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeecd0f749 code=0x7ffc0000 [ 91.102877][ T29] audit: type=1326 audit(1764291835.200:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.5.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fbeecd0f749 code=0x7ffc0000 [ 91.126306][ T29] audit: type=1326 audit(1764291835.200:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.5.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeecd0f749 code=0x7ffc0000 [ 91.149683][ T29] audit: type=1326 audit(1764291835.200:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.5.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeecd0f749 code=0x7ffc0000 [ 91.189769][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.211632][ T7491] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 91.253084][ T7493] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1544'. [ 91.422652][ T7513] loop2: detected capacity change from 0 to 1024 [ 91.441339][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.464343][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.485248][ T7516] loop1: detected capacity change from 0 to 2048 [ 91.529508][ T7516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.682274][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.757451][ T7542] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1563'. [ 91.840383][ T29] audit: type=1326 audit(1764291835.990:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 91.863825][ T29] audit: type=1326 audit(1764291835.990:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 91.960124][ T29] audit: type=1326 audit(1764291836.050:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 92.012435][ T7565] netlink: 'syz.1.1571': attribute type 1 has an invalid length. [ 92.191856][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 92.208010][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1575'. [ 92.234237][ T7596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.261577][ T7596] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 92.890091][ T7677] xt_connbytes: Forcing CT accounting to be enabled [ 92.907989][ T7677] Cannot find set identified by id 0 to match [ 93.129830][ T7713] bridge: RTM_NEWNEIGH with invalid ether address [ 93.356622][ T7748] loop2: detected capacity change from 0 to 512 [ 93.371056][ T7748] EXT4-fs: Ignoring removed i_version option [ 93.377104][ T7748] EXT4-fs: Ignoring removed bh option [ 93.533832][ T7774] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1617'. [ 93.580958][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 93.599917][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 93.854989][ T7816] netlink: 'syz.1.1628': attribute type 4 has an invalid length. [ 93.869471][ T7816] netlink: 'syz.1.1628': attribute type 4 has an invalid length. [ 93.891302][ T7822] loop4: detected capacity change from 0 to 1024 [ 93.906966][ T7822] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 93.921378][ T7822] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 93.947472][ T7822] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: inode #32: comm syz.4.1630: iget: special inode unallocated [ 93.973153][ T7822] EXT4-fs (loop4): Remounting filesystem read-only [ 93.982165][ T7822] EXT4-fs (loop4): no journal found [ 93.987399][ T7822] EXT4-fs (loop4): can't get journal size [ 93.995266][ T7822] EXT4-fs (loop4): filesystem is read-only [ 94.011087][ T7822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.042260][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.089464][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 94.098437][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 94.195941][ T7857] loop4: detected capacity change from 0 to 512 [ 94.214666][ T7857] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.1647: inode #0: comm syz.4.1647: iget: illegal inode # [ 94.246346][ T7857] EXT4-fs (loop4): get orphan inode failed [ 94.267323][ T7857] EXT4-fs (loop4): mount failed [ 94.274545][ T7865] netlink: 'syz.0.1651': attribute type 10 has an invalid length. [ 94.283952][ T7865] team0: Port device dummy0 added [ 94.290300][ T7865] netlink: 'syz.0.1651': attribute type 10 has an invalid length. [ 94.319900][ T7865] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.325981][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 94.339223][ T7865] team0: Failed to send options change via netlink (err -105) [ 94.348409][ T7865] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.359274][ T7865] team0: Port device dummy0 removed [ 94.476957][ T7893] loop1: detected capacity change from 0 to 512 [ 94.500048][ T7893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.519643][ T7893] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.531827][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 94.531840][ T29] audit: type=1400 audit(1764291838.682:2111): avc: denied { create } for pid=7891 comm="syz.1.1664" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 94.583217][ T29] audit: type=1400 audit(1764291838.682:2112): avc: denied { read } for pid=7891 comm="syz.1.1664" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 94.584656][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.741568][ T29] audit: type=1326 audit(1764291838.892:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 94.765121][ T29] audit: type=1326 audit(1764291838.892:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 94.814001][ T29] audit: type=1326 audit(1764291838.942:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 94.837592][ T29] audit: type=1326 audit(1764291838.942:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 94.861012][ T29] audit: type=1326 audit(1764291838.942:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 94.884619][ T29] audit: type=1326 audit(1764291838.952:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 94.909940][ T29] audit: type=1326 audit(1764291839.032:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 94.977060][ T29] audit: type=1326 audit(1764291839.112:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 95.122602][ T7960] loop2: detected capacity change from 0 to 2048 [ 95.138257][ T7960] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 95.417451][ T8011] tipc: Started in network mode [ 95.422340][ T8011] tipc: Node identity ba7ce184f975, cluster identity 4711 [ 95.429544][ T8011] tipc: Enabled bearer , priority 0 [ 95.459541][ T8011] syzkaller0: entered promiscuous mode [ 95.465123][ T8011] syzkaller0: entered allmulticast mode [ 95.473134][ T8011] tipc: Resetting bearer [ 95.488786][ T8010] tipc: Resetting bearer [ 95.513606][ T8010] tipc: Disabling bearer [ 96.263954][ T8057] loop2: detected capacity change from 0 to 512 [ 96.307704][ T8057] __nla_validate_parse: 3 callbacks suppressed [ 96.307718][ T8057] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1729'. [ 96.670972][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.680094][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.736816][ T8099] loop2: detected capacity change from 0 to 1024 [ 96.783217][ T8102] loop4: detected capacity change from 0 to 1024 [ 96.798573][ T8102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.811217][ T8103] SELinux: ebitmap: truncated map [ 96.819402][ T8103] SELinux: failed to load policy [ 96.855479][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.932329][ T8122] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.1754'. [ 97.470964][ T8179] netlink: 'syz.5.1782': attribute type 1 has an invalid length. [ 97.484743][ T8179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.499562][ T8179] bond1 (unregistering): Released all slaves [ 97.725970][ T8209] syzkaller0: entered allmulticast mode [ 97.731856][ T8209] syzkaller0: entered promiscuous mode [ 97.742653][ T8209] syzkaller0 (unregistering): left allmulticast mode [ 97.749431][ T8209] syzkaller0 (unregistering): left promiscuous mode [ 98.075179][ T8227] loop4: detected capacity change from 0 to 1024 [ 98.086603][ T8227] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.093324][ T8227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.103936][ T8227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.119491][ T8227] EXT4-fs error (device loop4): __ext4_iget:5443: inode #12: block 13: comm syz.4.1802: invalid block [ 98.130875][ T8227] EXT4-fs (loop4): Remounting filesystem read-only [ 98.204466][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.958947][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'. [ 99.088051][ T8357] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1861'. [ 99.098491][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 99.527132][ T8390] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 99.534920][ T8390] netlink: 'syz.0.1876': attribute type 4 has an invalid length. [ 99.542640][ T8390] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1876'. [ 99.552072][ T8390] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 99.559925][ T8390] netlink: 'syz.0.1876': attribute type 4 has an invalid length. [ 99.567765][ T8390] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1876'. [ 99.584408][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 99.584421][ T29] audit: type=1400 audit(1764291843.734:2570): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.616251][ T29] audit: type=1400 audit(1764291843.764:2571): avc: denied { map_create } for pid=8392 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.635651][ T29] audit: type=1400 audit(1764291843.764:2572): avc: denied { prog_load } for pid=8392 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.654682][ T29] audit: type=1400 audit(1764291843.764:2573): avc: denied { prog_load } for pid=8392 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.673835][ T29] audit: type=1400 audit(1764291843.784:2574): avc: denied { allowed } for pid=8392 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 99.693200][ T29] audit: type=1400 audit(1764291843.784:2575): avc: denied { execute } for pid=8392 comm="syz.0.1877" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=0 [ 99.719363][ T29] audit: type=1400 audit(1764291843.804:2576): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.743551][ T29] audit: type=1400 audit(1764291843.814:2577): avc: denied { prog_load } for pid=8394 comm="syz.0.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.762636][ T29] audit: type=1400 audit(1764291843.814:2578): avc: denied { allowed } for pid=8394 comm="syz.0.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 99.783316][ T29] audit: type=1400 audit(1764291843.824:2579): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.808557][ T8405] netlink: 'syz.0.1883': attribute type 12 has an invalid length. [ 100.228956][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 100.239931][ T8442] team0 (unregistering): Port device team_slave_0 removed [ 100.248003][ T8442] team0 (unregistering): Port device team_slave_1 removed [ 100.328372][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1902'. [ 100.350980][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1902'. [ 101.034281][ T8535] netlink: 'syz.4.1942': attribute type 30 has an invalid length. [ 101.550480][ T8583] __nla_validate_parse: 4 callbacks suppressed [ 101.550495][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1964'. [ 101.594488][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1964'. [ 102.098971][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.129496][ T8615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.183349][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.263117][ T5222] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.537581][ T8638] bridge0: entered promiscuous mode [ 102.549256][ T8638] macsec1: entered promiscuous mode [ 102.560286][ T8638] bridge0: port 3(macsec1) entered blocking state [ 102.566876][ T8638] bridge0: port 3(macsec1) entered disabled state [ 102.573430][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.595617][ T8638] macsec1: entered allmulticast mode [ 102.600986][ T8638] bridge0: entered allmulticast mode [ 102.620128][ T8638] macsec1: left allmulticast mode [ 102.625235][ T8638] bridge0: left allmulticast mode [ 102.642524][ T8638] bridge0: left promiscuous mode [ 102.827656][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1990'. [ 102.882568][ T8644] team1: entered promiscuous mode [ 102.887739][ T8644] team1: entered allmulticast mode [ 102.917246][ T8644] 8021q: adding VLAN 0 to HW filter on device team1 [ 103.008004][ T8660] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 103.149151][ T8672] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2005'. [ 103.167616][ T8672] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.177813][ T8672] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.187009][ T8672] .` (unregistering): Released all slaves [ 103.302984][ T5244] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 103.310806][ T5244] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 103.842280][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 103.890044][ T8689] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 103.899289][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2011'. [ 103.928281][ T8691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.983065][ T8691] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 104.190539][ T8728] wg2: entered promiscuous mode [ 104.195464][ T8728] wg2: entered allmulticast mode [ 104.558600][ T8774] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.052328][ T29] kauditd_printk_skb: 1205 callbacks suppressed [ 105.052342][ T29] audit: type=1400 audit(1764291849.207:3785): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.091805][ T29] audit: type=1400 audit(1764291849.237:3786): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.121728][ T29] audit: type=1400 audit(1764291849.247:3787): avc: denied { map_create } for pid=8775 comm="syz.1.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.140949][ T29] audit: type=1400 audit(1764291849.247:3788): avc: denied { prog_load } for pid=8775 comm="syz.1.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.160072][ T29] audit: type=1400 audit(1764291849.247:3789): avc: denied { prog_load } for pid=8775 comm="syz.1.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.179115][ T29] audit: type=1400 audit(1764291849.247:3790): avc: denied { map_create } for pid=8775 comm="syz.1.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.198238][ T29] audit: type=1400 audit(1764291849.247:3791): avc: denied { prog_load } for pid=8775 comm="syz.1.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.217313][ T29] audit: type=1400 audit(1764291849.247:3792): avc: denied { prog_load } for pid=8775 comm="syz.1.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.236938][ T29] audit: type=1400 audit(1764291849.247:3793): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.261224][ T29] audit: type=1400 audit(1764291849.277:3794): avc: denied { create } for pid=8777 comm="syz.1.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 105.295703][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2059'. [ 105.370443][ T8811] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 105.402673][ T8811] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.411028][ T8811] bond2: (slave batadv1): making interface the new active one [ 105.420372][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'. [ 105.421301][ T8811] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 105.442172][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2072'. [ 105.451137][ T8821] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2072'. [ 105.468482][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2072'. [ 105.823991][ T8889] syzkaller0: entered promiscuous mode [ 105.829573][ T8889] syzkaller0: entered allmulticast mode [ 106.073302][ T8924] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 106.168934][ T8940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8940 comm=syz.1.2127 [ 106.191733][ T8944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.423839][ T8960] bond0: left promiscuous mode [ 106.484764][ T8969] Cannot find set identified by id 0 to match [ 106.622602][ T8999] __nla_validate_parse: 5 callbacks suppressed [ 106.622617][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 106.622699][ T9000] bridge: RTM_NEWNEIGH with invalid ether address [ 106.650415][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2154'. [ 107.051514][ T9054] xt_connbytes: Forcing CT accounting to be enabled [ 107.058851][ T9054] Cannot find set identified by id 0 to match [ 107.328167][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 107.337073][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 107.460474][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 107.666783][ T9128] netlink: 'syz.2.2215': attribute type 10 has an invalid length. [ 107.688096][ T9128] netlink: 'syz.2.2215': attribute type 10 has an invalid length. [ 107.967167][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 108.017239][ T9151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.042348][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.070713][ T9153] bond3: (slave bond0): Enslaving as an active interface with an up link [ 108.085223][ T9151] bond3 (unregistering): (slave bond0): Releasing backup interface [ 108.102611][ T9151] bond3 (unregistering): Released all slaves [ 108.351122][ T9181] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2235'. [ 108.917832][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2259'. [ 108.957623][ T9242] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2263'. [ 108.997421][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2265'. [ 109.077503][ T9258] netem: incorrect gi model size [ 109.082486][ T9258] netem: change failed [ 109.334581][ T9284] netlink: 'syz.2.2279': attribute type 1 has an invalid length. [ 109.347771][ T9284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.366837][ T9284] bond2: (slave veth5): Enslaving as an active interface with a down link [ 109.382649][ T9284] bond2: (slave dummy0): making interface the new active one [ 109.391204][ T9284] dummy0: entered promiscuous mode [ 109.396483][ T9284] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 109.411620][ T9284] bond2 (unregistering): (slave veth5): Releasing active interface [ 109.427489][ T9284] bond2 (unregistering): (slave dummy0): Releasing active interface [ 109.436489][ T9284] bond2 (unregistering): Released all slaves [ 109.536902][ T9306] netlink: 'syz.1.2290': attribute type 10 has an invalid length. [ 109.554162][ T9306] team0: Port device dummy0 added [ 109.560269][ T9306] netlink: 'syz.1.2290': attribute type 10 has an invalid length. [ 109.569533][ T9306] team0: Port device dummy0 removed [ 109.575946][ T9306] .`: (slave dummy0): Enslaving as an active interface with an up link [ 110.060218][ T29] kauditd_printk_skb: 1501 callbacks suppressed [ 110.060232][ T29] audit: type=1400 audit(1764291854.219:5296): avc: denied { watch watch_reads } for pid=9350 comm="syz.0.2307" path="/502" dev="tmpfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 110.093977][ T29] audit: type=1400 audit(1764291854.219:5297): avc: denied { read write } for pid=7393 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.118207][ T29] audit: type=1400 audit(1764291854.249:5298): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.146054][ T29] audit: type=1400 audit(1764291854.269:5299): avc: denied { map_create } for pid=9352 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.165299][ T29] audit: type=1400 audit(1764291854.269:5300): avc: denied { prog_load } for pid=9352 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.184610][ T29] audit: type=1400 audit(1764291854.269:5301): avc: denied { prog_load } for pid=9352 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.203753][ T29] audit: type=1400 audit(1764291854.269:5302): avc: denied { load_policy } for pid=9352 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 110.223943][ T29] audit: type=1400 audit(1764291854.289:5303): avc: denied { read write } for pid=7393 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.248115][ T29] audit: type=1400 audit(1764291854.299:5304): avc: denied { watch } for pid=9350 comm="syz.0.2307" path="/502" dev="tmpfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 110.270024][ T29] audit: type=1400 audit(1764291854.299:5305): avc: denied { watch watch_reads } for pid=9350 comm="syz.0.2307" path="/502" dev="tmpfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 110.559275][ T9403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=9403 comm=syz.0.2332 [ 110.626419][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 111.162593][ T9491] netlink: 'syz.4.2374': attribute type 30 has an invalid length. [ 111.342804][ T9510] lo: entered allmulticast mode [ 111.353732][ T9510] lo: entered promiscuous mode [ 111.358636][ T9510] lo: left allmulticast mode [ 111.708657][ T9541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2404'. [ 111.789082][ T9549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2397'. [ 111.797231][ T9551] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2408'. [ 111.880133][ T9561] netlink: 'syz.5.2405': attribute type 1 has an invalid length. [ 111.887896][ T9561] netlink: 'syz.5.2405': attribute type 4 has an invalid length. [ 111.895726][ T9561] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2405'. [ 111.933343][ T9561] netlink: 'syz.5.2405': attribute type 1 has an invalid length. [ 111.941139][ T9561] netlink: 'syz.5.2405': attribute type 4 has an invalid length. [ 111.948911][ T9561] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2405'. [ 111.954570][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'. [ 111.995456][ T9563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.028943][ T9565] vlan2: entered allmulticast mode [ 112.034093][ T9565] bond2: entered allmulticast mode [ 112.443180][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 112.478374][ T9585] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2415'. [ 112.563350][ T9591] netlink: 'syz.2.2419': attribute type 7 has an invalid length. [ 112.571152][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 113.021265][ T9621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2430'. [ 113.157881][ T9625] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 113.822770][ T9673] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 114.023264][ T9704] netlink: 'syz.2.2467': attribute type 13 has an invalid length. [ 114.067455][ T4443] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 114.182133][ T9740] veth6: entered promiscuous mode [ 114.187343][ T9740] veth6: entered allmulticast mode [ 114.223112][ T9744] netlink: 'syz.5.2486': attribute type 4 has an invalid length. [ 114.242439][ T9744] netlink: 'syz.5.2486': attribute type 4 has an invalid length. [ 114.435491][ T9781] netlink: 'syz.4.2504': attribute type 1 has an invalid length. [ 114.896838][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 114.911009][ T9807] wireguard0: entered promiscuous mode [ 114.916492][ T9807] wireguard0: entered allmulticast mode [ 115.074640][ T29] kauditd_printk_skb: 1145 callbacks suppressed [ 115.074720][ T29] audit: type=1400 audit(1764291859.232:6451): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.106847][ T29] audit: type=1400 audit(1764291859.242:6452): avc: denied { watch watch_reads } for pid=9818 comm="syz.2.2520" path="/496/file1" dev="tmpfs" ino=2595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 115.130488][ T29] audit: type=1400 audit(1764291859.242:6453): avc: denied { watch } for pid=9818 comm="syz.2.2520" path="/496" dev="tmpfs" ino=2590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 115.152419][ T29] audit: type=1400 audit(1764291859.252:6454): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.176611][ T29] audit: type=1326 audit(1764291859.262:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.2.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f622703f749 code=0x7ffc0000 [ 115.199910][ T29] audit: type=1400 audit(1764291859.272:6456): avc: denied { create } for pid=9820 comm="syz.2.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 115.220428][ T29] audit: type=1400 audit(1764291859.272:6457): avc: denied { create } for pid=9820 comm="syz.2.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 115.285403][ T29] audit: type=1400 audit(1764291859.442:6458): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.319040][ T29] audit: type=1400 audit(1764291859.452:6459): avc: denied { prog_load } for pid=9822 comm="syz.2.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.338106][ T29] audit: type=1400 audit(1764291859.452:6460): avc: denied { map_create } for pid=9822 comm="syz.2.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.411935][ T9840] bond3: (slave veth7): Enslaving as an active interface with a down link [ 115.422170][ T9840] bond3: entered promiscuous mode [ 115.427310][ T9840] bond3: entered allmulticast mode [ 115.432868][ T9840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.456475][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.311502][ T9903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9903 comm=syz.0.2555 [ 116.880891][ T9981] __nla_validate_parse: 11 callbacks suppressed [ 116.880905][ T9981] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2590'. [ 116.964995][ T9988] ip6gre3: entered allmulticast mode [ 117.177351][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 117.212014][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 117.231727][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 117.258589][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 117.277762][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 117.458991][T10034] validate_nla: 2 callbacks suppressed [ 117.459006][T10034] netlink: 'syz.4.2614': attribute type 13 has an invalid length. [ 117.511496][T10036] netlink: 'syz.2.2623': attribute type 17 has an invalid length. [ 117.519383][T10036] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2623'. [ 117.677075][T10050] netlink: '+}[@': attribute type 10 has an invalid length. [ 117.700565][T10050] team0 (unregistering): Port device team_slave_0 removed [ 117.728923][T10050] team0 (unregistering): Port device team_slave_1 removed [ 118.058168][T10079] Cannot find del_set index 2 as target [ 118.372501][T10107] lo: Caught tx_queue_len zero misconfig [ 118.378177][T10107] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 118.602385][T10129] netlink: 'syz.4.2654': attribute type 3 has an invalid length. [ 118.725371][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'. [ 118.745286][T10139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.761044][T10139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.776014][T10139] bond1: (slave bond0): Enslaving as an active interface with an up link [ 118.791119][T10139] bond1 (unregistering): (slave bond0): Releasing backup interface [ 118.800192][T10139] bond1 (unregistering): Released all slaves [ 118.943113][T10152] ip6gre1: entered allmulticast mode [ 119.377527][T10208] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 119.392704][T10208] .`: (slave dummy0): Releasing backup interface [ 119.405413][T10208] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 119.596407][T10231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.747109][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.754367][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.839430][T10242] wg2: left promiscuous mode [ 119.844093][T10242] wg2: left allmulticast mode [ 119.893044][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.909124][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.959183][T10242] team1: left promiscuous mode [ 119.964045][T10242] team1: left allmulticast mode [ 119.972499][T10242] veth6: left promiscuous mode [ 119.977467][T10242] veth6: left allmulticast mode [ 119.983600][ T5244] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.009752][ T5244] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.030398][ T5244] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.047083][ T5244] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.078004][ T29] kauditd_printk_skb: 998 callbacks suppressed [ 120.078016][ T29] audit: type=1400 audit(1764291864.234:7459): avc: denied { map_create } for pid=10252 comm="syz.5.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.109547][ T29] audit: type=1400 audit(1764291864.254:7460): avc: denied { read write } for pid=10250 comm="syz.1.2710" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.133825][ T29] audit: type=1400 audit(1764291864.264:7461): avc: denied { prog_load } for pid=10252 comm="syz.5.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.152945][ T29] audit: type=1400 audit(1764291864.264:7462): avc: denied { open } for pid=10252 comm="syz.5.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 120.261547][ T29] audit: type=1400 audit(1764291864.394:7463): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.285868][ T29] audit: type=1400 audit(1764291864.404:7464): avc: denied { prog_load } for pid=10257 comm="syz.2.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.305122][ T29] audit: type=1400 audit(1764291864.404:7465): avc: denied { name_bind } for pid=10257 comm="syz.2.2712" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 120.326868][ T29] audit: type=1400 audit(1764291864.404:7466): avc: denied { prog_load } for pid=10257 comm="syz.2.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.346351][ T29] audit: type=1400 audit(1764291864.404:7467): avc: denied { prog_load } for pid=10257 comm="syz.2.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.462876][ T29] audit: type=1400 audit(1764291864.615:7468): avc: denied { read write } for pid=7393 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.687246][T10271] netlink: 2172 bytes leftover after parsing attributes in process `syz.4.2717'. [ 120.787793][T10282] netlink: 'syz.4.2722': attribute type 1 has an invalid length. [ 120.813502][T10282] bond4: entered promiscuous mode [ 120.818637][T10282] bond4: entered allmulticast mode [ 120.824263][T10282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.838785][T10282] veth5: entered promiscuous mode [ 120.843959][T10282] veth5: entered allmulticast mode [ 120.849532][T10282] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 120.876898][T10293] netlink: 'syz.4.2726': attribute type 30 has an invalid length. [ 121.026746][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2731'. [ 121.108641][T10309] netlink: 'syz.2.2733': attribute type 4 has an invalid length. [ 121.309431][T10338] team_slave_1: Caught tx_queue_len zero misconfig [ 121.816527][T10360] netlink: 'syz.0.2755': attribute type 29 has an invalid length. [ 121.881296][T10362] team0: Port device dummy0 added [ 121.888055][T10362] team0: Port device dummy0 removed [ 122.078575][T10377] __nla_validate_parse: 1 callbacks suppressed [ 122.078591][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'. [ 122.120891][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'. [ 122.166284][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2766'. [ 122.437104][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2780'. [ 122.491276][T10415] validate_nla: 3 callbacks suppressed [ 122.491290][T10415] netlink: 'syz.4.2781': attribute type 4 has an invalid length. [ 122.534169][T10418] lo: Caught tx_queue_len zero misconfig [ 122.554498][T10419] netlink: 'syz.1.2782': attribute type 13 has an invalid length. [ 122.579456][T10419] gretap0: refused to change device tx_queue_len [ 122.593502][T10419] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.638806][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2793'. [ 122.651037][T10439] veth10: entered promiscuous mode [ 122.656236][T10439] veth10: entered allmulticast mode [ 122.682001][T10441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.706963][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2796'. [ 122.731656][T10441] vlan2: entered allmulticast mode [ 122.736978][T10441] bond2: entered allmulticast mode [ 123.226812][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 123.267463][T10532] wg2: entered promiscuous mode [ 123.272385][T10532] wg2: entered allmulticast mode [ 123.885116][T10572] bond0: (slave dummy0): Releasing backup interface [ 123.893010][T10572] bond0: (slave bond_slave_0): Releasing backup interface [ 123.900788][T10572] bond0: (slave bond_slave_1): Releasing backup interface [ 123.908789][T10572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.916461][T10572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.924031][T10572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.540216][T10610] netlink: 'syz.5.2866': attribute type 6 has an invalid length. [ 124.579262][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2868'. [ 124.603253][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2869'. [ 124.615425][T10616] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2869'. [ 124.653907][T10620] netlink: 'syz.5.2871': attribute type 10 has an invalid length. [ 124.663430][T10620] team0: Port device geneve1 added [ 124.668875][ T5252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.682178][ T5252] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.705701][ T5252] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.723609][ T5252] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.748166][T10625] : renamed from veth0_to_bond [ 125.081990][ T29] kauditd_printk_skb: 922 callbacks suppressed [ 125.082003][ T29] audit: type=1400 audit(1764291869.247:8391): avc: denied { map_create } for pid=10660 comm="syz.0.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 125.153152][ T29] audit: type=1400 audit(1764291869.277:8392): avc: denied { prog_load } for pid=10660 comm="syz.0.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 125.172333][ T29] audit: type=1400 audit(1764291869.277:8393): avc: denied { watch watch_reads } for pid=10660 comm="syz.0.2891" path="/623" dev="tmpfs" ino=3246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 125.195561][ T29] audit: type=1400 audit(1764291869.277:8394): avc: denied { prog_load } for pid=10660 comm="syz.0.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 125.214690][ T29] audit: type=1400 audit(1764291869.277:8395): avc: denied { watch watch_reads } for pid=10660 comm="syz.0.2891" path="/623" dev="tmpfs" ino=3246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 125.237840][ T29] audit: type=1400 audit(1764291869.277:8396): avc: denied { map_create } for pid=10658 comm="syz.4.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 125.257093][ T29] audit: type=1400 audit(1764291869.277:8397): avc: denied { prog_load } for pid=10658 comm="syz.4.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 125.276240][ T29] audit: type=1400 audit(1764291869.287:8398): avc: denied { prog_load } for pid=10658 comm="syz.4.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 125.295369][ T29] audit: type=1400 audit(1764291869.297:8399): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 125.319613][ T29] audit: type=1400 audit(1764291869.307:8400): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 125.496795][T10695] bridge_slave_0: left allmulticast mode [ 125.502527][T10695] bridge_slave_0: left promiscuous mode [ 125.508316][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.516370][T10695] bridge_slave_1: left allmulticast mode [ 125.522208][T10695] bridge_slave_1: left promiscuous mode [ 125.527874][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.536264][T10695] bond0: (slave bond_slave_0): Releasing backup interface [ 125.544301][T10695] bond0: (slave bond_slave_1): Releasing backup interface [ 125.547693][T10703] netlink: 'syz.5.2907': attribute type 10 has an invalid length. [ 125.560123][T10695] team0: Port device team_slave_0 removed [ 125.566474][T10695] team0: Port device team_slave_1 removed [ 125.572565][T10695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.579874][T10695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.587879][T10695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.609561][T10703] team0: entered promiscuous mode [ 125.614752][T10703] geneve1: entered promiscuous mode [ 125.621098][T10703] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.628376][T10703] bridge0: port 1(team0) entered blocking state [ 125.634670][T10703] bridge0: port 1(team0) entered disabled state [ 125.643573][T10703] team0: entered allmulticast mode [ 125.648919][T10703] geneve1: entered allmulticast mode [ 126.120791][T10773] ÿÿÿÿÿÿ: renamed from vlan1 [ 126.271267][T10795] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 126.289466][T10795] bond3: entered promiscuous mode [ 126.294571][T10795] bond3: entered allmulticast mode [ 126.300047][T10795] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.318771][T10795] vlan1: entered allmulticast mode [ 126.519005][T10836] bridge: RTM_NEWNEIGH with invalid ether address [ 126.562475][T10845] capability: warning: `syz.1.2972' uses deprecated v2 capabilities in a way that may be insecure [ 126.946190][T10892] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 127.363208][T10918] __nla_validate_parse: 11 callbacks suppressed [ 127.363224][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3004'. [ 127.384754][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3004'. [ 127.576070][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3014'. [ 127.746884][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3018'. [ 127.880275][T10959] netlink: 'syz.5.3021': attribute type 21 has an invalid length. [ 127.888278][T10959] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3021'. [ 128.379520][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 128.545190][T11002] kernel profiling enabled (shift: 63) [ 128.550704][T11002] profiling shift: 63 too large [ 128.911823][T11047] netlink: 'syz.2.3062': attribute type 10 has an invalid length. [ 128.934319][T11047] netlink: 'syz.2.3062': attribute type 10 has an invalid length. [ 128.942577][T11044] netlink: 'syz.1.3061': attribute type 13 has an invalid length. [ 128.955825][T11047] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.995926][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3064'. [ 129.170359][T11059] netlink: 'syz.5.3067': attribute type 4 has an invalid length. [ 129.189077][T11059] netlink: 'syz.5.3067': attribute type 4 has an invalid length. [ 129.240682][ T5252] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.280437][ T5252] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.326511][ T5252] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.369754][ T5252] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.421508][ T5210] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.452782][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3079'. [ 129.487261][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3079'. [ 129.930548][T11095] syzkaller0: entered promiscuous mode [ 129.936099][T11095] syzkaller0: entered allmulticast mode [ 129.992153][T11097] netlink: 'syz.4.3084': attribute type 10 has an invalid length. [ 130.000566][T11097] netlink: 'syz.4.3084': attribute type 10 has an invalid length. [ 130.009467][T11097] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.113921][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 130.113936][ T29] audit: type=1400 audit(130.126:9406): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.144021][ T29] audit: type=1400 audit(130.136:9407): avc: denied { prog_load } for pid=11103 comm="syz.1.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.162732][ T29] audit: type=1400 audit(130.136:9408): avc: denied { map_create } for pid=11103 comm="syz.1.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.181648][ T29] audit: type=1400 audit(130.136:9409): avc: denied { create } for pid=11103 comm="syz.1.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 130.200710][ T29] audit: type=1400 audit(130.136:9410): avc: denied { map_create } for pid=11103 comm="syz.1.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.219495][ T29] audit: type=1400 audit(130.136:9411): avc: denied { create } for pid=11103 comm="syz.1.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 130.238617][ T29] audit: type=1400 audit(130.146:9412): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.258486][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 130.262475][ T29] audit: type=1400 audit(130.146:9413): avc: denied { name_bind } for pid=11105 comm="syz.1.3088" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 130.292323][ T29] audit: type=1400 audit(130.186:9414): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.315923][ T29] audit: type=1400 audit(130.196:9415): avc: denied { open } for pid=11107 comm="syz.2.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 130.565883][T11142] netlink: 'syz.5.3103': attribute type 1 has an invalid length. [ 130.582103][T11142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.599522][T11142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.606568][T11142] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.617751][T11142] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 131.353673][T11180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.369507][T11180] vlan1: entered allmulticast mode [ 131.374674][T11180] bond4: entered allmulticast mode [ 131.444044][T11186] ALSA: seq fatal error: cannot create timer (-16) [ 131.448441][T11102] Bluetooth: hci0: command 0x1003 tx timeout [ 131.450712][ T6008] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.624184][T11205] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 131.658980][T11212] netlink: 'syz.1.3133': attribute type 12 has an invalid length. [ 132.088780][ T3510] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 132.704418][T11282] bond4: entered promiscuous mode [ 132.704436][T11282] bond4: entered allmulticast mode [ 132.704579][T11282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.760462][T11282] bridge5: entered promiscuous mode [ 132.760606][T11282] bridge5: entered allmulticast mode [ 132.761172][T11282] bond4: (slave bridge5): Enslaving as a backup interface with an up link [ 132.813316][ T5210] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 132.917752][ T5210] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 133.080942][T11308] __nla_validate_parse: 2 callbacks suppressed [ 133.080958][T11308] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3173'. [ 133.335046][T11325] team0: left allmulticast mode [ 133.339958][T11325] geneve1: left allmulticast mode [ 133.345084][T11325] bridge0: port 1(team0) entered disabled state [ 133.358220][T11325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.358900][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3181'. [ 133.791735][T11342] validate_nla: 1 callbacks suppressed [ 133.791763][T11342] netlink: 'syz.0.3185': attribute type 6 has an invalid length. [ 133.939546][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3192'. [ 133.948590][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3192'. [ 133.955178][T11358] netlink: 'syz.1.3193': attribute type 10 has an invalid length. [ 133.972417][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3192'. [ 133.981467][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3192'. [ 133.991157][T11358] netlink: 'syz.1.3193': attribute type 10 has an invalid length. [ 134.001011][T11358] .`: (slave dummy0): Enslaving as an active interface with an up link [ 134.062910][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 134.074940][T11368] ip6gre2: entered allmulticast mode [ 134.093950][T11365] ip6gre1: entered allmulticast mode [ 134.161826][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3204'. [ 134.235051][T11389] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 134.495318][T11424] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 134.502226][T11424] sch_fq: defrate 8 ignored. [ 134.544383][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3224'. [ 134.598460][T11430] lo: left promiscuous mode [ 134.620916][T11430] bond1: left promiscuous mode [ 134.635443][T11430] bond4: left promiscuous mode [ 134.640317][T11430] veth5: left promiscuous mode [ 134.645250][T11430] bond4: left allmulticast mode [ 134.650138][T11430] veth5: left allmulticast mode [ 134.656598][T11432] bridge: RTM_NEWNEIGH with invalid ether address [ 134.894306][T11474] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.079026][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3260'. [ 135.116846][ T29] kauditd_printk_skb: 904 callbacks suppressed [ 135.116861][ T29] audit: type=1326 audit(135.129:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f915e2465e7 code=0x7ffc0000 [ 135.146020][ T29] audit: type=1326 audit(135.129:10321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f915e1eb829 code=0x7ffc0000 [ 135.168974][ T29] audit: type=1326 audit(135.129:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f915e24f749 code=0x7ffc0000 [ 135.191975][ T29] audit: type=1400 audit(135.129:10323): avc: denied { read write } for pid=11503 comm="syz.1.3261" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.265126][ T29] audit: type=1326 audit(135.139:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f915e2465e7 code=0x7ffc0000 [ 135.288314][ T29] audit: type=1326 audit(135.139:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f915e1eb829 code=0x7ffc0000 [ 135.311256][ T29] audit: type=1326 audit(135.139:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f915e24f749 code=0x7ffc0000 [ 135.334369][ T29] audit: type=1326 audit(135.139:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f915e2465e7 code=0x7ffc0000 [ 135.357300][ T29] audit: type=1326 audit(135.139:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f915e1eb829 code=0x7ffc0000 [ 135.380499][ T29] audit: type=1326 audit(135.139:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f915e24f749 code=0x7ffc0000 [ 135.527035][T11523] wireguard0: entered promiscuous mode [ 135.532549][T11523] wireguard0: entered allmulticast mode [ 135.585510][T11530] bridge_slave_0: left allmulticast mode [ 135.591210][T11530] bridge_slave_0: left promiscuous mode [ 135.596921][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.627253][T11530] bridge_slave_1: left allmulticast mode [ 135.632926][T11530] bridge_slave_1: left promiscuous mode [ 135.638740][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.652607][T11533] netlink: 'syz.0.3272': attribute type 10 has an invalid length. [ 135.667415][T11530] team0: Port device team_slave_0 removed [ 135.686177][T11530] team0: Port device team_slave_1 removed [ 135.692525][T11530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.700399][T11530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.708356][T11530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.724896][T11533] veth1_vlan: left promiscuous mode [ 135.731129][T11533] batman_adv: batadv0: Adding interface: veth1_vlan [ 135.737763][T11533] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.777191][T11533] batman_adv: batadv0: Interface activated: veth1_vlan [ 135.785355][T11537] batadv_slave_1: Caught tx_queue_len zero misconfig [ 135.837702][T11548] sit0: Caught tx_queue_len zero misconfig [ 135.936223][T11571] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 136.115877][T11615] netlink: 'syz.0.3310': attribute type 12 has an invalid length. [ 136.169444][T11623] syzkaller0: entered promiscuous mode [ 136.174948][T11623] syzkaller0: entered allmulticast mode [ 136.215173][T11633] netlink: 'syz.4.3319': attribute type 10 has an invalid length. [ 136.224411][T11633] batadv0: entered allmulticast mode [ 136.231121][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.252535][T11633] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 136.264788][T11639] netlink: 'syz.4.3319': attribute type 10 has an invalid length. [ 136.274196][T11639] batadv0: entered promiscuous mode [ 136.283257][T11639] bond0: (slave batadv0): Releasing backup interface [ 136.296803][T11639] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 136.513258][T11685] vxcan1: entered promiscuous mode [ 136.759072][T11738] netlink: 'syz.2.3367': attribute type 30 has an invalid length. [ 136.784114][T11742] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 136.937209][T11759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=11759 comm=syz.2.3375 [ 137.247430][T11794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11794 comm=syz.0.3391 [ 137.282444][T11801] netlink: 'syz.4.3394': attribute type 29 has an invalid length. [ 137.291819][T11801] netlink: 'syz.4.3394': attribute type 29 has an invalid length. [ 137.345687][T11813] kernel profiling enabled (shift: 63) [ 137.351277][T11813] profiling shift: 63 too large [ 137.390573][T11822] dummy0: entered promiscuous mode [ 137.396099][T11822] team0: Port device dummy0 added [ 137.403594][T11822] dummy0: left promiscuous mode [ 137.410299][T11822] team0: Port device dummy0 removed [ 137.417191][T11822] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.499400][T11839] gretap0: refused to change device tx_queue_len [ 137.509151][T11839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 137.594155][T11855] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 137.799683][T11861] .`: (slave dummy0): Releasing backup interface [ 137.815552][T11861] bridge_slave_0: left allmulticast mode [ 137.821292][T11861] bridge_slave_0: left promiscuous mode [ 137.827173][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.834945][T11861] bridge_slave_1: left allmulticast mode [ 137.840825][T11861] bridge_slave_1: left promiscuous mode [ 137.846574][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.856837][T11861] .`: (slave bond_slave_0): Releasing backup interface [ 137.864706][T11861] .`: (slave bond_slave_1): Releasing backup interface [ 137.872612][T11861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.880049][T11861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.887664][T11861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.452501][T11895] batman_adv: batadv0: Adding interface: dummy0 [ 138.458828][T11895] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.484167][T11895] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 138.510746][T11902] __nla_validate_parse: 9 callbacks suppressed [ 138.510765][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3439'. [ 138.902525][T11935] veth8: entered promiscuous mode [ 138.907718][T11935] veth8: entered allmulticast mode [ 139.027744][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3468'. [ 139.115742][T11956] validate_nla: 4 callbacks suppressed [ 139.115774][T11956] netlink: 'syz.1.3455': attribute type 10 has an invalid length. [ 139.143047][T11956] batman_adv: batadv0: Removing interface: dummy0 [ 139.499696][T11994] netlink: 'syz.1.3476': attribute type 1 has an invalid length. [ 139.546088][T11994] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.566637][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'. [ 139.602401][T12000] vlan2: entered promiscuous mode [ 139.607628][T12000] bond5: entered promiscuous mode [ 139.624023][T11994] bond5: (slave dummy0): making interface the new active one [ 139.668240][T11994] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 140.167106][ T29] kauditd_printk_skb: 1337 callbacks suppressed [ 140.167129][ T29] audit: type=1400 audit(140.181:11667): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.190350][T12032] netlink: 'syz.2.3494': attribute type 12 has an invalid length. [ 140.202795][ T29] audit: type=1400 audit(140.181:11668): avc: denied { map_create } for pid=12029 comm="syz.2.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.223640][ T29] audit: type=1400 audit(140.181:11669): avc: denied { prog_load } for pid=12029 comm="syz.2.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.242391][ T29] audit: type=1400 audit(140.181:11670): avc: denied { prog_load } for pid=12029 comm="syz.2.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.261087][ T29] audit: type=1400 audit(140.181:11671): avc: denied { create } for pid=12029 comm="syz.2.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 140.280260][ T29] audit: type=1400 audit(140.181:11672): avc: denied { create } for pid=12029 comm="syz.2.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 140.299293][ T29] audit: type=1400 audit(140.181:11673): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.299434][ T29] audit: type=1400 audit(140.181:11674): avc: denied { prog_load } for pid=12031 comm="syz.2.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.299451][ T29] audit: type=1400 audit(140.181:11675): avc: denied { prog_load } for pid=12031 comm="syz.2.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.299475][ T29] audit: type=1400 audit(140.181:11676): avc: denied { map_create } for pid=12031 comm="syz.2.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.578842][T12045] bridge: RTM_NEWNEIGH with invalid ether address [ 140.782657][T12065] : renamed from veth0_to_bond [ 140.835817][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3510'. [ 140.845391][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 140.893427][T12078] netlink: 'syz.5.3513': attribute type 10 has an invalid length. [ 140.902341][T12078] bond0: (slave dummy0): Releasing backup interface [ 140.911149][T12078] dummy0: entered promiscuous mode [ 140.916908][T12078] team0: Port device dummy0 added [ 140.924648][T12078] netlink: 'syz.5.3513': attribute type 10 has an invalid length. [ 140.933939][T12078] dummy0: left promiscuous mode [ 140.939516][T12078] team0: Port device dummy0 removed [ 140.946541][T12078] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 141.040602][T12084] netlink: 'syz.5.3517': attribute type 30 has an invalid length. [ 141.094521][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3519'. [ 141.109063][T12090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3520'. [ 141.128778][T12090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3520'. [ 141.161824][T12100] netlink: 'syz.2.3524': attribute type 6 has an invalid length. [ 141.617085][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3545'. [ 141.988666][T12177] bond5: (slave dummy0): Releasing active interface [ 142.145684][T12194] macvtap0: entered promiscuous mode [ 142.157874][T12194] macvtap0: left promiscuous mode [ 142.680895][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3577'. [ 142.815979][T12239] bond0: (slave dummy0): Releasing backup interface [ 142.831312][T12239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.366279][T12285] IPv6: sit1: Disabled Multicast RS [ 143.407750][T12290] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 143.407750][T12290] The task syz.2.3601 (12290) triggered the difference, watch for misbehavior. [ 143.804555][T12322] bridge: RTM_NEWNEIGH with invalid ether address [ 143.890289][T12331] netlink: 'syz.5.3624': attribute type 12 has an invalid length. [ 143.963803][T12339] __nla_validate_parse: 2 callbacks suppressed [ 143.963818][T12339] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3628'. [ 143.982703][T12339] hsr_slave_0: left promiscuous mode [ 143.998657][T12339] hsr_slave_1: left promiscuous mode [ 144.098799][T12346] netlink: 'syz.5.3632': attribute type 13 has an invalid length. [ 144.173529][T12348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12348 comm=syz.5.3634 [ 144.233716][T12360] netlink: 'syz.4.3638': attribute type 5 has an invalid length. [ 144.248313][T12360] batman_adv: batadv0: Adding interface: vxlan0 [ 144.254605][T12360] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.280698][T12360] batman_adv: batadv0: Interface activated: vxlan0 [ 144.287583][ T5252] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.295965][ T5252] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.313209][ T5252] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.341240][ T5252] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.355707][T12370] netlink: 'syz.4.3644': attribute type 10 has an invalid length. [ 144.391585][T12370] bond0: (slave dummy0): Releasing backup interface [ 144.399410][T12370] netlink: 'syz.4.3644': attribute type 10 has an invalid length. [ 144.408867][T12370] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.429129][T12382] bond0: (slave dummy0): Releasing backup interface [ 144.436803][T12382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.454091][T12382] netlink: 'syz.4.3648': attribute type 10 has an invalid length. [ 144.462153][T12382] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3648'. [ 144.622927][T12409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.630718][T12409] team0: left promiscuous mode [ 144.635593][T12409] geneve1: left promiscuous mode [ 144.640906][T12409] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.649683][T12409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.684887][T12417] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 144.696832][T12417] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 145.171595][ T29] kauditd_printk_skb: 1111 callbacks suppressed [ 145.171609][ T29] audit: type=1400 audit(145.184:12788): avc: denied { allowed } for pid=12459 comm="syz.2.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 145.206686][ T29] audit: type=1400 audit(145.224:12789): avc: denied { read write } for pid=12461 comm="syz.5.3683" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 145.230512][ T29] audit: type=1400 audit(145.224:12790): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 145.254258][ T29] audit: type=1400 audit(145.224:12791): avc: denied { create } for pid=12463 comm="syz.2.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 145.282140][ T29] audit: type=1400 audit(145.224:12792): avc: denied { create } for pid=12463 comm="syz.2.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 145.301494][ T29] audit: type=1400 audit(145.294:12793): avc: denied { prog_load } for pid=12461 comm="syz.5.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.320218][ T29] audit: type=1400 audit(145.294:12794): avc: denied { map_create } for pid=12461 comm="syz.5.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.339009][ T29] audit: type=1400 audit(145.294:12795): avc: denied { prog_load } for pid=12461 comm="syz.5.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.358096][ T29] audit: type=1400 audit(145.294:12796): avc: denied { create } for pid=12463 comm="syz.2.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 145.377369][ T29] audit: type=1400 audit(145.294:12797): avc: denied { prog_load } for pid=12461 comm="syz.5.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.543266][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3693'. [ 146.033722][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3704'. [ 146.053895][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3704'. [ 146.365525][T12541] netlink: 'syz.1.3719': attribute type 12 has an invalid length. [ 146.439668][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3722'. [ 146.448579][T12549] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3722'. [ 147.156891][T12589] veth10: entered promiscuous mode [ 147.162097][T12589] veth10: entered allmulticast mode [ 147.882616][T12647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3766'. [ 147.899310][T12647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12647 comm=syz.0.3766 [ 148.198348][T12676] netlink: 'syz.4.3779': attribute type 7 has an invalid length. [ 148.206152][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 148.236700][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3782'. [ 148.291052][T12691] bridge: RTM_NEWNEIGH with invalid ether address [ 148.478780][T12719] bridge0: entered allmulticast mode [ 148.532876][T12723] veth12: entered promiscuous mode [ 148.538007][T12723] veth12: entered allmulticast mode [ 148.626994][T12737] netlink: 'syz.2.3809': attribute type 1 has an invalid length. [ 148.639059][T12737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.658094][T12737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.665529][T12737] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 148.676717][T12737] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 149.807195][T12843] veth14: entered promiscuous mode [ 149.812380][T12843] veth14: entered allmulticast mode [ 149.948228][T12848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.976242][T12853] netlink: 'syz.0.3855': attribute type 10 has an invalid length. [ 150.014809][T12848] bond2 (unregistering): Released all slaves [ 150.018304][T12855] __nla_validate_parse: 1 callbacks suppressed [ 150.018316][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3868'. [ 150.041905][T12853] team0: Port device dummy0 added [ 150.133169][T12855] ip6gre1: entered allmulticast mode [ 150.181979][ T29] kauditd_printk_skb: 1363 callbacks suppressed [ 150.181992][ T29] audit: type=1400 audit(150.206:14161): avc: denied { read write } for pid=7393 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.247619][T12867] team0: Port device geneve1 removed [ 150.259345][T12867] bond1: (slave gretap1): Releasing backup interface [ 150.272226][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3866'. [ 150.274395][T12875] netlink: 'syz.5.3862': attribute type 10 has an invalid length. [ 150.289100][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3862'. [ 150.298484][ T29] audit: type=1400 audit(150.236:14162): avc: denied { prog_load } for pid=12865 comm="syz.4.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.317196][ T29] audit: type=1400 audit(150.247:14163): avc: denied { prog_load } for pid=12866 comm="syz.5.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.335847][ T29] audit: type=1400 audit(150.247:14164): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.359507][ T29] audit: type=1400 audit(150.247:14165): avc: denied { map_create } for pid=12866 comm="syz.5.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.378181][ T29] audit: type=1400 audit(150.247:14166): avc: denied { prog_load } for pid=12866 comm="syz.5.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.396812][ T29] audit: type=1400 audit(150.247:14167): avc: denied { prog_load } for pid=12866 comm="syz.5.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.415427][ T29] audit: type=1400 audit(150.247:14168): avc: denied { prog_load } for pid=12863 comm="syz.0.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.434041][ T29] audit: type=1400 audit(150.247:14169): avc: denied { prog_load } for pid=12865 comm="syz.4.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.452637][ T29] audit: type=1400 audit(150.247:14170): avc: denied { map_create } for pid=12869 comm="syz.2.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.558996][T12875] veth1_vlan: left promiscuous mode [ 150.564876][T12875] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 151.058152][T12914] bridge0: port 1(macsec1) entered blocking state [ 151.064723][T12914] bridge0: port 1(macsec1) entered disabled state [ 151.071470][T12914] macsec1: entered allmulticast mode [ 151.076742][T12914] bridge0: entered allmulticast mode [ 151.082942][T12914] macsec1: left allmulticast mode [ 151.088039][T12914] bridge0: left allmulticast mode [ 151.155699][T12918] veth0_vlan: left promiscuous mode [ 151.161067][T12918] veth0_vlan: entered allmulticast mode [ 151.167226][T12918] veth0_vlan: entered promiscuous mode [ 151.839392][T12967] netlink: 'syz.0.3909': attribute type 1 has an invalid length. [ 151.851631][T12967] bond2: entered promiscuous mode [ 151.856878][T12967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.871287][T12967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.878355][T12967] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 151.888892][T12967] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 151.900570][T12967] bond2: (slave wireguard0): making interface the new active one [ 151.908315][T12967] wireguard0: entered promiscuous mode [ 151.915308][T12967] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 151.919803][T12970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.931361][T12970] IPv6: NLM_F_CREATE should be set when creating new route [ 151.938549][T12970] IPv6: NLM_F_CREATE should be set when creating new route [ 151.946807][T12970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.956789][T12970] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 151.968910][T12970] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 152.011238][T12973] ÿÿÿÿÿÿ: renamed from vlan1 [ 152.547660][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3921'. [ 152.607009][T13010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3924'. [ 152.619114][T13010] ip6gre4: entered promiscuous mode [ 152.624320][T13010] ip6gre4: entered allmulticast mode [ 152.764372][T13028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3931'. [ 152.781789][T13028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13028 comm=syz.0.3931 [ 152.885276][T13049] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 153.445355][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3957'. [ 153.473081][T13085] veth10: entered promiscuous mode [ 153.478295][T13085] veth10: entered allmulticast mode [ 153.501189][T13087] netlink: 'syz.5.3959': attribute type 1 has an invalid length. [ 153.513561][T13087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.522463][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3959'. [ 153.532624][T13087] bond4 (unregistering): Released all slaves [ 153.703492][T13100] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 153.907516][T13143] netlink: 'syz.1.3984': attribute type 1 has an invalid length. [ 153.915275][T13143] netlink: 'syz.1.3984': attribute type 4 has an invalid length. [ 153.923105][T13143] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.3984'. [ 153.938876][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3987'. [ 153.976419][T13151] bridge: RTM_NEWNEIGH with invalid ether address [ 154.000537][T13155] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 154.087301][T13173] futex_wake_op: syz.4.4000 tries to shift op by -1; fix this program [ 154.094739][T13175] netlink: 'syz.5.4001': attribute type 1 has an invalid length. [ 154.130427][T13182] netlink: 'syz.4.4004': attribute type 8 has an invalid length. [ 154.147627][T13184] geneve2: entered promiscuous mode [ 154.152900][T13184] geneve2: entered allmulticast mode [ 154.159805][ T5244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.178258][ T5244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.187168][ T5244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.196169][ T5244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.224756][T13189] ip6gre2: entered allmulticast mode [ 154.484833][T13217] netlink: 'syz.2.4019': attribute type 7 has an invalid length. [ 154.512221][T13219] vlan1: entered allmulticast mode [ 154.517507][T13219] hsr0: entered allmulticast mode [ 154.522552][T13219] hsr_slave_0: entered allmulticast mode [ 154.528227][T13219] hsr_slave_1: entered allmulticast mode [ 154.582787][T13226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13226 comm=syz.2.4021 [ 154.733501][T13255] kernel profiling enabled (shift: 63) [ 154.739143][T13255] profiling shift: 63 too large [ 155.094992][T13291] bond0: Caught tx_queue_len zero misconfig [ 155.101152][T13291] __nla_validate_parse: 6 callbacks suppressed [ 155.101185][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 155.259391][ T29] kauditd_printk_skb: 995 callbacks suppressed [ 155.259405][ T29] audit: type=1400 audit(155.289:15166): avc: denied { read write } for pid=7393 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.269088][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4054'. [ 155.289751][ T29] audit: type=1400 audit(155.289:15167): avc: denied { create } for pid=13295 comm="syz.5.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 155.318421][ T29] audit: type=1400 audit(155.289:15168): avc: denied { map_create } for pid=13295 comm="syz.5.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.337089][ T29] audit: type=1400 audit(155.289:15169): avc: denied { prog_load } for pid=13295 comm="syz.5.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.355694][ T29] audit: type=1400 audit(155.289:15170): avc: denied { prog_load } for pid=13295 comm="syz.5.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.467812][ T29] audit: type=1400 audit(155.499:15171): avc: denied { read write } for pid=7393 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.503338][ T29] audit: type=1400 audit(155.529:15172): avc: denied { read write } for pid=7393 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.541515][ T29] audit: type=1400 audit(155.569:15173): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.593387][ T29] audit: type=1400 audit(155.619:15174): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.628874][ T29] audit: type=1400 audit(155.659:15175): avc: denied { open } for pid=13304 comm="syz.2.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 155.692665][T13301] netlink: 'syz.5.4056': attribute type 6 has an invalid length. [ 155.831971][T13328] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.879500][T13338] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 156.688617][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'. [ 156.697911][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4112'. [ 156.744397][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4118'. [ 157.089063][T13463] ip6erspan0: entered promiscuous mode [ 157.112518][T13468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4134'. [ 157.121505][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4134'. [ 157.131319][T13468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4134'. [ 157.140333][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4134'. [ 157.321996][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4149'. [ 157.335006][T13505] netlink: 'syz.2.4150': attribute type 1 has an invalid length. [ 157.346787][T13503] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.366305][T13505] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.379156][T13503] vlan3: entered allmulticast mode [ 157.384294][T13503] bond6: entered allmulticast mode [ 157.397729][T13505] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 157.407653][T13505] bond6: entered allmulticast mode [ 157.418976][T13505] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 157.482926][T13512] --map-set only usable from mangle table [ 157.627488][T13525] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13525 comm=syz.1.4158 [ 158.551255][T13637] netem: incorrect ge model size [ 158.556289][T13637] netem: change failed [ 159.543574][T13694] netlink: 'syz.5.4235': attribute type 4 has an invalid length. [ 159.820242][T13730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13730 comm=syz.5.4252 [ 159.898156][T13739] bridge: RTM_NEWNEIGH with invalid ether address [ 160.098253][T13763] netem: change failed [ 160.145882][T13770] netlink: 'syz.0.4270': attribute type 30 has an invalid length. [ 160.238851][T13780] ip6gre3: entered allmulticast mode [ 160.264127][ T29] kauditd_printk_skb: 1388 callbacks suppressed [ 160.264192][ T29] audit: type=1400 audit(160.292:16564): avc: denied { create } for pid=13783 comm="syz.1.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 160.319325][T13786] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 160.332103][ T29] audit: type=1400 audit(160.292:16565): avc: denied { map_create } for pid=13777 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.350908][ T29] audit: type=1400 audit(160.322:16566): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 160.374678][ T29] audit: type=1400 audit(160.322:16567): avc: denied { prog_load } for pid=13777 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.393322][ T29] audit: type=1400 audit(160.322:16568): avc: denied { prog_load } for pid=13777 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.412012][ T29] audit: type=1400 audit(160.342:16569): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 160.435743][ T29] audit: type=1400 audit(160.342:16570): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 160.459419][ T29] audit: type=1400 audit(160.352:16571): avc: denied { create } for pid=13787 comm="syz.4.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 160.479253][ T29] audit: type=1400 audit(160.352:16572): avc: denied { map_create } for pid=13772 comm="syz.2.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.498014][ T29] audit: type=1400 audit(160.352:16573): avc: denied { prog_load } for pid=13772 comm="syz.2.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.078542][T13841] __nla_validate_parse: 11 callbacks suppressed [ 161.078560][T13841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4300'. [ 161.216174][T13848] kernel profiling enabled (shift: 9) [ 161.281811][T13854] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.169571][T13916] netlink: 'syz.5.4329': attribute type 7 has an invalid length. [ 162.177408][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4329'. [ 162.442094][T13944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4341'. [ 162.451149][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4341'. [ 162.461392][T13944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4341'. [ 162.470520][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4341'. [ 162.563277][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4350'. [ 162.621154][T13973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4355'. [ 162.623865][T13972] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4357'. [ 162.630171][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'. [ 162.654170][T13972] batadv0: left promiscuous mode [ 162.659240][T13972] batadv0: left allmulticast mode [ 162.669525][T13972] batman_adv: batadv0: Interface deactivated: vxlan0 [ 162.677771][T13972] veth10: left promiscuous mode [ 162.682606][T13972] veth10: left allmulticast mode [ 162.689294][T13972] ip6gre2: left allmulticast mode [ 162.703190][ T5252] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.711552][ T5252] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.730654][ T5252] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.743904][ T5252] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.767942][T14025] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.800209][T14025] bond7 (unregistering): Released all slaves [ 164.016107][T14066] veth20: entered promiscuous mode [ 164.021246][T14066] veth20: entered allmulticast mode [ 164.037344][T14067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.046451][T14067] bond5 (unregistering): Released all slaves [ 164.058313][T14072] veth22: entered promiscuous mode [ 164.063521][T14072] veth22: entered allmulticast mode [ 164.066488][T14073] netlink: 'syz.4.4396': attribute type 10 has an invalid length. [ 164.295235][T14116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14116 comm=syz.1.4420 [ 164.308044][T14120] wg2: entered promiscuous mode [ 164.313026][T14120] wg2: entered allmulticast mode [ 164.367935][T14130] batman_adv: batadv0: Removing interface: vxlan0 [ 164.567265][T14153] wg2: entered promiscuous mode [ 164.572193][T14153] wg2: entered allmulticast mode [ 164.722226][T14176] bond5: entered promiscuous mode [ 164.727414][T14176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.741551][T14176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.749317][T14176] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 164.760739][T14176] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 164.791838][T14185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.799073][T14185] IPv6: NLM_F_CREATE should be set when creating new route [ 164.806284][T14185] IPv6: NLM_F_CREATE should be set when creating new route [ 164.817186][T14185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.833200][T14185] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 164.848427][T14185] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 165.074733][T14224] syzkaller0: entered promiscuous mode [ 165.080250][T14224] syzkaller0: entered allmulticast mode [ 165.272881][ T29] kauditd_printk_skb: 1054 callbacks suppressed [ 165.272955][ T29] audit: type=1400 audit(165.304:17628): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.303121][ T29] audit: type=1400 audit(165.304:17629): avc: denied { prog_load } for pid=14239 comm="syz.1.4474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.451519][ T29] audit: type=1400 audit(165.474:17630): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.486826][ T29] audit: type=1400 audit(165.514:17631): avc: denied { prog_load } for pid=14244 comm="syz.0.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.547046][ T29] audit: type=1400 audit(165.574:17632): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.602334][ T29] audit: type=1400 audit(165.604:17633): avc: denied { open } for pid=14246 comm="syz.0.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 165.621150][ T29] audit: type=1400 audit(165.604:17634): avc: denied { map_create } for pid=14246 comm="syz.0.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.639953][ T29] audit: type=1400 audit(165.604:17635): avc: denied { prog_load } for pid=14246 comm="syz.0.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.658560][ T29] audit: type=1400 audit(165.604:17636): avc: denied { prog_load } for pid=14246 comm="syz.0.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.677170][ T29] audit: type=1400 audit(165.604:17637): avc: denied { prog_load } for pid=14246 comm="syz.0.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.874497][T14256] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.036006][T14264] geneve2: entered promiscuous mode [ 166.041329][T14264] geneve2: entered allmulticast mode [ 166.061007][ T5210] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 166.079998][ T5210] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 166.094874][ T5210] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 166.148467][ T5210] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 166.162299][T14272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14272 comm=wÞ£ÿ [ 166.165838][T14271] netlink: 'syz.4.4488': attribute type 1 has an invalid length. [ 166.222705][T14274] __nla_validate_parse: 21 callbacks suppressed [ 166.222719][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4489'. [ 166.238303][T14275] veth19: entered promiscuous mode [ 166.279901][T14271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 166.306915][T14278] bond6: entered allmulticast mode [ 166.446615][T14287] bridge: RTM_NEWNEIGH with invalid ether address [ 166.492200][T14295] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4498'. [ 166.610164][T14306] ip6tnl0: Caught tx_queue_len zero misconfig [ 166.616300][T14306] sch_fq: defrate 4294967295 ignored. [ 166.907557][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4517'. [ 166.916923][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4517'. [ 167.452653][T14367] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.464298][T14369] futex_wake_op: syz.1.4530 tries to shift op by -1; fix this program [ 167.723017][T14361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4528'. [ 167.744955][T14361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4528'. [ 168.042840][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4538'. [ 168.058248][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4538'. [ 168.415274][T14412] bridge: RTM_NEWNEIGH with invalid ether address [ 168.432514][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4551'. [ 168.616190][T14439] ================================================================== [ 168.624301][T14439] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 168.632893][T14439] [ 168.635201][T14439] write to 0xffff88812af295e8 of 8 bytes by task 14438 on cpu 1: [ 168.642921][T14439] shmem_file_splice_read+0x470/0x600 [ 168.648300][T14439] splice_direct_to_actor+0x26f/0x680 [ 168.653670][T14439] do_splice_direct+0xda/0x150 [ 168.658438][T14439] do_sendfile+0x380/0x650 [ 168.662850][T14439] __x64_sys_sendfile64+0x105/0x150 [ 168.668046][T14439] x64_sys_call+0x2bb4/0x3000 [ 168.672714][T14439] do_syscall_64+0xd2/0x200 [ 168.677215][T14439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.683102][T14439] [ 168.685412][T14439] write to 0xffff88812af295e8 of 8 bytes by task 14439 on cpu 0: [ 168.693117][T14439] shmem_file_splice_read+0x470/0x600 [ 168.698488][T14439] splice_direct_to_actor+0x26f/0x680 [ 168.703869][T14439] do_splice_direct+0xda/0x150 [ 168.708619][T14439] do_sendfile+0x380/0x650 [ 168.713038][T14439] __x64_sys_sendfile64+0x105/0x150 [ 168.718239][T14439] x64_sys_call+0x2bb4/0x3000 [ 168.722912][T14439] do_syscall_64+0xd2/0x200 [ 168.727409][T14439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.733293][T14439] [ 168.735601][T14439] value changed: 0x00000000000015c8 -> 0x00000000000015c9 [ 168.742690][T14439] [ 168.745009][T14439] Reported by Kernel Concurrency Sanitizer on: [ 168.751143][T14439] CPU: 0 UID: 0 PID: 14439 Comm: syz.1.4562 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.761031][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.771071][T14439] ==================================================================