last executing test programs: 1m10.445592519s ago: executing program 2 (id=6163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x48}}, 0x50) 1m10.390137429s ago: executing program 2 (id=6164): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000019080)=0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, 0x0, 0x200048c4) 1m9.54537971s ago: executing program 2 (id=6178): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket(0x1d, 0x80802, 0x6) socket$inet6(0xa, 0x80003, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x4) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 1m9.49332894s ago: executing program 2 (id=6181): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) 1m9.271946271s ago: executing program 2 (id=6187): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000680)="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", 0x1ab}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001c", 0x8}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x15f}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41e", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7", 0x20}, {&(0x7f0000000900)="8aa5f18a9e39a6b83142d616b442ebe74739f0c388058ddd3b1bcc32f762f6cf494878cb1052a22cf9", 0x29}, {&(0x7f0000000500)="e13427da285b20399111b0413703b3f1f8", 0x11}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m9.007103284s ago: executing program 2 (id=6190): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m8.993092581s ago: executing program 32 (id=6190): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 8.114184816s ago: executing program 3 (id=6993): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x800000000000000) 6.244770076s ago: executing program 4 (id=7011): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)="9b", 0x1}], 0x1}, 0x8804) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) 6.146620938s ago: executing program 0 (id=7014): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0xfffff800) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x152) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.831111002s ago: executing program 0 (id=7016): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYRES8=r0], 0x38}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0xfffff800) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x152) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r5, 0xffffffffffffffff) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.048073223s ago: executing program 4 (id=7018): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@debug}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) chdir(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x12808cc, 0x0) 4.922226982s ago: executing program 4 (id=7020): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="59c26c94f60f", &(0x7f0000000000)=""/3, 0x2}, 0x20) socketpair(0x3, 0x2, 0x6, &(0x7f0000000140)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) 4.911886899s ago: executing program 0 (id=7021): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000120097020000000000000000053a67"], 0x24}}, 0x0) 4.892284686s ago: executing program 3 (id=7023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@rnullb, 0x0, &(0x7f0000000080)='./file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 4.834089046s ago: executing program 5 (id=7024): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280), 0x6000) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) futex(0x0, 0x85, 0x4000000, 0x0, 0x0, 0xb0010199) 4.833707125s ago: executing program 0 (id=7025): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000019080)=0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, 0x0, 0x200048c4) 4.764564103s ago: executing program 4 (id=7026): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x2, 0x2, 0x0, 0x3, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000280)=0x420a, 0x4) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @private0, 0x4}, 0x73, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x6a, 0x12141, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="ff0300000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f58a5e6e8a2300"/132], 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 2.852730195s ago: executing program 5 (id=7028): mount$9p_fd(0x0, 0x0, 0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX]) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000403512100040e10102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050403020602030000000700100002000d240902"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 2.664366492s ago: executing program 3 (id=7029): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchown(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.357930928s ago: executing program 4 (id=7030): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000840)=""/4089, 0xff9) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x4}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x6, 0x1) ftruncate(0xffffffffffffffff, 0x2007ffb) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sync() 2.165405303s ago: executing program 3 (id=7031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c0c6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x16, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r7, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x0, 0x8}, {0x28, 0x1, 0xf7, 0xfffff038}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) sendto(r8, &(0x7f0000000380)="72e1fb4d9326d24774d1", 0xa, 0x80, 0x0, 0x0) 2.024632668s ago: executing program 1 (id=7032): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYRES8=r0], 0x38}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0xfffff800) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x152) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r5, 0xffffffffffffffff) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.022167008s ago: executing program 0 (id=7033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.390211316s ago: executing program 5 (id=7034): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x0) write$P9_RWSTAT(r1, &(0x7f0000001040)={0x7, 0x7f, 0x1}, 0x7) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 1.335945256s ago: executing program 0 (id=7035): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f00000000c0)=0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x2, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000580)={r3, 0x1, 0x6, @local}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYBLOB='#'], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000380)=[{0x0}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x2, &(0x7f0000000340)=""/45, 0x2d}, 0x8}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000600)=[{0x0}], 0x1, &(0x7f0000000640)=""/130, 0x82}, 0xe9a8}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f00000008c0)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/226, 0xe2}], 0x2}, 0x6}], 0x6, 0x0, 0x0) 1.291932149s ago: executing program 5 (id=7036): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x40040) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) 1.13044474s ago: executing program 3 (id=7037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 1.066573439s ago: executing program 1 (id=7038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 997.120667ms ago: executing program 5 (id=7039): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 996.283496ms ago: executing program 1 (id=7040): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 942.147467ms ago: executing program 5 (id=7041): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000840)=""/4089, 0xff9) r2 = socket$netlink(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x4}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x6, 0x1) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sync() 941.693997ms ago: executing program 1 (id=7042): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x0, 0x2, 0x9, 0x100, @void}, "9bc7b8613cf8c0a0c5d833556725806d6f074aaea3341f8341ccd255eb73acf46f7fae910b678e0fed2dcc8a0730754dff7f73f5b7a27d1e59c3a014d9100e533d"}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0) 180.585322ms ago: executing program 3 (id=7043): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582ee1f00"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 82.377725ms ago: executing program 4 (id=7044): perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xc5bf) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x38, 0x0, &(0x7f0000000500)="2077e7dedda60fb505e6394d02d95ae1583b0f97782b80bb0e15fd51433a497e67474911a70c77e53c2086485135099591ce5d5bd6fc4e68", &(0x7f0000000000), 0x0, 0x0, 0xfffffffd}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 413.5µs ago: executing program 1 (id=7045): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=7046): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): [ 101.735081][T11294] ªªªªª6: renamed from wg2 (while UP) [ 101.742900][T11115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.886411][T11115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.935120][T11115] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.948856][T11342] netlink: 'syz.2.3371': attribute type 10 has an invalid length. [ 101.953841][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.963758][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.990428][T11342] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 102.026133][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.033208][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.112547][T11115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.236732][T11377] team0 (unregistering): Port device team_slave_0 removed [ 102.256277][T11377] team0 (unregistering): Port device team_slave_1 removed [ 102.287665][T11115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.300016][ T28] audit: type=1400 audit(1773067962.241:414): avc: denied { read } for pid=11385 comm="syz.0.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.457369][T11115] veth0_vlan: entered promiscuous mode [ 102.468423][T11115] veth1_vlan: entered promiscuous mode [ 102.488022][T11115] veth0_macvtap: entered promiscuous mode [ 102.496385][T11115] veth1_macvtap: entered promiscuous mode [ 102.509109][T11115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.522423][T11115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.535540][T10067] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.895643][T10067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.918750][T10067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.927703][T10067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.225434][T11460] __nla_validate_parse: 17 callbacks suppressed [ 103.225451][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3418'. [ 103.331083][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 103.418302][T11478] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3427'. [ 103.839331][T11565] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.3450'. [ 103.851567][T11565] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.3450'. [ 104.059625][T11613] team0 (unregistering): Port device team_slave_0 removed [ 104.075006][T11613] team0 (unregistering): Port device team_slave_1 removed [ 104.281131][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'. [ 104.390902][T11693] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3475'. [ 104.522466][T11718] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.3486'. [ 104.532780][T11718] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.3486'. [ 104.710586][T11744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3498'. [ 104.724116][ T28] audit: type=1400 audit(1773067964.671:415): avc: denied { remount } for pid=11743 comm="syz.1.3498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.017849][T11788] validate_nla: 14 callbacks suppressed [ 105.017892][T11788] netlink: 'syz.1.3519': attribute type 29 has an invalid length. [ 105.032385][T11788] netlink: 'syz.1.3519': attribute type 29 has an invalid length. [ 105.040684][T11788] netlink: 'syz.1.3519': attribute type 29 has an invalid length. [ 105.049036][T11788] netlink: 'syz.1.3519': attribute type 29 has an invalid length. [ 105.097855][T11793] netlink: 'syz.1.3521': attribute type 29 has an invalid length. [ 105.109156][T11793] netlink: 'syz.1.3521': attribute type 29 has an invalid length. [ 105.293818][ T28] audit: type=1400 audit(1773067965.241:416): avc: denied { relabelfrom } for pid=11817 comm="syz.0.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.318011][T11822] netlink: 'syz.2.3535': attribute type 1 has an invalid length. [ 105.318128][ T28] audit: type=1400 audit(1773067965.241:417): avc: denied { relabelto } for pid=11817 comm="syz.0.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.326167][T11822] netlink: 'syz.2.3535': attribute type 2 has an invalid length. [ 105.422891][T11831] netlink: 'syz.0.3539': attribute type 39 has an invalid length. [ 105.488585][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3539'. [ 105.659976][T11877] netlink: 'syz.0.3560': attribute type 10 has an invalid length. [ 105.676788][T11877] team0 (unregistering): Port device team_slave_0 removed [ 105.693624][T11877] team0 (unregistering): Port device team_slave_1 removed [ 106.210681][T11924] macvlan2: entered promiscuous mode [ 106.216342][T11924] macvlan2: entered allmulticast mode [ 106.222743][T11924] bond1: entered promiscuous mode [ 106.227972][T11924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.236204][T11924] bond1: left promiscuous mode [ 108.438174][T12141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.461297][T12141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.583193][T12168] __nla_validate_parse: 1 callbacks suppressed [ 108.583210][T12168] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3696'. [ 108.670278][T12186] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3705'. [ 108.679798][T12186] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3705'. [ 108.766630][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.784303][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.826108][T12211] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3717'. [ 108.835755][T12211] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3717'. [ 108.897430][T12217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.905144][T12217] batadv_slave_0: entered promiscuous mode [ 108.967612][ T28] audit: type=1400 audit(1773067968.891:418): avc: denied { bind } for pid=12224 comm="syz.3.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.988189][ T28] audit: type=1400 audit(1773067968.891:419): avc: denied { create } for pid=12224 comm="syz.3.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.036597][T12231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.045356][T12231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.244661][ T28] audit: type=1400 audit(1773067969.781:420): avc: denied { create } for pid=12253 comm="syz.4.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.264190][ T28] audit: type=1400 audit(1773067969.781:421): avc: denied { bind } for pid=12253 comm="syz.4.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.287950][ T28] audit: type=1400 audit(1773067969.781:422): avc: denied { write } for pid=12253 comm="syz.4.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.331851][ T28] audit: type=1400 audit(1773067969.881:423): avc: denied { read } for pid=12288 comm="syz.3.3741" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.366562][ T28] audit: type=1400 audit(1773067969.881:424): avc: denied { open } for pid=12288 comm="syz.3.3741" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.419573][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'. [ 110.561603][T12347] validate_nla: 13 callbacks suppressed [ 110.561619][T12347] netlink: 'syz.4.3750': attribute type 10 has an invalid length. [ 110.749331][T12381] netlink: 'syz.4.3765': attribute type 10 has an invalid length. [ 110.998337][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3777'. [ 111.329201][T12417] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3780'. [ 111.521287][T12425] netlink: 'syz.0.3784': attribute type 1 has an invalid length. [ 111.550008][T12425] netlink: 'syz.0.3784': attribute type 2 has an invalid length. [ 111.761979][T12449] netlink: 'syz.3.3795': attribute type 10 has an invalid length. [ 111.815777][T12463] netlink: 'syz.3.3802': attribute type 1 has an invalid length. [ 111.823972][T12463] netlink: 'syz.3.3802': attribute type 2 has an invalid length. [ 112.440295][T12492] netlink: 'syz.0.3815': attribute type 1 has an invalid length. [ 112.448117][T12492] netlink: 'syz.0.3815': attribute type 2 has an invalid length. [ 112.670238][T12516] netlink: 'syz.0.3827': attribute type 10 has an invalid length. [ 112.947868][ T28] audit: type=1400 audit(1773067972.801:425): avc: denied { bind } for pid=12507 comm="syz.1.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.970777][ T28] audit: type=1400 audit(1773067972.801:426): avc: denied { write } for pid=12507 comm="syz.1.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.109408][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acc7200: rx timeout, send abort [ 114.118128][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811acc7200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.271788][ T28] audit: type=1400 audit(1773067974.191:427): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 114.526349][ T28] audit: type=1400 audit(1773067974.191:428): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.555352][ T28] audit: type=1400 audit(1773067974.191:429): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.577660][ T28] audit: type=1400 audit(1773067974.191:430): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.599021][ T28] audit: type=1400 audit(1773067974.191:431): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.630259][ T28] audit: type=1400 audit(1773067974.191:432): avc: denied { append open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.654832][ T28] audit: type=1400 audit(1773067974.191:433): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.678837][ T28] audit: type=1400 audit(1773067974.571:434): avc: denied { read } for pid=12578 comm="syz.4.3851" name="usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.704324][ T28] audit: type=1400 audit(1773067974.571:435): avc: denied { open } for pid=12578 comm="syz.4.3851" path="/dev/usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.022579][ T28] audit: type=1326 audit(1773067974.961:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.2.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4e47c799 code=0x7ffc0000 [ 115.059461][T12618] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3868'. [ 115.074728][T12618] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3868'. [ 116.063276][T12658] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3884'. [ 116.076429][T12658] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3884'. [ 116.375825][T12693] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3899'. [ 116.386424][T12693] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3899'. [ 117.236091][T12721] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3911'. [ 117.247924][T12721] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3911'. [ 117.304023][T12727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3914'. [ 117.950055][T12758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3927'. [ 118.481801][T12858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.499309][T12858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.416024][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 121.416037][ T28] audit: type=1400 audit(1773067981.361:455): avc: denied { bind } for pid=12974 comm="syz.2.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.563891][ T28] audit: type=1400 audit(1773067981.511:456): avc: denied { ioctl } for pid=12980 comm="syz.4.4026" path="socket:[34465]" dev="sockfs" ino=34465 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.297487][T13022] validate_nla: 6 callbacks suppressed [ 122.297558][T13022] netlink: 'syz.2.4045': attribute type 1 has an invalid length. [ 122.331207][ T28] audit: type=1400 audit(1773067982.281:457): avc: denied { create } for pid=13021 comm="syz.2.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 122.337677][T13022] bond1: (slave gretap1): making interface the new active one [ 122.357808][ T28] audit: type=1400 audit(1773067982.281:458): avc: denied { write } for pid=13021 comm="syz.2.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 122.364226][T13022] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 122.393228][T13030] macvlan2: entered promiscuous mode [ 122.398593][T13030] macvlan2: entered allmulticast mode [ 122.404898][T13030] bond1: entered promiscuous mode [ 122.410027][T13030] gretap1: entered promiscuous mode [ 122.415640][T13030] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.423828][T13030] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 122.458684][T13030] bond1: left promiscuous mode [ 122.466153][T13030] gretap1: left promiscuous mode [ 123.957053][T13159] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 124.070808][T13166] __nla_validate_parse: 9 callbacks suppressed [ 124.090008][T13166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4066'. [ 124.252125][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'. [ 124.315677][ T28] audit: type=1400 audit(1773067984.261:459): avc: denied { append } for pid=13185 comm="syz.1.4076" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.376295][ T28] audit: type=1400 audit(1773067984.321:460): avc: denied { setopt } for pid=13192 comm="syz.4.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.459959][T13202] ªªªªª6: renamed from wg2 (while UP) [ 124.570327][T13214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4089'. [ 125.247895][T13227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.401352][T13227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.460368][ T28] audit: type=1400 audit(1773067985.401:461): avc: denied { read } for pid=13238 comm="syz.3.4100" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.484060][T13237] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 125.492941][ T28] audit: type=1400 audit(1773067985.401:462): avc: denied { open } for pid=13238 comm="syz.3.4100" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.546521][ T28] audit: type=1400 audit(1773067985.401:463): avc: denied { ioctl } for pid=13238 comm="syz.3.4100" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.761336][T13288] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.4122'. [ 125.776195][T13288] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.4122'. [ 126.086260][ T28] audit: type=1400 audit(1773067986.031:464): avc: denied { bind } for pid=13324 comm="syz.2.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.313202][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4148'. [ 127.547866][T13407] netlink: 'syz.0.4174': attribute type 1 has an invalid length. [ 127.558189][T13407] netlink: 'syz.0.4174': attribute type 2 has an invalid length. [ 129.506971][T13513] netlink: 'syz.3.4195': attribute type 1 has an invalid length. [ 129.517766][T13513] netlink: 'syz.3.4195': attribute type 2 has an invalid length. [ 129.551177][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 129.551192][ T28] audit: type=1400 audit(1773067989.491:466): avc: denied { read } for pid=13517 comm="syz.3.4198" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 129.582981][ T28] audit: type=1400 audit(1773067989.491:467): avc: denied { open } for pid=13517 comm="syz.3.4198" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 129.625175][ T28] audit: type=1400 audit(1773067989.531:468): avc: denied { ioctl } for pid=13517 comm="syz.3.4198" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 129.878192][T13545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4201'. [ 129.913397][T13543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.268798][T13552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4211'. [ 131.640505][T13648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.650092][T13648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.072333][T13667] netlink: 'syz.1.4263': attribute type 1 has an invalid length. [ 132.080098][T13667] netlink: 'syz.1.4263': attribute type 4 has an invalid length. [ 132.088125][T13667] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4263'. [ 132.097859][T13667] netlink: 'syz.1.4263': attribute type 1 has an invalid length. [ 132.105857][T13667] netlink: 'syz.1.4263': attribute type 4 has an invalid length. [ 132.113717][T13667] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4263'. [ 132.285654][T13692] netlink: 'syz.1.4275': attribute type 1 has an invalid length. [ 132.303330][T13692] netlink: 'syz.1.4275': attribute type 4 has an invalid length. [ 132.311382][T13692] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4275'. [ 132.321094][T13692] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4275'. [ 132.522450][ T28] audit: type=1400 audit(1773067992.461:469): avc: denied { write } for pid=13723 comm="syz.2.4288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 133.331685][ T28] audit: type=1400 audit(1773067993.261:470): avc: denied { setopt } for pid=13740 comm="syz.3.4293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.353330][ T28] audit: type=1400 audit(1773067993.261:471): avc: denied { map } for pid=13740 comm="syz.3.4293" path="socket:[37550]" dev="sockfs" ino=37550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.750315][ T28] audit: type=1400 audit(1773067993.261:472): avc: denied { read } for pid=13740 comm="syz.3.4293" path="socket:[37550]" dev="sockfs" ino=37550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.218190][T13805] validate_nla: 2 callbacks suppressed [ 135.218204][T13805] netlink: 'syz.2.4319': attribute type 29 has an invalid length. [ 135.289569][T13805] netlink: 'syz.2.4319': attribute type 29 has an invalid length. [ 135.477083][T13838] netlink: 'syz.2.4332': attribute type 1 has an invalid length. [ 135.515695][T13838] netlink: 'syz.2.4332': attribute type 4 has an invalid length. [ 135.539661][T13841] netlink: 'syz.2.4332': attribute type 1 has an invalid length. [ 135.551636][T13838] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4332'. [ 135.573000][T13841] netlink: 'syz.2.4332': attribute type 4 has an invalid length. [ 135.595620][T13841] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4332'. [ 135.904957][T13871] pimreg: entered allmulticast mode [ 135.924458][ T28] audit: type=1400 audit(1773067995.871:473): avc: denied { create } for pid=13878 comm="syz.1.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.925227][T13877] tipc: Started in network mode [ 135.954736][T13877] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 135.966180][ T28] audit: type=1400 audit(1773067995.891:474): avc: denied { write } for pid=13878 comm="syz.1.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.967420][T13877] tipc: Enabling of bearer rejected, failed to enable media [ 136.012203][ T28] audit: type=1400 audit(1773067995.961:475): avc: denied { firmware_load } for pid=13876 comm="syz.4.4352" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 136.480932][ T28] audit: type=1400 audit(1773067996.401:476): avc: denied { ioctl } for pid=13906 comm="syz.4.4363" path="socket:[38476]" dev="sockfs" ino=38476 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.873847][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4368'. [ 137.072110][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4381'. [ 137.424811][T13979] netlink: 'syz.4.4394': attribute type 1 has an invalid length. [ 137.706004][T13996] netlink: 'syz.1.4401': attribute type 7 has an invalid length. [ 138.262913][T14035] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4416'. [ 139.111166][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4431'. [ 139.323217][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4440'. [ 139.760863][ T28] audit: type=1400 audit(1773067999.701:477): avc: denied { bind } for pid=14195 comm="syz.3.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.174891][T14212] netlink: 'syz.1.4455': attribute type 1 has an invalid length. [ 140.182863][T14212] netlink: 'syz.1.4455': attribute type 4 has an invalid length. [ 140.190675][T14212] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4455'. [ 140.202650][T14212] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4455'. [ 140.745069][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4471'. [ 140.783447][T14257] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4474'. [ 140.792794][T14257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4474'. [ 140.920204][T14274] validate_nla: 2 callbacks suppressed [ 140.920216][T14274] netlink: 'syz.4.4482': attribute type 5 has an invalid length. [ 141.109995][T14018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.480465][T14296] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 141.841253][T14322] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 142.099328][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4525'. [ 142.195607][ T28] audit: type=1400 audit(1773068002.141:478): avc: denied { bind } for pid=14376 comm="syz.1.4530" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.222387][T14375] xfrm0 speed is unknown, defaulting to 1000 [ 142.229348][ T28] audit: type=1400 audit(1773068002.141:479): avc: denied { name_bind } for pid=14376 comm="syz.1.4530" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 142.254292][T14381] netlink: 41 bytes leftover after parsing attributes in process `syz.0.4529'. [ 142.265459][T14381] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4529'. [ 142.275237][ T28] audit: type=1400 audit(1773068002.141:480): avc: denied { node_bind } for pid=14376 comm="syz.1.4530" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 142.412097][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 142.746141][T14455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14455 comm=syz.4.4565 [ 142.766509][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4565'. [ 143.504329][T14491] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 143.680682][ T28] audit: type=1400 audit(1773068003.621:481): avc: denied { listen } for pid=14524 comm="syz.2.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.706232][ T28] audit: type=1400 audit(1773068003.621:482): avc: denied { getopt } for pid=14524 comm="syz.2.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.133051][T14608] No such timeout policy "syz1" [ 144.357523][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b6c1200: rx timeout, send abort [ 144.365890][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b6c1200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.243593][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4659'. [ 145.456294][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4673'. [ 145.706548][T14729] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 145.817082][T14749] __nla_validate_parse: 1 callbacks suppressed [ 145.817100][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'. [ 146.108627][ C1] vcan0: j1939_tp_rxtimer: 0xffff888128ffea00: rx timeout, send abort [ 146.116868][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888128ffea00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.351776][T14823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14823 comm=syz.4.4732 [ 146.381967][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4732'. [ 146.733329][ T28] audit: type=1400 audit(1773068006.681:483): avc: denied { setopt } for pid=14845 comm="syz.2.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.752843][ T28] audit: type=1400 audit(1773068006.681:484): avc: denied { connect } for pid=14845 comm="syz.2.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.794474][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4743'. [ 147.408709][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4758'. [ 147.436689][ T28] audit: type=1400 audit(1773068007.381:485): avc: denied { bind } for pid=14887 comm="syz.1.4760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.843393][ T28] audit: type=1400 audit(1773068007.781:486): avc: denied { bind } for pid=14961 comm="syz.0.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.908898][T14980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4801'. [ 147.955727][T14990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4803'. [ 148.110789][T15014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4815'. [ 148.330428][T15066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15066 comm=syz.0.4836 [ 148.360756][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4836'. [ 148.495904][T15105] netlink: 'syz.0.4852': attribute type 1 has an invalid length. [ 148.503828][T15105] netlink: 'syz.0.4852': attribute type 4 has an invalid length. [ 148.511871][T15105] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4852'. [ 148.546965][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4856'. [ 148.604097][T15117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15117 comm=syz.0.4858 [ 148.664524][T15126] x_tables: duplicate underflow at hook 3 [ 149.298445][T15140] netlink: 'syz.0.4867': attribute type 1 has an invalid length. [ 149.306385][T15140] netlink: 'syz.0.4867': attribute type 4 has an invalid length. [ 149.404301][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810554c000: rx timeout, send abort [ 149.421203][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810554c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.557806][T15152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.565481][T15152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.581429][T15152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.590622][T15152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.779407][ T28] audit: type=1400 audit(1773068009.721:487): avc: denied { connect } for pid=15182 comm="syz.3.4885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.931974][T15205] netlink: 'syz.0.4896': attribute type 1 has an invalid length. [ 149.939760][T15205] netlink: 'syz.0.4896': attribute type 4 has an invalid length. [ 149.948159][T15205] netlink: 'syz.0.4896': attribute type 1 has an invalid length. [ 149.956234][T15205] netlink: 'syz.0.4896': attribute type 4 has an invalid length. [ 150.063743][ T28] audit: type=1400 audit(1773068010.011:488): avc: denied { map } for pid=15219 comm="syz.3.4903" path="socket:[41589]" dev="sockfs" ino=41589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 150.226135][ T28] audit: type=1400 audit(1773068010.171:489): avc: denied { setopt } for pid=15237 comm="syz.3.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.311679][T15248] n: the hash_elasticity option has been deprecated and is always 16 [ 150.319784][T15248] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 150.331796][T15248] n: the hash_elasticity option has been deprecated and is always 16 [ 150.339871][T15248] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 150.548200][T15282] tipc: Enabling of bearer rejected, failed to enable media [ 150.601128][T15288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.610468][T15288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.644412][T15288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.652437][T15288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.169204][T15348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.177399][T15348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.188166][T15348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.197645][T15348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.215600][T15354] netlink: 'syz.0.4966': attribute type 9 has an invalid length. [ 151.274784][T15364] __nla_validate_parse: 10 callbacks suppressed [ 151.274798][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4971'. [ 151.358929][ T28] audit: type=1400 audit(1773068011.301:490): avc: denied { setopt } for pid=15377 comm="syz.0.4978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 151.464855][T15396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4987'. [ 151.555787][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4997'. [ 151.572599][T15417] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 151.591985][T15417] bond1 (unregistering): Released all slaves [ 151.873725][T15452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5013'. [ 152.122934][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5020'. [ 152.171778][T15479] netlink: 'syz.3.5024': attribute type 29 has an invalid length. [ 152.227085][T15485] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5027'. [ 152.353589][ T28] audit: type=1400 audit(1773068012.301:491): avc: denied { read } for pid=15510 comm="syz.3.5041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.399903][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5044'. [ 152.408941][ T28] audit: type=1400 audit(1773068012.341:492): avc: denied { getopt } for pid=15520 comm="syz.0.5045" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.639958][T15557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5061'. [ 152.766466][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5074'. [ 152.827314][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5075'. [ 153.795597][T15708] validate_nla: 5 callbacks suppressed [ 153.795654][T15708] netlink: 'syz.4.5132': attribute type 29 has an invalid length. [ 153.809825][T15708] netlink: 'syz.4.5132': attribute type 29 has an invalid length. [ 154.026879][T15736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.034940][T15736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.057335][T15736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.064991][T15736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.421697][T15759] netlink: 'syz.4.5154': attribute type 29 has an invalid length. [ 154.430202][T15759] netlink: 'syz.4.5154': attribute type 29 has an invalid length. [ 155.166953][T15901] netlink: 'syz.0.5220': attribute type 29 has an invalid length. [ 155.177105][T15901] netlink: 'syz.0.5220': attribute type 29 has an invalid length. [ 155.355122][T15934] xfrm0 speed is unknown, defaulting to 1000 [ 155.462308][T15952] veth1_to_batadv: entered allmulticast mode [ 155.807750][T15975] bridge0: port 3(gretap0) entered blocking state [ 155.825340][T15975] bridge0: port 3(gretap0) entered disabled state [ 155.835667][T15975] gretap0: entered allmulticast mode [ 155.849686][T15975] gretap0: entered promiscuous mode [ 155.860896][T15975] bridge0: port 3(gretap0) entered blocking state [ 155.867688][T15975] bridge0: port 3(gretap0) entered forwarding state [ 156.046743][T16002] netlink: 'syz.3.5267': attribute type 29 has an invalid length. [ 156.065518][T16002] netlink: 'syz.3.5267': attribute type 29 has an invalid length. [ 156.229817][T16031] xfrm0 speed is unknown, defaulting to 1000 [ 156.506292][T16059] xfrm0 speed is unknown, defaulting to 1000 [ 156.514381][T16065] __nla_validate_parse: 12 callbacks suppressed [ 156.514397][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5295'. [ 156.531935][T16063] xfrm0 speed is unknown, defaulting to 1000 [ 156.917555][T16099] netlink: 'syz.1.5308': attribute type 29 has an invalid length. [ 156.926121][T16099] netlink: 'syz.1.5308': attribute type 29 has an invalid length. [ 157.899887][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5344'. [ 157.946594][T16190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5348'. [ 158.059823][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5356'. [ 158.284923][T16265] veth0_vlan: entered allmulticast mode [ 158.412005][T16277] ªªªªªª™™: renamed from vlan0 [ 158.470102][T16262] xfrm0 speed is unknown, defaulting to 1000 [ 158.501424][T16290] xfrm0 speed is unknown, defaulting to 1000 [ 158.518947][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5372'. [ 158.606987][T16312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5373'. [ 158.789047][T16341] xfrm0 speed is unknown, defaulting to 1000 [ 158.972200][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5383'. [ 159.076535][T16383] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5387'. [ 159.122080][T16394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.131286][T16394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.138684][T16394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.458620][T16429] validate_nla: 4 callbacks suppressed [ 159.458646][T16429] netlink: 'syz.4.5409': attribute type 29 has an invalid length. [ 159.478990][T16429] netlink: 'syz.4.5409': attribute type 29 has an invalid length. [ 159.606787][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5420'. [ 159.838667][T16500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5441'. [ 160.093865][T16539] nr0: port 1(hsr0) entered blocking state [ 160.100289][T16539] nr0: port 1(hsr0) entered disabled state [ 160.108502][T16539] hsr0: entered allmulticast mode [ 160.114383][T16539] hsr_slave_0: entered allmulticast mode [ 160.120573][T16539] hsr_slave_1: entered allmulticast mode [ 160.135468][T16539] hsr0: entered promiscuous mode [ 160.229866][T16527] xfrm0 speed is unknown, defaulting to 1000 [ 160.325444][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104e0ee00: rx timeout, send abort [ 160.334299][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888104e0ee00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.722526][T16604] bridge3: entered promiscuous mode [ 160.732010][T16604] macsec1: entered promiscuous mode [ 160.956664][T16639] xfrm0 speed is unknown, defaulting to 1000 [ 160.990616][T16628] xfrm0 speed is unknown, defaulting to 1000 [ 161.056808][T16648] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.064040][T16648] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.090964][T16648] bridge0: entered allmulticast mode [ 161.146527][T16652] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.153716][T16652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.161073][T16652] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.168173][T16652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.175590][T16652] bridge0: entered promiscuous mode [ 161.300789][T16650] xfrm0 speed is unknown, defaulting to 1000 [ 161.886132][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a93a800: rx timeout, send abort [ 161.894731][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812a93a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.002715][T16688] netlink: 'syz.3.5524': attribute type 29 has an invalid length. [ 162.026408][T16688] netlink: 'syz.3.5524': attribute type 29 has an invalid length. [ 162.243050][T16674] xfrm0 speed is unknown, defaulting to 1000 [ 162.385665][T16717] netlink: 'syz.4.5537': attribute type 29 has an invalid length. [ 162.409190][T16717] netlink: 'syz.4.5537': attribute type 29 has an invalid length. [ 162.488035][T16725] __nla_validate_parse: 4 callbacks suppressed [ 162.488052][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5541'. [ 162.578017][T16725] team0: Port device team_slave_0 removed [ 162.724121][T16746] netlink: 'syz.2.5551': attribute type 29 has an invalid length. [ 162.754565][T16746] netlink: 'syz.2.5551': attribute type 29 has an invalid length. [ 163.460267][T16792] xfrm0 speed is unknown, defaulting to 1000 [ 163.652832][T16830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5590'. [ 163.792439][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5591'. [ 163.866178][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5601'. [ 163.887490][T16856] bridge3: entered promiscuous mode [ 163.893197][T16856] macsec1: entered promiscuous mode [ 163.913118][T16866] netlink: 'syz.0.5606': attribute type 29 has an invalid length. [ 163.927256][T16866] netlink: 'syz.0.5606': attribute type 29 has an invalid length. [ 163.940356][T16871] veth1_macvtap: left promiscuous mode [ 163.950267][T16871] macsec0: entered allmulticast mode [ 164.138611][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5625'. [ 164.148246][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5625'. [ 164.306862][T16938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5639'. [ 164.328604][T16938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5639'. [ 164.705826][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.713316][T16987] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.722278][T16987] bridge0: entered allmulticast mode [ 164.752406][T16987] bridge_slave_1: left allmulticast mode [ 164.765096][T16987] bridge_slave_1: left promiscuous mode [ 164.772175][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.794694][T16987] bridge_slave_0: left allmulticast mode [ 164.804960][T16987] bridge_slave_0: left promiscuous mode [ 164.817727][T16987] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.039741][T17041] validate_nla: 4 callbacks suppressed [ 165.039756][T17041] netlink: 'syz.2.5665': attribute type 29 has an invalid length. [ 165.068588][T17041] netlink: 'syz.2.5665': attribute type 29 has an invalid length. [ 165.508258][T17084] xfrm0 speed is unknown, defaulting to 1000 [ 166.231843][T17062] xfrm0 speed is unknown, defaulting to 1000 [ 166.623552][T17155] xfrm0 speed is unknown, defaulting to 1000 [ 166.757014][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5708'. [ 166.902899][T17180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17180 comm=syz.4.5710 [ 167.083977][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5722'. [ 167.180991][T17214] xfrm0 speed is unknown, defaulting to 1000 [ 167.288426][T17220] nr0: port 1(hsr0) entered blocking state [ 167.296070][T17220] nr0: port 1(hsr0) entered disabled state [ 167.304321][T17220] hsr0: entered allmulticast mode [ 167.312875][T17220] hsr_slave_0: entered allmulticast mode [ 167.319276][T17220] hsr_slave_1: entered allmulticast mode [ 167.335333][T17220] hsr0: entered promiscuous mode [ 167.658211][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5746'. [ 167.694201][T17255] xfrm0 speed is unknown, defaulting to 1000 [ 167.762136][T17255] chnl_net:caif_netlink_parms(): no params data found [ 167.807822][T10082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.847745][T17255] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.860121][T17255] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.867656][T17255] bridge_slave_0: entered allmulticast mode [ 167.875191][T17255] bridge_slave_0: entered promiscuous mode [ 167.882643][T17255] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.890018][T17255] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.901934][T17255] bridge_slave_1: entered allmulticast mode [ 167.908544][T17255] bridge_slave_1: entered promiscuous mode [ 167.924022][T10082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.945456][T17255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.956119][T17255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.979606][T10082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.003345][T17255] team0: Port device team_slave_0 added [ 168.010640][T17255] team0: Port device team_slave_1 added [ 168.029735][T17255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.037463][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.064017][T17255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.078128][T10082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.090291][T17255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.097523][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.124068][T17255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.162346][T17305] nr0: port 1(hsr0) entered blocking state [ 168.168640][T17305] nr0: port 1(hsr0) entered disabled state [ 168.174706][T17305] hsr0: entered allmulticast mode [ 168.179791][T17305] hsr_slave_0: entered allmulticast mode [ 168.185562][T17305] hsr_slave_1: entered allmulticast mode [ 168.192894][T17305] hsr0: entered promiscuous mode [ 168.215558][T17255] hsr_slave_0: entered promiscuous mode [ 168.226258][T17255] hsr_slave_1: entered promiscuous mode [ 168.232429][T17255] debugfs: 'hsr0' already exists in 'hsr' [ 168.245781][T17255] Cannot create hsr debugfs directory [ 168.363730][T10082] hsr0: left allmulticast mode [ 168.372098][T10082] hsr_slave_0: left allmulticast mode [ 168.377494][T10082] hsr_slave_1: left allmulticast mode [ 168.383337][T10082] hsr0: left promiscuous mode [ 168.388211][T10082] nr0: port 1(hsr0) entered disabled state [ 168.643985][T10082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.654456][T10082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.664385][T10082] bond0 (unregistering): Released all slaves [ 168.694390][T17329] ÿÿÿÿÿÿ: renamed from vlan1 [ 168.756254][T10082] hsr_slave_0: left promiscuous mode [ 168.771395][T10082] hsr_slave_1: left promiscuous mode [ 168.783944][T10082] veth1_macvtap: left promiscuous mode [ 168.789566][T10082] veth0_macvtap: left promiscuous mode [ 168.797231][T10082] veth1_vlan: left promiscuous mode [ 168.802714][T10082] veth0_vlan: left promiscuous mode [ 169.035017][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5783'. [ 169.054366][T17374] bridge3: entered promiscuous mode [ 169.059961][T17374] macsec1: entered promiscuous mode [ 169.356355][T17255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.385123][T17255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.398169][T17255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.410868][T17255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.466809][T17255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.480951][T17255] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.494405][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.501526][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.513810][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.520917][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.593706][T17255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.654884][T17255] veth0_vlan: entered promiscuous mode [ 169.662876][T17255] veth1_vlan: entered promiscuous mode [ 169.678343][T17255] veth0_macvtap: entered promiscuous mode [ 169.686151][T17255] veth1_macvtap: entered promiscuous mode [ 169.696828][T17255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.708670][T17255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.722037][T10080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.733173][T10080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.743130][T10080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.752085][T10080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.805335][ T28] audit: type=1400 audit(1773068029.751:493): avc: denied { mounton } for pid=17255 comm="syz-executor" path="/root/syzkaller.nggc4J/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 169.839100][T17461] netlink: 'syz.2.5796': attribute type 29 has an invalid length. [ 169.848163][T17461] netlink: 'syz.2.5796': attribute type 29 has an invalid length. [ 169.898682][T17467] syzkaller0: entered allmulticast mode [ 170.072530][T17479] xfrm0 speed is unknown, defaulting to 1000 [ 170.491687][T17502] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5814'. [ 170.537923][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5818'. [ 170.556475][T17513] netlink: 'syz.3.5819': attribute type 10 has an invalid length. [ 170.607691][T17513] team0: Port device netdevsim0 added [ 170.841882][T17543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5832'. [ 170.938802][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5836'. [ 170.983218][ T28] audit: type=1400 audit(1773068030.921:494): avc: denied { read } for pid=17547 comm="syz.3.5835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.794874][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5850'. [ 171.850728][T17586] : port 1(geneve0) entered blocking state [ 171.857229][T17586] : port 1(geneve0) entered disabled state [ 171.865518][T17586] geneve0: entered allmulticast mode [ 171.878777][T17586] geneve0: entered promiscuous mode [ 171.946380][T17596] netlink: 'syz.3.5856': attribute type 29 has an invalid length. [ 171.961838][T17596] netlink: 'syz.3.5856': attribute type 29 has an invalid length. [ 172.076462][T17606] nr0: port 1(hsr0) entered blocking state [ 172.083542][T17606] nr0: port 1(hsr0) entered disabled state [ 172.091484][T17606] hsr0: entered allmulticast mode [ 172.097182][T17606] hsr_slave_0: entered allmulticast mode [ 172.104031][T17606] hsr_slave_1: entered allmulticast mode [ 172.115195][T17606] hsr0: entered promiscuous mode [ 172.329987][T17623] netlink: 'syz.0.5869': attribute type 29 has an invalid length. [ 172.344794][T17623] netlink: 'syz.0.5869': attribute type 29 has an invalid length. [ 172.450999][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.666843][T17649] xfrm0 speed is unknown, defaulting to 1000 [ 172.722802][T17654] netlink: 'syz.2.5883': attribute type 29 has an invalid length. [ 172.757615][T17654] netlink: 'syz.2.5883': attribute type 29 has an invalid length. [ 173.126664][T17681] netlink: 'syz.4.5894': attribute type 29 has an invalid length. [ 173.141076][T17681] netlink: 'syz.4.5894': attribute type 29 has an invalid length. [ 173.205242][T17671] xfrm0 speed is unknown, defaulting to 1000 [ 173.238123][T10080] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.333546][T10080] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.374061][T17671] chnl_net:caif_netlink_parms(): no params data found [ 173.390399][T17714] netlink: 'syz.3.5906': attribute type 29 has an invalid length. [ 173.421410][T10080] bond0: (slave netdevsim1): Releasing backup interface [ 173.440545][T10080] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.488269][T17723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5910'. [ 173.514107][T10080] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.525727][T17705] xfrm0 speed is unknown, defaulting to 1000 [ 173.581871][T17721] nr0: port 1(hsr0) entered blocking state [ 173.588187][T17721] nr0: port 1(hsr0) entered disabled state [ 173.596006][T17721] hsr0: entered allmulticast mode [ 173.601396][T17721] hsr_slave_0: entered allmulticast mode [ 173.607607][T17721] hsr_slave_1: entered allmulticast mode [ 173.624941][T17721] hsr0: entered promiscuous mode [ 173.754131][T17671] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.771861][T17671] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.796189][T17671] bridge_slave_0: entered allmulticast mode [ 173.815264][ T28] audit: type=1400 audit(1773068033.761:495): avc: denied { write } for pid=17743 comm="syz.3.5917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.835890][T17671] bridge_slave_0: entered promiscuous mode [ 173.843487][T17671] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.852456][T17671] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.860152][T17671] bridge_slave_1: entered allmulticast mode [ 173.867929][T17671] bridge_slave_1: entered promiscuous mode [ 173.895500][T17671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.907658][T17671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.935971][T17671] team0: Port device team_slave_0 added [ 173.943914][T17671] team0: Port device team_slave_1 added [ 173.996213][T17671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.003721][T17671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.032096][T17671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.148446][T17671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.162072][T17671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.188423][T17671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.269874][T17671] hsr_slave_0: entered promiscuous mode [ 174.277691][T17671] hsr_slave_1: entered promiscuous mode [ 174.295276][T17671] debugfs: 'hsr0' already exists in 'hsr' [ 174.311054][T17671] Cannot create hsr debugfs directory [ 174.378114][T10080] bridge_slave_1: left allmulticast mode [ 174.389479][T10080] bridge_slave_1: left promiscuous mode [ 174.397128][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.415445][T10080] bridge_slave_0: left allmulticast mode [ 174.421230][T10080] bridge_slave_0: left promiscuous mode [ 174.432494][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.451295][T10080] hsr0: left allmulticast mode [ 174.460161][T10080] hsr_slave_0: left allmulticast mode [ 174.467023][T10080] hsr_slave_1: left allmulticast mode [ 174.472826][T10080] hsr0: left promiscuous mode [ 174.477777][T10080] nr0: port 1(hsr0) entered disabled state [ 174.484086][ T28] audit: type=1400 audit(1773068034.431:496): avc: denied { ioctl } for pid=17790 comm="syz.1.5931" path="socket:[49552]" dev="sockfs" ino=49552 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.563500][T10080] bond1 (unregistering): (slave gretap1): Releasing active interface [ 174.842565][T10080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.852839][T10080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.861759][T10080] bond0 (unregistering): Released all slaves [ 174.869399][T10080] bond1 (unregistering): Released all slaves [ 174.890003][T10080] hsr_slave_0: left promiscuous mode [ 174.895872][T10080] hsr_slave_1: left promiscuous mode [ 174.903033][T10080] veth0_macvtap: left promiscuous mode [ 174.908615][T10080] veth1_vlan: left promiscuous mode [ 174.913903][T10080] veth0_vlan: left promiscuous mode [ 174.954555][T10080] pimreg (unregistering): left allmulticast mode [ 175.408631][T17850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5948'. [ 175.432047][T17671] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.453665][T17671] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.477373][T17671] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.492310][T17671] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.501695][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab47800: rx timeout, send abort [ 175.509924][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ab47800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.682479][T17671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.717504][T17671] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.743076][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.750216][T10074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.774415][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.781671][T10074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.796030][T17900] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5960'. [ 175.925340][ T28] audit: type=1400 audit(1773068035.871:497): avc: denied { nlmsg_read } for pid=17906 comm="syz.0.5962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 175.949119][T17671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.972265][T17915] validate_nla: 7 callbacks suppressed [ 175.972287][T17915] netlink: 'syz.1.5964': attribute type 29 has an invalid length. [ 175.999666][T17915] netlink: 'syz.1.5964': attribute type 29 has an invalid length. [ 176.042255][T17885] xfrm0 speed is unknown, defaulting to 1000 [ 176.155684][T17671] veth0_vlan: entered promiscuous mode [ 176.198646][T17671] veth1_vlan: entered promiscuous mode [ 176.265146][T17671] veth0_macvtap: entered promiscuous mode [ 176.274263][T17671] veth1_macvtap: entered promiscuous mode [ 176.285965][T17671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.299521][T17671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.334247][ T125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.347218][ T125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.356098][ T125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.365221][ T125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.485835][T17955] nr0: port 1(hsr0) entered blocking state [ 176.493488][T17955] nr0: port 1(hsr0) entered disabled state [ 176.499493][T17955] hsr0: entered allmulticast mode [ 176.505157][T17955] hsr_slave_0: entered allmulticast mode [ 176.512545][T17955] hsr_slave_1: entered allmulticast mode [ 176.523428][T17955] hsr0: entered promiscuous mode [ 176.524680][T17960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5979'. [ 176.609575][T17956] xfrm0 speed is unknown, defaulting to 1000 [ 176.663158][T17956] chnl_net:caif_netlink_parms(): no params data found [ 176.702647][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.709927][T17956] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.717437][T17956] bridge_slave_0: entered allmulticast mode [ 176.724044][T17956] bridge_slave_0: entered promiscuous mode [ 176.733688][ T125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.745136][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.752346][T17956] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.759629][T17956] bridge_slave_1: entered allmulticast mode [ 176.766346][T17956] bridge_slave_1: entered promiscuous mode [ 176.793728][ T125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.806857][T17956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.818500][T17956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.837065][T17956] team0: Port device team_slave_0 added [ 176.843793][T17956] team0: Port device team_slave_1 added [ 176.862660][ T125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.875167][T17956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.882405][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.908876][T17956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.920417][T17956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.927692][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.961890][T17956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.983949][ T125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.021852][T17956] hsr_slave_0: entered promiscuous mode [ 177.027996][T17956] hsr_slave_1: entered promiscuous mode [ 177.039743][T17956] debugfs: 'hsr0' already exists in 'hsr' [ 177.054418][T17956] Cannot create hsr debugfs directory [ 177.135787][ T125] bridge_slave_1: left allmulticast mode [ 177.142505][ T125] bridge_slave_1: left promiscuous mode [ 177.148279][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.168629][ T125] bridge_slave_0: left allmulticast mode [ 177.175615][ T125] bridge_slave_0: left promiscuous mode [ 177.195707][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.221248][ T125] hsr0: left allmulticast mode [ 177.226095][ T125] hsr_slave_0: left allmulticast mode [ 177.240920][ T125] hsr_slave_1: left allmulticast mode [ 177.246491][ T125] hsr0: left promiscuous mode [ 177.253878][ T125] nr0: port 1(hsr0) entered disabled state [ 177.323537][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881189e4c00: rx timeout, send abort [ 177.340901][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881189e4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.652472][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.662921][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.693120][ T125] bond0 (unregistering): Released all slaves [ 177.708277][ T125] bond1 (unregistering): Released all slaves [ 177.758422][ T6080] xfrm0 speed is unknown, defaulting to 1000 [ 177.792624][ T6080] infiniband syz1: ib_query_port failed (-19) [ 177.811712][ T28] audit: type=1400 audit(1773068037.761:498): avc: denied { create } for pid=18114 comm="syz.2.6003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 177.840029][T18116] netlink: 'syz.2.6003': attribute type 39 has an invalid length. [ 177.999196][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6010'. [ 178.023420][ T125] hsr_slave_0: left promiscuous mode [ 178.039537][ T125] hsr_slave_1: left promiscuous mode [ 178.048205][ T125] veth1_macvtap: left promiscuous mode [ 178.054309][ T125] veth0_macvtap: left promiscuous mode [ 178.059867][ T125] veth1_vlan: left promiscuous mode [ 178.065715][ T125] veth0_vlan: left promiscuous mode [ 178.170419][ T125] team0 (unregistering): Port device team_slave_1 removed [ 178.302406][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6019'. [ 178.323883][T18164] team0: Port device team_slave_0 removed [ 178.598987][T17956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.609256][T17956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.635463][T17956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.658464][T17956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.684395][T18216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6028'. [ 178.761069][T17956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.789791][T17956] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.809917][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.817060][T10082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.855953][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.863128][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.874098][T18235] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6031'. [ 178.990403][T17956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.002752][T18251] netlink: 'syz.2.6037': attribute type 29 has an invalid length. [ 179.022553][T18251] netlink: 'syz.2.6037': attribute type 29 has an invalid length. [ 179.158285][T17956] veth0_vlan: entered promiscuous mode [ 179.180782][T17956] veth1_vlan: entered promiscuous mode [ 179.232396][T17956] veth0_macvtap: entered promiscuous mode [ 179.244847][T17956] veth1_macvtap: entered promiscuous mode [ 179.259821][T17956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.283345][T17956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.304554][T10087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.315327][T10087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.333851][T10087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.344228][T10087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.380872][ T28] audit: type=1400 audit(1773068039.321:499): avc: denied { mount } for pid=17956 comm="syz-executor" name="/" dev="gadgetfs" ino=48437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 179.416231][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6060'. [ 179.598157][ T28] audit: type=1400 audit(1773068039.541:500): avc: denied { write } for pid=18330 comm="syz.3.6069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.627598][T10082] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.729297][T10082] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.783670][T18318] chnl_net:caif_netlink_parms(): no params data found [ 179.814473][T18348] loop3: detected capacity change from 0 to 512 [ 179.826080][T10082] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.850374][T18348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.870173][T18348] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.881451][T18318] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.888873][ T28] audit: type=1400 audit(1773068039.811:501): avc: denied { mount } for pid=18347 comm="syz.3.6074" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 179.911910][T18318] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.919193][T18318] bridge_slave_0: entered allmulticast mode [ 179.926009][T18318] bridge_slave_0: entered promiscuous mode [ 179.963367][T10082] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.976257][T18318] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.993196][T18318] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.000998][T18318] bridge_slave_1: entered allmulticast mode [ 180.007992][T18318] bridge_slave_1: entered promiscuous mode [ 180.025429][T18361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.031502][T18318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.044810][T18318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.055025][T18361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.063404][T18359] random: crng reseeded on system resumption [ 180.064256][ T28] audit: type=1400 audit(1773068040.011:502): avc: denied { append } for pid=18347 comm="syz.3.6074" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.109533][ T28] audit: type=1400 audit(1773068040.011:503): avc: denied { open } for pid=18347 comm="syz.3.6074" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.134275][ T28] audit: type=1400 audit(1773068040.041:504): avc: denied { ioctl } for pid=18347 comm="syz.3.6074" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.235840][T18318] team0: Port device team_slave_0 added [ 180.268294][T18318] team0: Port device team_slave_1 added [ 180.331014][T18318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.353968][T18318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.382100][T18318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.439510][T18318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.476478][T18318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.503083][T18318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.579835][T18318] hsr_slave_0: entered promiscuous mode [ 180.592367][T18318] hsr_slave_1: entered promiscuous mode [ 180.614976][T18318] debugfs: 'hsr0' already exists in 'hsr' [ 180.621841][T18318] Cannot create hsr debugfs directory [ 180.696814][T17255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.766366][T18380] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.773548][T18380] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.839044][T18380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.852943][T18380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.947562][T10074] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.032387][T10082] bridge_slave_1: left allmulticast mode [ 181.175460][T10082] bridge_slave_1: left promiscuous mode [ 181.189471][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.203279][T10082] bridge_slave_0: left allmulticast mode [ 181.206005][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 181.208925][T10082] bridge_slave_0: left promiscuous mode [ 181.209094][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.614733][T10082] geneve0: left allmulticast mode [ 181.619834][T10082] geneve0: left promiscuous mode [ 181.625028][T10082] : port 1(geneve0) entered disabled state [ 181.634160][T10082] hsr0: left allmulticast mode [ 181.639081][T10082] hsr_slave_0: left allmulticast mode [ 181.644683][T10082] hsr_slave_1: left allmulticast mode [ 181.650114][T10082] hsr0: left promiscuous mode [ 181.655187][T10082] nr0: port 1(hsr0) entered disabled state [ 182.013380][T10082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.024315][T10082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.033801][T10082] bond0 (unregistering): Released all slaves [ 182.043796][T10074] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.056325][T10074] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.075277][T10074] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.109314][T10082] tipc: Left network mode [ 182.130355][T10082] hsr_slave_0: left promiscuous mode [ 182.140471][T10082] hsr_slave_1: left promiscuous mode [ 182.166131][T10082] veth1_macvtap: left promiscuous mode [ 182.178087][T10082] veth0_macvtap: left promiscuous mode [ 182.194080][T10082] veth1_vlan: left promiscuous mode [ 182.205658][T10082] veth0_vlan: left promiscuous mode [ 182.679320][T18318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.693336][T18318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.718982][T18318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.735693][T18318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.817207][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6100'. [ 182.836145][T18318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.849995][T18318] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.858932][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.866095][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.887262][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.894457][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.969212][T18318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.452839][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6105'. [ 183.462240][T18622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6105'. [ 183.472195][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6105'. [ 183.481361][T18622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6105'. [ 183.604526][T18318] veth0_vlan: entered promiscuous mode [ 183.615871][T18318] veth1_vlan: entered promiscuous mode [ 183.757435][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6105'. [ 183.776758][T18318] veth0_macvtap: entered promiscuous mode [ 183.810585][T18318] veth1_macvtap: entered promiscuous mode [ 183.854185][T18318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.901299][T18318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.925704][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.934641][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.945031][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.954668][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.123573][T18656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18656 comm=syz.2.6112 [ 184.292960][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6119'. [ 184.434687][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6123'. [ 184.622708][T18753] netlink: 'syz.1.6132': attribute type 29 has an invalid length. [ 184.631482][T18753] netlink: 'syz.1.6132': attribute type 29 has an invalid length. [ 184.698622][T18767] geneve1: entered promiscuous mode [ 184.704189][T18767] macsec1: entered promiscuous mode [ 184.919822][ T28] audit: type=1400 audit(1773068044.861:505): avc: denied { accept } for pid=18783 comm="syz.1.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.204191][T18846] netlink: 'syz.2.6144': attribute type 29 has an invalid length. [ 185.225256][T18846] netlink: 'syz.2.6144': attribute type 29 has an invalid length. [ 185.294491][T18855] syzkaller0: entered promiscuous mode [ 185.300205][T18855] syzkaller0: entered allmulticast mode [ 185.895690][T18865] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6152'. [ 185.936492][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6155'. [ 186.506100][T18906] xt_connbytes: Forcing CT accounting to be enabled [ 186.512926][T18906] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 186.781181][T18919] loop3: detected capacity change from 0 to 1024 [ 186.793640][T18919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.806759][ T28] audit: type=1400 audit(1773068046.751:506): avc: denied { add_name } for pid=18918 comm="syz.3.6175" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.827535][ T28] audit: type=1400 audit(1773068046.751:507): avc: denied { create } for pid=18918 comm="syz.3.6175" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.857028][ T28] audit: type=1400 audit(1773068046.751:508): avc: denied { read write open } for pid=18918 comm="syz.3.6175" path="/99/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.880492][ T28] audit: type=1400 audit(1773068046.751:509): avc: denied { map } for pid=18918 comm="syz.3.6175" path="/99/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.910632][ T28] audit: type=1400 audit(1773068046.751:510): avc: denied { execute } for pid=18918 comm="syz.3.6175" path="/99/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 187.031996][T17255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.073984][T18935] loop2: detected capacity change from 0 to 512 [ 187.090101][T18935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.137566][ T28] audit: type=1400 audit(1773068047.081:511): avc: denied { mounton } for pid=18934 comm="syz.2.6181" path="/32/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 187.173474][T18935] loop2: detected capacity change from 512 to 0 [ 187.186905][T18935] EXT4-fs error (device loop2): __ext4_find_entry:1615: inode #2: comm syz.2.6181: reading directory lblock 0 [ 187.211060][T18935] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 187.240945][T18935] EXT4-fs (loop2): I/O error while writing superblock [ 187.276440][T17671] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 187.290834][T17671] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #2: block 5: comm syz-executor: unable to read itable block [ 187.303895][T17671] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 187.312196][T17671] EXT4-fs (loop2): I/O error while writing superblock [ 187.319000][T17671] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: IO failure [ 187.328104][T17671] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 187.336515][T17671] EXT4-fs (loop2): I/O error while writing superblock [ 187.343418][T17671] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 187.354927][T17671] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 187.363200][T17671] EXT4-fs (loop2): I/O error while writing superblock [ 187.376703][T10082] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:16: unable to read itable block [ 187.395448][T10082] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 187.404375][T10082] EXT4-fs (loop2): I/O error while writing superblock [ 187.412915][T17671] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.428630][T17671] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 187.437030][T17671] EXT4-fs (loop2): I/O error while writing superblock [ 187.782140][T18961] chnl_net:caif_netlink_parms(): no params data found [ 187.893767][T10082] bridge_slave_1: left allmulticast mode [ 187.899480][T10082] bridge_slave_1: left promiscuous mode [ 187.915316][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.927127][T10082] bridge_slave_0: left allmulticast mode [ 187.939130][T10082] bridge_slave_0: left promiscuous mode [ 187.945089][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.032948][T10082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.052248][T10082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.062192][T10082] bond0 (unregistering): Released all slaves [ 188.084004][T18961] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.091181][T18961] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.098417][T18961] bridge_slave_0: entered allmulticast mode [ 188.105012][T18961] bridge_slave_0: entered promiscuous mode [ 188.112540][T18961] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.119673][T18961] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.137753][T18961] bridge_slave_1: entered allmulticast mode [ 188.147838][T18961] bridge_slave_1: entered promiscuous mode [ 188.174261][T10082] hsr_slave_0: left promiscuous mode [ 188.182880][T10082] hsr_slave_1: left promiscuous mode [ 188.206405][T10082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.217645][T10082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.282989][T10082] team0 (unregistering): Port device team_slave_1 removed [ 188.320392][T10082] team0 (unregistering): Port device team_slave_0 removed [ 188.387693][T18961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.399957][T18961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.452440][T18961] team0: Port device team_slave_0 added [ 188.469510][T18961] team0: Port device team_slave_1 added [ 188.509093][T18961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.532185][T18961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.584257][T18961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.608091][T18961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.622992][T18961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.658966][T18961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.699770][T18961] hsr_slave_0: entered promiscuous mode [ 188.706553][T18961] hsr_slave_1: entered promiscuous mode [ 188.712814][T18961] debugfs: 'hsr0' already exists in 'hsr' [ 188.718606][T18961] Cannot create hsr debugfs directory [ 188.819727][T18961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 188.840030][T18961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.854461][T18961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.882656][T18961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.997962][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6207'. [ 189.013633][T19106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6207'. [ 189.033136][T19106] veth0_to_team: entered promiscuous mode [ 189.039009][T19106] veth0_to_team: entered allmulticast mode [ 189.111473][T19117] netlink: 'syz.0.6205': attribute type 2 has an invalid length. [ 189.151823][T18961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.172353][T18961] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.185884][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.192996][T10087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.265812][T18961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.391590][T18961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.583575][T19135] netlink: 'syz.1.6209': attribute type 39 has an invalid length. [ 189.605873][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.613057][T10087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.782169][T18961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.841258][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6213'. [ 189.862610][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6213'. [ 189.907429][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6213'. [ 190.043729][ T28] audit: type=1400 audit(1773068049.991:512): avc: denied { getopt } for pid=19201 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.062322][T18961] veth0_vlan: entered promiscuous mode [ 190.112387][T19207] loop3: detected capacity change from 0 to 512 [ 190.112481][T18961] veth1_vlan: entered promiscuous mode [ 190.144828][T19207] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.6220: iget: bad extra_isize 50264 (inode size 256) [ 190.176244][T18961] veth0_macvtap: entered promiscuous mode [ 190.192798][T19207] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.193008][T18961] veth1_macvtap: entered promiscuous mode [ 190.193000][T19207] EXT4-fs (loop3): Remounting filesystem read-only [ 190.202608][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 190.202627][ C1] EXT4-fs (loop3): initial error at time 1773068050: ext4_orphan_get:1391: inode 15 [ 190.202662][ C1] EXT4-fs (loop3): last error at time 1773068050: ext4_orphan_get:1391: inode 15 [ 190.208299][T18961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.249547][T18961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.257432][T19207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.280531][ T797] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.311287][ T797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.330681][T17255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.352200][ T797] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.367993][ T797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.391646][T19230] usb usb7: usbfs: process 19230 (syz.3.6221) did not claim interface 0 before use [ 190.401146][ T28] audit: type=1400 audit(1773068050.331:513): avc: denied { write } for pid=19228 comm="syz.3.6221" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.546599][T19242] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6191'. [ 190.614469][T19247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.631486][T19247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.944006][T19287] netlink: 'syz.4.6225': attribute type 39 has an invalid length. [ 191.064865][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6227'. [ 191.074765][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6227'. [ 191.086367][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6227'. [ 191.261767][T19316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.270561][T19316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.280725][ T28] audit: type=1400 audit(1773068051.221:514): avc: denied { create } for pid=19315 comm="syz.4.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.310727][ T28] audit: type=1400 audit(1773068051.251:515): avc: denied { setopt } for pid=19315 comm="syz.4.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.667406][ T28] audit: type=1400 audit(1773068051.591:516): avc: denied { write } for pid=19315 comm="syz.4.6234" name="file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.707316][ T28] audit: type=1400 audit(1773068051.591:517): avc: denied { open } for pid=19315 comm="syz.4.6234" path="/24/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.768845][ T28] audit: type=1400 audit(1773068051.591:518): avc: denied { ioctl } for pid=19315 comm="syz.4.6234" path="/24/file0" dev="tmpfs" ino=141 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.457169][T19340] lo speed is unknown, defaulting to 1000 [ 192.463071][T19340] lo speed is unknown, defaulting to 1000 [ 192.469084][T19340] lo speed is unknown, defaulting to 1000 [ 192.476665][T19340] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 192.501054][T19340] lo speed is unknown, defaulting to 1000 [ 192.507393][T19340] lo speed is unknown, defaulting to 1000 [ 192.513716][T19340] lo speed is unknown, defaulting to 1000 [ 192.520257][T19340] lo speed is unknown, defaulting to 1000 [ 192.526364][T19340] lo speed is unknown, defaulting to 1000 [ 192.532953][T19340] lo speed is unknown, defaulting to 1000 [ 192.539165][T19340] lo speed is unknown, defaulting to 1000 [ 192.545467][T19340] lo speed is unknown, defaulting to 1000 [ 192.551682][T19340] lo speed is unknown, defaulting to 1000 [ 193.675674][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'. [ 193.884441][T19385] nr0: port 1(hsr0) entered blocking state [ 193.899926][T19385] nr0: port 1(hsr0) entered disabled state [ 193.908624][T19385] hsr0: entered allmulticast mode [ 193.913933][T19385] hsr_slave_0: entered allmulticast mode [ 193.919734][T19385] hsr_slave_1: entered allmulticast mode [ 193.926615][T19385] hsr0: entered promiscuous mode [ 194.122947][T19397] __nla_validate_parse: 2 callbacks suppressed [ 194.122968][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 194.349826][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 194.384185][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6264'. [ 195.112098][T19413] netlink: 'syz.3.6266': attribute type 39 has an invalid length. [ 195.338244][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b4f8800: rx timeout, send abort [ 195.346763][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b4f8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 195.606076][T19421] loop5: detected capacity change from 0 to 7 [ 195.696875][T19428] xt_connbytes: Forcing CT accounting to be enabled [ 195.703752][T19428] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 195.786877][T19435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6276'. [ 195.837831][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6275'. [ 195.887039][T19442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6279'. [ 195.920869][T19444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6281'. [ 195.988106][T19453] program syz.5.6284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.004293][ T28] audit: type=1400 audit(1773068055.931:519): avc: denied { write } for pid=19452 comm="syz.5.6284" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.046203][ T28] audit: type=1400 audit(1773068055.941:520): avc: denied { append } for pid=19452 comm="syz.5.6284" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.120778][T19460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6287'. [ 196.187088][T19467] netlink: 'syz.4.6283': attribute type 2 has an invalid length. [ 196.369737][ T28] audit: type=1400 audit(1773068056.311:521): avc: denied { mounton } for pid=19468 comm="syz.1.6291" path="/50/bus" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.531226][T19478] netlink: 'syz.3.6294': attribute type 2 has an invalid length. [ 196.926613][T10080] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.145529][T10080] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.335767][T10080] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.435690][T10080] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.717730][T10080] gretap0: left allmulticast mode [ 197.736268][T10080] gretap0: left promiscuous mode [ 197.751103][T10080] bridge0: port 3(gretap0) entered disabled state [ 197.769582][T10080] bridge_slave_1: left allmulticast mode [ 197.779596][T10080] bridge_slave_1: left promiscuous mode [ 197.798342][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.819175][T10080] bridge_slave_0: left allmulticast mode [ 197.824915][T10080] bridge_slave_0: left promiscuous mode [ 197.842698][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.910391][T10080] hsr0: left allmulticast mode [ 197.921615][T10080] hsr_slave_0: left allmulticast mode [ 197.940181][T10080] hsr_slave_1: left allmulticast mode [ 197.959247][T10080] hsr0: left promiscuous mode [ 197.972716][T10080] nr0: port 1(hsr0) entered disabled state [ 198.202031][T19541] siw: device registration error -23 [ 198.211662][T19541] loop5: detected capacity change from 0 to 512 [ 198.324154][T10080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.337624][T10080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.348454][T10080] bond0 (unregistering): Released all slaves [ 198.369457][T19533] nr0: port 1(hsr0) entered blocking state [ 198.408819][T19533] nr0: port 1(hsr0) entered disabled state [ 198.453664][T19533] hsr0: entered allmulticast mode [ 198.487246][T19533] hsr_slave_0: entered allmulticast mode [ 198.522777][T19533] hsr_slave_1: entered allmulticast mode [ 198.546258][T19533] hsr0: entered promiscuous mode [ 198.582050][T10080] hsr_slave_0: left promiscuous mode [ 198.593800][T10080] hsr_slave_1: left promiscuous mode [ 198.605852][T10080] veth1_macvtap: left promiscuous mode [ 198.614362][T10080] veth0_macvtap: left promiscuous mode [ 198.619910][T10080] veth1_vlan: left promiscuous mode [ 198.762643][ T10] lo speed is unknown, defaulting to 1000 [ 198.772746][ T10] infiniband syz0: ib_query_port failed (-19) [ 198.906508][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6324'. [ 198.944626][T19583] lo speed is unknown, defaulting to 1000 [ 198.950474][T19583] lo speed is unknown, defaulting to 1000 [ 198.956563][T19583] lo speed is unknown, defaulting to 1000 [ 198.963702][T19583] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 198.990158][T19584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.008645][T19585] loop3: detected capacity change from 0 to 512 [ 199.104165][T19584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.198882][T19581] team0: Port device team_slave_0 removed [ 199.229380][T19583] lo speed is unknown, defaulting to 1000 [ 199.235987][T19583] lo speed is unknown, defaulting to 1000 [ 199.242293][T19583] lo speed is unknown, defaulting to 1000 [ 199.248560][T19583] lo speed is unknown, defaulting to 1000 [ 199.254715][T19583] lo speed is unknown, defaulting to 1000 [ 199.261033][T19583] lo speed is unknown, defaulting to 1000 [ 199.267380][T19583] lo speed is unknown, defaulting to 1000 [ 199.273620][T19583] lo speed is unknown, defaulting to 1000 [ 199.279901][T19583] lo speed is unknown, defaulting to 1000 [ 199.437701][T19503] chnl_net:caif_netlink_parms(): no params data found [ 199.515975][T19503] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.534580][T19503] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.549090][T19503] bridge_slave_0: entered allmulticast mode [ 199.606410][T19503] bridge_slave_0: entered promiscuous mode [ 199.638901][T19503] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.658503][T19503] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.666017][T19503] bridge_slave_1: entered allmulticast mode [ 199.672794][T19503] bridge_slave_1: entered promiscuous mode [ 199.698261][T19503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.722511][T19503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.768500][T19503] team0: Port device team_slave_0 added [ 199.787040][T19503] team0: Port device team_slave_1 added [ 199.834000][T19503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.857156][T19503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.912186][T19503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.014817][T19503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.021862][T19503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.048424][T19503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.116545][T19503] hsr_slave_0: entered promiscuous mode [ 200.155769][T19503] hsr_slave_1: entered promiscuous mode [ 200.196183][T19503] debugfs: 'hsr0' already exists in 'hsr' [ 200.229363][T19503] Cannot create hsr debugfs directory [ 200.857394][T19685] lo speed is unknown, defaulting to 1000 [ 200.912368][T19691] netlink: 'syz.3.6343': attribute type 39 has an invalid length. [ 200.960077][T19503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.011373][T19503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.052599][T19503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.094425][T19503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.423466][T19503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.475778][T19728] lo speed is unknown, defaulting to 1000 [ 201.491161][T19503] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.582235][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.589382][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.657741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.664831][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.821914][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6350'. [ 202.038719][T19503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.172346][T19503] veth0_vlan: entered promiscuous mode [ 202.189418][T19503] veth1_vlan: entered promiscuous mode [ 202.227764][T19503] veth0_macvtap: entered promiscuous mode [ 202.236294][T19503] veth1_macvtap: entered promiscuous mode [ 202.249165][T19503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.267557][T19503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.280893][ T3491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.299840][ T3491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.323563][ T3491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.370667][ T3491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.575302][ T28] audit: type=1400 audit(1773068062.521:522): avc: denied { create } for pid=19826 comm="syz.4.6359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 202.604084][ T28] audit: type=1400 audit(1773068062.521:523): avc: denied { write } for pid=19826 comm="syz.4.6359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 202.605174][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6360'. [ 202.750205][T19848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.839441][T19848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6360'. [ 202.937601][T19855] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 204.180376][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6376'. [ 204.211707][T19902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.214220][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6382'. [ 204.222199][T19902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6376'. [ 204.238428][T19901] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.247176][T19901] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.256448][T19901] bridge0: entered allmulticast mode [ 204.295721][T19905] team0: Port device team_slave_0 removed [ 204.315421][T19902] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 204.336645][T19906] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.343747][T19906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.351031][T19906] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.358081][T19906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.368228][T19906] bridge0: entered promiscuous mode [ 205.375304][T19936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6395'. [ 207.513382][T20043] syzkaller0: entered promiscuous mode [ 207.847745][T20067] lo speed is unknown, defaulting to 1000 [ 207.957386][ T28] audit: type=1400 audit(1773068067.901:524): avc: denied { execute } for pid=20079 comm="syz.3.6459" path="/179/bus" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 208.677105][T20116] nr0: port 1(hsr0) entered blocking state [ 208.683154][T20116] nr0: port 1(hsr0) entered disabled state [ 208.689568][T20116] hsr0: entered allmulticast mode [ 208.695464][T20116] hsr_slave_0: entered allmulticast mode [ 208.701336][T20116] hsr_slave_1: entered allmulticast mode [ 208.707964][T20116] hsr0: entered promiscuous mode [ 208.944321][T20130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=20130 comm=syz.0.6482 [ 208.992512][T20130] batadv_slave_0: entered promiscuous mode [ 209.006216][T20130] macsec1: entered promiscuous mode [ 209.113706][T20142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6487'. [ 209.221937][T20142] team0: Port device team_slave_0 removed [ 209.270389][T20154] lo speed is unknown, defaulting to 1000 [ 209.350734][T20162] syzkaller0: entered promiscuous mode [ 209.357523][T20162] syzkaller0: entered allmulticast mode [ 209.991575][T20184] netlink: 'syz.3.6503': attribute type 2 has an invalid length. [ 210.010840][T20185] sit0: entered allmulticast mode [ 210.125900][T20185] sit0: entered promiscuous mode [ 210.359097][T20187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6505'. [ 210.467272][T20199] sit0: entered allmulticast mode [ 211.256296][T20251] netlink: 'syz.0.6529': attribute type 2 has an invalid length. [ 211.699562][T20264] lo speed is unknown, defaulting to 1000 [ 212.687691][T20286] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6543'. [ 212.704745][T20286] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6543'. [ 212.732052][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6543'. [ 212.904672][T20298] lo speed is unknown, defaulting to 1000 [ 213.336719][T20324] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6559'. [ 213.347148][T20324] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6559'. [ 213.358276][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6559'. [ 213.540454][T20335] lo speed is unknown, defaulting to 1000 [ 213.898329][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6566'. [ 214.146037][T20360] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6571'. [ 214.206230][T20364] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6571'. [ 214.257258][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6571'. [ 214.431871][T20375] netlink: 'syz.1.6576': attribute type 39 has an invalid length. [ 214.548984][T20394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6584'. [ 214.568374][T20392] lo speed is unknown, defaulting to 1000 [ 214.574331][T20394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6584'. [ 214.607060][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6584'. [ 214.800360][T20383] lo speed is unknown, defaulting to 1000 [ 215.172402][T20425] netlink: 'syz.4.6594': attribute type 39 has an invalid length. [ 215.383638][T20442] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6600'. [ 215.393174][T20442] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6600'. [ 215.402772][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6600'. [ 215.421679][T20442] team0: Port device team_slave_0 removed [ 215.580019][T20451] wg2: entered promiscuous mode [ 215.588245][T20451] wg2: entered allmulticast mode [ 215.616464][T20456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6606'. [ 215.663972][T20448] lo speed is unknown, defaulting to 1000 [ 216.656625][ T28] audit: type=1400 audit(1773068076.601:525): avc: denied { execute_no_trans } for pid=20488 comm="syz.0.6617" path="/42/file1" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.838900][T20509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.866525][T20509] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 218.357988][T20659] netlink: 'syz.4.6655': attribute type 2 has an invalid length. [ 221.425997][T20692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.460831][ T6069] lo speed is unknown, defaulting to 1000 [ 221.466975][T20708] __nla_validate_parse: 3 callbacks suppressed [ 221.466993][T20708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6672'. [ 221.764745][T20724] 9pnet_fd: p9_fd_create_tcp (20724): problem connecting socket to 127.0.0.1 [ 221.889731][T20727] lo speed is unknown, defaulting to 1000 [ 222.850871][T20748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6686'. [ 222.863066][T20748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6686'. [ 222.922196][T20748] bond1: (slave dummy0): Releasing backup interface [ 223.253051][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6691'. [ 223.541863][T20777] netlink: 'syz.0.6694': attribute type 39 has an invalid length. [ 223.676011][ T28] audit: type=1400 audit(1773068083.621:526): avc: denied { nlmsg_write } for pid=20789 comm="syz.1.6702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 224.174083][T20802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6705'. [ 224.182688][T20804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6706'. [ 224.203178][T20808] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6707'. [ 224.887647][T20836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.926252][T20842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6719'. [ 225.022071][ T28] audit: type=1400 audit(1773068084.971:527): avc: denied { ioctl } for pid=20854 comm="syz.1.6725" path="socket:[59677]" dev="sockfs" ino=59677 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.102854][T20864] xt_hashlimit: size too large, truncated to 1048576 [ 225.352626][T20869] lo speed is unknown, defaulting to 1000 [ 226.949331][T20901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6744'. [ 226.967285][T20901] bond1: (slave dummy0): Releasing backup interface [ 227.315500][T20925] lo speed is unknown, defaulting to 1000 [ 227.461099][T20931] netlink: 1140 bytes leftover after parsing attributes in process `syz.0.6757'. [ 227.609818][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6760'. [ 227.766998][ T28] audit: type=1400 audit(1773068087.711:528): avc: denied { setopt } for pid=20957 comm="syz.0.6768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.904759][T20968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6773'. [ 228.570219][T20997] lo speed is unknown, defaulting to 1000 [ 228.716183][T21025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6788'. [ 228.821253][T21038] xt_hashlimit: size too large, truncated to 1048576 [ 229.226073][T21085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6792'. [ 229.266314][T21085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.278333][T21085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6792'. [ 229.290703][T21085] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 229.331688][T21092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6794'. [ 229.360394][T21092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6794'. [ 229.795170][T21109] netlink: 'syz.3.6802': attribute type 39 has an invalid length. [ 229.817008][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6805'. [ 229.835845][T21116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.848962][T21116] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 230.009643][T21130] netlink: 'syz.0.6804': attribute type 2 has an invalid length. [ 230.442101][T21142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.462352][T21142] bond2: (slave dummy0): Releasing backup interface [ 230.473110][T21142] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 230.541294][T21149] netlink: 'syz.5.6819': attribute type 39 has an invalid length. [ 231.389663][T21181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.407090][T21181] bond2: (slave dummy0): Releasing backup interface [ 231.418236][T21181] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 231.865490][T21196] lo speed is unknown, defaulting to 1000 [ 233.222972][T21222] __nla_validate_parse: 6 callbacks suppressed [ 233.223027][T21222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6844'. [ 233.248098][T21222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.260219][T21222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6844'. [ 233.275890][T21222] bond3: (slave dummy0): Releasing backup interface [ 233.286760][T21222] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 233.422871][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6845'. [ 234.111311][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6862'. [ 235.221454][T21291] bridge0: entered promiscuous mode [ 235.365957][T21291] bridge0: port 3(macsec1) entered blocking state [ 235.372720][T21291] bridge0: port 3(macsec1) entered disabled state [ 235.381092][T21291] macsec1: entered allmulticast mode [ 235.386503][T21291] bridge0: entered allmulticast mode [ 235.398359][T21291] macsec1: left allmulticast mode [ 235.411386][T21291] bridge0: left allmulticast mode [ 235.424671][T21291] bridge0: left promiscuous mode [ 235.448209][T21295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6875'. [ 235.473138][ T28] audit: type=1400 audit(1773068095.421:529): avc: denied { sqpoll } for pid=21300 comm="syz.0.6876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 235.534312][ T28] audit: type=1400 audit(1773068095.421:530): avc: denied { create } for pid=21300 comm="syz.0.6876" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.986463][T21411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6896'. [ 238.668450][T21435] netlink: 'syz.4.6902': attribute type 39 has an invalid length. [ 238.815825][T21457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.081746][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6909'. [ 239.216951][T21499] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6909'. [ 239.218075][T21480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.312180][T21480] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 240.254816][ T28] audit: type=1326 audit(1773068101.152:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.4.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 240.301342][ T28] audit: type=1326 audit(1773068101.152:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.4.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 240.336820][ T28] audit: type=1326 audit(1773068101.152:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.4.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 240.392627][ T28] audit: type=1326 audit(1773068101.152:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.4.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 240.440817][ T28] audit: type=1326 audit(1773068101.152:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.4.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 240.478291][T21542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6923'. [ 240.592480][T21541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6923'. [ 241.269646][T21542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.314571][T21548] bond1: (slave dummy0): Releasing backup interface [ 241.346837][T21557] netlink: 'syz.5.6927': attribute type 2 has an invalid length. [ 241.705603][T21561] netlink: 'syz.1.6929': attribute type 2 has an invalid length. [ 242.505776][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6939'. [ 242.566017][T21591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6939'. [ 242.590734][T21588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.689178][T21592] bond1: (slave dummy0): Releasing backup interface [ 242.725312][T21592] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 245.998430][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6967'. [ 246.013795][T21663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.024031][T21663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6967'. [ 246.035918][T21663] bond3: (slave dummy0): Releasing backup interface [ 246.045710][T21663] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 246.456770][T21682] netlink: 'syz.4.6974': attribute type 2 has an invalid length. [ 248.489706][ T28] audit: type=1400 audit(1773068109.422:536): avc: denied { bind } for pid=21775 comm="syz.4.6992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.880919][T21794] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6998'. [ 250.117941][T21801] netlink: 'syz.1.7001': attribute type 39 has an invalid length. [ 250.131663][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7003'. [ 250.181253][ T28] audit: type=1400 audit(1773068111.122:537): avc: denied { getopt } for pid=21796 comm="syz.0.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.283233][ T28] audit: type=1326 audit(1773068111.222:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21820 comm="syz.1.7009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa05a7c799 code=0x7ffc0000 [ 250.353914][ T28] audit: type=1326 audit(1773068111.222:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21820 comm="syz.1.7009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa05a7c799 code=0x7ffc0000 [ 250.515402][ T28] audit: type=1326 audit(1773068111.252:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21820 comm="syz.1.7009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa05a7c799 code=0x7ffc0000 [ 250.543067][ T28] audit: type=1326 audit(1773068111.252:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21820 comm="syz.1.7009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa05a7c799 code=0x7ffc0000 [ 250.580854][ T28] audit: type=1326 audit(1773068111.252:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21820 comm="syz.1.7009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa05a7c799 code=0x7ffc0000 [ 251.733289][T21901] netlink: 'syz.4.7020': attribute type 39 has an invalid length. [ 251.784269][T21838] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7015'. [ 254.308360][T21927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.539598][ T28] audit: type=1326 audit(1773068115.430:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 254.564551][ T28] audit: type=1326 audit(1773068115.430:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 254.588463][ T28] audit: type=1326 audit(1773068115.449:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 254.673538][ T28] audit: type=1326 audit(1773068115.449:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 254.699843][T21929] netlink: 'syz.4.7030': attribute type 27 has an invalid length. [ 254.707872][ T28] audit: type=1326 audit(1773068115.449:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 255.101814][ T28] audit: type=1326 audit(1773068115.580:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 255.151973][T21929] sit0: left promiscuous mode [ 255.182162][T21929] sit0: left allmulticast mode [ 255.398598][ T28] audit: type=1326 audit(1773068115.580:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 255.439373][ T28] audit: type=1326 audit(1773068115.580:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 255.464235][ T28] audit: type=1326 audit(1773068115.580:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 255.498345][T21929] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.505451][ T28] audit: type=1326 audit(1773068115.580:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21928 comm="syz.4.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0243f0c799 code=0x7ffc0000 [ 255.505477][T21929] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.551720][T21929] bridge0: left promiscuous mode [ 255.556768][T21929] bridge0: left allmulticast mode [ 255.607238][T21929] wg2: left promiscuous mode [ 255.616993][T21929] wg2: left allmulticast mode [ 255.657926][T21929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.678068][T21929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.708734][T21951] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7037'. [ 255.806472][T21930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.828067][T21930] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.839986][T21930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.857277][T21947] batadv_slave_1: entered promiscuous mode [ 255.863902][ T3491] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.878419][ T3491] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.898480][ T3491] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.899906][T21959] netlink: 'syz.5.7041': attribute type 27 has an invalid length. [ 255.915484][ T3491] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.131847][T21959] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.139027][T21959] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.402768][T21959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.424228][T21959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.897814][T21980] ================================================================== [ 256.905920][T21980] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 256.914545][T21980] [ 256.916869][T21980] write to 0xffff88812ab47168 of 8 bytes by task 21981 on cpu 0: [ 256.924591][T21980] shmem_file_splice_read+0x470/0x600 [ 256.929977][T21980] splice_direct_to_actor+0x26e/0x670 [ 256.935705][T21980] do_splice_direct+0x119/0x1a0 [ 256.940643][T21980] do_sendfile+0x382/0x650 [ 256.945062][T21980] __x64_sys_sendfile64+0x105/0x150 [ 256.949828][T21966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.950250][T21980] x64_sys_call+0x2dc4/0x3020 [ 256.961480][T21980] do_syscall_64+0x12c/0x370 [ 256.966062][T21980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.971953][T21980] [ 256.974281][T21980] write to 0xffff88812ab47168 of 8 bytes by task 21980 on cpu 1: [ 256.982090][T21980] shmem_file_splice_read+0x470/0x600 [ 256.987223][T21966] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.987484][T21980] splice_direct_to_actor+0x26e/0x670 [ 256.999407][T21980] do_splice_direct+0x119/0x1a0 [ 257.004252][T21980] do_sendfile+0x382/0x650 [ 257.008666][T21980] __x64_sys_sendfile64+0x105/0x150 [ 257.013865][T21980] x64_sys_call+0x2dc4/0x3020 [ 257.018554][T21980] do_syscall_64+0x12c/0x370 [ 257.023143][T21980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.029034][T21980] [ 257.031352][T21980] value changed: 0x0000000000004e2d -> 0x0000000000004e2e [ 257.038448][T21980] [ 257.038454][T21980] Reported by Kernel Concurrency Sanitizer on: [ 257.038485][T21980] CPU: 1 UID: 0 PID: 21980 Comm: syz.1.7046 Not tainted syzkaller #0 PREEMPT(full) [ 257.038510][T21980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.066323][T21980] ================================================================== [ 257.077636][T21966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.104232][T21493] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.127472][T21493] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.137068][T21493] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.165700][T21493] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.220181][T21974] lo speed is unknown, defaulting to 1000 [ 258.456804][T21945] batadv_slave_1: left promiscuous mode