last executing test programs: 48.48842576s ago: executing program 4 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, 0x0, 0x0, 0x7c00, 0x0, 0x3) 48.431904531s ago: executing program 4 (id=1204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r0}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) 48.413429741s ago: executing program 4 (id=1208): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1e, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 48.353546122s ago: executing program 4 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 48.328980553s ago: executing program 4 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x2c, r3, 0x1, 0x70bd2b, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}}, 0x0) 48.246952634s ago: executing program 4 (id=1219): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 48.224278984s ago: executing program 32 (id=1219): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.682862405s ago: executing program 5 (id=3390): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.510784398s ago: executing program 5 (id=3395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.497717288s ago: executing program 5 (id=3396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.414466979s ago: executing program 5 (id=3399): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\b\x00'], 0x1c}}, 0x20000086) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@\x00'], 0x70}, 0x80) 1.36017195s ago: executing program 5 (id=3403): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) 1.258862032s ago: executing program 5 (id=3407): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 799.595119ms ago: executing program 0 (id=3427): r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_gettime(r1, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) 769.128219ms ago: executing program 0 (id=3429): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 678.9069ms ago: executing program 1 (id=3430): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 598.300641ms ago: executing program 1 (id=3433): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc0868, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x8106, 0x0, 0x2, 0x0, 0x2, 0x2, 0x80, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xa, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f036e04000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) syz_open_procfs$pagemap(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) 489.648533ms ago: executing program 1 (id=3437): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) time(0x0) 409.326924ms ago: executing program 1 (id=3440): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') creat(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7e1ce440945e0ba7) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 408.569514ms ago: executing program 0 (id=3441): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 317.255685ms ago: executing program 3 (id=3442): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x401) 317.021836ms ago: executing program 2 (id=3443): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 316.801805ms ago: executing program 2 (id=3444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 210.932377ms ago: executing program 2 (id=3445): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 210.757487ms ago: executing program 0 (id=3446): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x400000013) 210.636977ms ago: executing program 3 (id=3447): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 210.376267ms ago: executing program 1 (id=3455): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x3, 0x1, 0xa, {0x7, 0x29e}, 0x8, 0x3}) 205.736577ms ago: executing program 2 (id=3448): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x1}) 175.195187ms ago: executing program 0 (id=3449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) 165.172998ms ago: executing program 1 (id=3450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) unshare(0x60000200) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) 140.936348ms ago: executing program 2 (id=3451): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/219, 0xdb}], 0x1, 0x1, 0x0) 140.630228ms ago: executing program 3 (id=3452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 137.609348ms ago: executing program 0 (id=3453): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x109000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x8000}, {r1, 0x80}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 89.301899ms ago: executing program 2 (id=3454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 88.874129ms ago: executing program 3 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d", @ANYBLOB="c770ee18914110e7c19b01ac039e3b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 22.91554ms ago: executing program 3 (id=3457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0xc094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) 0s ago: executing program 3 (id=3458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffe}}}}}}}, 0x0) kernel console output (not intermixed with test programs): d XDP return value 0 on prog (id 273) dev N/A, expect packet loss! [ 47.693225][ T4378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 47.759679][ T4390] 9pnet_fd: Insufficient options for proto=fd [ 47.833883][ T3401] IPVS: starting estimator thread 0... [ 47.861160][ T4405] loop4: detected capacity change from 0 to 512 [ 47.872892][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.901000][ T4405] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.920083][ T4402] IPVS: using max 2448 ests per chain, 122400 per kthread [ 48.007246][ T4414] sit0: entered promiscuous mode [ 48.021043][ T4414] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 48.028767][ T4414] netlink: 1 bytes leftover after parsing attributes in process `syz.0.404'. [ 48.047132][ T4405] syz.4.401 (4405) used greatest stack depth: 10096 bytes left [ 48.055653][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.232872][ T4426] netlink: 'syz.2.410': attribute type 3 has an invalid length. [ 48.240738][ T4426] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 48.248468][ T4426] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.410'. [ 48.278732][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 48.278749][ T29] audit: type=1400 audit(1752491082.538:678): avc: denied { create } for pid=4427 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.373669][ T29] audit: type=1400 audit(1752491082.548:679): avc: denied { create } for pid=4427 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.393267][ T29] audit: type=1400 audit(1752491082.548:680): avc: denied { ioctl } for pid=4427 comm="syz.2.411" path="socket:[7559]" dev="sockfs" ino=7559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.418027][ T29] audit: type=1400 audit(1752491082.548:681): avc: denied { ioctl } for pid=4427 comm="syz.2.411" path="socket:[7558]" dev="sockfs" ino=7558 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.474809][ T29] audit: type=1326 audit(1752491082.718:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9aace929 code=0x7ffc0000 [ 48.484534][ T4436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.498242][ T29] audit: type=1326 audit(1752491082.718:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9aace929 code=0x7ffc0000 [ 48.529500][ T29] audit: type=1326 audit(1752491082.728:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9aace929 code=0x7ffc0000 [ 48.552894][ T29] audit: type=1326 audit(1752491082.728:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9aace929 code=0x7ffc0000 [ 48.576217][ T29] audit: type=1326 audit(1752491082.728:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9aace929 code=0x7ffc0000 [ 48.599516][ T29] audit: type=1326 audit(1752491082.728:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9aace929 code=0x7ffc0000 [ 48.634172][ T4438] netlink: 164 bytes leftover after parsing attributes in process `syz.3.416'. [ 48.732168][ T4449] loop4: detected capacity change from 0 to 764 [ 48.749432][ T4449] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.761941][ T4455] netlink: 'syz.0.420': attribute type 3 has an invalid length. [ 49.027951][ T4502] loop0: detected capacity change from 0 to 512 [ 49.074096][ T4502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.095747][ T4514] loop2: detected capacity change from 0 to 764 [ 49.105468][ T4502] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.149968][ T4514] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 49.209140][ T4521] loop3: detected capacity change from 0 to 1024 [ 49.279822][ T4521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.288891][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.299226][ T4527] loop1: detected capacity change from 0 to 1024 [ 49.310966][ T4527] EXT4-fs: Ignoring removed nobh option [ 49.337489][ T4521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.352861][ T4527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.416918][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.436378][ T4527] EXT4-fs warning (device loop1): ext4_rename_delete:3726: inode #12: comm syz.1.450: Deleting old file: nlink 2, error=-2 [ 49.473150][ T4546] hub 9-0:1.0: USB hub found [ 49.483250][ T4546] hub 9-0:1.0: 8 ports detected [ 49.640616][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.769369][ T4583] loop2: detected capacity change from 0 to 1024 [ 49.793998][ T4583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.799614][ T4589] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 49.833111][ T4588] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 49.892256][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.901462][ T4588] team0: Device ipvlan2 is already an upper device of the team interface [ 49.941424][ T4596] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 49.964674][ T4598] SELinux: syz.2.475 (4598) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 49.987988][ T4589] team0: Port device dummy0 added [ 50.022336][ T4596] team0: Port device dummy0 removed [ 50.054814][ T4596] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.361756][ T4657] SELinux: security_context_str_to_sid () failed with errno=-22 [ 50.438701][ T4672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 50.555439][ T4686] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 50.585047][ T4686] team0: Device ipvlan2 is already an upper device of the team interface [ 50.717763][ T4712] loop4: detected capacity change from 0 to 2048 [ 50.744233][ T4718] loop2: detected capacity change from 0 to 2048 [ 50.780882][ T4712] EXT4-fs (loop4): failed to initialize system zone (-117) [ 50.789712][ T4712] EXT4-fs (loop4): mount failed [ 50.796103][ T4718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.125199][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.180548][ T4758] netlink: 'syz.0.522': attribute type 21 has an invalid length. [ 51.331935][ T4776] vlan2: entered allmulticast mode [ 51.337530][ T4767] loop2: detected capacity change from 0 to 512 [ 51.360659][ T4767] EXT4-fs: Ignoring removed orlov option [ 51.386032][ T4767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.407113][ T4767] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.411151][ T4791] loop4: detected capacity change from 0 to 2048 [ 51.631187][ T4767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.526: bg 0: block 248: padding at end of block bitmap is not set [ 51.760087][ T4767] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.526: Failed to acquire dquot type 1 [ 51.880112][ T4767] EXT4-fs (loop2): 1 truncate cleaned up [ 51.940428][ T4767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.164151][ T4796] pim6reg: entered allmulticast mode [ 52.181806][ T4796] pim6reg: left allmulticast mode [ 52.203164][ T4791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.275862][ T4767] syz.2.526 (4767) used greatest stack depth: 9576 bytes left [ 52.310692][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.474091][ T4830] loop3: detected capacity change from 0 to 1024 [ 52.521519][ T4830] EXT4-fs: Ignoring removed nobh option [ 52.527153][ T4830] EXT4-fs: Ignoring removed nobh option [ 52.542561][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.565378][ T4830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.632576][ T4846] capability: warning: `syz.4.552' uses 32-bit capabilities (legacy support in use) [ 52.659972][ T4861] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 52.689672][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.695560][ T4863] loop2: detected capacity change from 0 to 1024 [ 52.717197][ T4868] __nla_validate_parse: 5 callbacks suppressed [ 52.717250][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 52.743984][ T4863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.759197][ T4868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.775870][ T4867] loop4: detected capacity change from 0 to 1024 [ 52.778093][ T4868] bond1: (slave batadv1): Opening slave failed [ 52.798314][ T4863] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.813752][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 52.820459][ T4867] EXT4-fs: Ignoring removed orlov option [ 52.826578][ T4913] bridge0: entered promiscuous mode [ 52.834441][ T4863] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.558: lblock 3 mapped to illegal pblock 3 (length 13) [ 52.837590][ T4867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.862529][ T4913] bridge0: port 3(macvlan2) entered blocking state [ 52.869082][ T4913] bridge0: port 3(macvlan2) entered disabled state [ 52.871112][ T4863] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 52.885676][ T4913] macvlan2: entered allmulticast mode [ 52.888062][ T4863] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.888062][ T4863] [ 52.893403][ T4913] bridge0: entered allmulticast mode [ 52.941552][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.954366][ T12] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 2) [ 52.984002][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 117 [ 52.996440][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.996440][ T12] [ 53.006825][ T4932] loop3: detected capacity change from 0 to 128 [ 53.007717][ T4913] macvlan2: left allmulticast mode [ 53.016739][ T4932] EXT4-fs: Ignoring removed nobh option [ 53.018350][ T4913] bridge0: left allmulticast mode [ 53.025824][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.030108][ T4913] bridge0: left promiscuous mode [ 53.053697][ T4932] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.066394][ T4932] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.096586][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.188319][ T4974] netlink: 'syz.3.570': attribute type 21 has an invalid length. [ 53.197753][ T4974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.570'. [ 53.238317][ T4980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 53.282822][ T4984] loop4: detected capacity change from 0 to 1024 [ 53.294415][ T4989] loop1: detected capacity change from 0 to 512 [ 53.324446][ T4989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.352710][ T4984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.365539][ T4989] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.376202][ T4984] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.397459][ T4984] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.577: lblock 3 mapped to illegal pblock 3 (length 13) [ 53.413106][ T4984] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 53.425591][ T4984] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.425591][ T4984] [ 53.430602][ T4986] syzkaller1: entered promiscuous mode [ 53.440893][ T4986] syzkaller1: entered allmulticast mode [ 53.478211][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.495511][ T12] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 2) [ 53.504877][ T5022] loop2: detected capacity change from 0 to 8192 [ 53.518114][ T5022] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.533924][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 117 [ 53.534127][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 53.534144][ T29] audit: type=1400 audit(1752491087.798:837): avc: denied { mount } for pid=5019 comm="syz.2.581" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.546292][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.546292][ T12] [ 53.575508][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.634461][ T29] audit: type=1400 audit(1752491087.898:838): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.659609][ T29] audit: type=1326 audit(1752491087.928:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf2ae929 code=0x7ffc0000 [ 53.684021][ T29] audit: type=1326 audit(1752491087.958:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf2ae929 code=0x7ffc0000 [ 53.783500][ T29] audit: type=1326 audit(1752491087.988:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f1ebf2ae929 code=0x7ffc0000 [ 53.807014][ T29] audit: type=1326 audit(1752491087.988:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf2ae929 code=0x7ffc0000 [ 53.823861][ T5064] loop2: detected capacity change from 0 to 1024 [ 53.830463][ T29] audit: type=1326 audit(1752491087.988:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf2ae929 code=0x7ffc0000 [ 53.860574][ T5064] EXT4-fs: Ignoring removed nobh option [ 53.863320][ T29] audit: type=1400 audit(1752491088.128:844): avc: denied { compute_member } for pid=5056 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.866192][ T5064] EXT4-fs: Ignoring removed nobh option [ 53.868415][ T5064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.926776][ T5057] loop1: detected capacity change from 0 to 512 [ 53.939775][ T5068] loop4: detected capacity change from 0 to 1024 [ 53.946709][ T5068] EXT4-fs: Ignoring removed nobh option [ 53.954184][ T5068] EXT4-fs: Ignoring removed bh option [ 53.954450][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.960648][ T5057] EXT4-fs: Ignoring removed orlov option [ 53.981310][ T5057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.993804][ T5057] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.003592][ T5068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.017050][ T5057] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.589: bg 0: block 248: padding at end of block bitmap is not set [ 54.041435][ T5057] Quota error (device loop1): write_blk: dquota write failed [ 54.048949][ T5057] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 54.059023][ T5057] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.589: Failed to acquire dquot type 1 [ 54.075955][ T5057] EXT4-fs (loop1): 1 truncate cleaned up [ 54.087233][ T5057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.100163][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.139366][ T5057] syz.1.589 (5057) used greatest stack depth: 9496 bytes left [ 54.155466][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.412471][ T5170] netlink: 'syz.3.624': attribute type 10 has an invalid length. [ 54.441383][ T5170] team0: Device hsr_slave_0 failed to register rx_handler [ 54.493012][ T5193] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 54.500740][ T5193] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.631'. [ 55.059704][ T5268] loop3: detected capacity change from 0 to 512 [ 55.066663][ T5268] EXT4-fs: Ignoring removed orlov option [ 55.113619][ T5276] futex_wake_op: syz.1.656 tries to shift op by -1; fix this program [ 55.145942][ T5268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.164865][ T5281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'. [ 55.173056][ T5268] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.180944][ T5268] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.653: bg 0: block 248: padding at end of block bitmap is not set [ 55.213174][ T5268] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.653: Failed to acquire dquot type 1 [ 55.225409][ T5268] EXT4-fs (loop3): 1 truncate cleaned up [ 55.449353][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 55.461449][ T5324] bridge0: entered promiscuous mode [ 55.468074][ T5324] bridge0: port 3(macvlan2) entered blocking state [ 55.474844][ T5324] bridge0: port 3(macvlan2) entered disabled state [ 55.481549][ T5324] macvlan2: entered allmulticast mode [ 55.486994][ T5324] bridge0: entered allmulticast mode [ 55.492937][ T5324] macvlan2: left allmulticast mode [ 55.498156][ T5324] bridge0: left allmulticast mode [ 55.505034][ T5324] bridge0: left promiscuous mode [ 55.660239][ T5348] loop0: detected capacity change from 0 to 2048 [ 55.671792][ T5348] EXT4-fs (loop0): failed to initialize system zone (-117) [ 55.679421][ T5348] EXT4-fs (loop0): mount failed [ 55.786915][ T5365] loop0: detected capacity change from 0 to 512 [ 55.794338][ T5365] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 55.806100][ T5365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 55.814769][ T5365] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.687: corrupted in-inode xattr: e_value size too large [ 55.830716][ T5365] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.687: couldn't read orphan inode 15 (err -117) [ 55.983788][ T5378] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 56.014282][ T5382] SELinux: failed to load policy [ 56.073448][ T5386] loop3: detected capacity change from 0 to 2048 [ 56.104186][ T5386] EXT4-fs (loop3): failed to initialize system zone (-117) [ 56.124046][ T5386] EXT4-fs (loop3): mount failed [ 56.127871][ T5391] loop4: detected capacity change from 0 to 512 [ 56.136355][ T5391] EXT4-fs: Ignoring removed orlov option [ 56.143240][ T5391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.175472][ T5391] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.188705][ T5391] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.698: bg 0: block 248: padding at end of block bitmap is not set [ 56.215422][ T5409] futex_wake_op: syz.3.703 tries to shift op by -1; fix this program [ 56.256960][ T5391] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.698: Failed to acquire dquot type 1 [ 56.273212][ T5391] EXT4-fs (loop4): 1 truncate cleaned up [ 56.379730][ T5422] syzkaller1: entered promiscuous mode [ 56.385290][ T5422] syzkaller1: entered allmulticast mode [ 56.443196][ T5460] loop2: detected capacity change from 0 to 512 [ 56.451298][ T5460] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.479537][ T5460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.492256][ T5460] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.507935][ T5460] EXT4-fs (loop2): 1 truncate cleaned up [ 56.594505][ T5481] bond1: entered promiscuous mode [ 56.599617][ T5481] bond1: entered allmulticast mode [ 56.606024][ T5481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.618193][ T5481] bond1 (unregistering): Released all slaves [ 58.993186][ T5581] netlink: 'syz.4.734': attribute type 21 has an invalid length. [ 59.016268][ T5596] syzkaller1: entered promiscuous mode [ 59.021953][ T5596] syzkaller1: entered allmulticast mode [ 59.029083][ T5581] netlink: 132 bytes leftover after parsing attributes in process `syz.4.734'. [ 59.038119][ T5581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.734'. [ 59.066690][ T5614] netem: change failed [ 59.147884][ T5622] SELinux: Context Ü is not valid (left unmapped). [ 59.167470][ T5625] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 59.185051][ T5628] hub 9-0:1.0: USB hub found [ 59.189809][ T5628] hub 9-0:1.0: 8 ports detected [ 59.326324][ T5644] loop2: detected capacity change from 0 to 8192 [ 59.344989][ T5644] syz.2.748: attempt to access beyond end of device [ 59.344989][ T5644] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 59.358529][ T5644] Buffer I/O error on dev loop2, logical block 57847, async page read [ 59.375108][ T5657] loop3: detected capacity change from 0 to 1024 [ 59.391663][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 59.391758][ T29] audit: type=1326 audit(1752491093.658:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.421208][ T29] audit: type=1326 audit(1752491093.658:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.467746][ T5657] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.478753][ T5657] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.494886][ T29] audit: type=1326 audit(1752491093.708:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.518285][ T29] audit: type=1326 audit(1752491093.708:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.541642][ T29] audit: type=1326 audit(1752491093.708:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.564912][ T29] audit: type=1326 audit(1752491093.708:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.566880][ T5669] loop1: detected capacity change from 0 to 1024 [ 59.588178][ T29] audit: type=1326 audit(1752491093.708:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.611591][ T5657] JBD2: no valid journal superblock found [ 59.617984][ T29] audit: type=1326 audit(1752491093.708:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.623650][ T5657] EXT4-fs (loop3): Could not load journal inode [ 59.646844][ T29] audit: type=1326 audit(1752491093.708:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.646884][ T29] audit: type=1326 audit(1752491093.708:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 59.745677][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 59.832620][ T5693] 9p: Unknown access argument 18446744073709551615: -34 [ 60.276177][ T5755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5755 comm=syz.3.790 [ 60.664419][ T5783] bond1: entered promiscuous mode [ 60.669589][ T5783] bond1: entered allmulticast mode [ 60.685146][ T5824] syz.2.804 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.714158][ T5783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.731424][ T5826] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 60.794410][ T5783] bond1 (unregistering): Released all slaves [ 60.916332][ T5876] netlink: 36 bytes leftover after parsing attributes in process `syz.3.816'. [ 61.081540][ T5892] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 61.116547][ T5900] tipc: Started in network mode [ 61.121599][ T5900] tipc: Node identity ac14140f, cluster identity 4711 [ 61.128703][ T5900] tipc: New replicast peer: 255.255.255.255 [ 61.135032][ T5900] tipc: Enabled bearer , priority 10 [ 61.282379][ T5922] loop4: detected capacity change from 0 to 2048 [ 61.336764][ T5922] Alternate GPT is invalid, using primary GPT. [ 61.343326][ T5922] loop4: p2 p3 p7 [ 61.393508][ T3415] kernel write not supported for file bpf-prog (pid: 3415 comm: kworker/1:6) [ 61.507625][ T5964] loop4: detected capacity change from 0 to 164 [ 61.532083][ T5964] syz.4.852: attempt to access beyond end of device [ 61.532083][ T5964] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 61.596684][ T5964] syz.4.852: attempt to access beyond end of device [ 61.596684][ T5964] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 61.814526][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 62.312756][ T3404] tipc: Node number set to 2886997007 [ 63.159953][ T6159] netlink: 96 bytes leftover after parsing attributes in process `syz.4.913'. [ 63.395582][ T6187] loop2: detected capacity change from 0 to 128 [ 63.430578][ T6187] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.482896][ T6187] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.515626][ T6202] batadv_slave_0: entered promiscuous mode [ 63.522895][ T6202] batadv_slave_0: left promiscuous mode [ 63.588352][ T6222] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž; [ 63.653243][ T6229] loop1: detected capacity change from 0 to 512 [ 63.666127][ T6229] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.677917][ T6229] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.938: Failed to acquire dquot type 1 [ 63.695162][ T6229] EXT4-fs (loop1): 1 truncate cleaned up [ 63.724730][ T6238] loop2: detected capacity change from 0 to 2048 [ 63.742662][ T6238] EXT4-fs (loop2): failed to initialize system zone (-117) [ 63.763587][ T6238] EXT4-fs (loop2): mount failed [ 63.857724][ T6280] loop3: detected capacity change from 0 to 1024 [ 63.864805][ T6280] EXT4-fs: Ignoring removed bh option [ 63.870662][ T6280] EXT4-fs: inline encryption not supported [ 63.877391][ T6280] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.891178][ T6280] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 63.933026][ T6280] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm GPL: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.961338][ T6280] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm GPL: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.995304][ T6280] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm GPL: Failed to acquire dquot type 0 [ 64.016563][ T6280] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 64.026299][ T6280] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm GPL: mark_inode_dirty error [ 64.039074][ T6280] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 64.049586][ T6280] EXT4-fs (loop3): 1 orphan inode deleted [ 64.061405][ T31] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.089433][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 64.113193][ T3309] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 64.130638][ T3309] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 64.145522][ T6321] batadv_slave_0: entered promiscuous mode [ 64.153324][ T6321] batadv_slave_0: left promiscuous mode [ 64.154197][ T3309] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 64.210794][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.968'. [ 64.267422][ T6346] netlink: 'syz.4.971': attribute type 13 has an invalid length. [ 64.433472][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.440826][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.548168][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.574475][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.672357][ T6346] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.681402][ T6346] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.690383][ T6346] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.699331][ T6346] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.735560][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'. [ 64.744739][ T6359] netlink: 196 bytes leftover after parsing attributes in process `syz.0.975'. [ 64.765935][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'. [ 64.775696][ T6359] netlink: 196 bytes leftover after parsing attributes in process `syz.0.975'. [ 64.786183][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 64.881883][ T6388] loop4: detected capacity change from 0 to 128 [ 64.903899][ T6388] EXT4-fs: Ignoring removed nobh option [ 64.914312][ T6390] openvswitch: netlink: Message has 6 unknown bytes. [ 64.923363][ T6388] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.960751][ T6396] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.988'. [ 64.971165][ T6394] xt_hashlimit: size too large, truncated to 1048576 [ 64.977973][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 64.978020][ T29] audit: type=1400 audit(1752491099.238:1195): avc: denied { getopt } for pid=6392 comm="syz.0.987" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.117893][ T6403] –: renamed from vxcan1 (while UP) [ 65.301041][ T29] audit: type=1107 audit(1752491099.568:1196): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 65.340127][ T29] audit: type=1326 audit(1752491099.588:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02e7ce929 code=0x7ffc0000 [ 65.345205][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.363617][ T29] audit: type=1326 audit(1752491099.588:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02e7ce929 code=0x7ffc0000 [ 65.363693][ T29] audit: type=1326 audit(1752491099.588:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02e7ce929 code=0x7ffc0000 [ 65.363747][ T29] audit: type=1326 audit(1752491099.588:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02e7ce929 code=0x7ffc0000 [ 65.371260][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.394638][ T29] audit: type=1326 audit(1752491099.588:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02e7ce929 code=0x7ffc0000 [ 65.426792][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.441393][ T29] audit: type=1326 audit(1752491099.588:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02e7ce929 code=0x7ffc0000 [ 65.448795][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.472160][ T29] audit: type=1326 audit(1752491099.588:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02e7ce929 code=0x7ffc0000 [ 65.479567][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.502948][ T29] audit: type=1326 audit(1752491099.588:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02e7ce929 code=0x7ffc0000 [ 65.510362][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.510384][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.579771][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.587295][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.594853][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.602275][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.609807][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.618248][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.625724][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.633343][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.640954][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.648543][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.656046][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.663521][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.671024][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.678506][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.685965][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.693447][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.700898][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.708359][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.715822][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.723248][ T6023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 65.731606][ T6023] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 65.745184][ T6435] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 65.903382][ T6468] syzkaller1: entered promiscuous mode [ 65.908941][ T6468] syzkaller1: entered allmulticast mode [ 65.971356][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.978850][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.988032][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.995474][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.003008][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.010514][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.017984][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.019862][ T6488] Invalid ELF header magic: != ELF [ 66.025471][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.038243][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.045833][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.053329][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.060840][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.068357][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.075881][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.083396][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.090837][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.098300][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.105745][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.113192][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.120641][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.128048][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.135483][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.142930][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.150387][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.157801][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.165368][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.172834][ T6023] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.199647][ T6023] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 66.219013][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 66.495859][ T6554] loop2: detected capacity change from 0 to 1024 [ 66.511569][ T6554] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.526122][ T6554] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1049: bg 0: block 393: padding at end of block bitmap is not set [ 66.667585][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.675072][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.682553][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.689958][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.697372][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.704793][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.712237][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.719667][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.727111][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.734560][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.742056][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.749564][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.757119][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.764596][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.772056][ T9] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x0 [ 66.780484][ T9] hid-generic 00A0:0008:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 66.902708][ T6592] SELinux: failed to load policy [ 67.015272][ T6610] loop4: detected capacity change from 0 to 1024 [ 67.026735][ T6610] EXT4-fs: Ignoring removed bh option [ 67.032842][ T6610] EXT4-fs: inline encryption not supported [ 67.042563][ T6610] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.074508][ T6610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 67.074707][ T6614] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1069'. [ 67.091995][ T6614] unsupported nla_type 65024 [ 67.101387][ T6610] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm GPL: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.115539][ T6610] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm GPL: lblock 0 mapped to illegal pblock 48 (length 1) [ 67.137021][ T6610] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm GPL: Failed to acquire dquot type 0 [ 67.149020][ T6610] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 67.161338][ T6610] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm GPL: mark_inode_dirty error [ 67.175076][ T6622] xt_hashlimit: size too large, truncated to 1048576 [ 67.188920][ T6610] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 67.227515][ T6610] EXT4-fs (loop4): 1 orphan inode deleted [ 67.260014][ T31] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.274866][ T6632] –: renamed from vxcan1 (while UP) [ 67.303160][ T6636] loop0: detected capacity change from 0 to 512 [ 67.316383][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 67.330417][ T6636] EXT4-fs: Ignoring removed orlov option [ 67.347885][ T6636] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.351730][ T6639] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 67.374617][ T6636] EXT4-fs (loop0): 1 orphan inode deleted [ 67.380468][ T6636] EXT4-fs (loop0): 1 truncate cleaned up [ 67.386709][ T3306] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.408657][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 67.427145][ T6636] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 67.428245][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 67.454110][ T3306] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 67.466654][ T6636] EXT4-fs (loop0): Remounting filesystem read-only [ 67.482948][ T6636] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1597: inode #17: comm syz.0.1076: cleanup dec ref error -28 [ 67.583644][ T6666] loop0: detected capacity change from 0 to 512 [ 67.591479][ T6666] EXT4-fs: Ignoring removed bh option [ 67.598362][ T6666] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.612353][ T6669] loop1: detected capacity change from 0 to 256 [ 67.621202][ T6669] FAT-fs (loop1): Directory bread(block 1285) failed [ 67.628554][ T6666] EXT4-fs (loop0): 1 truncate cleaned up [ 67.632116][ T6669] FAT-fs (loop1): Directory bread(block 1285) failed [ 67.643796][ T6669] FAT-fs (loop1): Directory bread(block 1285) failed [ 67.652262][ T6669] FAT-fs (loop1): Directory bread(block 1285) failed [ 67.955517][ T6721] loop3: detected capacity change from 0 to 2048 [ 67.999824][ T6734] xt_hashlimit: size too large, truncated to 1048576 [ 68.058441][ T6735] –: renamed from vxcan1 (while UP) [ 68.219070][ T6756] loop0: detected capacity change from 0 to 1024 [ 68.226489][ T6756] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 68.245345][ T6756] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 68.420742][ T6777] xt_hashlimit: size too large, truncated to 1048576 [ 68.437434][ T6781] loop2: detected capacity change from 0 to 256 [ 68.451271][ T6779] loop0: detected capacity change from 0 to 2048 [ 68.458551][ T6781] FAT-fs (loop2): bogus number of FAT sectors [ 68.464769][ T6781] FAT-fs (loop2): Can't find a valid FAT filesystem [ 68.513551][ T6792] –: renamed from vxcan1 [ 68.514823][ T6779] EXT4-fs mount: 26 callbacks suppressed [ 68.514849][ T6779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.616765][ T6797] netlink: 'syz.1.1131': attribute type 8 has an invalid length. [ 68.703453][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.801293][ T6831] loop2: detected capacity change from 0 to 2048 [ 68.815718][ T6831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.908040][ T6845] loop4: detected capacity change from 0 to 2048 [ 68.922231][ T6845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.111202][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.118382][ T6843] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.136439][ T6843] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.149018][ T6843] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.149018][ T6843] [ 69.158757][ T6843] EXT4-fs (loop2): Total free blocks count 0 [ 69.164824][ T6843] EXT4-fs (loop2): Free/Dirty block details [ 69.170858][ T6843] EXT4-fs (loop2): free_blocks=2415919104 [ 69.176686][ T6843] EXT4-fs (loop2): dirty_blocks=8208 [ 69.182110][ T6843] EXT4-fs (loop2): Block reservation details [ 69.187285][ T6864] loop4: detected capacity change from 0 to 512 [ 69.188154][ T6843] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 69.197479][ T6864] EXT4-fs: Ignoring removed orlov option [ 69.207191][ T6864] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.219841][ T6864] EXT4-fs (loop4): 1 orphan inode deleted [ 69.225725][ T6864] EXT4-fs (loop4): 1 truncate cleaned up [ 69.232325][ T6864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.251710][ T6864] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 69.267766][ T6864] EXT4-fs (loop4): Remounting filesystem read-only [ 69.274803][ T6864] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1597: inode #17: comm syz.4.1154: cleanup dec ref error -28 [ 69.293992][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 69.307048][ T6868] unsupported nlmsg_type 40 [ 69.312749][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.346547][ T6874] __nla_validate_parse: 3 callbacks suppressed [ 69.346618][ T6874] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1158'. [ 69.454186][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'. [ 69.463307][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1163'. [ 69.472656][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'. [ 69.481939][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1163'. [ 69.490945][ T6890] netlink: 'syz.4.1163': attribute type 6 has an invalid length. [ 69.533805][ T6896] loop0: detected capacity change from 0 to 164 [ 69.548072][ T6896] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.558937][ T6898] loop4: detected capacity change from 0 to 128 [ 69.563535][ T6896] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.573973][ T6896] Symlink component flag not implemented [ 69.579689][ T6896] Symlink component flag not implemented [ 69.586175][ T6896] Symlink component flag not implemented (7) [ 69.588944][ T6898] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.592673][ T6896] Symlink component flag not implemented (116) [ 69.606407][ T6898] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.679033][ T6898] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 69.702096][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1174'. [ 69.711347][ T6915] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 69.711686][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.445765][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 72.445792][ T29] audit: type=1400 audit(1752491106.708:1357): avc: denied { setopt } for pid=6930 comm="syz.1.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.523841][ T29] audit: type=1400 audit(1752491106.778:1358): avc: denied { mount } for pid=6941 comm="syz.0.1186" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.545868][ T29] audit: type=1400 audit(1752491106.778:1359): avc: denied { unmount } for pid=6941 comm="syz.0.1186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.575835][ T29] audit: type=1400 audit(1752491106.838:1360): avc: denied { read } for pid=6946 comm="syz.1.1189" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.598913][ T29] audit: type=1400 audit(1752491106.838:1361): avc: denied { open } for pid=6946 comm="syz.1.1189" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.624197][ T29] audit: type=1400 audit(1752491106.838:1362): avc: denied { read } for pid=6938 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.660110][ T29] audit: type=1400 audit(1752491106.918:1363): avc: denied { ioctl } for pid=6946 comm="syz.1.1189" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.710333][ T6952] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1191'. [ 72.713037][ T29] audit: type=1400 audit(1752491106.978:1364): avc: denied { create } for pid=6956 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.741202][ T29] audit: type=1400 audit(1752491106.998:1365): avc: denied { setopt } for pid=6956 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.768778][ T6961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 72.788487][ T6961] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.802320][ T6961] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.822305][ T29] audit: type=1326 audit(1752491107.088:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9aace929 code=0x7ffc0000 [ 72.885580][ T6970] loop1: detected capacity change from 0 to 1024 [ 72.896116][ T6970] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 72.981666][ T6992] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1205'. [ 73.064521][ T7002] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 73.072776][ T7002] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 73.394625][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 73.402398][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 73.432574][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.440653][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.448407][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.456275][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.464130][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.471853][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.479629][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.485065][ T7031] chnl_net:caif_netlink_parms(): no params data found [ 73.487374][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.501845][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.509574][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.517487][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.525386][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.533361][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.541086][ T6355] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 73.557001][ T12] bridge_slave_1: left allmulticast mode [ 73.562886][ T12] bridge_slave_1: left promiscuous mode [ 73.568633][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.576985][ T6355] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 73.592763][ T12] bridge_slave_0: left allmulticast mode [ 73.598486][ T12] bridge_slave_0: left promiscuous mode [ 73.604319][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.672642][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.687015][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.700588][ T12] bond0 (unregistering): Released all slaves [ 73.741061][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.748235][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.757674][ T7031] bridge_slave_0: entered allmulticast mode [ 73.767815][ T7031] bridge_slave_0: entered promiscuous mode [ 73.776884][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.784165][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.791475][ T7031] bridge_slave_1: entered allmulticast mode [ 73.798125][ T7031] bridge_slave_1: entered promiscuous mode [ 73.831869][ T12] hsr_slave_0: left promiscuous mode [ 73.848456][ T12] hsr_slave_1: left promiscuous mode [ 73.857765][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.866782][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.948191][ T12] team0 (unregistering): Port device team_slave_1 removed [ 73.966457][ T12] team0 (unregistering): Port device team_slave_0 removed [ 74.051826][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.082545][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.118281][ T7300] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1239'. [ 74.148164][ T7031] team0: Port device team_slave_0 added [ 74.166242][ T7031] team0: Port device team_slave_1 added [ 74.168333][ T7300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1239'. [ 74.240623][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.247652][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.273683][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.357705][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.364949][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.391036][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.439562][ T7031] hsr_slave_0: entered promiscuous mode [ 74.448566][ T7031] hsr_slave_1: entered promiscuous mode [ 74.454578][ T7031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.470028][ T7031] Cannot create hsr debugfs directory [ 74.719123][ T7031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.742086][ T7031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.751467][ T7031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.769725][ T7031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.839743][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.861601][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.879272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.886412][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.901446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.908642][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.937095][ T7031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.947697][ T7031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.007601][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.195275][ T7519] loop2: detected capacity change from 0 to 764 [ 75.202720][ T7519] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 75.258163][ T7031] veth0_vlan: entered promiscuous mode [ 75.279504][ T7031] veth1_vlan: entered promiscuous mode [ 75.319711][ T7031] veth0_macvtap: entered promiscuous mode [ 75.330616][ T7031] veth1_macvtap: entered promiscuous mode [ 75.344790][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.375471][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.386868][ T7031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.395729][ T7031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.404558][ T7031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.413332][ T7031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.674355][ T7570] loop1: detected capacity change from 0 to 256 [ 75.682389][ T7570] FAT-fs (loop1): bogus sectors per cluster 30 [ 75.688764][ T7570] FAT-fs (loop1): Can't find a valid FAT filesystem [ 75.797061][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 75.819628][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 76.084760][ T7618] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1294'. [ 76.255553][ T7640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7640 comm=syz.0.1302 [ 76.479126][ T7666] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1315'. [ 76.541124][ T7672] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 76.775205][ T7715] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.337617][ T7807] tap0: tun_chr_ioctl cmd 1074025678 [ 77.343118][ T7807] tap0: group set to 0 [ 77.359931][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 77.387591][ T7817] netlink: 'syz.3.1373': attribute type 39 has an invalid length. [ 77.461353][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 77.461373][ T29] audit: type=1400 audit(1752491111.728:1954): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.492612][ T29] audit: type=1400 audit(1752491111.728:1955): avc: denied { open } for pid=7832 comm="syz.0.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 77.512157][ T29] audit: type=1400 audit(1752491111.738:1956): avc: denied { create } for pid=7832 comm="syz.0.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 77.533070][ T29] audit: type=1400 audit(1752491111.748:1957): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.557469][ T29] audit: type=1400 audit(1752491111.758:1958): avc: denied { map_create } for pid=7834 comm="syz.0.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 77.576662][ T29] audit: type=1400 audit(1752491111.758:1959): avc: denied { prog_load } for pid=7834 comm="syz.0.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 77.595768][ T29] audit: type=1400 audit(1752491111.758:1960): avc: denied { prog_load } for pid=7834 comm="syz.0.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 77.615182][ T29] audit: type=1400 audit(1752491111.758:1961): avc: denied { read write } for pid=7834 comm="syz.0.1381" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.639363][ T29] audit: type=1400 audit(1752491111.778:1962): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.663616][ T29] audit: type=1400 audit(1752491111.798:1963): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.461312][ T7941] Process accounting resumed [ 78.473304][ T7947] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1421'. [ 78.525857][ T7952] bridge_slave_0: left allmulticast mode [ 78.531688][ T7952] bridge_slave_0: left promiscuous mode [ 78.537421][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.546965][ T7952] bridge_slave_1: left allmulticast mode [ 78.552859][ T7952] bridge_slave_1: left promiscuous mode [ 78.558659][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.564802][ T7953] netlink: 'syz.5.1423': attribute type 10 has an invalid length. [ 78.576556][ T7952] bond0: (slave bond_slave_0): Releasing backup interface [ 78.586868][ T7952] bond0: (slave bond_slave_1): Releasing backup interface [ 78.598512][ T7952] team0: Port device team_slave_0 removed [ 78.607311][ T7952] team0: Port device team_slave_1 removed [ 78.614779][ T7952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.622322][ T7952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.631589][ T7952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.639099][ T7952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.661346][ T7953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.668884][ T7953] team0: Port device bond0 added [ 79.487131][ T8046] xt_hashlimit: max too large, truncated to 1048576 [ 79.718329][ T8070] netem: incorrect ge model size [ 79.723394][ T8070] netem: change failed [ 80.019033][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1485'. [ 80.326163][ T8145] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 80.334162][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1506'. [ 80.353549][ T8145] team0: entered promiscuous mode [ 80.358751][ T8145] team_slave_0: entered promiscuous mode [ 80.364648][ T8145] team_slave_1: entered promiscuous mode [ 80.370491][ T8145] team0: entered allmulticast mode [ 80.373553][ T8149] netlink: 'syz.3.1509': attribute type 21 has an invalid length. [ 80.378118][ T8145] team_slave_0: entered allmulticast mode [ 80.389449][ T8145] team_slave_1: entered allmulticast mode [ 80.399399][ T8145] bridge0: port 3(team0) entered blocking state [ 80.405804][ T8145] bridge0: port 3(team0) entered disabled state [ 80.415769][ T8145] bridge0: port 3(team0) entered blocking state [ 80.422193][ T8145] bridge0: port 3(team0) entered forwarding state [ 80.430067][ T8149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1509'. [ 80.443084][ T8155] netlink: 'syz.2.1511': attribute type 11 has an invalid length. [ 80.451059][ T8155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1511'. [ 80.475956][ T8159] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 80.511127][ T8163] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 80.517752][ T8163] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.523205][ T8159] bond1: entered promiscuous mode [ 80.525479][ T8163] vhci_hcd vhci_hcd.0: Device attached [ 80.537268][ T8159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.558842][ T8167] vhci_hcd: connection closed [ 80.564015][ T8159] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 80.565887][ T1759] vhci_hcd: stop threads [ 80.570727][ T8159] bond1: (slave batadv1): making interface the new active one [ 80.575787][ T1759] vhci_hcd: release socket [ 80.580034][ T8159] batadv1: entered promiscuous mode [ 80.581654][ T8159] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 80.587511][ T1759] vhci_hcd: disconnect device [ 80.825487][ T8253] __nla_validate_parse: 1 callbacks suppressed [ 80.825627][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 80.840876][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 80.849861][ T8253] netlink: 'syz.0.1540': attribute type 20 has an invalid length. [ 80.870928][ T8253] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.879863][ T8253] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.888705][ T8253] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.897618][ T8253] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.911641][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 80.920650][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 80.929708][ T8253] netlink: 'syz.0.1540': attribute type 20 has an invalid length. [ 81.001634][ T8275] netlink: 'syz.3.1550': attribute type 3 has an invalid length. [ 81.009442][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 81.330880][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 81.594909][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1604'. [ 82.396115][ T8454] sit0: left promiscuous mode [ 82.408252][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.415625][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.460110][ T8454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.470750][ T8454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.492406][ T29] kauditd_printk_skb: 805 callbacks suppressed [ 82.492488][ T29] audit: type=1400 audit(1752491116.758:2769): avc: denied { module_request } for pid=8460 comm="syz.1.1618" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 82.521219][ T29] audit: type=1400 audit(1752491116.758:2770): avc: denied { sys_module } for pid=8460 comm="syz.1.1618" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 82.554645][ T8454] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.563607][ T8454] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.572670][ T8454] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.581698][ T8454] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.590935][ T8454] geneve2: left promiscuous mode [ 82.595931][ T8454] geneve2: left allmulticast mode [ 82.604101][ T8454] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.613062][ T8454] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.622121][ T8454] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.631103][ T8454] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.680245][ T29] audit: type=1400 audit(1752491116.938:2771): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 82.706426][ T29] audit: type=1400 audit(1752491116.948:2772): avc: denied { read write } for pid=7031 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 82.742757][ T29] audit: type=1400 audit(1752491117.008:2773): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 82.769464][ T29] audit: type=1400 audit(1752491117.038:2774): avc: denied { prog_load } for pid=8473 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 82.800216][ T29] audit: type=1400 audit(1752491117.058:2775): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 82.843250][ T29] audit: type=1400 audit(1752491117.098:2776): avc: denied { block_suspend } for pid=8477 comm="syz.1.1622" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 82.864810][ T29] audit: type=1400 audit(1752491117.098:2777): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 82.889043][ T29] audit: type=1400 audit(1752491117.108:2778): avc: denied { read write } for pid=7031 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 82.966106][ T8500] syz.1.1631(8500): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 83.463935][ T8579] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 84.996358][ T8769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.014970][ T8806] netlink: 'syz.3.1739': attribute type 10 has an invalid length. [ 85.042041][ T8806] bond0: (slave dummy0): Releasing backup interface [ 85.064256][ T8806] team0: Port device dummy0 added [ 85.071563][ T8814] netlink: 'syz.2.1742': attribute type 10 has an invalid length. [ 85.104652][ T8814] geneve1: entered promiscuous mode [ 85.116516][ T8814] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 85.228900][ T8839] netlink: 'syz.2.1752': attribute type 10 has an invalid length. [ 85.236827][ T8839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1752'. [ 85.246466][ T8839] team0: entered promiscuous mode [ 85.252312][ T8839] team_slave_0: entered promiscuous mode [ 85.258149][ T8839] team_slave_1: entered promiscuous mode [ 85.264214][ T8839] team0: entered allmulticast mode [ 85.269754][ T8839] team_slave_0: entered allmulticast mode [ 85.275617][ T8839] team_slave_1: entered allmulticast mode [ 85.284653][ T8839] bridge0: port 3(team0) entered blocking state [ 85.291147][ T8839] bridge0: port 3(team0) entered disabled state [ 85.299099][ T8839] bridge0: port 3(team0) entered blocking state [ 85.305461][ T8839] bridge0: port 3(team0) entered forwarding state [ 85.729623][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'. [ 85.748782][ T8920] netlink: 'syz.3.1777': attribute type 21 has an invalid length. [ 85.758657][ T8920] netlink: 'syz.3.1777': attribute type 1 has an invalid length. [ 85.766525][ T8920] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1777'. [ 86.117963][ T8980] team0: Port device dummy0 removed [ 86.118559][ T8988] netlink: 'syz.3.1806': attribute type 10 has an invalid length. [ 86.155893][ T8980] bridge_slave_0: left allmulticast mode [ 86.161647][ T8980] bridge_slave_0: left promiscuous mode [ 86.167397][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.182177][ T8980] bridge_slave_1: left allmulticast mode [ 86.187968][ T8980] bridge_slave_1: left promiscuous mode [ 86.193781][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.227674][ T8980] bond0: (slave bond_slave_0): Releasing backup interface [ 86.239489][ T8980] bond0: (slave bond_slave_1): Releasing backup interface [ 86.271135][ T8980] team0: Port device team_slave_0 removed [ 86.288264][ T8980] team0: Port device team_slave_1 removed [ 86.295274][ T8980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.302843][ T8980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.311649][ T8980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.319131][ T8980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.343111][ T8980] bond1: (slave batadv1): Releasing backup interface [ 86.350482][ T8980] batadv1: left promiscuous mode [ 86.362546][ T8988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.380548][ T8988] team0: Port device bond0 added [ 86.398702][ T9008] netem: change failed [ 86.800085][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'. [ 86.888306][ T9088] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 86.948078][ T9097] serio: Serial port ptm0 [ 87.044266][ T9115] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1863'. [ 87.125366][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1871'. [ 87.238289][ T110] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 87.242617][ T9155] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 87.510771][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 87.510790][ T29] audit: type=1400 audit(1752491121.758:3784): avc: denied { prog_load } for pid=9203 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 87.536286][ T29] audit: type=1400 audit(1752491121.768:3785): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.560607][ T29] audit: type=1400 audit(1752491121.768:3786): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.585047][ T29] audit: type=1400 audit(1752491121.768:3787): avc: denied { create } for pid=9207 comm="syz.2.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 87.604838][ T29] audit: type=1400 audit(1752491121.768:3788): avc: denied { write } for pid=9207 comm="syz.2.1906" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 87.657484][ T29] audit: type=1400 audit(1752491121.788:3789): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.681865][ T29] audit: type=1400 audit(1752491121.788:3790): avc: denied { block_suspend } for pid=9208 comm="syz.3.1907" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 87.703481][ T29] audit: type=1400 audit(1752491121.788:3791): avc: denied { prog_load } for pid=9208 comm="syz.3.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 87.722589][ T29] audit: type=1400 audit(1752491121.898:3792): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.746873][ T29] audit: type=1400 audit(1752491121.898:3793): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.958780][ T9255] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 87.996509][ T9255] bond2: entered promiscuous mode [ 87.996617][ T9255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.037429][ T9255] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.077415][ T9255] bond2: (slave batadv1): making interface the new active one [ 88.085076][ T9255] batadv1: entered promiscuous mode [ 88.127490][ T9255] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 88.593009][ T9381] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 88.602942][ T9377] syzkaller0: tun_chr_ioctl cmd 35108 [ 88.702224][ T9395] Falling back ldisc for ttyS3. [ 89.829944][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 89.868074][ T9582] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.876947][ T9582] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.885841][ T9582] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.894687][ T9582] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.908388][ T9582] vxlan0: entered promiscuous mode [ 90.507484][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 90.541091][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 90.982371][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2058'. [ 91.190098][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 91.302328][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 91.311609][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 91.374909][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 91.502443][ T9707] netlink: 'syz.0.2079': attribute type 21 has an invalid length. [ 91.555736][ T9713] bridge0: port 3(syz_tun) entered blocking state [ 91.562319][ T9713] bridge0: port 3(syz_tun) entered disabled state [ 91.568965][ T9713] syz_tun: entered allmulticast mode [ 91.575048][ T9713] syz_tun: entered promiscuous mode [ 92.101005][ T9744] __nla_validate_parse: 1 callbacks suppressed [ 92.101023][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2093'. [ 92.304225][ T9767] binfmt_misc: register: failed to install interpreter file ./file0 [ 92.335421][ T9769] netlink: 'syz.3.2102': attribute type 3 has an invalid length. [ 92.350554][ T9775] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 92.358341][ T9775] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2103'. [ 92.383186][ T9777] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 92.399709][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.407761][ T9777] bridge_slave_1: left allmulticast mode [ 92.413584][ T9777] bridge_slave_1: left promiscuous mode [ 92.419275][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.432681][ T9777] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.465599][ T9782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.529626][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 92.529695][ T29] audit: type=1400 audit(1752491126.788:4406): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.562195][ T29] audit: type=1400 audit(1752491126.798:4407): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.586648][ T29] audit: type=1400 audit(1752491126.828:4408): avc: denied { map_create } for pid=9826 comm="syz.0.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.605841][ T29] audit: type=1400 audit(1752491126.828:4409): avc: denied { prog_load } for pid=9826 comm="syz.0.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.625255][ T29] audit: type=1400 audit(1752491126.858:4410): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.649737][ T29] audit: type=1400 audit(1752491126.878:4411): avc: denied { map_create } for pid=9829 comm="syz.0.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.669010][ T29] audit: type=1400 audit(1752491126.878:4412): avc: denied { prog_load } for pid=9829 comm="syz.0.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.688117][ T29] audit: type=1400 audit(1752491126.898:4413): avc: denied { map_create } for pid=9828 comm="syz.1.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.707800][ T29] audit: type=1400 audit(1752491126.898:4414): avc: denied { prog_load } for pid=9828 comm="syz.1.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.726985][ T29] audit: type=1400 audit(1752491126.898:4415): avc: denied { execute } for pid=9828 comm="syz.1.2112" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 92.759562][ T9835] netlink: 'syz.1.2115': attribute type 10 has an invalid length. [ 92.832933][ T9835] dummy0: entered promiscuous mode [ 92.838764][ T9835] dummy0: entered allmulticast mode [ 92.844351][ T9835] team0: Port device dummy0 added [ 92.953791][ T9854] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 93.114692][ T9876] netlink: 'syz.0.2135': attribute type 4 has an invalid length. [ 93.137554][ T9876] netlink: 'syz.0.2135': attribute type 4 has an invalid length. [ 93.144108][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2138'. [ 93.616308][ T9899] netlink: 'syz.2.2145': attribute type 6 has an invalid length. [ 93.624152][ T9899] netlink: 6016 bytes leftover after parsing attributes in process `syz.2.2145'. [ 94.183138][ T9962] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 94.236749][ T9977] SELinux: syz.3.2179 (9977) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 94.287383][ T9987] wireguard0: entered promiscuous mode [ 94.323146][ T391] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 94.333362][ T9993] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 94.370239][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2190'. [ 94.463579][T10027] bond0: entered promiscuous mode [ 94.468701][T10027] bond_slave_0: entered promiscuous mode [ 94.474519][T10027] bond_slave_1: entered promiscuous mode [ 94.480284][T10027] bridge_slave_1: entered promiscuous mode [ 94.486182][T10027] bond0: entered allmulticast mode [ 94.491414][T10027] bond_slave_0: entered allmulticast mode [ 94.497203][T10027] bond_slave_1: entered allmulticast mode [ 94.503079][T10027] bridge_slave_1: entered allmulticast mode [ 94.674190][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 95.279847][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 95.312200][T10138] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.321214][T10138] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.330053][T10138] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.338849][T10138] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.367115][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 95.422224][T10161] netlink: 'syz.5.2241': attribute type 1 has an invalid length. [ 95.452847][T10161] bond1: entered promiscuous mode [ 95.459061][T10161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.495800][T10196] pim6reg1: entered promiscuous mode [ 95.507920][T10199] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.518666][T10199] bond1: (slave batadv1): making interface the new active one [ 95.526255][T10199] batadv1: entered promiscuous mode [ 95.535813][T10199] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 95.812661][T10232] netlink: 'syz.3.2256': attribute type 4 has an invalid length. [ 96.436991][T10334] ALSA: seq fatal error: cannot create timer (-19) [ 96.813109][T10360] bridge0: port 3(team0) entered disabled state [ 96.819521][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.832602][T10360] bond0: left promiscuous mode [ 96.837582][T10360] bond_slave_0: left promiscuous mode [ 96.843192][T10360] bond_slave_1: left promiscuous mode [ 96.848754][T10360] bridge_slave_1: left promiscuous mode [ 96.854494][T10360] bond0: left allmulticast mode [ 96.859529][T10360] bond_slave_0: left allmulticast mode [ 96.865116][T10360] bond_slave_1: left allmulticast mode [ 96.870685][T10360] bridge_slave_1: left allmulticast mode [ 96.938058][T10360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.968154][T10360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.086507][T10360] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.095634][T10360] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.104650][T10360] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.114064][T10360] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.209646][T10389] xt_NFQUEUE: number of total queues is 0 [ 97.537799][ T29] kauditd_printk_skb: 745 callbacks suppressed [ 97.537818][ T29] audit: type=1400 audit(1752491131.798:5161): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.544257][ T29] audit: type=1400 audit(1752491131.798:5162): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.568542][ T29] audit: type=1400 audit(1752491131.818:5163): avc: denied { prog_load } for pid=10440 comm="syz.2.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.568605][ T29] audit: type=1400 audit(1752491131.818:5164): avc: denied { map_create } for pid=10440 comm="syz.2.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.568632][ T29] audit: type=1400 audit(1752491131.818:5165): avc: denied { prog_load } for pid=10440 comm="syz.2.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.568660][ T29] audit: type=1400 audit(1752491131.818:5166): avc: denied { map_create } for pid=10438 comm="syz.3.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.568741][ T29] audit: type=1400 audit(1752491131.818:5167): avc: denied { prog_load } for pid=10438 comm="syz.3.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.568762][ T29] audit: type=1400 audit(1752491131.818:5168): avc: denied { create } for pid=10438 comm="syz.3.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 97.568920][ T29] audit: type=1400 audit(1752491131.838:5169): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.593452][ T29] audit: type=1400 audit(1752491131.838:5170): avc: denied { name_bind } for pid=10442 comm="syz.3.2346" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 97.602649][T10445] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2347'. [ 98.020804][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2358'. [ 98.149053][T10477] binfmt_misc: register: failed to install interpreter file ./file2 [ 98.477921][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2387'. [ 98.480067][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 98.492110][T10544] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.503169][T10544] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.512017][T10544] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.520867][T10544] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.532776][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2387'. [ 98.532786][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 98.532839][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 98.561063][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2389'. [ 98.570955][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2389'. [ 98.623041][T10558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.736368][T10614] bridge: RTM_NEWNEIGH with invalid ether address [ 98.900050][T10638] validate_nla: 1 callbacks suppressed [ 98.900063][T10638] netlink: 'syz.1.2413': attribute type 6 has an invalid length. [ 99.079510][T10657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10657 comm=syz.0.2422 [ 99.680970][T10717] netlink: 'syz.2.2448': attribute type 3 has an invalid length. [ 99.775422][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 99.789542][T10729] bridge0: port 4(macvlan2) entered blocking state [ 99.796413][T10729] bridge0: port 4(macvlan2) entered disabled state [ 99.805677][T10729] macvlan2: entered allmulticast mode [ 99.811149][T10729] bridge0: entered allmulticast mode [ 99.817799][T10729] macvlan2: left allmulticast mode [ 99.823032][T10729] bridge0: left allmulticast mode [ 99.950114][T10754] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 99.973572][T10757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2463'. [ 100.454069][T10842] netlink: 'syz.1.2499': attribute type 1 has an invalid length. [ 100.483339][T10842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.509046][T10842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.519793][T10842] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.531852][T10887] netlink: 'syz.5.2500': attribute type 15 has an invalid length. [ 100.531959][T10842] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 100.539706][T10887] netlink: 'syz.5.2500': attribute type 18 has an invalid length. [ 100.684317][T10901] sock: sock_set_timeout: `syz.0.2507' (pid 10901) tries to set negative timeout [ 101.490899][T11021] netlink: 'syz.3.2552': attribute type 4 has an invalid length. [ 101.935542][T11072] macvtap1: entered promiscuous mode [ 101.940968][T11072] erspan0: entered promiscuous mode [ 101.946446][T11072] macvtap1: entered allmulticast mode [ 101.951989][T11072] erspan0: entered allmulticast mode [ 102.036131][T11084] netlink: 'syz.1.2576': attribute type 1 has an invalid length. [ 102.092411][T11084] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 102.102775][T11084] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 102.125971][T11084] bond2: (slave vcan1): making interface the new active one [ 102.133898][T11084] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 102.285961][T11157] netlink: 'syz.1.2594': attribute type 2 has an invalid length. [ 102.545072][ T29] kauditd_printk_skb: 920 callbacks suppressed [ 102.545090][ T29] audit: type=1400 audit(1752491136.798:6091): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.604092][ T29] audit: type=1400 audit(1752491136.818:6092): avc: denied { map_create } for pid=11229 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.623485][ T29] audit: type=1400 audit(1752491136.818:6093): avc: denied { prog_load } for pid=11229 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.643001][ T29] audit: type=1400 audit(1752491136.818:6094): avc: denied { prog_load } for pid=11229 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.662263][ T29] audit: type=1400 audit(1752491136.818:6095): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.686686][ T29] audit: type=1400 audit(1752491136.818:6096): avc: denied { map_create } for pid=11232 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.707899][ T29] audit: type=1400 audit(1752491136.818:6097): avc: denied { prog_load } for pid=11232 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.727981][ T29] audit: type=1400 audit(1752491136.818:6098): avc: denied { prog_load } for pid=11232 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.747159][ T29] audit: type=1326 audit(1752491136.818:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 102.770798][ T29] audit: type=1326 audit(1752491136.818:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132c17e929 code=0x7ffc0000 [ 103.335774][T11288] bond0: entered promiscuous mode [ 103.608475][T11321] pim6reg1: entered promiscuous mode [ 103.629286][T11333] __nla_validate_parse: 5 callbacks suppressed [ 103.629305][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 103.972526][T11373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11373 comm=syz.2.2674 [ 104.127739][T11391] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.136990][T11391] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.146080][T11391] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.155112][T11391] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.169213][T11391] bond1: left promiscuous mode [ 104.175614][T11391] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.184646][T11391] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.193679][T11391] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.202688][T11391] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.211690][T11391] vxlan0: left promiscuous mode [ 104.222872][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'. [ 104.232252][T11393] netlink: 'syz.2.2681': attribute type 20 has an invalid length. [ 104.242543][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'. [ 104.251668][T11393] netlink: 'syz.2.2681': attribute type 20 has an invalid length. [ 104.300222][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2685'. [ 104.423617][T11417] netlink: 'syz.3.2689': attribute type 10 has an invalid length. [ 104.433131][T11417] team0: Port device dummy0 added [ 104.439105][T11417] netlink: 'syz.3.2689': attribute type 10 has an invalid length. [ 104.464963][T11417] team0: Port device dummy0 removed [ 104.474422][T11417] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.488191][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 104.730461][T11460] Falling back ldisc for ttyS3. [ 104.917214][T11526] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2725'. [ 104.947679][T11531] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2722'. [ 104.963019][T11520] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2722'. [ 105.008631][T11537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2730'. [ 105.025592][T11537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2730'. [ 105.167918][T11557] netlink: '+}[@': attribute type 6 has an invalid length. [ 105.602748][T11611] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 105.651910][T11629] netlink: 'syz.1.2756': attribute type 1 has an invalid length. [ 105.676169][T11629] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.437778][T11726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.622864][T11793] netlink: 'syz.3.2788': attribute type 1 has an invalid length. [ 106.638922][T11797] SELinux: syz.1.2787 (11797) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 106.665650][T11793] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.124488][T11957] netem: incorrect ge model size [ 107.203121][T11982] netlink: 'syz.5.2836': attribute type 10 has an invalid length. [ 107.215017][T11982] team0: Port device dummy0 added [ 107.311272][T12008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 107.350084][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 107.553049][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 107.553068][ T29] audit: type=1400 audit(1752491141.818:6968): avc: denied { prog_load } for pid=12041 comm="syz.5.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.609072][ T29] audit: type=1400 audit(1752491141.818:6969): avc: denied { prog_load } for pid=12041 comm="syz.5.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.629091][ T29] audit: type=1400 audit(1752491141.818:6970): avc: denied { prog_load } for pid=12041 comm="syz.5.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.648698][ T29] audit: type=1400 audit(1752491141.828:6971): avc: denied { read write } for pid=7031 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 107.673708][ T29] audit: type=1400 audit(1752491141.838:6972): avc: denied { allowed } for pid=12043 comm="syz.5.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 107.693330][ T29] audit: type=1400 audit(1752491141.838:6973): avc: denied { create } for pid=12043 comm="syz.5.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 107.714816][ T29] audit: type=1400 audit(1752491141.848:6974): avc: denied { read write } for pid=7031 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 107.739286][ T29] audit: type=1400 audit(1752491141.858:6975): avc: denied { map_create } for pid=12046 comm="syz.5.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.759396][ T29] audit: type=1400 audit(1752491141.858:6976): avc: denied { prog_load } for pid=12046 comm="syz.5.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.778647][ T29] audit: type=1400 audit(1752491141.868:6977): avc: denied { read write } for pid=7031 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 107.888568][T12067] IPv6: Can't replace route, no match found [ 107.932907][T12071] netlink: 'syz.2.2868': attribute type 14 has an invalid length. [ 107.940915][T12071] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 107.950518][T12071] netlink: 'syz.2.2868': attribute type 14 has an invalid length. [ 107.958440][T12071] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 108.081074][T12085] netem: incorrect ge model size [ 108.086120][T12085] netem: change failed [ 108.267533][T12104] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 108.600639][T12150] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.609424][T12150] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.618375][T12150] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.627839][T12150] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.662486][T12150] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.671475][T12150] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.681060][T12150] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.690058][T12150] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.757558][T12160] bond3: entered promiscuous mode [ 108.762775][T12160] bond3: entered allmulticast mode [ 108.798595][T12160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.817653][T12160] bond3 (unregistering): Released all slaves [ 109.214903][T12268] __nla_validate_parse: 17 callbacks suppressed [ 109.214923][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 109.301057][T12274] sock: sock_set_timeout: `syz.5.2911' (pid 12274) tries to set negative timeout [ 109.453689][T12308] validate_nla: 1 callbacks suppressed [ 109.453708][T12308] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 109.951520][T12340] netlink: 'syz.5.2924': attribute type 4 has an invalid length. [ 109.951540][T12340] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2924'. [ 110.085010][T12346] netlink: 'syz.5.2926': attribute type 4 has an invalid length. [ 110.105363][T12361] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 110.141705][T12369] sock: sock_set_timeout: `syz.3.2928' (pid 12369) tries to set negative timeout [ 110.541315][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 110.550401][T12449] netlink: 'syz.1.2956': attribute type 15 has an invalid length. [ 110.558248][T12449] netlink: 'syz.1.2956': attribute type 18 has an invalid length. [ 110.622805][T12449] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.631676][T12449] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.640494][T12449] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.649224][T12449] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.661397][T12449] vxlan0: entered promiscuous mode [ 110.894969][T12497] netlink: 'syz.2.2973': attribute type 4 has an invalid length. [ 110.902876][T12497] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2973'. [ 110.926260][T12497] : renamed from bond0 (while UP) [ 110.997078][T12502] netlink: 'syz.5.2976': attribute type 1 has an invalid length. [ 111.044035][T12502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.063435][T12502] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 111.086914][T12502] bond2: (slave vcan1): Error -95 calling set_mac_address [ 111.233706][T12533] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2985'. [ 111.251019][T12533] team0: Port device bond0 removed [ 111.257743][T12533] bond0 (unregistering): Released all slaves [ 112.029697][T12606] netlink: 'syz.2.3000': attribute type 10 has an invalid length. [ 112.037630][T12606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3000'. [ 112.081935][T12606] geneve1: left promiscuous mode [ 112.097652][T12606] : (slave geneve1): Releasing backup interface [ 112.108086][T12606] geneve1: entered promiscuous mode [ 112.114039][T12606] geneve1: entered allmulticast mode [ 112.119906][T12606] team0: Port device geneve1 added [ 112.561001][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 112.561020][ T29] audit: type=1400 audit(1752491146.828:7517): avc: denied { prog_load } for pid=12664 comm="syz.5.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 112.589210][T12665] netlink: 'syz.5.3019': attribute type 1 has an invalid length. [ 112.598867][ T29] audit: type=1400 audit(1752491146.848:7518): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.651214][T12665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.658226][ T29] audit: type=1400 audit(1752491146.868:7519): avc: denied { allowed } for pid=12668 comm="syz.1.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 112.677845][ T29] audit: type=1400 audit(1752491146.888:7520): avc: denied { prog_load } for pid=12668 comm="syz.1.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 112.698039][ T29] audit: type=1400 audit(1752491146.888:7521): avc: denied { execmem } for pid=12668 comm="syz.1.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 112.717513][ T29] audit: type=1400 audit(1752491146.908:7522): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.743602][ T29] audit: type=1400 audit(1752491146.918:7523): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.767907][ T29] audit: type=1400 audit(1752491146.988:7524): avc: denied { prog_load } for pid=12704 comm="syz.2.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 112.788101][ T29] audit: type=1400 audit(1752491146.988:7525): avc: denied { create } for pid=12704 comm="syz.2.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 112.807952][T12711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12711 comm=syz.1.3023 [ 112.808712][ T29] audit: type=1400 audit(1752491146.988:7526): avc: denied { create } for pid=12704 comm="syz.2.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 112.875225][T12705] bridge0: port 3(team0) entered disabled state [ 112.881635][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.888867][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.979629][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.006404][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.054809][T12705] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.063825][T12705] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.073009][T12705] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.082854][T12705] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.120953][T12705] bond2: left promiscuous mode [ 113.125850][T12705] batadv1: left promiscuous mode [ 113.143359][T12705] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.152403][T12705] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.161430][T12705] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.171016][T12705] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.314616][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3030'. [ 113.323721][T12732] netlink: 'syz.5.3030': attribute type 20 has an invalid length. [ 113.333749][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3030'. [ 113.344463][T12736] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3032'. [ 113.360904][T12736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.386158][T12736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.397483][T12736] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 113.417534][T12736] bond0 (unregistering): Released all slaves [ 113.505892][T12784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3040'. [ 113.736818][T12809] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.746135][T12809] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.755425][T12809] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.764555][T12809] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.796472][T12809] bond1: left promiscuous mode [ 113.801546][T12809] batadv1: left promiscuous mode [ 113.813752][T12809] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.822788][T12809] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.831784][T12809] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.841086][T12809] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.144007][T12872] 8021q: adding VLAN 0 to HW filter on device bond5 [ 114.352566][T12940] __nla_validate_parse: 3 callbacks suppressed [ 114.352586][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3075'. [ 114.375860][T12940] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 114.461176][T12950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.591302][T12995] xt_CT: No such helper "pptp" [ 114.750089][T13037] netlink: 566 bytes leftover after parsing attributes in process `syz.1.3103'. [ 114.858685][T13061] validate_nla: 3 callbacks suppressed [ 114.858702][T13061] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 114.872061][T13061] netlink: 'syz.1.3112': attribute type 4 has an invalid length. [ 114.879898][T13061] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3112'. [ 115.448050][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3122'. [ 115.463573][T13089] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 115.482698][T13093] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 115.509940][T13093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.697673][T13159] bond7: entered promiscuous mode [ 115.703509][T13159] bond7: entered allmulticast mode [ 115.757584][T13159] 8021q: adding VLAN 0 to HW filter on device bond7 [ 115.769502][T13159] bond7 (unregistering): Released all slaves [ 115.798817][T13240] binfmt_misc: register: failed to install interpreter file ./file2 [ 116.329837][T13327] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 116.358143][T13327] bond2: (slave gretap1): making interface the new active one [ 116.366229][T13327] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 116.457580][T13383] syzkaller0: entered promiscuous mode [ 116.463153][T13383] syzkaller0: entered allmulticast mode [ 116.477890][T13383] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 116.593068][T13407] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 116.794659][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3207'. [ 116.845451][T13451] netlink: 'syz.5.3205': attribute type 1 has an invalid length. [ 116.846349][T13453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13453 comm=syz.1.3210 [ 116.897374][T13451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.962268][T13499] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3216'. [ 117.144644][T13548] syzkaller0: entered promiscuous mode [ 117.150894][T13548] syzkaller0: entered allmulticast mode [ 117.187981][T13562] netlink: 'syz.1.3236': attribute type 21 has an invalid length. [ 117.195900][T13562] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3236'. [ 117.572644][ T29] kauditd_printk_skb: 850 callbacks suppressed [ 117.572661][ T29] audit: type=1400 audit(1752491151.838:8377): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.607225][ T29] audit: type=1400 audit(1752491151.878:8378): avc: denied { prog_load } for pid=13606 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.641239][ T29] audit: type=1400 audit(1752491151.898:8379): avc: denied { map_create } for pid=13604 comm="syz.0.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.660706][ T29] audit: type=1400 audit(1752491151.898:8380): avc: denied { prog_load } for pid=13604 comm="syz.0.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.679892][ T29] audit: type=1400 audit(1752491151.898:8381): avc: denied { prog_load } for pid=13606 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.699087][ T29] audit: type=1400 audit(1752491151.898:8382): avc: denied { create } for pid=13606 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 117.719491][ T29] audit: type=1400 audit(1752491151.908:8383): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.743718][ T29] audit: type=1400 audit(1752491151.908:8384): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.751500][T13603] syzkaller0: entered promiscuous mode [ 117.774345][T13603] syzkaller0: entered allmulticast mode [ 117.795901][ T29] audit: type=1400 audit(1752491151.988:8385): avc: denied { map_create } for pid=13612 comm="syz.3.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.799899][T13618] xt_hashlimit: max too large, truncated to 1048576 [ 117.816237][ T29] audit: type=1400 audit(1752491151.988:8386): avc: denied { prog_load } for pid=13612 comm="syz.3.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.944540][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3272'. [ 117.954650][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 118.105305][T13673] netlink: '+}[@': attribute type 13 has an invalid length. [ 118.166300][T13673] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.178316][T13673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.334764][T13715] netlink: 'syz.3.3304': attribute type 10 has an invalid length. [ 118.352732][T13715] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 118.365977][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 118.397713][T13715] bond0: (slave bridge0): Releasing backup interface [ 118.772076][T13799] netlink: '+}[@': attribute type 13 has an invalid length. [ 118.848026][T13799] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.861777][T13799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.888304][ T12] bridge0: port 3(team0) entered blocking state [ 118.894769][ T12] bridge0: port 3(team0) entered forwarding state [ 119.321821][T13877] netlink: '+}[@': attribute type 13 has an invalid length. [ 119.375519][T13877] bridge0: port 3(syz_tun) entered blocking state [ 119.382080][T13877] bridge0: port 3(syz_tun) entered forwarding state [ 119.393998][T13877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.402984][T13877] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.416401][T13877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.558908][T13905] __nla_validate_parse: 3 callbacks suppressed [ 119.558932][T13905] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3379'. [ 119.752640][T13935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.761697][T13935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.770741][T13935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.779570][T13935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.790968][T13935] bond4: (slave geneve2): making interface the new active one [ 119.799007][T13935] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 119.848112][T13974] 8021q: adding VLAN 0 to HW filter on device bond7 [ 119.870477][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 119.893591][T13974] bond7 (unregistering): Released all slaves [ 119.914385][T14016] syz_tun: left allmulticast mode [ 119.919514][T14016] syz_tun: left promiscuous mode [ 119.924705][T14016] bridge0: port 3(syz_tun) entered disabled state [ 119.966794][T14016] bond0: (slave dummy0): Releasing backup interface [ 119.977889][T14016] bridge_slave_0: left allmulticast mode [ 119.983968][T14016] bridge_slave_0: left promiscuous mode [ 119.989762][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.998885][T14016] bridge_slave_1: left allmulticast mode [ 120.004657][T14016] bridge_slave_1: left promiscuous mode [ 120.010507][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.036452][T14016] bond0: (slave bond_slave_0): Releasing backup interface [ 120.045606][T14016] bond0: (slave bond_slave_1): Releasing backup interface [ 120.071776][T14016] team0: Port device team_slave_0 removed [ 120.086043][T14016] team0: Port device team_slave_1 removed [ 120.101482][T14016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.111799][T14016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.123321][T14016] bond2: (slave gretap1): Releasing active interface [ 120.165745][T14087] validate_nla: 2 callbacks suppressed [ 120.165758][T14087] netlink: '+}[@': attribute type 13 has an invalid length. [ 120.290601][T14087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.308576][T14087] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.319902][T14087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.341405][T14115] Â: renamed from pim6reg1 [ 120.362164][T14118] Cannot find del_set index 4 as target [ 120.553463][T14143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3424'. [ 120.643837][T14160] netlink: 'syz.0.3429': attribute type 1 has an invalid length. [ 120.725704][T14160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.735312][T14160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.744222][T14160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.753198][T14160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.875351][T14160] bond3: (slave geneve3): making interface the new active one [ 120.904342][T14160] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 121.351953][T14283] ================================================================== [ 121.351981][T14283] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 121.352003][T14283] [ 121.352008][T14283] read to 0xffffc90013067bc0 of 4 bytes by task 14258 on cpu 0: [ 121.352023][T14283] do_sys_poll+0x99c/0xbd0 [ 121.352042][T14283] __se_sys_ppoll+0x1b9/0x200 [ 121.352078][T14283] __x64_sys_ppoll+0x67/0x80 [ 121.352107][T14283] x64_sys_call+0x2de5/0x2fb0 [ 121.352134][T14283] do_syscall_64+0xd2/0x200 [ 121.352150][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.352169][T14283] [ 121.352174][T14283] write to 0xffffc90013067bc0 of 4 bytes by task 14283 on cpu 1: [ 121.352202][T14283] pollwake+0xb6/0x100 [ 121.352220][T14283] __wake_up+0x66/0xb0 [ 121.352258][T14283] vcs_notifier+0xeb/0x120 [ 121.352293][T14283] atomic_notifier_call_chain+0x76/0x1c0 [ 121.352327][T14283] do_con_write+0x28d2/0x2940 [ 121.352343][T14283] con_write+0x24/0x40 [ 121.352379][T14283] do_output_char+0x497/0x500 [ 121.352402][T14283] n_tty_write+0x85b/0xb10 [ 121.352424][T14283] file_tty_write+0x389/0x670 [ 121.352452][T14283] tty_write+0x25/0x30 [ 121.352477][T14283] vfs_write+0x49d/0x8e0 [ 121.352513][T14283] ksys_write+0xda/0x1a0 [ 121.352549][T14283] __x64_sys_write+0x40/0x50 [ 121.352586][T14283] x64_sys_call+0x2cdd/0x2fb0 [ 121.352605][T14283] do_syscall_64+0xd2/0x200 [ 121.352620][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.352640][T14283] [ 121.352644][T14283] value changed: 0x00000001 -> 0x00000000 [ 121.352658][T14283] [ 121.352662][T14283] Reported by Kernel Concurrency Sanitizer on: [ 121.352684][T14283] CPU: 1 UID: 0 PID: 14283 Comm: syz.0.3453 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 121.352709][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.352721][T14283] ================================================================== [ 121.383444][T14247] team0: left allmulticast mode [ 121.560528][T14247] team_slave_0: left allmulticast mode [ 121.560592][T14247] team_slave_1: left allmulticast mode [ 121.560604][T14247] dummy0: left allmulticast mode [ 121.560624][T14247] team0: left promiscuous mode [ 121.560636][T14247] team_slave_0: left promiscuous mode [ 121.560705][T14247] team_slave_1: left promiscuous mode [ 121.560767][T14247] dummy0: left promiscuous mode [ 121.561062][T14247] bridge0: port 3(team0) entered disabled state [ 121.569690][T14247] team0: Port device dummy0 removed [ 121.630747][T14247] bridge_slave_0: left promiscuous mode [ 121.636532][T14247] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.645159][T14247] team0: Port device team_slave_0 removed [ 121.652611][T14247] team0: Port device team_slave_1 removed [ 121.658978][T14247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.666756][T14247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.675009][T14247] bond2: (slave vcan1): Releasing backup interface