last executing test programs: 1.467026291s ago: executing program 2 (id=7470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 1.199786177s ago: executing program 0 (id=7472): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000006c0)=""/223, 0xdf}], 0x3}, 0x40}], 0x1, 0x40000100, 0x0) 1.194284436s ago: executing program 2 (id=7463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1.135095537s ago: executing program 2 (id=7464): write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0xba87, 0x9, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 965.162071ms ago: executing program 3 (id=7478): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 910.664272ms ago: executing program 3 (id=7479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174"], 0x25c}}, 0x0) 910.459002ms ago: executing program 3 (id=7480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x30, 0xc080}, 0x4060004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000700)=r0, 0xfccc) sendmsg$unix(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x48000}, 0x40800) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 891.366182ms ago: executing program 3 (id=7491): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xeffffffa, 0xb, 0xfffffffc, 0xfffffffc, 0x7f, "db5909003a7f000700"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x400) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0xfff7, 0x3, 0x0, 0x4, 0x16, "d815e09eb136815b"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4) 871.812883ms ago: executing program 1 (id=7484): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x8, 0xfffff032}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 755.128585ms ago: executing program 1 (id=7487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 668.164567ms ago: executing program 1 (id=7489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000002000000110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 668.074197ms ago: executing program 4 (id=7490): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8}}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 631.942287ms ago: executing program 4 (id=7492): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 351.772693ms ago: executing program 0 (id=7493): socket(0x1e, 0x805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 351.657753ms ago: executing program 1 (id=7494): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r1) syz_open_dev$vcsu(&(0x7f0000009c40), 0x8765, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) writev(r0, &(0x7f0000002340)=[{&(0x7f0000000fc0)="a2db", 0x2}], 0x1) 351.577703ms ago: executing program 4 (id=7495): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 180.468956ms ago: executing program 1 (id=7496): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 180.368956ms ago: executing program 2 (id=7498): socket(0x22, 0x2, 0x24) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 179.953136ms ago: executing program 0 (id=7507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000006c0)="0100da05", 0x4, 0x4000, &(0x7f0000000480)={0x11, 0x10, r3, 0x1, 0x0, 0x6, @local}, 0x14) 149.353577ms ago: executing program 4 (id=7499): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) close_range(r0, 0xffffffffffffffff, 0x0) 148.847047ms ago: executing program 0 (id=7510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) mknod$loop(0x0, 0x0, 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) 130.321167ms ago: executing program 0 (id=7500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x35}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 130.191937ms ago: executing program 2 (id=7501): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x603f) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8a) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x8, 0x2, 0x8037d, 0x7fffffffffffffff, 0x800}) 128.349627ms ago: executing program 4 (id=7502): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0xd, 0x30}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}]}, 0x3c}}, 0x0) 105.131907ms ago: executing program 1 (id=7503): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) read(r2, &(0x7f0000000240)=""/84, 0x54) write(r0, 0x0, 0x0) 73.440328ms ago: executing program 2 (id=7504): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x21, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x4}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 51.771569ms ago: executing program 4 (id=7505): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) close(r0) 36.768769ms ago: executing program 3 (id=7506): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 572.46µs ago: executing program 3 (id=7508): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000006c0)=""/223, 0xdf}], 0x3}, 0x40}], 0x1, 0x40000100, 0x0) 0s ago: executing program 0 (id=7519): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x7) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="83450500000000002c0012800900018069706970000000001c00028006000f00030000000600107b090000000800010029"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) kernel console output (not intermixed with test programs): 139.749615][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4127'. [ 139.898868][T12829] lo speed is unknown, defaulting to 1000 [ 140.273618][T12862] loop0: detected capacity change from 0 to 256 [ 140.341574][T12871] pimreg: entered allmulticast mode [ 140.352798][T12871] pimreg: left allmulticast mode [ 140.391680][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.401029][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.464143][T12890] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4162'. [ 140.496588][T12892] loop0: detected capacity change from 0 to 128 [ 140.522852][T12892] bio_check_eod: 32 callbacks suppressed [ 140.522873][T12892] syz.0.4163: attempt to access beyond end of device [ 140.522873][T12892] loop0: rw=34817, sector=121, nr_sectors = 128 limit=128 [ 140.558225][ T3424] kworker/u8:7: attempt to access beyond end of device [ 140.558225][ T3424] loop0: rw=1, sector=249, nr_sectors = 792 limit=128 [ 140.597938][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4166'. [ 140.607690][T12898] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4166'. [ 141.232757][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 141.232776][ T29] audit: type=1400 audit(397.208:5310): avc: denied { create } for pid=12952 comm="syz.2.4191" name="9p" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.271885][T12959] netlink: 'syz.4.4193': attribute type 10 has an invalid length. [ 141.290715][T12959] geneve1: entered promiscuous mode [ 141.296587][T12959] geneve1: entered allmulticast mode [ 141.335856][T12959] team0: Port device geneve1 added [ 141.394787][ T29] audit: type=1400 audit(397.368:5311): avc: denied { unlink } for pid=3303 comm="syz-executor" name="9p" dev="tmpfs" ino=4222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.533183][ T29] audit: type=1400 audit(397.508:5312): avc: denied { write } for pid=12967 comm="syz.4.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.711915][ T29] audit: type=1400 audit(397.688:5313): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.734783][ T29] audit: type=1400 audit(397.688:5314): avc: denied { open } for pid=3298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.771578][ T29] audit: type=1400 audit(397.738:5315): avc: denied { ioctl } for pid=3298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=619 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.795887][ T29] audit: type=1400 audit(397.738:5316): avc: denied { map_create } for pid=12976 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 141.814557][ T29] audit: type=1400 audit(397.738:5317): avc: denied { perfmon } for pid=12976 comm="syz.2.4203" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.835011][ T29] audit: type=1400 audit(397.748:5318): avc: denied { map_read map_write } for pid=12976 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 141.920181][ T29] audit: type=1400 audit(397.768:5319): avc: denied { prog_load } for pid=12976 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 142.865706][T13027] netlink: 'syz.3.4236': attribute type 12 has an invalid length. [ 143.115816][T13052] pimreg: entered allmulticast mode [ 143.122787][T13052] pimreg: left allmulticast mode [ 143.580105][T13111] program syz.1.4264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.001524][T13170] ref_ctr_offset mismatch. inode: 0x1202 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 144.019527][T13172] pim6reg: entered allmulticast mode [ 144.033329][T13172] pim6reg: left allmulticast mode [ 144.230178][T13198] __nla_validate_parse: 5 callbacks suppressed [ 144.230198][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4296'. [ 144.300098][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4305'. [ 144.391430][ T1033] hid_parser_main: 19 callbacks suppressed [ 144.391452][ T1033] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 144.405154][ T1033] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 144.422942][ T1033] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 144.432513][ T1033] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 144.494308][T13221] IPv6: Can't replace route, no match found [ 144.706556][T13241] netlink: '+}[@': attribute type 7 has an invalid length. [ 144.994339][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 145.068189][T13284] loop0: detected capacity change from 0 to 1024 [ 145.086969][T13284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.134836][T13292] team0: Caught tx_queue_len zero misconfig [ 145.164563][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.232335][T13308] netlink: 'syz.1.4348': attribute type 3 has an invalid length. [ 145.309502][ T1033] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.317093][ T1033] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.324551][ T1033] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.337535][ T1033] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.345045][ T1033] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.352499][ T1033] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.360095][ T1033] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.373636][ T1033] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 145.408961][T13329] SELinux: failed to load policy [ 145.470253][ T3424] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 145.604190][T13366] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4374'. [ 145.652197][T13368] ALSA: seq fatal error: cannot create timer (-19) [ 145.801295][T13390] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4386'. [ 145.820434][T13390] 0X: renamed from caif0 [ 145.832483][T13390] 0X: entered allmulticast mode [ 145.837823][T13390] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 145.951216][T13411] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 146.119492][T13425] smc: net device bond0 applied user defined pnetid SYZ0 [ 146.146956][T13425] smc: net device bond0 erased user defined pnetid SYZ0 [ 146.211322][T13441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1887 sclass=netlink_route_socket pid=13441 comm=syz.2.4409 [ 146.224561][T13441] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4409'. [ 146.238055][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 146.238124][ T29] audit: type=1400 audit(402.218:5542): avc: denied { bind } for pid=13442 comm="syz.1.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.263761][T13443] rdma_op ffff88812c17a980 conn xmit_rdma 0000000000000000 [ 146.281914][ T29] audit: type=1400 audit(402.228:5543): avc: denied { setopt } for pid=13446 comm="syz.4.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.300995][ T29] audit: type=1400 audit(402.238:5544): avc: denied { write } for pid=13442 comm="syz.1.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.330905][T13452] syzkaller1: entered promiscuous mode [ 146.336463][T13452] syzkaller1: entered allmulticast mode [ 146.395509][ T29] audit: type=1400 audit(402.368:5545): avc: denied { execmem } for pid=13450 comm="syz.4.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.494430][T13464] ipip1: entered promiscuous mode [ 146.528268][ T29] audit: type=1326 audit(402.508:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 146.562263][ T29] audit: type=1326 audit(402.528:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 146.585368][ T29] audit: type=1326 audit(402.528:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 146.608493][ T29] audit: type=1326 audit(402.528:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 146.631625][ T29] audit: type=1326 audit(402.528:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 146.654644][ T29] audit: type=1326 audit(402.538:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.2.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 146.718432][T13478] lo speed is unknown, defaulting to 1000 [ 146.746438][T13482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4426'. [ 147.248570][T13494] program syz.3.4433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.395146][T13532] atomic_op ffff888125e4b528 conn xmit_atomic 0000000000000000 [ 147.520427][T13540] IPv6: Can't replace route, no match found [ 148.141866][T13595] 9pnet_fd: Insufficient options for proto=fd [ 148.213531][T13597] SELinux: failed to load policy [ 148.223276][T13601] netlink: 'syz.0.4492': attribute type 10 has an invalid length. [ 148.244847][T13601] dummy0: left promiscuous mode [ 148.264120][T13601] team0: Port device dummy0 added [ 148.277550][T13608] netlink: 'syz.0.4492': attribute type 10 has an invalid length. [ 148.310755][T13608] team0: Port device dummy0 removed [ 148.324519][T13616] program syz.4.4487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.325884][T13608] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.456215][T13635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4497'. [ 148.603092][T13660] sctp: [Deprecated]: syz.4.4504 (pid 13660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.603092][T13660] Use struct sctp_sack_info instead [ 148.731163][T13674] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 148.814947][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4523'. [ 148.892187][T13692] netlink: 'syz.1.4525': attribute type 12 has an invalid length. [ 148.944409][T13696] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 149.190534][T13708] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 149.199999][T13708] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 149.228963][T13710] SELinux: failed to load policy [ 149.357316][T13718] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 149.365675][T13718] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 149.446909][T13727] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4541'. [ 149.457237][T13726] sd 0:0:1:0: device reset [ 149.504629][T13733] netlink: 'syz.2.4545': attribute type 1 has an invalid length. [ 149.627753][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4551'. [ 149.784255][T13767] netlink: 'syz.2.4569': attribute type 1 has an invalid length. [ 150.015581][T13792] netlink: 'syz.0.4580': attribute type 1 has an invalid length. [ 150.023366][T13792] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4580'. [ 150.043626][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4570'. [ 150.054082][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4570'. [ 150.132325][T13809] vhci_hcd: invalid port number 236 [ 150.139396][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4574'. [ 150.149550][T13811] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 150.193443][T13822] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 150.281835][T13839] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4586'. [ 150.320379][T13843] sg_write: data in/out 134810845/78 bytes for SCSI command 0x0-- guessing data in; [ 150.320379][T13843] program syz.4.4594 not setting count and/or reply_len properly [ 150.371505][T13845] SELinux: ebitmap: empty map [ 150.376486][T13845] SELinux: failed to load policy [ 150.419449][T13854] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 150.442937][T13858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4600'. [ 150.453620][T13858] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 150.553906][T13878] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 150.563029][T13878] SELinux: failed to load policy [ 150.569831][T13880] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 150.576413][T13880] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 150.584180][T13880] vhci_hcd vhci_hcd.0: Device attached [ 150.593939][T13881] vhci_hcd: connection closed [ 150.594257][ T1746] vhci_hcd: stop threads [ 150.603334][ T1746] vhci_hcd: release socket [ 150.608326][ T1746] vhci_hcd: disconnect device [ 151.239742][T13925] sg_write: data in/out 134810845/78 bytes for SCSI command 0x0-- guessing data in; [ 151.239742][T13925] program syz.1.4641 not setting count and/or reply_len properly [ 151.271178][T13927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4628'. [ 151.306591][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 151.306611][ T29] audit: type=1400 audit(407.288:5737): avc: denied { execute } for pid=13933 comm="syz.0.4643" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=37827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 151.341237][ T29] audit: type=1400 audit(407.318:5738): avc: denied { map } for pid=13933 comm="syz.0.4643" path="socket:[37828]" dev="sockfs" ino=37828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.364159][ T29] audit: type=1400 audit(407.318:5739): avc: denied { read } for pid=13933 comm="syz.0.4643" path="socket:[37828]" dev="sockfs" ino=37828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.389014][T13932] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 151.395617][T13932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.403510][T13932] vhci_hcd vhci_hcd.0: Device attached [ 151.416731][T13935] vhci_hcd: connection closed [ 151.416910][ T31] vhci_hcd: stop threads [ 151.425948][ T31] vhci_hcd: release socket [ 151.430383][ T31] vhci_hcd: disconnect device [ 151.582757][ T29] audit: type=1326 audit(407.558:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13951 comm="syz.4.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 151.620623][ T29] audit: type=1326 audit(407.558:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13951 comm="syz.4.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 151.643748][ T29] audit: type=1326 audit(407.558:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13951 comm="syz.4.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 151.665349][T13958] SELinux: ebitmap: empty map [ 151.666859][ T29] audit: type=1326 audit(407.558:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13951 comm="syz.4.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 151.672599][T13958] SELinux: failed to load policy [ 151.694737][ T29] audit: type=1326 audit(407.568:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13951 comm="syz.4.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 151.722745][ T29] audit: type=1326 audit(407.568:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13951 comm="syz.4.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 151.745824][ T29] audit: type=1326 audit(407.568:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13951 comm="syz.4.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 152.073378][T13996] sd 0:0:1:0: device reset [ 152.259097][T14016] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 152.259097][T14016] program syz.2.4668 not setting count and/or reply_len properly [ 152.356001][T14019] block device autoloading is deprecated and will be removed. [ 152.431190][T14021] sd 0:0:1:0: device reset [ 152.464437][T14027] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 153.437445][T14076] lo speed is unknown, defaulting to 1000 [ 153.454797][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 153.956682][T14112] lo speed is unknown, defaulting to 1000 [ 154.143875][T14127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.153990][T14127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.883734][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4745'. [ 154.899812][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4745'. [ 155.048199][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'. [ 155.064609][T14193] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4747'. [ 155.073846][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'. [ 155.552586][T14211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.561922][T14211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.129187][T14227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.137807][T14227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.283164][T14241] pimreg: entered allmulticast mode [ 156.291498][T14241] pimreg: left allmulticast mode [ 156.766676][T14266] sd 0:0:1:0: device reset [ 157.208626][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 157.208669][ T29] audit: type=1326 audit(413.188:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.252493][T14285] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4782'. [ 157.273024][ T29] audit: type=1326 audit(413.228:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.297158][ T29] audit: type=1326 audit(413.228:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.354925][ T29] audit: type=1326 audit(413.318:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.378111][ T29] audit: type=1326 audit(413.318:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.401085][ T29] audit: type=1326 audit(413.318:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.424030][ T29] audit: type=1326 audit(413.318:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.447027][ T29] audit: type=1326 audit(413.318:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.469932][ T29] audit: type=1326 audit(413.318:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.492932][ T29] audit: type=1326 audit(413.318:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 157.578570][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4792'. [ 157.587686][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4792'. [ 157.645489][T14307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4795'. [ 157.671405][T14314] sd 0:0:1:0: device reset [ 158.583026][T14350] pimreg: entered allmulticast mode [ 158.598219][T14350] pimreg: left allmulticast mode [ 159.332416][ T3409] hid_parser_main: 22 callbacks suppressed [ 159.332434][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 159.346072][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 159.355751][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 159.363512][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 159.371325][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 159.379111][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 159.386797][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 159.394461][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 159.402176][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 159.409873][ T3409] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 159.420346][ T3409] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.460001][T14415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4840'. [ 159.572126][T14432] bridge0: entered promiscuous mode [ 159.578427][T14432] macvtap1: entered allmulticast mode [ 159.583966][T14432] bridge0: entered allmulticast mode [ 159.591498][T14432] bridge0: port 3(macvtap1) entered blocking state [ 159.598120][T14432] bridge0: port 3(macvtap1) entered disabled state [ 159.606177][T14432] bridge0: left allmulticast mode [ 159.611279][T14432] bridge0: left promiscuous mode [ 162.331339][T14580] __nla_validate_parse: 1 callbacks suppressed [ 162.331355][T14580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4921'. [ 162.394906][ T3409] kernel write not supported for file bpf-prog (pid: 3409 comm: kworker/0:3) [ 162.432899][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4912'. [ 162.442246][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 162.442266][ T29] audit: type=1400 audit(418.408:6224): avc: denied { write } for pid=14595 comm="syz.1.4926" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.471079][ T29] audit: type=1400 audit(418.408:6225): avc: denied { ioctl } for pid=14595 comm="syz.1.4926" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.641093][T14613] ref_ctr_offset mismatch. inode: 0x1299 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 162.698853][T14617] pim6reg: entered allmulticast mode [ 162.706828][T14617] pim6reg: left allmulticast mode [ 162.851407][T14633] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4934'. [ 162.870005][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 162.879669][T14635] veth0_macvtap: left promiscuous mode [ 162.941702][T14640] IPv6: Can't replace route, no match found [ 162.956529][T14642] ALSA: seq fatal error: cannot create timer (-19) [ 162.990395][ T29] audit: type=1326 audit(418.968:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.2.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 163.013719][ T29] audit: type=1326 audit(418.968:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.2.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 163.053597][ T29] audit: type=1326 audit(418.968:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.2.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 163.076698][ T29] audit: type=1326 audit(418.968:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.2.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 163.099586][ T29] audit: type=1326 audit(418.968:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.2.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 163.122498][ T29] audit: type=1326 audit(418.968:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.2.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 163.145529][ T29] audit: type=1326 audit(418.968:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.2.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 163.168508][ T29] audit: type=1326 audit(418.968:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.2.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 163.229333][T14655] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4943'. [ 163.238660][T14655] 0X: renamed from caif0 [ 163.260053][T14655] 0X: entered allmulticast mode [ 163.265457][T14655] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 163.375953][T14670] smc: net device bond0 applied user defined pnetid SYZ0 [ 163.385851][T14670] smc: net device bond0 erased user defined pnetid SYZ0 [ 163.555832][T14691] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4960'. [ 163.565778][T14691] 0X: renamed from caif0 [ 163.583918][T14691] 0X: entered allmulticast mode [ 163.589299][T14691] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 163.903448][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4974'. [ 163.914135][T14734] veth0_macvtap: left promiscuous mode [ 164.157556][T14747] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4978'. [ 164.166564][T14747] 0X: renamed from caif0 [ 164.173317][T14747] 0X: entered allmulticast mode [ 164.178597][T14747] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 164.603053][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4992'. [ 164.646963][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4992'. [ 165.847009][T14857] netlink: 'syz.4.5029': attribute type 1 has an invalid length. [ 165.916683][T14870] veth0_macvtap: left promiscuous mode [ 165.957064][ T1746] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 166.591234][ T1746] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 167.426909][T14993] sd 0:0:1:0: device reset [ 167.512440][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 167.512459][ T29] audit: type=1400 audit(423.488:6687): avc: denied { setopt } for pid=14997 comm="syz.0.5100" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.583311][ T29] audit: type=1400 audit(423.488:6688): avc: denied { write } for pid=14997 comm="syz.0.5100" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.377486][ T29] audit: type=1400 audit(424.348:6689): avc: denied { create } for pid=15011 comm="syz.3.5093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.399020][T15009] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 168.410740][ T29] audit: type=1400 audit(424.378:6690): avc: denied { bind } for pid=15011 comm="syz.3.5093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.429701][ T29] audit: type=1400 audit(424.388:6691): avc: denied { setopt } for pid=15011 comm="syz.3.5093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.448807][ T29] audit: type=1400 audit(424.388:6692): avc: denied { write } for pid=15011 comm="syz.3.5093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.529770][ T29] audit: type=1326 audit(424.498:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.1.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 168.552876][ T29] audit: type=1326 audit(424.498:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.1.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 168.575859][ T29] audit: type=1326 audit(424.498:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.1.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 168.598904][ T29] audit: type=1326 audit(424.498:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.1.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 168.720010][T15026] netlink: 'syz.1.5114': attribute type 10 has an invalid length. [ 168.727934][T15026] __nla_validate_parse: 5 callbacks suppressed [ 168.727955][T15026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5114'. [ 168.737394][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5103'. [ 168.764791][T15026] dummy0: entered promiscuous mode [ 168.776418][T15026] bond0: (slave dummy0): Releasing backup interface [ 169.118868][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5117'. [ 169.122876][T15034] ipip0: entered promiscuous mode [ 169.158899][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5117'. [ 169.215468][T15047] netlink: 'syz.4.5111': attribute type 29 has an invalid length. [ 169.227974][T15045] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 169.236257][T15045] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 169.238913][T15047] netlink: 'syz.4.5111': attribute type 29 has an invalid length. [ 169.269297][T15047] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5111'. [ 169.340264][T15066] netlink: 'syz.4.5119': attribute type 1 has an invalid length. [ 169.348196][T15066] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.5119'. [ 169.387940][T15072] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 169.404670][T15072] SELinux: failed to load policy [ 170.061698][T15076] netlink: 'syz.4.5124': attribute type 1 has an invalid length. [ 170.097346][T15087] netlink: 'syz.3.5129': attribute type 1 has an invalid length. [ 170.139035][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5133'. [ 170.148992][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5133'. [ 170.188480][T15102] netlink: 'syz.1.5146': attribute type 1 has an invalid length. [ 170.242453][T15108] 9pnet: Could not find request transport: 0xffffffffffffffff [ 170.299944][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5145'. [ 170.310161][T15119] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5145'. [ 171.075490][T15157] netlink: 'syz.3.5162': attribute type 10 has an invalid length. [ 171.095496][T15157] team0: Port device dummy0 added [ 171.108213][T15157] netlink: 'syz.3.5162': attribute type 10 has an invalid length. [ 171.123147][T15157] team0: Port device dummy0 removed [ 171.133277][T15157] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.264311][T15175] netlink: 'syz.0.5168': attribute type 12 has an invalid length. [ 171.318883][T15179] pimreg: entered allmulticast mode [ 171.326390][T15179] pimreg: left allmulticast mode [ 171.428191][T15192] netlink: 'syz.1.5175': attribute type 10 has an invalid length. [ 171.438461][T15192] dummy0: left promiscuous mode [ 171.445732][T15192] team0: Port device dummy0 added [ 171.474546][T15192] netlink: 'syz.1.5175': attribute type 10 has an invalid length. [ 171.504556][T15192] team0: Port device dummy0 removed [ 171.514050][T15192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.625847][T15215] netlink: 'syz.2.5186': attribute type 12 has an invalid length. [ 172.007697][ T3381] hid_parser_main: 6 callbacks suppressed [ 172.007719][ T3381] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 172.021409][ T3381] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 172.065330][ T3381] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 172.084882][ T3381] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 172.198995][T15248] IPv6: Can't replace route, no match found [ 172.342147][T15252] netlink: 'syz.4.5202': attribute type 12 has an invalid length. [ 172.366773][T15256] netlink: '+}[@': attribute type 7 has an invalid length. [ 172.507234][T15274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2453 sclass=netlink_route_socket pid=15274 comm=syz.0.5224 [ 172.572168][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 172.572186][ T29] audit: type=1400 audit(428.548:6813): avc: denied { getopt } for pid=15282 comm="syz.0.5216" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.763848][ T29] audit: type=1400 audit(428.738:6814): avc: denied { create } for pid=15293 comm="syz.2.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.793384][ T29] audit: type=1400 audit(428.758:6815): avc: denied { setopt } for pid=15293 comm="syz.2.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.816253][ T29] audit: type=1400 audit(428.768:6816): avc: denied { bind } for pid=15293 comm="syz.2.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.882464][T15298] rdma_op ffff88811d427180 conn xmit_rdma 0000000000000000 [ 172.883068][ T29] audit: type=1400 audit(428.858:6817): avc: denied { write } for pid=15297 comm="syz.2.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.989727][ T29] audit: type=1400 audit(428.968:6818): avc: denied { ioctl } for pid=15302 comm="syz.2.5227" path="socket:[43061]" dev="sockfs" ino=43061 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.990250][T15304] syzkaller1: entered promiscuous mode [ 173.019786][T15304] syzkaller1: entered allmulticast mode [ 173.115755][ T29] audit: type=1326 audit(429.098:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.1.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 173.138904][ T29] audit: type=1326 audit(429.098:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.1.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 173.202909][ T29] audit: type=1326 audit(429.138:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.1.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 173.225888][ T29] audit: type=1326 audit(429.138:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15309 comm="syz.1.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 173.985078][T15333] syzkaller1: entered promiscuous mode [ 173.990688][T15333] syzkaller1: entered allmulticast mode [ 174.118753][T15352] __nla_validate_parse: 7 callbacks suppressed [ 174.118773][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5247'. [ 174.152730][T15354] netlink: 'syz.3.5248': attribute type 12 has an invalid length. [ 174.164856][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5250'. [ 174.322255][T15377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 174.327219][T15381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5254'. [ 174.328814][T15377] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.328979][T15377] vhci_hcd vhci_hcd.0: Device attached [ 174.352375][T15375] sg_write: data in/out 134810845/78 bytes for SCSI command 0x0-- guessing data in; [ 174.352375][T15375] program syz.2.5257 not setting count and/or reply_len properly [ 174.384512][T15379] vhci_hcd: connection closed [ 174.384674][ T56] vhci_hcd: stop threads [ 174.393776][ T56] vhci_hcd: release socket [ 174.398281][ T56] vhci_hcd: disconnect device [ 174.413552][T15387] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 174.422755][T15387] SELinux: failed to load policy [ 174.473840][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5267'. [ 174.563282][T15405] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 174.644146][T15419] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 174.654247][T15419] SELinux: failed to load policy [ 174.676847][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5279'. [ 174.704457][T15425] netlink: 'syz.2.5280': attribute type 12 has an invalid length. [ 174.712529][T15425] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5280'. [ 174.721711][T15425] netlink: 23 bytes leftover after parsing attributes in process `syz.2.5280'. [ 174.734374][T15427] openvswitch: netlink: Message has 6 unknown bytes. [ 174.998833][T15451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5292'. [ 175.070795][T15455] hub 6-0:1.0: USB hub found [ 175.081914][T15455] hub 6-0:1.0: 8 ports detected [ 175.090597][T15463] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 175.097159][T15463] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 175.105037][T15463] vhci_hcd vhci_hcd.0: Device attached [ 175.145988][T15465] vhci_hcd: connection closed [ 175.146486][ T3424] vhci_hcd: stop threads [ 175.155484][ T3424] vhci_hcd: release socket [ 175.159982][ T3424] vhci_hcd: disconnect device [ 176.103422][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5310'. [ 176.186705][T15503] openvswitch: netlink: Message has 6 unknown bytes. [ 176.308263][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5327'. [ 176.406514][T15541] openvswitch: netlink: Message has 6 unknown bytes. [ 176.661870][T15579] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 177.283944][T15610] hub 6-0:1.0: USB hub found [ 177.301305][T15610] hub 6-0:1.0: 8 ports detected [ 177.309863][T15616] netlink: zone id is out of range [ 177.315079][T15616] netlink: zone id is out of range [ 178.274341][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 178.274361][ T29] audit: type=1326 audit(434.248:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.306941][ T29] audit: type=1326 audit(434.288:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.330012][ T29] audit: type=1326 audit(434.288:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.352988][ T29] audit: type=1326 audit(434.288:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.376024][ T29] audit: type=1326 audit(434.288:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.399034][ T29] audit: type=1326 audit(434.288:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.422071][ T29] audit: type=1326 audit(434.288:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.445491][ T29] audit: type=1326 audit(434.288:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.468488][ T29] audit: type=1326 audit(434.288:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.491428][ T29] audit: type=1326 audit(434.288:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15653 comm="syz.0.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 178.664530][T15684] netlink: zone id is out of range [ 178.669812][T15684] netlink: zone id is out of range [ 178.830741][T15694] SELinux: ebitmap: truncated map [ 178.844851][T15694] SELinux: failed to load policy [ 180.336174][T15781] SELinux: ebitmap: truncated map [ 180.341671][T15781] SELinux: failed to load policy [ 181.142843][T15823] SELinux: ebitmap: truncated map [ 181.156894][T15823] SELinux: failed to load policy [ 181.371238][T15847] validate_nla: 2 callbacks suppressed [ 181.371272][T15847] netlink: 'syz.2.5472': attribute type 83 has an invalid length. [ 181.486788][T15864] program syz.2.5480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.510730][T15864] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 181.812173][T15888] netlink: 'syz.3.5492': attribute type 83 has an invalid length. [ 182.276725][T15924] netlink: 'syz.1.5508': attribute type 83 has an invalid length. [ 182.352819][T15928] __nla_validate_parse: 2 callbacks suppressed [ 182.352839][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5512'. [ 182.358469][T15930] program syz.0.5511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.382002][T15930] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 182.385272][T15928] vlan2: entered allmulticast mode [ 182.412047][T15934] 9pnet: p9_errstr2errno: server reported unknown error [ 182.615799][T15965] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5528'. [ 182.890821][T15977] infiniband syz!: set down [ 182.895888][T15977] infiniband syz!: added team_slave_0 [ 182.914329][T15977] RDS/IB: syz!: added [ 182.921823][T15977] smc: adding ib device syz! with port count 1 [ 182.931943][T15977] smc: ib device syz! port 1 has pnetid [ 183.092679][T15994] program syz.3.5541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.102350][T15994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 183.277507][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 183.277522][ T29] audit: type=1326 audit(439.258:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f227a1e5d67 code=0x7ffc0000 [ 183.309445][ T29] audit: type=1326 audit(439.288:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f227a18af79 code=0x7ffc0000 [ 183.332331][ T29] audit: type=1326 audit(439.288:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f227a1e5d67 code=0x7ffc0000 [ 183.355254][ T29] audit: type=1326 audit(439.288:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f227a18af79 code=0x7ffc0000 [ 183.378194][ T29] audit: type=1326 audit(439.288:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 183.403659][ T29] audit: type=1326 audit(439.378:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f227a1e5d67 code=0x7ffc0000 [ 183.426546][ T29] audit: type=1326 audit(439.378:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f227a18af79 code=0x7ffc0000 [ 183.449395][ T29] audit: type=1326 audit(439.378:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 183.477179][ T29] audit: type=1326 audit(439.448:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f227a1e5d67 code=0x7ffc0000 [ 183.500081][ T29] audit: type=1326 audit(439.448:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.3.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f227a18af79 code=0x7ffc0000 [ 183.579430][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5546'. [ 183.592395][T16008] vlan1: entered allmulticast mode [ 183.797464][T16020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5551'. [ 183.853256][T16026] program syz.1.5553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.875245][T16026] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 183.998676][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5560'. [ 184.034385][T16036] vlan2: entered allmulticast mode [ 184.078561][T16045] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5564'. [ 184.158845][T16057] netlink: 'syz.1.5568': attribute type 4 has an invalid length. [ 184.272972][T16063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5572'. [ 184.357787][T16074] bridge0: port 1(syz_tun) entered blocking state [ 184.364294][T16074] bridge0: port 1(syz_tun) entered disabled state [ 184.382947][T16074] bridge0: port 1(syz_tun) entered blocking state [ 184.389475][T16074] bridge0: port 1(syz_tun) entered forwarding state [ 184.657696][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5586'. [ 184.897415][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5595'. [ 184.907448][T16115] bridge_slave_1: left allmulticast mode [ 184.913301][T16115] bridge_slave_1: left promiscuous mode [ 184.919405][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.928337][T16115] bridge_slave_0: left promiscuous mode [ 184.934038][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.980686][T16127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5599'. [ 185.353862][T16152] netlink: 'syz.4.5620': attribute type 4 has an invalid length. [ 185.422411][T16156] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.776582][T16180] netlink: 'syz.2.5623': attribute type 4 has an invalid length. [ 185.982036][T16214] netlink: 'syz.0.5636': attribute type 4 has an invalid length. [ 186.585123][T16260] geneve3: entered promiscuous mode [ 186.590473][T16260] geneve3: entered allmulticast mode [ 186.684987][T16268] SELinux: failed to load policy [ 187.372132][T16328] geneve3: entered promiscuous mode [ 187.374832][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 187.377482][T16328] geneve3: entered allmulticast mode [ 188.054341][T16335] bridge0: port 2(syz_tun) entered blocking state [ 188.061202][T16335] bridge0: port 2(syz_tun) entered disabled state [ 188.061495][T16336] SELinux: failed to load policy [ 188.070822][T16335] syz_tun: entered allmulticast mode [ 188.079268][T16335] syz_tun: entered promiscuous mode [ 188.084887][T16335] bridge0: port 2(syz_tun) entered blocking state [ 188.091364][T16335] bridge0: port 2(syz_tun) entered forwarding state [ 188.124011][T16343] __nla_validate_parse: 1 callbacks suppressed [ 188.124028][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5705'. [ 188.139271][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5705'. [ 188.299152][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 188.299167][ T29] audit: type=1400 audit(444.278:8057): avc: denied { ioctl } for pid=16359 comm="syz.0.5697" path="socket:[46589]" dev="sockfs" ino=46589 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.359275][T16363] netlink: 1684 bytes leftover after parsing attributes in process `syz.0.5698'. [ 188.425004][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5699'. [ 188.487976][ T29] audit: type=1400 audit(444.468:8058): avc: denied { create } for pid=16369 comm="syz.4.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.524141][ T29] audit: type=1400 audit(444.488:8059): avc: denied { connect } for pid=16369 comm="syz.4.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.595630][T16376] SELinux: failed to load policy [ 188.947841][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5712'. [ 188.956950][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5712'. [ 188.995972][ T29] audit: type=1400 audit(444.978:8060): avc: denied { mount } for pid=16387 comm="syz.0.5713" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 189.023233][ T29] audit: type=1400 audit(444.998:8061): avc: denied { unmount } for pid=16387 comm="syz.0.5713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 189.053590][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5715'. [ 189.065492][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 189.076485][T16392] bridge0: port 1(syz_tun) entered disabled state [ 189.084370][ T29] audit: type=1326 audit(445.058:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16396 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 189.107462][ T29] audit: type=1326 audit(445.058:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16396 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 189.157424][ T29] audit: type=1326 audit(445.058:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16396 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 189.180517][ T29] audit: type=1326 audit(445.058:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16396 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 189.203457][ T29] audit: type=1326 audit(445.058:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16396 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 189.418053][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5729'. [ 189.427097][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5729'. [ 189.443225][T16482] bridge0: port 3(macsec1) entered blocking state [ 189.449881][T16482] bridge0: port 3(macsec1) entered disabled state [ 189.457762][T16482] macsec1: entered allmulticast mode [ 189.464420][T16482] macsec1: left allmulticast mode [ 189.861580][T16513] syz_tun: left allmulticast mode [ 189.866760][T16513] syz_tun: left promiscuous mode [ 189.871853][T16513] bridge0: port 2(syz_tun) entered disabled state [ 189.883616][T16513] batadv1: left allmulticast mode [ 189.889023][T16513] batadv1: left promiscuous mode [ 189.894373][T16513] bridge0: port 1(batadv1) entered disabled state [ 190.394603][T16558] lo speed is unknown, defaulting to 1000 [ 190.984539][T16594] rdma_op ffff88812fb85580 conn xmit_rdma 0000000000000000 [ 191.658584][T16590] Set syz1 is full, maxelem 65536 reached [ 191.879411][T16645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.891682][T16645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.905261][T16645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.913703][T16645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.142808][T16666] lo speed is unknown, defaulting to 1000 [ 192.309601][ T3381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3381 comm=kworker/1:4 [ 192.514100][T16694] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 192.675312][T16711] lo speed is unknown, defaulting to 1000 [ 192.927193][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.974128][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.011060][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.019919][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.463548][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 193.463585][ T29] audit: type=1400 audit(449.438:8237): avc: denied { read } for pid=16732 comm="syz.4.5836" dev="nsfs" ino=4026532705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 193.490530][ T29] audit: type=1400 audit(449.438:8238): avc: denied { open } for pid=16732 comm="syz.4.5836" path="net:[4026532705]" dev="nsfs" ino=4026532705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 193.544479][ T29] audit: type=1400 audit(449.518:8239): avc: denied { map_create } for pid=16743 comm="syz.2.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.563266][ T29] audit: type=1400 audit(449.518:8240): avc: denied { bpf } for pid=16743 comm="syz.2.5840" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.583419][ T29] audit: type=1400 audit(449.518:8241): avc: denied { map_read map_write } for pid=16743 comm="syz.2.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.602794][ T29] audit: type=1400 audit(449.518:8242): avc: denied { create } for pid=16741 comm="syz.0.5838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.626259][ T29] audit: type=1400 audit(449.608:8243): avc: denied { write } for pid=16732 comm="syz.4.5836" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.649405][ T29] audit: type=1400 audit(449.608:8244): avc: denied { prog_load } for pid=16743 comm="syz.2.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.667998][ T29] audit: type=1400 audit(449.608:8245): avc: denied { perfmon } for pid=16743 comm="syz.2.5840" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.688497][ T29] audit: type=1400 audit(449.608:8246): avc: denied { prog_run } for pid=16743 comm="syz.2.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.752137][T16753] lo speed is unknown, defaulting to 1000 [ 193.771665][T16755] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 193.870169][T16762] __nla_validate_parse: 16 callbacks suppressed [ 193.870189][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5844'. [ 193.908448][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5848'. [ 193.917993][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5848'. [ 193.997482][T16776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.007456][T16776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.017244][T16776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.028592][T16776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.042692][T16776] netlink: 566 bytes leftover after parsing attributes in process `syz.1.5851'. [ 194.411735][T16800] lo speed is unknown, defaulting to 1000 [ 196.425057][T16914] Set syz1 is full, maxelem 65536 reached [ 196.614339][T16993] rdma_op ffff88811d8ec580 conn xmit_rdma 0000000000000000 [ 196.672573][T16997] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.461896][T17001] Set syz1 is full, maxelem 65536 reached [ 198.212542][T17128] rdma_op ffff88812e67f980 conn xmit_rdma 0000000000000000 [ 198.521607][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 198.521627][ T29] audit: type=1326 audit(454.498:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 198.551024][ T29] audit: type=1326 audit(454.498:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 198.574409][ T29] audit: type=1326 audit(454.498:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 198.597491][ T29] audit: type=1326 audit(454.498:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 198.620552][ T29] audit: type=1326 audit(454.498:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 198.643513][ T29] audit: type=1326 audit(454.498:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 198.666590][ T29] audit: type=1326 audit(454.508:8419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.1.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 198.696919][ T29] audit: type=1400 audit(454.678:8420): avc: denied { read write } for pid=17154 comm="syz.4.6017" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 198.719891][ T29] audit: type=1400 audit(454.678:8421): avc: denied { open } for pid=17154 comm="syz.4.6017" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 198.742738][ T29] audit: type=1400 audit(454.678:8422): avc: denied { ioctl } for pid=17154 comm="syz.4.6017" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 199.161775][T17149] netlink: 'syz.0.6024': attribute type 2 has an invalid length. [ 199.169671][T17149] netlink: 'syz.0.6024': attribute type 1 has an invalid length. [ 199.177540][T17149] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6024'. [ 199.419179][T17197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17197 comm=syz.0.6037 [ 199.630077][T17205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6042'. [ 199.908810][T17183] Set syz1 is full, maxelem 65536 reached [ 200.062051][T17236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17236 comm=syz.3.6055 [ 201.208144][T17310] vlan2: entered allmulticast mode [ 201.213318][T17310] bridge_slave_0: entered allmulticast mode [ 201.290618][T17313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6090'. [ 201.341163][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6104'. [ 201.509769][T17344] vlan2: entered allmulticast mode [ 201.515008][T17344] bridge_slave_0: entered allmulticast mode [ 201.593201][T17351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6106'. [ 201.653047][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6109'. [ 202.012046][T17390] lo speed is unknown, defaulting to 1000 [ 202.323219][T17400] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 202.393044][T16430] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.402071][T16430] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.415041][T16430] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.423971][T16430] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.446407][T16430] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.455400][T16430] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.487316][T16430] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.496380][T16430] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.929677][T17458] lo speed is unknown, defaulting to 1000 [ 202.978277][T17463] sctp: [Deprecated]: syz.0.6157 (pid 17463) Use of int in max_burst socket option. [ 202.978277][T17463] Use struct sctp_assoc_value instead [ 203.307766][T17483] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 203.568913][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 203.568929][ T29] audit: type=1400 audit(459.548:8600): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=6580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.603567][ T29] audit: type=1400 audit(459.578:8601): avc: denied { mount } for pid=17485 comm="syz.2.6169" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 203.627009][ T29] audit: type=1400 audit(459.608:8602): avc: denied { watch } for pid=17485 comm="syz.2.6169" path="/1276/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 203.648896][ T29] audit: type=1326 audit(459.608:8603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17489 comm="syz.3.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 203.671928][ T29] audit: type=1326 audit(459.608:8604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17489 comm="syz.3.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 203.694887][ T29] audit: type=1326 audit(459.608:8605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17489 comm="syz.3.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 203.717811][ T29] audit: type=1326 audit(459.608:8606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17489 comm="syz.3.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 203.740783][ T29] audit: type=1326 audit(459.608:8607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17489 comm="syz.3.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 203.763882][ T29] audit: type=1326 audit(459.608:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17489 comm="syz.3.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 203.786796][ T29] audit: type=1326 audit(459.608:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17489 comm="syz.3.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a1eeec9 code=0x7ffc0000 [ 203.893461][T17503] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6187'. [ 203.949902][T17494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.962333][T17494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.018673][T17503] batadv1: entered promiscuous mode [ 204.023925][T17503] batadv1: entered allmulticast mode [ 204.039990][ T31] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.048437][ T31] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.060868][ T31] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.069349][ T31] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.079997][ T31] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.088467][ T31] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.098162][ T31] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.106784][ T31] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.252269][T17532] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 204.447705][T17539] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 204.504027][ T3363] syz1: Port: 1 Link DOWN [ 204.511948][T16426] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.521032][T16426] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.550447][T16426] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.559447][T16426] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.581838][T16426] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.590935][T16426] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.621303][T16426] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.630272][T16426] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.794588][T17587] lo speed is unknown, defaulting to 1000 [ 205.502698][T17626] block device autoloading is deprecated and will be removed. [ 205.687699][T17637] lo speed is unknown, defaulting to 1000 [ 207.282815][T16432] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.291929][T16432] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.310242][T16432] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.319275][T16432] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.340129][T16432] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.349109][T16432] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.373255][T16432] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.373941][T17748] block device autoloading is deprecated and will be removed. [ 207.382323][T16432] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.459174][T17756] lo speed is unknown, defaulting to 1000 [ 207.731281][T17774] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6276'. [ 207.769855][ T3409] lo speed is unknown, defaulting to 1000 [ 207.775863][ T3409] syz2: Port: 1 Link DOWN [ 207.780757][T16432] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.789884][T16432] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.802393][T17774] batadv1: entered promiscuous mode [ 207.807815][T17774] batadv1: entered allmulticast mode [ 207.878630][T16432] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.887699][T16432] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.929515][T16432] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.938622][T16432] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.972670][T16432] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.981597][T16432] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.066604][T17798] lo speed is unknown, defaulting to 1000 [ 208.315240][T17813] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6285'. [ 208.327505][T17813] batadv1: entered promiscuous mode [ 208.332746][T17813] batadv1: entered allmulticast mode [ 208.463157][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.470874][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.478390][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.485908][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.493399][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.500908][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.508447][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.515884][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.523285][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.530692][ T10] hid-generic 0008:0006:0007.0009: unknown main item tag 0x0 [ 208.539613][ T10] hid-generic 0008:0006:0007.0009: hidraw0: HID v0.0b Device [syz1] on syz1 [ 208.887850][ T10] hid-generic 0008:0006:0007.000A: hidraw0: HID v0.0b Device [syz1] on syz1 [ 208.918243][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 208.918284][ T29] audit: type=1400 audit(464.898:8779): avc: denied { bind } for pid=17904 comm="syz.0.6319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.108846][ T29] audit: type=1400 audit(465.088:8780): avc: denied { write } for pid=17928 comm="syz.0.6327" name="ip_vs" dev="proc" ino=4026532436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 209.140711][ T29] audit: type=1400 audit(465.118:8781): avc: denied { create } for pid=17928 comm="syz.0.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.161857][ T29] audit: type=1400 audit(465.138:8782): avc: denied { bind } for pid=17928 comm="syz.0.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.198727][ T29] audit: type=1400 audit(465.158:8783): avc: denied { listen } for pid=17928 comm="syz.0.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.482412][ T29] audit: type=1326 audit(465.458:8784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 209.505514][ T29] audit: type=1326 audit(465.458:8785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 209.528930][ T29] audit: type=1326 audit(465.488:8786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 209.551833][ T29] audit: type=1326 audit(465.488:8787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 209.575129][ T29] audit: type=1326 audit(465.488:8788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 209.738066][ T1033] hid-generic 0008:0006:0007.000B: hidraw0: HID v0.0b Device [syz1] on syz1 [ 209.814347][T18041] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6336'. [ 210.115024][T18092] netem: change failed [ 211.391343][T18211] loop2: detected capacity change from 0 to 1024 [ 211.410351][T18211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.449601][T18211] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 211.466123][T18211] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 211.478641][T18211] EXT4-fs (loop2): This should not happen!! Data will be lost [ 211.478641][T18211] [ 211.488445][T18211] EXT4-fs (loop2): Total free blocks count 0 [ 211.494511][T18211] EXT4-fs (loop2): Free/Dirty block details [ 211.500478][T18211] EXT4-fs (loop2): free_blocks=4293918720 [ 211.506253][T18211] EXT4-fs (loop2): dirty_blocks=16 [ 211.511480][T18211] EXT4-fs (loop2): Block reservation details [ 211.517546][T18211] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 211.610944][T18223] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.6383: lblock 1 mapped to illegal pblock 1 (length 3) [ 211.636667][T18223] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 212.797740][T18377] loop0: detected capacity change from 0 to 1024 [ 212.838175][T18377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.860290][T18377] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 212.881179][T18377] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 212.893674][T18377] EXT4-fs (loop0): This should not happen!! Data will be lost [ 212.893674][T18377] [ 212.903612][T18377] EXT4-fs (loop0): Total free blocks count 0 [ 212.909651][T18377] EXT4-fs (loop0): Free/Dirty block details [ 212.915597][T18377] EXT4-fs (loop0): free_blocks=4293918720 [ 212.921349][T18377] EXT4-fs (loop0): dirty_blocks=16 [ 212.926633][T18377] EXT4-fs (loop0): Block reservation details [ 212.932624][T18377] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 213.008597][T18380] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.6406: lblock 1 mapped to illegal pblock 1 (length 3) [ 213.325213][T18380] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 213.536599][T18400] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6415'. [ 213.607233][T18404] netlink: 664 bytes leftover after parsing attributes in process `syz.0.6417'. [ 213.722348][T18408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6419'. [ 213.872118][T18365] syz.1.6410 (18365) used greatest stack depth: 7496 bytes left [ 213.945628][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 213.945647][ T29] audit: type=1400 audit(469.928:8825): avc: denied { create } for pid=18429 comm="syz.1.6427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.029860][ T29] audit: type=1400 audit(470.008:8826): avc: denied { read } for pid=18433 comm="syz.3.6430" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.030679][T18434] loop9: detected capacity change from 0 to 7 [ 214.070656][T18434] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.080284][T18434] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.088319][T18434] loop9: unable to read partition table [ 214.090216][ T29] audit: type=1400 audit(470.008:8827): avc: denied { open } for pid=18433 comm="syz.3.6430" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.098015][T18434] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 214.098015][T18434] ) failed (rc=-5) [ 214.117405][ T29] audit: type=1400 audit(470.008:8828): avc: denied { ioctl } for pid=18433 comm="syz.3.6430" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.670960][T18476] loop9: detected capacity change from 0 to 7 [ 214.677662][T18476] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.700223][T18476] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.708166][T18476] loop9: unable to read partition table [ 214.806799][T18476] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 214.806799][T18476] ) failed (rc=-5) [ 214.933946][ T29] audit: type=1400 audit(470.908:8829): avc: denied { create } for pid=18494 comm="syz.4.6456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.349742][ T29] audit: type=1400 audit(471.328:8830): avc: denied { write } for pid=18514 comm="syz.4.6463" name="file0" dev="tmpfs" ino=6334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.371752][ T29] audit: type=1400 audit(471.328:8831): avc: denied { open } for pid=18514 comm="syz.4.6463" path="/1230/file0" dev="tmpfs" ino=6334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.394150][ T29] audit: type=1400 audit(471.328:8832): avc: denied { read } for pid=18514 comm="syz.4.6463" name="file0" dev="tmpfs" ino=6334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.418458][T18449] syz.3.6436 (18449) used greatest stack depth: 7288 bytes left [ 215.430525][ T29] audit: type=1400 audit(471.398:8833): avc: denied { map } for pid=18514 comm="syz.4.6463" path="/1230/file0" dev="tmpfs" ino=6334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.471909][T18522] netlink: 19 bytes leftover after parsing attributes in process `syz.3.6465'. [ 215.481210][ T29] audit: type=1400 audit(471.448:8834): avc: denied { write } for pid=18520 comm="syz.4.6466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.508252][T18524] loop9: detected capacity change from 0 to 7 [ 215.514629][T18524] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.522832][T18524] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.530845][T18524] loop9: unable to read partition table [ 215.537337][T18524] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 215.537337][T18524] ) failed (rc=-5) [ 215.556166][T18528] loop0: detected capacity change from 0 to 128 [ 215.563001][T18528] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.576362][T18528] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.889522][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6476'. [ 215.898593][T18544] netlink: 'syz.4.6476': attribute type 7 has an invalid length. [ 215.906733][T18544] netlink: 'syz.4.6476': attribute type 8 has an invalid length. [ 215.914472][T18544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6476'. [ 216.586904][T18584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6492'. [ 216.596046][T18584] netlink: 'syz.2.6492': attribute type 7 has an invalid length. [ 216.607528][T18584] netlink: 'syz.2.6492': attribute type 8 has an invalid length. [ 216.615357][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6492'. [ 217.108749][T18603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.118819][T18603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.553789][T18610] loop9: detected capacity change from 0 to 7 [ 217.563822][T18610] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.578350][T18610] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.586367][T18610] loop9: unable to read partition table [ 217.593171][T18610] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 217.593171][T18610] ) failed (rc=-5) [ 217.619079][T18617] loop0: detected capacity change from 0 to 1024 [ 217.629254][T18617] EXT4-fs: Ignoring removed nobh option [ 217.635060][T18617] EXT4-fs: inline encryption not supported [ 217.662168][T18617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.682242][T18617] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.6505: Allocating blocks 385-513 which overlap fs metadata [ 217.691728][T18623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6506'. [ 217.705141][T18623] netlink: 'syz.1.6506': attribute type 7 has an invalid length. [ 217.713004][T18623] netlink: 'syz.1.6506': attribute type 8 has an invalid length. [ 217.720821][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6506'. [ 217.750005][T18617] EXT4-fs (loop0): pa ffff888106dcc540: logic 16, phys. 129, len 24 [ 217.758241][T18617] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 217.782427][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.818909][T18643] loop2: detected capacity change from 0 to 1024 [ 217.826449][T18643] EXT4-fs: Ignoring removed nobh option [ 217.832091][T18643] EXT4-fs: inline encryption not supported [ 217.860252][T18643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.878323][T18643] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.6525: Allocating blocks 385-513 which overlap fs metadata [ 217.902696][T18643] EXT4-fs (loop2): pa ffff888106dcc540: logic 16, phys. 129, len 24 [ 217.910802][T18643] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 217.949025][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.981467][T18659] loop9: detected capacity change from 0 to 7 [ 217.989593][T18659] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.997686][T18659] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.005669][T18659] loop9: unable to read partition table [ 218.011577][T18659] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 218.011577][T18659] ) failed (rc=-5) [ 218.047448][T18665] loop2: detected capacity change from 0 to 128 [ 218.075239][T18665] syz.2.6523: attempt to access beyond end of device [ 218.075239][T18665] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 218.092155][T18665] syz.2.6523: attempt to access beyond end of device [ 218.092155][T18665] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 218.379413][T18688] loop2: detected capacity change from 0 to 764 [ 218.411918][T18691] loop9: detected capacity change from 0 to 7 [ 218.429436][T18691] loop9: unable to read partition table [ 218.435709][T18691] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 218.435709][T18691] ) failed (rc=-5) [ 218.747407][T18706] loop2: detected capacity change from 0 to 128 [ 218.754458][T18706] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.771667][T18706] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.817914][T18712] loop0: detected capacity change from 0 to 128 [ 218.866262][T18712] syz.0.6545: attempt to access beyond end of device [ 218.866262][T18712] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 218.889726][T18712] syz.0.6545: attempt to access beyond end of device [ 218.889726][T18712] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 218.929861][T18716] loop9: detected capacity change from 0 to 7 [ 218.959829][T18716] loop9: unable to read partition table [ 218.969317][T18716] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 218.969317][T18716] ) failed (rc=-5) [ 219.098467][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 219.098487][ T29] audit: type=1400 audit(475.078:8896): avc: denied { firmware_load } for pid=18718 comm="syz.3.6550" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 219.882460][ T29] audit: type=1400 audit(475.858:8897): avc: denied { mounton } for pid=18759 comm="syz.1.6563" path="/1357/file0" dev="tmpfs" ino=6972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 220.098735][T18722] syz.2.6549 (18722) used greatest stack depth: 6360 bytes left [ 220.490117][ T29] audit: type=1400 audit(476.468:8898): avc: denied { write } for pid=18785 comm="syz.2.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 220.537133][ T29] audit: type=1400 audit(476.488:8899): avc: denied { connect } for pid=18785 comm="syz.2.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 220.613588][T18802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.651372][T18802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.868060][ T29] audit: type=1326 audit(476.848:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.0.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 220.903045][ T29] audit: type=1326 audit(476.848:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.0.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 220.926028][ T29] audit: type=1326 audit(476.848:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.0.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 220.948924][ T29] audit: type=1326 audit(476.848:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.0.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 220.971834][ T29] audit: type=1326 audit(476.848:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.0.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f5eec9 code=0x7ffc0000 [ 221.340350][ T29] audit: type=1326 audit(477.318:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.1.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 222.949126][T18949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6649'. [ 222.966236][T18950] netlink: 'syz.1.6647': attribute type 4 has an invalid length. [ 222.974018][T18950] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6647'. [ 223.030815][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6656'. [ 223.068600][T18966] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6659'. [ 223.102450][T18970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6660'. [ 223.111524][T18970] unsupported nlmsg_type 40 [ 223.211480][T18985] netlink: 'syz.4.6668': attribute type 4 has an invalid length. [ 223.219441][T18985] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6668'. [ 223.346946][T18994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6673'. [ 223.491166][T19007] loop2: detected capacity change from 0 to 128 [ 223.504677][T19007] syz.2.6678: attempt to access beyond end of device [ 223.504677][T19007] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 223.522110][T19007] syz.2.6678: attempt to access beyond end of device [ 223.522110][T19007] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 223.535623][T19007] buffer_io_error: 6 callbacks suppressed [ 223.535711][T19007] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 223.591317][T19002] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6676'. [ 223.621881][T18972] Set syz1 is full, maxelem 65536 reached [ 223.656187][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6681'. [ 223.689063][T19019] netlink: 'syz.0.6683': attribute type 4 has an invalid length. [ 223.696881][T19019] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6683'. [ 224.150824][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 224.150844][ T29] audit: type=1326 audit(480.128:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.188597][ T29] audit: type=1326 audit(480.128:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.211566][ T29] audit: type=1326 audit(480.128:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.234706][ T29] audit: type=1326 audit(480.128:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.257634][ T29] audit: type=1326 audit(480.128:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.280595][ T29] audit: type=1326 audit(480.128:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.303546][ T29] audit: type=1326 audit(480.128:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.326567][ T29] audit: type=1326 audit(480.128:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.349643][ T29] audit: type=1326 audit(480.128:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 224.372639][ T29] audit: type=1326 audit(480.158:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.2.6726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 225.275608][T19119] vhci_hcd: invalid port number 96 [ 225.280796][T19119] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 225.630121][T19163] netem: unknown loss type 12 [ 225.634880][T19163] netem: change failed [ 225.714251][T19169] netlink: 'syz.2.6753': attribute type 1 has an invalid length. [ 226.571286][T19210] bridge0: entered promiscuous mode [ 226.576744][T19210] macvtap0: entered allmulticast mode [ 226.582140][T19210] bridge0: entered allmulticast mode [ 226.605278][T19210] bridge0: port 1(macvtap0) entered blocking state [ 226.611962][T19210] bridge0: port 1(macvtap0) entered disabled state [ 226.619699][T19210] bridge0: left allmulticast mode [ 226.624949][T19210] bridge0: left promiscuous mode [ 227.419296][T19245] netlink: 'syz.2.6785': attribute type 13 has an invalid length. [ 227.554650][T19245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.619692][T19245] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.687893][T19245] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 228.273881][T19296] tipc: Started in network mode [ 228.278921][T19296] tipc: Node identity ac14140f, cluster identity 4711 [ 228.285935][T19296] tipc: New replicast peer: 255.255.255.255 [ 228.292084][T19296] tipc: Enabled bearer , priority 10 [ 228.353868][T19307] netem: change failed [ 228.504114][T19317] netlink: 'syz.4.6817': attribute type 29 has an invalid length. [ 228.513000][T19317] netlink: 'syz.4.6817': attribute type 29 has an invalid length. [ 228.536895][T19317] __nla_validate_parse: 12 callbacks suppressed [ 228.536912][T19317] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6817'. [ 228.589846][T19301] atomic_op ffff88810313bd28 conn xmit_atomic 0000000000000000 [ 228.673555][ T1033] hid_parser_main: 149 callbacks suppressed [ 228.673623][ T1033] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 228.687363][ T1033] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 228.761098][ T1033] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 228.784959][ T1033] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 228.950203][T19347] SELinux: failed to load policy [ 229.072412][T19365] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 229.133545][T19372] netlink: 'syz.4.6842': attribute type 3 has an invalid length. [ 229.162509][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 229.162528][ T29] audit: type=1400 audit(3063.132:9141): avc: denied { read } for pid=19368 comm="syz.1.6840" path="socket:[55216]" dev="sockfs" ino=55216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.242852][T19382] pim6reg: entered allmulticast mode [ 229.250474][T19382] pim6reg: left allmulticast mode [ 229.285759][ T29] audit: type=1400 audit(3063.252:9142): avc: denied { getopt } for pid=19383 comm="syz.1.6847" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.366263][ T29] audit: type=1326 audit(3063.332:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.4.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 229.389336][ T29] audit: type=1326 audit(3063.332:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.4.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 229.392892][T19391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6850'. [ 229.415232][ T1033] tipc: Node number set to 2886997007 [ 229.474502][ T29] audit: type=1326 audit(3063.392:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.4.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 229.497682][ T29] audit: type=1326 audit(3063.392:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.4.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 229.520768][ T29] audit: type=1326 audit(3063.392:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.4.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 229.543821][ T29] audit: type=1326 audit(3063.402:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.4.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 229.566834][ T29] audit: type=1326 audit(3063.402:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.4.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 229.590415][ T29] audit: type=1326 audit(3063.402:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19388 comm="syz.4.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ada59eec9 code=0x7ffc0000 [ 229.806132][T19412] netlink: 'syz.1.6859': attribute type 10 has an invalid length. [ 229.814472][T19412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6859'. [ 229.828730][T19412] team0: entered promiscuous mode [ 229.834716][T19412] team0: entered allmulticast mode [ 229.858951][T19412] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.891034][T19412] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 229.907829][T19415] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6860'. [ 229.922760][T19415] ip_vti0: left promiscuous mode [ 229.927809][T19415] ip_vti0: left allmulticast mode [ 229.935502][T19415] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6860'. [ 229.956117][T19395] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 230.602969][T19449] SELinux: failed to load policy [ 230.722919][T19457] syzkaller0: refused to change device tx_queue_len [ 231.055403][T19482] netlink: 'syz.3.6893': attribute type 3 has an invalid length. [ 231.075700][T19486] netlink: 'syz.0.6894': attribute type 1 has an invalid length. [ 231.083508][T19486] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.6894'. [ 231.443411][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6916'. [ 231.528521][T19540] openvswitch: netlink: Message has 6 unknown bytes. [ 231.541298][T19543] netlink: 'syz.2.6921': attribute type 10 has an invalid length. [ 231.564301][T19543] team0: Port device dummy0 added [ 231.591950][T19543] netlink: 'syz.2.6921': attribute type 10 has an invalid length. [ 231.604089][T19543] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 231.618761][T19543] team0: Failed to send options change via netlink (err -105) [ 231.626770][T19543] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 231.635868][T19543] team0: Port device dummy0 removed [ 231.643533][T19543] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.684027][T19548] team0: left allmulticast mode [ 231.750965][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6930'. [ 232.025060][T19601] 9pnet_fd: Insufficient options for proto=fd [ 232.038567][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 232.046155][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 232.053745][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 232.061223][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 232.068787][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 232.076304][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 232.083760][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 232.092053][ T36] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 232.187761][T19607] syzkaller0: entered allmulticast mode [ 232.193674][T19607] syzkaller0: entered promiscuous mode [ 232.201090][T19607] syzkaller0 (unregistering): left allmulticast mode [ 232.207863][T19607] syzkaller0 (unregistering): left promiscuous mode [ 232.387947][T19615] loop2: detected capacity change from 0 to 512 [ 232.394530][T19615] journal_path: Non-blockdev passed as './bus' [ 232.400799][T19615] EXT4-fs: error: could not find journal device path [ 232.662811][T19619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6953'. [ 232.942174][T19642] program syz.3.6963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.155805][T19673] netlink: 'syz.1.6977': attribute type 2 has an invalid length. [ 233.589710][T19734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7005'. [ 233.986960][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7032'. [ 234.164849][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 234.164942][ T29] audit: type=1326 audit(3068.132:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.194312][ T29] audit: type=1326 audit(3068.132:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.226135][ T29] audit: type=1326 audit(3068.142:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.249274][ T29] audit: type=1326 audit(3068.142:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.272358][ T29] audit: type=1326 audit(3068.142:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.295381][ T29] audit: type=1326 audit(3068.142:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.318629][ T29] audit: type=1326 audit(3068.142:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.341609][ T29] audit: type=1326 audit(3068.142:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.364592][ T29] audit: type=1326 audit(3068.172:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.387614][ T29] audit: type=1326 audit(3068.172:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.2.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 234.470241][T19836] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7048'. [ 234.482737][T19836] batadv2: entered promiscuous mode [ 234.488285][T19836] batadv2: entered allmulticast mode [ 234.715553][T19867] netlink: 'syz.1.7062': attribute type 3 has an invalid length. [ 234.804389][T19884] netlink: 'syz.4.7070': attribute type 4 has an invalid length. [ 234.812252][T19884] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7070'. [ 234.823575][T19884] .`: renamed from bond0 [ 234.823771][T19886] netlink: 'syz.1.7071': attribute type 3 has an invalid length. [ 234.874625][T19893] sd 0:0:1:0: device reset [ 234.889335][T19896] pim6reg: entered allmulticast mode [ 234.901539][T19896] pim6reg: left allmulticast mode [ 235.733333][T19948] vlan2: entered allmulticast mode [ 235.760296][T19952] loop2: detected capacity change from 0 to 1024 [ 235.773149][T19952] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.7098: Failed to acquire dquot type 0 [ 235.787455][T19952] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 235.802309][T19952] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.7098: corrupted inode contents [ 235.816331][T19952] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.7098: mark_inode_dirty error [ 235.828049][T19952] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.7098: corrupted inode contents [ 235.841752][T19952] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.7098: mark_inode_dirty error [ 235.853358][T19952] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.7098: corrupted inode contents [ 235.867210][T19952] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 235.876029][T19952] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.7098: corrupted inode contents [ 235.889665][T19952] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.7098: mark_inode_dirty error [ 235.901050][T19952] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 235.912024][T19952] EXT4-fs (loop2): 1 truncate cleaned up [ 235.918189][T19952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.936485][T19952] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.7098: Failed to acquire dquot type 0 [ 235.970073][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.138949][T19970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7105'. [ 236.148049][T19970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7105'. [ 236.175564][T19970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7105'. [ 236.351176][T19984] SELinux: policydb version 65545 does not match my version range 15-35 [ 236.380033][T19984] SELinux: failed to load policy [ 236.677789][T20028] loop2: detected capacity change from 0 to 164 [ 236.688083][T20028] Unable to read rock-ridge attributes [ 236.712341][T20028] Unable to read rock-ridge attributes [ 236.731665][T20028] syz.2.7131: attempt to access beyond end of device [ 236.731665][T20028] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 236.747628][T20028] syz.2.7131: attempt to access beyond end of device [ 236.747628][T20028] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 236.807816][T20036] vlan2: entered allmulticast mode [ 236.859690][T20043] IPVS: Error connecting to the multicast addr [ 237.072038][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7146'. [ 237.081238][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7146'. [ 237.422108][T20094] $H: renamed from bond0 (while UP) [ 237.448598][T20094] $H: entered promiscuous mode [ 237.453698][T20094] bond_slave_0: entered promiscuous mode [ 237.459587][T20094] bond_slave_1: entered promiscuous mode [ 237.493813][T20094] dummy0: entered promiscuous mode [ 238.089962][T20130] SELinux: failed to load policy [ 238.377476][T20155] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20155 comm=syz.1.7183 [ 238.390126][T20155] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20155 comm=syz.1.7183 [ 238.422361][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7185'. [ 239.037205][T20198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20198 comm=syz.2.7201 [ 239.265999][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 239.266018][ T29] audit: type=1326 audit(3073.242:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.298910][ T29] audit: type=1326 audit(3073.242:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.322191][ T29] audit: type=1326 audit(3073.242:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.345261][ T29] audit: type=1326 audit(3073.242:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.368339][ T29] audit: type=1326 audit(3073.242:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.391425][ T29] audit: type=1326 audit(3073.242:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.414644][ T29] audit: type=1326 audit(3073.242:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.437782][ T29] audit: type=1326 audit(3073.242:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.460841][ T29] audit: type=1326 audit(3073.242:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.483848][ T29] audit: type=1326 audit(3073.242:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20218 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05e2deec9 code=0x7ffc0000 [ 239.621869][T20239] netlink: 'syz.1.7222': attribute type 3 has an invalid length. [ 239.758826][T20252] netlink: 'syz.0.7227': attribute type 2 has an invalid length. [ 240.177379][T20272] netlink: 'syz.4.7243': attribute type 10 has an invalid length. [ 240.190328][T20272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7243'. [ 240.213686][T20272] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.301478][T20272] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 240.377194][T20285] netlink: 'syz.0.7238': attribute type 3 has an invalid length. [ 240.534477][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7245'. [ 240.549988][ T1033] hid_parser_main: 29 callbacks suppressed [ 240.550011][ T1033] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 240.551039][T20297] IPVS: Error joining to the multicast group [ 240.556024][ T1033] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 240.582617][ T1033] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x3 [ 240.596350][ T1033] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 241.896927][T20401] netlink: 'syz.4.7291': attribute type 3 has an invalid length. [ 242.184181][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 242.248310][T20447] syzkaller0: entered allmulticast mode [ 242.254235][T20447] syzkaller0: entered promiscuous mode [ 242.263008][T20447] syzkaller0 (unregistering): left allmulticast mode [ 242.269896][T20447] syzkaller0 (unregistering): left promiscuous mode [ 242.503301][T20461] netlink: 'syz.3.7316': attribute type 1 has an invalid length. [ 242.523770][T20466] 9pnet_fd: Insufficient options for proto=fd [ 242.560696][T20461] bond4: (slave geneve2): making interface the new active one [ 242.579985][T20461] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 242.589836][T16450] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.612439][T16450] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.621132][T16450] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.629722][T16450] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.709813][T20485] serio: Serial port ttyS3 [ 242.765402][T20500] 9pnet_fd: Insufficient options for proto=fd [ 242.772248][T20501] siw: device registration error -23 [ 242.773956][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 242.785248][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 242.792716][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 242.800315][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 242.807934][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 242.815485][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 242.823118][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 242.832439][ T36] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 243.652073][T20584] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 243.659857][T20584] SELinux: failed to load policy [ 243.993284][T20632] netlink: 51 bytes leftover after parsing attributes in process `syz.0.7395'. [ 244.057156][T20643] netlink: 'syz.2.7400': attribute type 29 has an invalid length. [ 244.066942][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7399'. [ 244.067962][T20643] netlink: 'syz.2.7400': attribute type 29 has an invalid length. [ 244.099422][T20643] netlink: 500 bytes leftover after parsing attributes in process `syz.2.7400'. [ 244.150681][T20647] loop2: detected capacity change from 0 to 512 [ 244.158209][T20647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.179769][T20647] EXT4-fs (loop2): 1 truncate cleaned up [ 244.186152][T20647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.222315][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.276528][T20664] lo speed is unknown, defaulting to 1000 [ 244.326145][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 244.326165][ T29] audit: type=1326 audit(3078.302:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.370671][ T29] audit: type=1326 audit(3078.332:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.393920][ T29] audit: type=1326 audit(3078.332:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.417542][ T29] audit: type=1326 audit(3078.332:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.440727][ T29] audit: type=1326 audit(3078.332:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.463710][ T29] audit: type=1326 audit(3078.332:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.486811][ T29] audit: type=1326 audit(3078.332:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.509862][ T29] audit: type=1326 audit(3078.332:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.533027][ T29] audit: type=1326 audit(3078.332:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.556059][ T29] audit: type=1326 audit(3078.332:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20672 comm="syz.1.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4331feec9 code=0x7ffc0000 [ 244.688141][T20690] netlink: 'syz.0.7420': attribute type 13 has an invalid length. [ 244.760117][T20690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.768772][T20690] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.784797][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 244.797444][T20690] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 244.814939][T16450] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 244.822732][T16450] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.194090][T20744] pim6reg: entered allmulticast mode [ 245.214100][T20744] pim6reg: left allmulticast mode [ 245.334929][ T3381] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.572975][T20782] netlink: 'syz.1.7460': attribute type 13 has an invalid length. [ 245.624516][T20782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.633683][T20782] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.647637][T20782] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 245.784882][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.867556][T20792] sd 0:0:1:0: device reset [ 245.915232][T20798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7477'. [ 245.935690][T20803] netlink: 'syz.4.7466': attribute type 3 has an invalid length. [ 246.021830][T20813] random: crng reseeded on system resumption [ 246.042427][T20817] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 246.050404][T20817] SELinux: failed to load policy [ 246.167721][T20835] netlink: 'syz.1.7484': attribute type 39 has an invalid length. [ 246.291740][T20846] syzkaller0: refused to change device tx_queue_len [ 246.692767][T20860] netlink: 'syz.4.7495': attribute type 10 has an invalid length. [ 246.701400][T20860] .`: (slave dummy0): Releasing backup interface [ 246.710392][T20860] dummy0: left promiscuous mode [ 246.715734][T20860] dummy0: left allmulticast mode [ 246.722280][T20860] dummy0: entered promiscuous mode [ 246.727934][T20860] dummy0: entered allmulticast mode [ 246.733566][T20860] team0: Failed to send options change via netlink (err -105) [ 246.741307][T20860] team0: Port device dummy0 added [ 246.746997][ T1033] kernel read not supported for file /vcsu1 (pid: 1033 comm: kworker/0:2) [ 246.747563][T20862] netlink: 'syz.4.7495': attribute type 10 has an invalid length. [ 246.763971][T20862] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 246.773829][T20862] dummy0: left promiscuous mode [ 246.780217][T20862] dummy0: left allmulticast mode [ 246.786772][T20862] team0: Failed to send options change via netlink (err -105) [ 246.794360][T20862] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 246.807345][T20862] team0: Port device dummy0 removed [ 246.818657][T20862] dummy0: entered promiscuous mode [ 246.819424][T20865] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 246.826716][T20862] dummy0: entered allmulticast mode [ 246.832357][T20865] SELinux: failed to load policy [ 246.838111][T20862] .`: (slave dummy0): Enslaving as an active interface with an up link [ 246.851061][T20863] delete_channel: no stack [ 246.919394][T20875] block device autoloading is deprecated and will be removed. [ 246.931520][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7502'. [ 246.946163][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7502'. [ 246.974407][T20884] loop2: detected capacity change from 0 to 1024 [ 246.988878][T20884] EXT4-fs: Ignoring removed orlov option [ 247.002702][T20884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.049915][T20893] ipip2: entered promiscuous mode [ 247.141531][T20884] ================================================================== [ 247.149676][T20884] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 247.157799][T20884] [ 247.160153][T20884] write to 0xffff88811981ed10 of 4 bytes by task 20898 on cpu 1: [ 247.167891][T20884] writeback_single_inode+0x150/0x3f0 [ 247.173314][T20884] sync_inode_metadata+0x5b/0x90 [ 247.178294][T20884] generic_buffers_fsync_noflush+0xd9/0x120 [ 247.184222][T20884] ext4_sync_file+0x1ab/0x690 [ 247.188928][T20884] vfs_fsync_range+0x10d/0x130 [ 247.193728][T20884] ext4_buffered_write_iter+0x34f/0x3c0 [ 247.199311][T20884] ext4_file_write_iter+0x383/0xf00 [ 247.204556][T20884] iter_file_splice_write+0x663/0xa60 [ 247.209965][T20884] direct_splice_actor+0x153/0x2a0 [ 247.215114][T20884] splice_direct_to_actor+0x30f/0x680 [ 247.220528][T20884] do_splice_direct+0xda/0x150 [ 247.225336][T20884] do_sendfile+0x380/0x650 [ 247.229804][T20884] __x64_sys_sendfile64+0x105/0x150 [ 247.235043][T20884] x64_sys_call+0x2bb0/0x2ff0 [ 247.239756][T20884] do_syscall_64+0xd2/0x200 [ 247.244352][T20884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.250277][T20884] [ 247.252615][T20884] read to 0xffff88811981ed10 of 4 bytes by task 20884 on cpu 0: [ 247.260277][T20884] vfs_fsync_range+0x9b/0x130 [ 247.264967][T20884] ext4_buffered_write_iter+0x34f/0x3c0 [ 247.270553][T20884] ext4_file_write_iter+0x383/0xf00 [ 247.275770][T20884] iter_file_splice_write+0x663/0xa60 [ 247.281148][T20884] direct_splice_actor+0x153/0x2a0 [ 247.286270][T20884] splice_direct_to_actor+0x30f/0x680 [ 247.291726][T20884] do_splice_direct+0xda/0x150 [ 247.296527][T20884] do_sendfile+0x380/0x650 [ 247.300985][T20884] __x64_sys_sendfile64+0x105/0x150 [ 247.306211][T20884] x64_sys_call+0x2bb0/0x2ff0 [ 247.310903][T20884] do_syscall_64+0xd2/0x200 [ 247.315449][T20884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.321372][T20884] [ 247.323696][T20884] value changed: 0x00000070 -> 0x00000002 [ 247.329418][T20884] [ 247.331752][T20884] Reported by Kernel Concurrency Sanitizer on: [ 247.337908][T20884] CPU: 0 UID: 0 PID: 20884 Comm: syz.2.7504 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.347716][T20884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.357782][T20884] ================================================================== [ 247.445902][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.904798][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!