last executing test programs: 1m35.806369052s ago: executing program 2 (id=3290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) 1m35.734285968s ago: executing program 2 (id=3294): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r0, 0x0, &(0x7f0000000340)) 1m35.614454108s ago: executing program 2 (id=3302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000005000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m35.514135266s ago: executing program 2 (id=3308): r0 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000240)=0xe3ea, 0x4) 1m35.484564629s ago: executing program 2 (id=3310): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 1m34.864249338s ago: executing program 2 (id=3316): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, r0, 0x705, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) 1m19.810760959s ago: executing program 32 (id=3316): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, r0, 0x705, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) 3.47530294s ago: executing program 5 (id=6845): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffcdbdf256b"], 0x28}}, 0x0) 3.47464812s ago: executing program 5 (id=6846): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) 3.383403488s ago: executing program 5 (id=6851): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) brk(0x55555ede5ffe) 1.73356747s ago: executing program 3 (id=6880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000800)=@o_path={0x0, r3, 0x4000, r3}, 0x18) 1.713775012s ago: executing program 0 (id=6881): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 1.688325194s ago: executing program 0 (id=6882): syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 1.668110596s ago: executing program 3 (id=6884): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xac9a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) 1.604083241s ago: executing program 3 (id=6886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, 0x0, 0x0, 0xa) 1.531018227s ago: executing program 3 (id=6888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 1.530605147s ago: executing program 0 (id=6890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x85) syncfs(r3) 1.463190472s ago: executing program 0 (id=6892): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x3}}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0xff}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0xf0, 0x6}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000440)="ff80667f8d1b0f3aa7", 0x9}, 0x1, 0x0, 0x0, 0x10}, 0x81) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 1.462815732s ago: executing program 3 (id=6893): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r1, 0x3, {0x0, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000820}, 0x8005) 1.084081653s ago: executing program 1 (id=6899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe80}, 0xfffffff7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x200809) 1.077065073s ago: executing program 1 (id=6900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 982.362591ms ago: executing program 1 (id=6901): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 668.248716ms ago: executing program 5 (id=6909): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 540.275516ms ago: executing program 4 (id=6912): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 471.621572ms ago: executing program 4 (id=6913): getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000ff000000000000000020c4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) 471.096332ms ago: executing program 4 (id=6914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 414.675366ms ago: executing program 4 (id=6915): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 383.474179ms ago: executing program 4 (id=6916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r2, 0xffffffffffffffff, 0x0) 351.834761ms ago: executing program 4 (id=6917): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800e2ffff386f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008d826addb2863523eeb000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r4, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") lsetxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0) chdir(&(0x7f0000000000)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r6, 0x3309) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$SIOCGSTAMP(r8, 0x8906, 0x0) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r8, &(0x7f0000000180)=""/133, 0x85) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 304.928485ms ago: executing program 5 (id=6918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') 242.04025ms ago: executing program 5 (id=6919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000401000004000000c5000000881480008eee8f16b218b275bee7edbdcdd44dee47fcdd5d27604968444d6596fc1e10fa3a9e0dac7edd733b1af45476b6d784c56b3a0a18338d1126996d1805199973210379be12", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}, {0x40, 0x6, 0x1, 0x1}, {0x2, 0x9, 0xa5}]}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xacf8, 0xf3}, 0x1100, 0x5ddc, 0x3a68, 0x5, 0x0, 0x8, 0x8697, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05eb", @ANYRESOCT=r2, @ANYRES8=r2], 0x30}, 0x40880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000563c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000009df7000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x3, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x116, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x9, 0xffffffff, {{0x19, 0x4, 0x0, 0x28, 0x64, 0x68, 0x0, 0x7, 0x2b, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_prespec={0x44, 0x4, 0x80, 0x3, 0x5}, @cipso={0x86, 0x45, 0x2, [{0x6, 0x6, "bdd28718"}, {0x1, 0xf, "03091e502f2282ec2b099e24a5"}, {0x6, 0x5, "a41dae"}, {0x7, 0x5, "e477ef"}, {0x7, 0x11, "a1c907c0ba31bfa48f02766ddcbce4"}, {0x1, 0xd, "81dd8beabcaef79a2909d0"}, {0x7, 0x2}]}, @end, @generic={0x44, 0x3, "c0"}]}}}}}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r9, &(0x7f0000000080), 0x10) getrusage(0x1, &(0x7f0000000040)) 138.297739ms ago: executing program 0 (id=6920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) 126.48508ms ago: executing program 1 (id=6921): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040), 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) 114.45226ms ago: executing program 3 (id=6922): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 58.887785ms ago: executing program 0 (id=6923): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0xbf5, 0x2000402) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) 58.313165ms ago: executing program 1 (id=6924): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20, 0x1, 0x53, 0xfffff00c}, {0x6, 0x4, 0x6, 0x4}]}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="fc", 0x1}], 0x1}}], 0x1, 0x4000851) 0s ago: executing program 1 (id=6925): unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) kernel console output (not intermixed with test programs): rno=-22 [ 293.729126][T14600] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3244'. [ 293.834801][T14612] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 293.972091][T14622] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 294.756433][T14651] loop9: detected capacity change from 0 to 7 [ 294.773252][T14651] Buffer I/O error on dev loop9, logical block 0, async page read [ 294.796343][T14651] loop9: unable to read partition table [ 294.804221][T14657] random: crng reseeded on system resumption [ 294.816902][T14651] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 294.816902][T14651] ) failed (rc=-5) [ 294.842462][T14649] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 294.863255][T14665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3268'. [ 294.963443][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'. [ 294.983383][T14681] hsr_slave_0: left promiscuous mode [ 294.996863][T14683] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 295.167043][T14702] all: renamed from lo (while UP) [ 295.189168][T14702] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 295.311927][T14725] netlink: 2724 bytes leftover after parsing attributes in process `syz.3.3297'. [ 295.369725][T14734] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3301'. [ 295.471506][T14745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3306'. [ 295.599700][T14757] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 296.335221][T14781] tipc: Enabled bearer , priority 10 [ 296.378451][T14787] netlink: 'syz.3.3324': attribute type 13 has an invalid length. [ 296.402129][T14787] gretap0: refused to change device tx_queue_len [ 296.418555][T14787] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 296.507324][T14804] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 296.508300][T14802] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 296.513933][T14804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.528859][T14804] vhci_hcd vhci_hcd.0: Device attached [ 296.554495][T14807] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 296.557885][T14805] vhci_hcd: connection closed [ 296.562945][ T12] vhci_hcd: stop threads [ 296.572290][ T12] vhci_hcd: release socket [ 296.576738][ T12] vhci_hcd: disconnect device [ 296.990644][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 297.011797][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 297.213516][T14842] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 297.389809][T14856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 297.396425][T14856] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 297.403990][T14856] vhci_hcd vhci_hcd.0: Device attached [ 297.435950][T14857] vhci_hcd: connection closed [ 297.436297][ T12] vhci_hcd: stop threads [ 297.445545][ T12] vhci_hcd: release socket [ 297.449997][ T12] vhci_hcd: disconnect device [ 298.522013][T14901] __nla_validate_parse: 3 callbacks suppressed [ 298.522033][T14901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3371'. [ 298.592123][T14907] usb usb8: usbfs: process 14907 (syz.4.3374) did not claim interface 0 before use [ 298.750270][T14931] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 298.779563][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 298.779582][ T29] audit: type=1326 audit(1573167.317:33482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 298.809923][ T29] audit: type=1326 audit(1573167.317:33483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 298.833404][ T29] audit: type=1326 audit(1573167.317:33484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 298.857221][ T29] audit: type=1326 audit(1573167.317:33485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 298.880847][ T29] audit: type=1326 audit(1573167.317:33486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 298.910764][ T29] audit: type=1326 audit(1573167.317:33487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 298.934912][ T29] audit: type=1326 audit(1573167.317:33488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 298.958987][ T29] audit: type=1326 audit(1573167.317:33489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 298.982847][ T29] audit: type=1326 audit(1573167.317:33490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 299.006555][ T29] audit: type=1326 audit(1573167.317:33491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 299.620469][T15005] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3419'. [ 299.702834][T15013] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 299.838094][T15029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3430'. [ 300.596829][T15074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3451'. [ 300.622179][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3452'. [ 300.695679][T15084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3455'. [ 300.723823][T15086] netlink: 'syz.1.3457': attribute type 5 has an invalid length. [ 300.779495][T15093] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 300.882024][T15109] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 300.902348][T15111] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3468'. [ 300.923194][T15102] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 300.993443][T15120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3472'. [ 301.316855][T15136] bridge0: entered promiscuous mode [ 301.417136][T15141] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 301.738652][T15143] all: renamed from lo (while UP) [ 301.749256][T15143] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 301.785320][T15146] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3483'. [ 301.833860][T15150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3485'. [ 301.982076][T15154] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 302.073109][T15157] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 302.431343][T15169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 302.438009][T15169] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.445655][T15169] vhci_hcd vhci_hcd.0: Device attached [ 302.467545][T15170] vhci_hcd: connection closed [ 302.467919][ T3427] vhci_hcd: stop threads [ 302.477493][ T3427] vhci_hcd: release socket [ 302.482070][ T3427] vhci_hcd: disconnect device [ 302.568162][T15186] usb usb1: usbfs: process 15186 (syz.4.3500) did not claim interface 0 before use [ 303.337276][T15198] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 303.764253][T15239] __nla_validate_parse: 2 callbacks suppressed [ 303.764270][T15239] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3523'. [ 303.792398][T15241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3524'. [ 303.888946][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 303.888967][ T29] audit: type=1400 audit(1573172.414:33817): avc: denied { validate_trans } for pid=15249 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 304.025230][ T29] audit: type=1326 audit(1573172.454:33818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 304.050016][ T29] audit: type=1326 audit(1573172.454:33819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 304.074208][ T29] audit: type=1400 audit(1573172.464:33820): avc: denied { read } for pid=15247 comm="syz.4.3525" name="file0" dev="tmpfs" ino=3554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 304.096599][ T29] audit: type=1326 audit(1573172.464:33821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 304.120079][ T29] audit: type=1326 audit(1573172.464:33822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 304.143741][ T29] audit: type=1326 audit(1573172.464:33823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 304.170065][ T29] audit: type=1326 audit(1573172.474:33824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 304.193979][ T29] audit: type=1326 audit(1573172.474:33825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 304.218274][ T29] audit: type=1326 audit(1573172.474:33826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 304.353301][T15273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3537'. [ 304.554679][T15298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3549'. [ 304.671543][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3557'. [ 304.693957][T15315] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 305.846112][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 305.872172][T15368] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3579'. [ 305.977813][T15382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3586'. [ 306.353900][T15427] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 306.654696][T15464] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3624'. [ 306.677273][T15459] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 306.755214][T15475] Invalid ELF header magic: != ELF [ 306.883940][T15491] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 306.970405][T15495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3636'. [ 307.713599][T15505] ipvlan0: entered promiscuous mode [ 307.719295][T15505] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 307.816728][T15508] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 307.836881][T15516] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 307.838282][T15519] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 307.843499][T15516] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 307.843616][T15516] vhci_hcd vhci_hcd.0: Device attached [ 307.878035][T15517] vhci_hcd: connection closed [ 307.878343][ T35] vhci_hcd: stop threads [ 307.887519][ T35] vhci_hcd: release socket [ 307.891948][ T35] vhci_hcd: disconnect device [ 308.067098][T15535] delete_channel: no stack [ 308.125033][T15541] program syz.3.3652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.155112][T15543] speed is unknown, defaulting to 1000 [ 308.161562][T15543] speed is unknown, defaulting to 1000 [ 308.209217][T15543] speed is unknown, defaulting to 1000 [ 308.322596][T15555] sctp: [Deprecated]: syz.3.3657 (pid 15555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.322596][T15555] Use struct sctp_sack_info instead [ 308.448578][T15567] unsupported nla_type 52263 [ 308.817315][T15604] __nla_validate_parse: 4 callbacks suppressed [ 308.817353][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3681'. [ 308.837917][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 308.847465][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 308.856470][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 308.867023][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 308.903592][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 308.912792][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 308.951895][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 308.983778][T15618] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 308.992712][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 308.992730][ T29] audit: type=1326 audit(1573177.512:34131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.023898][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 309.025004][ T29] audit: type=1326 audit(1573177.552:34132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.033085][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 309.056705][ T29] audit: type=1326 audit(1573177.552:34133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.098427][ T29] audit: type=1326 audit(1573177.622:34134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.121849][ T29] audit: type=1326 audit(1573177.622:34135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.145503][ T29] audit: type=1326 audit(1573177.622:34136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.178069][ T29] audit: type=1326 audit(1573177.622:34137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.201794][ T29] audit: type=1326 audit(1573177.622:34138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.225672][ T29] audit: type=1326 audit(1573177.622:34139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 309.250204][ T29] audit: type=1326 audit(1573177.622:34140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 310.523284][T15723] all: renamed from lo (while UP) [ 310.541507][T15723] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 310.720377][ T385] tipc: Subscription rejected, illegal request [ 310.849953][T15754] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 310.856677][T15754] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 310.864545][T15754] vhci_hcd vhci_hcd.0: Device attached [ 310.891010][T15755] vhci_hcd: connection closed [ 310.891321][ T12] vhci_hcd: stop threads [ 310.900942][ T12] vhci_hcd: release socket [ 310.905525][ T12] vhci_hcd: disconnect device [ 311.068180][T15763] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 311.420619][T15787] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 311.488414][T15795] all: renamed from lo (while UP) [ 311.513229][T15795] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 311.555926][T15780] speed is unknown, defaulting to 1000 [ 311.575997][T15780] speed is unknown, defaulting to 1000 [ 311.643018][T15780] speed is unknown, defaulting to 1000 [ 311.714578][T15822] IPv6: Can't replace route, no match found [ 311.858686][T15780] chnl_net:caif_netlink_parms(): no params data found [ 311.899188][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.906610][T15780] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.914740][T15780] bridge_slave_0: entered allmulticast mode [ 311.922313][T15780] bridge_slave_0: entered promiscuous mode [ 311.933678][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.941118][T15780] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.948871][T15780] bridge_slave_1: entered allmulticast mode [ 311.956088][T15780] bridge_slave_1: entered promiscuous mode [ 311.983961][T15780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.994856][T15780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.018996][T15780] team0: Port device team_slave_0 added [ 312.035443][T15780] team0: Port device team_slave_1 added [ 312.060440][T15780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.067589][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.094359][T15780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.106190][T15780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.113171][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.139240][T15780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.173339][T15780] hsr_slave_0: entered promiscuous mode [ 312.180256][T15780] hsr_slave_1: entered promiscuous mode [ 312.186597][T15780] debugfs: 'hsr0' already exists in 'hsr' [ 312.192380][T15780] Cannot create hsr debugfs directory [ 312.290352][T15875] $H: left promiscuous mode [ 312.296605][T15875] 8021q: adding VLAN 0 to HW filter on device $H [ 312.313702][T15875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.386667][T15780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.409930][T15780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.431584][T15780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.446768][T15893] binfmt_misc: register: failed to install interpreter file ./file0 [ 312.459282][T15894] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 312.467539][T15780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 312.493892][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.502066][T15780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.510211][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.517643][T15780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.619312][T15780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.638863][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.647007][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.660860][T15780] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.679914][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.687131][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.720005][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.727285][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.824119][T15780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.862329][T15947] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 313.008782][T15780] veth0_vlan: entered promiscuous mode [ 313.020915][T15780] veth1_vlan: entered promiscuous mode [ 313.040416][T15780] veth0_macvtap: entered promiscuous mode [ 313.048809][T15780] veth1_macvtap: entered promiscuous mode [ 313.061364][T15780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.073650][T15780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.093485][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.110433][T15966] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 313.118572][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.134610][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.154145][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.304725][T15992] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 313.363915][T15997] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 313.681763][T16021] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 313.698558][T16022] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 313.721233][T16027] hub 9-0:1.0: USB hub found [ 313.726516][T16027] hub 9-0:1.0: 8 ports detected [ 314.314305][ T29] kauditd_printk_skb: 583 callbacks suppressed [ 314.314323][ T29] audit: type=1400 audit(1573182.829:34724): avc: denied { create } for pid=16060 comm="syz.3.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.342965][ T29] audit: type=1400 audit(1573182.849:34725): avc: denied { setopt } for pid=16060 comm="syz.3.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.414822][ T29] audit: type=1400 audit(1573182.929:34726): avc: denied { read } for pid=16064 comm="syz.3.3872" dev="nsfs" ino=4026532602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 314.440210][ T29] audit: type=1400 audit(1573182.929:34727): avc: denied { open } for pid=16064 comm="syz.3.3872" path="net:[4026532602]" dev="nsfs" ino=4026532602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 314.463632][ T29] audit: type=1400 audit(1573182.929:34728): avc: denied { ioctl } for pid=16064 comm="syz.3.3872" path="socket:[47825]" dev="sockfs" ino=47825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.551958][ T29] audit: type=1400 audit(1573183.069:34729): avc: denied { write } for pid=16076 comm="syz.3.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.574708][T16083] raw_sendmsg: syz.1.3881 forgot to set AF_INET. Fix it! [ 314.615504][ T29] audit: type=1400 audit(1573183.129:34730): avc: denied { create } for pid=16084 comm="syz.3.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 314.665004][ T29] audit: type=1400 audit(1573183.129:34731): avc: denied { write } for pid=16084 comm="syz.3.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 314.707149][T16095] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 314.718837][ T29] audit: type=1326 audit(1573183.209:34732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.3.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 314.742538][ T29] audit: type=1326 audit(1573183.209:34733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.3.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 314.803417][T16108] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 315.418858][T16173] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 315.425541][T16173] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 315.435698][T16173] vhci_hcd vhci_hcd.0: Device attached [ 315.467959][T16174] vhci_hcd: connection closed [ 315.468205][ T385] vhci_hcd: stop threads [ 315.478977][ T385] vhci_hcd: release socket [ 315.485250][ T385] vhci_hcd: disconnect device [ 315.701626][T16203] all: renamed from lo (while UP) [ 315.719909][T16203] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 315.822830][T16213] team0: Port device dummy0 removed [ 315.867607][T16213] bond0: (slave bridge2): Releasing backup interface [ 315.892593][ T3427] tipc: Resetting bearer [ 316.023053][T16221] __nla_validate_parse: 11 callbacks suppressed [ 316.023074][T16221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3942'. [ 316.614261][T16268] 9pnet_fd: Insufficient options for proto=fd [ 316.659158][T16272] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3965'. [ 316.960978][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 316.995123][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 317.015290][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3995'. [ 317.025606][T16335] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 317.033278][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3995'. [ 317.157823][T16358] tbf_change: 6 callbacks suppressed [ 317.157841][T16358] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 317.263299][T16366] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 317.638983][T16390] all: renamed from lo (while UP) [ 317.655400][T16390] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 317.739338][T16405] tipc: Started in network mode [ 317.744362][T16405] tipc: Node identity ff, cluster identity 4711 [ 317.750837][T16405] tipc: Enabling of bearer rejected, failed to enable media [ 317.771162][T16409] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4030'. [ 317.869789][T16417] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 317.932151][T16423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4036'. [ 318.208266][T16459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4053'. [ 318.333973][T16482] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 318.349687][T16483] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 318.359253][T16484] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 318.379196][T16486] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 318.450594][T16491] program syz.1.4067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.477810][T16491] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 318.832718][T16519] all: renamed from lo (while UP) [ 318.851904][T16519] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 318.928066][T16533] program syz.4.4087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.979188][T16539] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 318.984238][T16541] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4090'. [ 318.988157][T16539] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 319.101647][T16557] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 319.117468][T16551] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 319.163017][T16562] netlink: 'syz.3.4099': attribute type 1 has an invalid length. [ 319.313186][T16581] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 319.319792][T16581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 319.327514][T16581] vhci_hcd vhci_hcd.0: Device attached [ 319.335803][T16583] vhci_hcd: connection closed [ 319.336171][ T35] vhci_hcd: stop threads [ 319.345404][ T35] vhci_hcd: release socket [ 319.349902][ T35] vhci_hcd: disconnect device [ 319.386735][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 319.386808][ T29] audit: type=1326 audit(1573187.907:35533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.416544][T16591] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 319.416998][ T29] audit: type=1326 audit(1573187.907:35534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.448266][ T29] audit: type=1326 audit(1573187.907:35535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.471889][ T29] audit: type=1326 audit(1573187.907:35536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.496029][ T29] audit: type=1326 audit(1573187.907:35537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.519990][ T29] audit: type=1326 audit(1573187.907:35538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.543616][ T29] audit: type=1326 audit(1573187.907:35539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.567182][ T29] audit: type=1326 audit(1573187.907:35540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.590707][ T29] audit: type=1326 audit(1573187.907:35541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.614387][ T29] audit: type=1326 audit(1573187.917:35542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16590 comm="syz.1.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 319.740741][T16610] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 319.776269][T16615] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 321.068460][T16740] netlink: 'syz.4.4176': attribute type 21 has an invalid length. [ 321.091208][T16740] __nla_validate_parse: 2 callbacks suppressed [ 321.091226][T16740] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4176'. [ 321.106618][T16740] netlink: 'syz.4.4176': attribute type 1 has an invalid length. [ 321.174908][T16747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4179'. [ 321.251080][T16749] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 321.601411][T16784] all: renamed from lo (while UP) [ 321.624624][T16787] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4195'. [ 321.650065][T16784] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 322.087385][T16826] all: renamed from lo (while UP) [ 322.104254][T16826] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 322.270528][T16837] tbf_change: 11 callbacks suppressed [ 322.270547][T16837] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 322.348261][T16844] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 322.431709][T16853] smc: net device bond0 erased user defined pnetid SYZH [ 322.533707][T16860] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 322.575776][T16861] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 322.690638][T16864] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 322.835866][T16868] program syz.5.4230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.845328][T16868] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 322.965942][T16873] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 323.075147][T16880] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 323.186538][T16889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4239'. [ 323.262369][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4242'. [ 323.264659][T16896] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 323.289594][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4244'. [ 323.292001][T16897] all: renamed from lo (while UP) [ 323.299118][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4244'. [ 323.342470][T16902] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 323.392449][T16908] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 323.422151][T16910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4249'. [ 323.431372][T16910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4249'. [ 323.440597][T16910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4249'. [ 323.819758][T16934] netlink: 'syz.5.4257': attribute type 1 has an invalid length. [ 323.973848][T16951] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 324.119221][T16970] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 324.425730][ T29] kauditd_printk_skb: 983 callbacks suppressed [ 324.425747][ T29] audit: type=1326 audit(1573192.944:36526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.517975][ T29] audit: type=1326 audit(1573192.974:36527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.541835][ T29] audit: type=1326 audit(1573192.984:36528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.565448][ T29] audit: type=1326 audit(1573192.984:36529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.588994][ T29] audit: type=1326 audit(1573192.984:36530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.612535][ T29] audit: type=1326 audit(1573192.984:36531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.636484][ T29] audit: type=1326 audit(1573192.984:36532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.659972][ T29] audit: type=1326 audit(1573193.004:36533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.683964][ T29] audit: type=1326 audit(1573193.004:36534): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.707981][ T29] audit: type=1326 audit(1573193.004:36535): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16990 comm="syz.0.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 324.907568][T17027] netlink: 'syz.0.4301': attribute type 1 has an invalid length. [ 326.387701][T17199] autofs4:pid:17199:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 326.541406][T17209] __nla_validate_parse: 13 callbacks suppressed [ 326.541424][T17209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4379'. [ 326.709462][T17229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17229 comm=syz.5.4389 [ 326.989580][T17256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4402'. [ 327.051617][T17262] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4405'. [ 327.118353][T17272] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4408'. [ 327.174112][T17278] delete_channel: no stack [ 327.333598][T17292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4418'. [ 327.753838][T17323] tbf_change: 10 callbacks suppressed [ 327.753856][T17323] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 327.887367][T17328] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 328.178866][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4436'. [ 328.221674][T17340] program syz.4.4439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.236645][T17341] all: renamed from lo (while UP) [ 328.271854][T17341] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 328.333557][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4447'. [ 328.379030][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4451'. [ 328.449224][T17373] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 328.486134][T17377] all: renamed from lo (while UP) [ 328.504778][T17377] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 328.583710][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 328.597216][T17391] smc: net device bond0 applied user defined pnetid SYZ0 [ 328.612567][T17391] smc: net device bond0 erased user defined pnetid SYZ0 [ 328.728959][T17406] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 328.735719][T17406] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 328.743209][T17406] vhci_hcd vhci_hcd.0: Device attached [ 328.750568][T17407] vhci_hcd: connection closed [ 328.750711][ T12] vhci_hcd: stop threads [ 328.760670][ T12] vhci_hcd: release socket [ 328.765398][ T12] vhci_hcd: disconnect device [ 329.047734][T17439] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4485'. [ 329.273325][T17461] program syz.3.4496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.371305][T17476] netlink: 'syz.5.4504': attribute type 1 has an invalid length. [ 329.391791][T17482] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 329.503831][T17489] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 329.510958][T17489] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 329.518676][T17489] vhci_hcd vhci_hcd.0: Device attached [ 329.548159][T17490] vhci_hcd: connection closed [ 329.548420][ T12] vhci_hcd: stop threads [ 329.557493][ T12] vhci_hcd: release socket [ 329.562196][ T12] vhci_hcd: disconnect device [ 329.644629][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 329.644649][ T29] audit: type=1400 audit(1573198.161:37065): avc: denied { mount } for pid=17500 comm="syz.0.4514" name="/" dev="ramfs" ino=52728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 329.738968][ T29] audit: type=1400 audit(1573198.251:37066): avc: denied { read } for pid=17512 comm="syz.1.4520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.790056][T17517] wireguard0: entered promiscuous mode [ 329.886585][T17529] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 329.897819][ T29] audit: type=1400 audit(1573198.411:37067): avc: denied { relabelto } for pid=17528 comm="syz.0.4528" name="930" dev="tmpfs" ino=4886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_acl_exec_t:s0" [ 329.927869][ T29] audit: type=1400 audit(1573198.411:37068): avc: denied { associate } for pid=17528 comm="syz.0.4528" name="930" dev="tmpfs" ino=4886 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_acl_exec_t:s0" [ 329.977804][T17531] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 329.996268][ T29] audit: type=1326 audit(1573198.501:37069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17523 comm="syz.5.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 330.023139][ T29] audit: type=1326 audit(1573198.501:37070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17523 comm="syz.5.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 330.049057][ T29] audit: type=1326 audit(1573198.501:37071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17523 comm="syz.5.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 330.075816][ T29] audit: type=1326 audit(1573198.501:37072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17523 comm="syz.5.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 330.100089][ T29] audit: type=1326 audit(1573198.501:37073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17523 comm="syz.5.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 330.124465][ T29] audit: type=1326 audit(1573198.501:37074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17523 comm="syz.5.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 330.887969][T17562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.898707][T17562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.981562][T17573] netlink: 'syz.1.4545': attribute type 1 has an invalid length. [ 331.471542][T17635] all: renamed from lo (while UP) [ 331.492396][T17635] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 331.650356][T17650] vhci_hcd: invalid port number 23 [ 331.801442][T17671] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 331.913796][T17686] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 332.069358][T17700] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 332.146130][T17708] 9pnet: Unknown protocol version 9 [ 332.330064][T17725] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 332.518900][T17748] __nla_validate_parse: 9 callbacks suppressed [ 332.518920][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4625'. [ 332.667846][T17767] netlink: 'syz.5.4634': attribute type 1 has an invalid length. [ 332.728323][T17776] Invalid ELF header magic: != ELF [ 332.825799][T17789] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 332.858639][T17791] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4644'. [ 332.996932][T17799] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 333.671904][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4684'. [ 334.185056][T17933] speed is unknown, defaulting to 1000 [ 334.203691][T17938] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 334.211465][T17933] speed is unknown, defaulting to 1000 [ 334.220573][T17940] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 334.296036][T17933] speed is unknown, defaulting to 1000 [ 334.407948][T17958] netlink: 'syz.1.4721': attribute type 13 has an invalid length. [ 334.423054][T17958] gretap0: refused to change device tx_queue_len [ 334.429695][T17958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 334.465285][ T1038] speed is unknown, defaulting to 1000 [ 334.472640][ T1038] sz1: Port: 1 Link DOWN [ 334.482434][ T9] speed is unknown, defaulting to 1000 [ 334.569563][T17968] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 334.647617][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4730'. [ 334.730037][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 334.730055][ T29] audit: type=1400 audit(1573203.239:37394): avc: denied { sqpoll } for pid=17983 comm="syz.3.4733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 335.139812][T18012] netlink: 'syz.1.4745': attribute type 1 has an invalid length. [ 335.203396][T18018] 9pnet_fd: Insufficient options for proto=fd [ 335.332074][ T29] audit: type=1326 audit(1573203.839:37395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 335.357571][ T29] audit: type=1326 audit(1573203.839:37396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 335.382518][ T29] audit: type=1326 audit(1573203.839:37397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 335.410825][ T29] audit: type=1326 audit(1573203.849:37398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 335.435970][ T29] audit: type=1326 audit(1573203.849:37399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 335.460538][ T29] audit: type=1326 audit(1573203.859:37400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 335.485424][ T29] audit: type=1326 audit(1573203.859:37401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf734d5b27 code=0x7ffc0000 [ 335.509024][ T29] audit: type=1326 audit(1573203.869:37402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf7347ad69 code=0x7ffc0000 [ 335.532809][ T29] audit: type=1326 audit(1573203.869:37403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18028 comm="syz.3.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf734d5b27 code=0x7ffc0000 [ 335.599350][T18033] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 335.643916][T18034] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 335.765555][T18043] netlink: 'syz.0.4759': attribute type 1 has an invalid length. [ 335.859159][T18049] all: renamed from lo (while UP) [ 335.957239][T18056] SELinux: failed to load policy [ 336.073960][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 336.127249][T18080] all: renamed from lo (while UP) [ 336.143805][T18085] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 336.174095][T18088] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 336.305202][T18109] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4790'. [ 336.385532][T18116] netlink: 'syz.3.4793': attribute type 1 has an invalid length. [ 336.531561][T18131] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 336.592932][T18139] program syz.3.4804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.683878][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4811'. [ 336.801798][T18166] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 336.822963][T18168] program syz.5.4818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.116307][T18195] dummy0: entered allmulticast mode [ 337.123399][T18195] dummy0: left allmulticast mode [ 337.218858][T18189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.232569][T18189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.821596][T18244] all: renamed from lo (while UP) [ 337.852408][T18246] tbf_change: 1 callbacks suppressed [ 337.852425][T18246] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 337.942601][T18252] program syz.4.4856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.029146][T18255] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 338.705356][T18335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4895'. [ 338.714845][T18335] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4895'. [ 338.725655][T18335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4895'. [ 338.736855][T18335] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4895'. [ 338.784283][T18339] all: renamed from lo (while UP) [ 338.809098][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4898'. [ 338.914008][T18360] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4906'. [ 338.995217][T18375] all: renamed from lo (while UP) [ 339.126426][T18386] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 339.405746][T18392] syz.3.4919: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 339.420735][T18392] CPU: 1 UID: 0 PID: 18392 Comm: syz.3.4919 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 339.420767][T18392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.420781][T18392] Call Trace: [ 339.420787][T18392] [ 339.420794][T18392] __dump_stack+0x1d/0x30 [ 339.420899][T18392] dump_stack_lvl+0xe8/0x140 [ 339.420975][T18392] dump_stack+0x15/0x1b [ 339.420997][T18392] warn_alloc+0x12b/0x1a0 [ 339.421035][T18392] __vmalloc_node_range_noprof+0x9c/0xe00 [ 339.421104][T18392] ? __futex_wait+0x1ff/0x260 [ 339.421198][T18392] ? __pfx_futex_wake_mark+0x10/0x10 [ 339.421226][T18392] ? __rcu_read_unlock+0x4f/0x70 [ 339.421244][T18392] ? avc_has_perm_noaudit+0x1b1/0x200 [ 339.421266][T18392] ? should_fail_ex+0x30/0x280 [ 339.421310][T18392] ? xskq_create+0x36/0xe0 [ 339.421335][T18392] vmalloc_user_noprof+0x7d/0xb0 [ 339.421364][T18392] ? xskq_create+0x80/0xe0 [ 339.421483][T18392] xskq_create+0x80/0xe0 [ 339.421507][T18392] xsk_init_queue+0x95/0xf0 [ 339.421530][T18392] xsk_setsockopt+0x3f5/0x640 [ 339.421554][T18392] ? __pfx_xsk_setsockopt+0x10/0x10 [ 339.421576][T18392] __sys_setsockopt+0x184/0x200 [ 339.421614][T18392] __x64_sys_setsockopt+0x64/0x80 [ 339.421721][T18392] x64_sys_call+0x20ec/0x2ff0 [ 339.421748][T18392] do_syscall_64+0xd2/0x200 [ 339.421780][T18392] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 339.421812][T18392] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 339.421851][T18392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.421871][T18392] RIP: 0033:0x7fbf734deb69 [ 339.421931][T18392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.421956][T18392] RSP: 002b:00007fbf71b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.421982][T18392] RAX: ffffffffffffffda RBX: 00007fbf73705fa0 RCX: 00007fbf734deb69 [ 339.421999][T18392] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 339.422011][T18392] RBP: 00007fbf73561df1 R08: 0000000000000004 R09: 0000000000000000 [ 339.422022][T18392] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.422073][T18392] R13: 0000000000000000 R14: 00007fbf73705fa0 R15: 00007ffc95689048 [ 339.422100][T18392] [ 339.422111][T18392] Mem-Info: [ 339.652421][T18392] active_anon:10359 inactive_anon:521 isolated_anon:0 [ 339.652421][T18392] active_file:17996 inactive_file:7975 isolated_file:0 [ 339.652421][T18392] unevictable:8 dirty:146 writeback:0 [ 339.652421][T18392] slab_reclaimable:3591 slab_unreclaimable:30219 [ 339.652421][T18392] mapped:30239 shmem:2628 pagetables:2023 [ 339.652421][T18392] sec_pagetables:0 bounce:0 [ 339.652421][T18392] kernel_misc_reclaimable:0 [ 339.652421][T18392] free:1834784 free_pcp:8958 free_cma:0 [ 339.698773][T18392] Node 0 active_anon:41436kB inactive_anon:2084kB active_file:71984kB inactive_file:31900kB unevictable:32kB isolated(anon):0kB isolated(file):0kB mapped:120956kB dirty:584kB writeback:0kB shmem:10512kB kernel_stack:4128kB pagetables:8208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.726808][T18392] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.755633][T18392] lowmem_reserve[]: 0 2883 7862 7862 [ 339.761025][T18392] Node 0 DMA32 free:2949232kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952864kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 339.791538][T18392] lowmem_reserve[]: 0 0 4978 4978 [ 339.796703][T18392] Node 0 Normal free:4374544kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41436kB inactive_anon:2084kB active_file:71984kB inactive_file:31900kB unevictable:32kB writepending:584kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:31768kB local_pcp:3000kB free_cma:0kB [ 339.829714][T18392] lowmem_reserve[]: 0 0 0 0 [ 339.834789][T18392] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 339.848278][T18392] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949232kB [ 339.865740][T18392] Node 0 Normal: 1402*4kB (UME) 1529*8kB (UM) 1016*16kB (UME) 853*32kB (UME) 815*64kB (UME) 395*128kB (UME) 161*256kB (UME) 91*512kB (UME) 84*1024kB (UME) 39*2048kB (UME) 966*4096kB (UM) = 4374544kB [ 339.887374][T18392] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 339.896885][T18392] 28658 total pagecache pages [ 339.901743][T18392] 63 pages in swap cache [ 339.906043][T18392] Free swap = 108100kB [ 339.910233][T18392] Total swap = 124996kB [ 339.914432][T18392] 2097051 pages RAM [ 339.918352][T18392] 0 pages HighMem/MovableOnly [ 339.923078][T18392] 80435 pages reserved [ 340.003020][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 340.003039][ T29] audit: type=1400 audit(1573208.516:38187): avc: denied { write } for pid=18419 comm="syz.3.4933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 340.067415][ T29] audit: type=1400 audit(1573208.556:38188): avc: denied { compute_member } for pid=18427 comm="syz.4.4937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 340.088256][ T29] audit: type=1400 audit(1573208.576:38189): avc: denied { read write } for pid=18431 comm="syz.5.4939" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 340.111947][ T29] audit: type=1400 audit(1573208.576:38190): avc: denied { open } for pid=18431 comm="syz.5.4939" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 340.155115][ T29] audit: type=1400 audit(1573208.666:38191): avc: denied { map } for pid=18439 comm="syz.0.4942" path="socket:[55831]" dev="sockfs" ino=55831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 340.216034][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4945'. [ 340.418703][T18470] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 340.467511][ T29] audit: type=1326 audit(1573208.976:38192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 340.491525][ T29] audit: type=1326 audit(1573208.976:38193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 340.515883][ T29] audit: type=1326 audit(1573208.976:38194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 340.540059][ T29] audit: type=1326 audit(1573208.976:38195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 340.563594][ T29] audit: type=1326 audit(1573208.976:38196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 340.721845][T18488] SELinux: Context system_u:object_r:setrans_var_run_t:s0 is not valid (left unmapped). [ 340.813366][T18502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4972'. [ 340.842960][T18505] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 341.153942][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4989'. [ 341.163100][T18538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4989'. [ 341.200550][T18538] netlink: 'syz.1.4989': attribute type 6 has an invalid length. [ 341.276530][T18550] sctp: [Deprecated]: syz.5.4995 (pid 18550) Use of int in maxseg socket option. [ 341.276530][T18550] Use struct sctp_assoc_value instead [ 341.427406][T18574] random: crng reseeded on system resumption [ 341.456925][T18579] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 341.581328][T18593] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 341.757835][T18606] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 342.129585][T18641] all: renamed from lo (while UP) [ 342.243350][T18660] netlink: 'syz.4.5046': attribute type 29 has an invalid length. [ 342.261747][T18660] netlink: 'syz.4.5046': attribute type 29 has an invalid length. [ 342.276578][T18660] netlink: 'syz.4.5046': attribute type 29 has an invalid length. [ 342.288800][T18663] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 342.371913][T18669] all: renamed from lo (while UP) [ 342.393683][T18671] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 342.731071][T18696] all: renamed from lo (while UP) [ 342.830717][T18707] support for the xor transformation has been removed. [ 343.051251][T18755] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 343.060077][T18754] netlink: 'syz.5.5091': attribute type 1 has an invalid length. [ 343.623353][T18779] dummy0: entered promiscuous mode [ 343.628811][T18778] dummy0: left promiscuous mode [ 343.722291][T18790] Invalid ELF header magic: != ELF [ 344.023244][T18824] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 344.133751][T18846] __nla_validate_parse: 8 callbacks suppressed [ 344.133772][T18846] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5132'. [ 344.260671][T18861] all: renamed from lo (while UP) [ 344.284651][T18864] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5140'. [ 344.310711][T18866] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 344.516875][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5155'. [ 344.555636][T18901] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 344.590617][T18905] hsr0: entered promiscuous mode [ 344.601397][T18905] macsec1: entered allmulticast mode [ 344.607114][T18905] hsr0: entered allmulticast mode [ 344.612216][T18905] hsr_slave_0: entered allmulticast mode [ 344.617941][T18905] hsr_slave_1: entered allmulticast mode [ 344.626546][T18905] hsr0: left allmulticast mode [ 344.631433][T18905] hsr_slave_0: left allmulticast mode [ 344.636952][T18905] hsr_slave_1: left allmulticast mode [ 344.724884][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5164'. [ 344.786702][T18917] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 344.920201][T18927] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 345.018212][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 345.018230][ T29] audit: type=1400 audit(1573213.524:38922): avc: denied { read write } for pid=18943 comm="syz.4.5178" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:setrans_var_run_t:s0" [ 345.053787][ T29] audit: type=1400 audit(1573213.524:38923): avc: denied { open } for pid=18943 comm="syz.4.5178" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:setrans_var_run_t:s0" [ 345.171363][T18960] sctp: [Deprecated]: syz.1.5181 (pid 18960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.171363][T18960] Use struct sctp_sack_info instead [ 345.207956][T18968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5190'. [ 345.277983][T18981] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 345.294955][ T29] audit: type=1326 audit(1573213.804:38924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 345.319404][ T29] audit: type=1326 audit(1573213.804:38925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 345.344033][ T29] audit: type=1326 audit(1573213.804:38926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 345.367924][ T29] audit: type=1326 audit(1573213.804:38927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 345.391649][ T29] audit: type=1326 audit(1573213.804:38928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 345.415554][ T29] audit: type=1326 audit(1573213.804:38929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 345.447182][ T29] audit: type=1326 audit(1573213.924:38930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 345.471010][ T29] audit: type=1326 audit(1573213.924:38931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.5.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa53eb69 code=0x7ffc0000 [ 345.525968][T18996] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 345.591084][T19003] team0: Mode changed to "broadcast" [ 345.630394][T19007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19007 comm=syz.3.5206 [ 346.399639][T19075] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 346.442568][T19080] netlink: 'syz.0.5238': attribute type 1 has an invalid length. [ 346.450547][T19080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5238'. [ 346.579180][T19094] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 346.869545][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5254'. [ 346.878677][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5254'. [ 346.993439][T19121] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 347.023387][T19125] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5259'. [ 347.140005][T19135] speed is unknown, defaulting to 1000 [ 347.146934][T19135] speed is unknown, defaulting to 1000 [ 347.156663][T19137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5265'. [ 347.223279][T19135] speed is unknown, defaulting to 1000 [ 347.363623][T19153] SELinux: failed to load policy [ 347.400351][T19158] netlink: 'syz.5.5275': attribute type 21 has an invalid length. [ 347.659287][T19182] 9pnet_fd: Insufficient options for proto=fd [ 348.075002][T19230] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 348.603846][ T10] kernel read not supported for file /usbmon7 (pid: 10 comm: kworker/0:1) [ 348.832088][T19268] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 348.852910][T19277] netlink: 'syz.4.5329': attribute type 1 has an invalid length. [ 348.861055][T19277] netlink: 'syz.4.5329': attribute type 2 has an invalid length. [ 349.092295][T19303] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 349.230577][T19334] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.301667][ T37] hid_parser_main: 33 callbacks suppressed [ 349.301691][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.315852][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.326952][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.334624][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.342479][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.351210][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.358840][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.366660][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.374250][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.382146][ T37] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 349.401740][ T37] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 349.446946][T19349] fido_id[19349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 349.576681][T19362] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 349.624531][T19363] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 349.918843][T19379] speed is unknown, defaulting to 1000 [ 349.925946][T19379] speed is unknown, defaulting to 1000 [ 349.963378][T19379] speed is unknown, defaulting to 1000 [ 350.073035][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 350.073051][ T29] audit: type=1400 audit(1573218.559:39394): avc: denied { create } for pid=19381 comm="syz.1.5376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.102833][ T29] audit: type=1400 audit(1573218.559:39395): avc: denied { write } for pid=19381 comm="syz.1.5376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.123486][ T29] audit: type=1400 audit(1573218.559:39396): avc: denied { read } for pid=19381 comm="syz.1.5376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.129805][T19347] syz.4.5361 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 350.143942][ T29] audit: type=1400 audit(1573218.579:39397): avc: denied { ioctl } for pid=19381 comm="syz.1.5376" path="socket:[59401]" dev="sockfs" ino=59401 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.158115][T19347] CPU: 0 UID: 0 PID: 19347 Comm: syz.4.5361 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 350.158159][T19347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.158178][T19347] Call Trace: [ 350.158189][T19347] [ 350.158201][T19347] __dump_stack+0x1d/0x30 [ 350.158232][T19347] dump_stack_lvl+0xe8/0x140 [ 350.158262][T19347] dump_stack+0x15/0x1b [ 350.158326][T19347] dump_header+0x81/0x220 [ 350.158374][T19347] oom_kill_process+0x342/0x400 [ 350.158503][T19347] out_of_memory+0x979/0xb80 [ 350.158575][T19347] try_charge_memcg+0x5e6/0x9e0 [ 350.158618][T19347] obj_cgroup_charge_pages+0xa6/0x150 [ 350.158679][T19347] __memcg_kmem_charge_page+0x9f/0x170 [ 350.158777][T19347] __alloc_frozen_pages_noprof+0x188/0x360 [ 350.158834][T19347] alloc_pages_mpol+0xb3/0x250 [ 350.158940][T19347] alloc_pages_noprof+0x90/0x130 [ 350.159040][T19347] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 350.159140][T19347] __kvmalloc_node_noprof+0x30f/0x4e0 [ 350.159193][T19347] ? ip_set_alloc+0x1f/0x30 [ 350.159297][T19347] ? ip_set_alloc+0x1f/0x30 [ 350.159335][T19347] ? hash_netiface_create+0x21b/0x740 [ 350.159377][T19347] ? __kmalloc_cache_noprof+0x189/0x320 [ 350.159427][T19347] ip_set_alloc+0x1f/0x30 [ 350.159494][T19347] hash_netiface_create+0x282/0x740 [ 350.159539][T19347] ? __pfx_hash_netiface_create+0x10/0x10 [ 350.159601][T19347] ip_set_create+0x3cc/0x960 [ 350.159684][T19347] ? __nla_parse+0x40/0x60 [ 350.159717][T19347] nfnetlink_rcv_msg+0x4c6/0x590 [ 350.159786][T19347] netlink_rcv_skb+0x120/0x220 [ 350.159892][T19347] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 350.159940][T19347] nfnetlink_rcv+0x16b/0x1690 [ 350.159979][T19347] ? nlmon_xmit+0x4f/0x60 [ 350.160039][T19347] ? consume_skb+0x49/0x150 [ 350.160092][T19347] ? nlmon_xmit+0x4f/0x60 [ 350.160124][T19347] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 350.160256][T19347] ? __dev_queue_xmit+0x1200/0x2000 [ 350.160309][T19347] ? __dev_queue_xmit+0x182/0x2000 [ 350.160372][T19347] ? ref_tracker_free+0x37d/0x3e0 [ 350.160429][T19347] ? __netlink_deliver_tap+0x4dc/0x500 [ 350.160483][T19347] netlink_unicast+0x5c0/0x690 [ 350.160534][T19347] netlink_sendmsg+0x58b/0x6b0 [ 350.160599][T19347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.160647][T19347] __sock_sendmsg+0x145/0x180 [ 350.160684][T19347] ____sys_sendmsg+0x31e/0x4e0 [ 350.160752][T19347] ___sys_sendmsg+0x17b/0x1d0 [ 350.160835][T19347] __x64_sys_sendmsg+0xd4/0x160 [ 350.160926][T19347] x64_sys_call+0x191e/0x2ff0 [ 350.160958][T19347] do_syscall_64+0xd2/0x200 [ 350.160993][T19347] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 350.161036][T19347] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 350.161096][T19347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.161158][T19347] RIP: 0033:0x7ff240a1eb69 [ 350.161184][T19347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.161211][T19347] RSP: 002b:00007ff23f087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.161239][T19347] RAX: ffffffffffffffda RBX: 00007ff240c45fa0 RCX: 00007ff240a1eb69 [ 350.161257][T19347] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 350.161276][T19347] RBP: 00007ff240aa1df1 R08: 0000000000000000 R09: 0000000000000000 [ 350.161374][T19347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.161392][T19347] R13: 0000000000000000 R14: 00007ff240c45fa0 R15: 00007ffff6ad6528 [ 350.161420][T19347] [ 350.161429][T19347] memory: usage 307200kB, limit 307200kB, failcnt 106 [ 350.183502][ T29] audit: type=1400 audit(1573218.599:39398): avc: denied { read } for pid=19381 comm="syz.1.5376" path="socket:[59401]" dev="sockfs" ino=59401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.195852][T19347] memory+swap: usage 308244kB, limit 9007199254740988kB, failcnt 0 [ 350.458880][ T29] audit: type=1400 audit(1573218.946:39399): avc: denied { create } for pid=19384 comm="syz.5.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.459858][T19347] kmem: usage 306916kB, limit 9007199254740988kB, failcnt 0 [ 350.459877][T19347] Memory cgroup stats for /syz4: [ 350.461050][T19347] cache 151552 [ 350.484661][ T29] audit: type=1400 audit(1573218.976:39400): avc: denied { ioctl } for pid=19384 comm="syz.5.5377" path="socket:[59409]" dev="sockfs" ino=59409 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.488670][T19347] rss 32768 [ 350.488682][T19347] shmem 16384 [ 350.639697][T19347] mapped_file 8192 [ 350.643569][T19347] dirty 8192 [ 350.646784][T19347] writeback 0 [ 350.650279][T19347] workingset_refault_anon 685 [ 350.655206][T19347] workingset_refault_file 64 [ 350.659956][T19347] swap 974848 [ 350.663458][T19347] swapcached 106496 [ 350.667356][T19347] pgpgin 363568 [ 350.670877][T19347] pgpgout 363505 [ 350.674451][T19347] pgfault 339585 [ 350.677995][T19347] pgmajfault 127 [ 350.681615][T19347] inactive_anon 98304 [ 350.685699][T19347] active_anon 8192 [ 350.689695][T19347] inactive_file 90112 [ 350.693836][T19347] active_file 45056 [ 350.697994][T19347] unevictable 16384 [ 350.701950][T19347] hierarchical_memory_limit 314572800 [ 350.707474][T19347] hierarchical_memsw_limit 9223372036854771712 [ 350.713853][T19347] total_cache 151552 [ 350.717753][T19347] total_rss 32768 [ 350.721473][T19347] total_shmem 16384 [ 350.725317][T19347] total_mapped_file 8192 [ 350.729599][T19347] total_dirty 8192 [ 350.733524][T19347] total_writeback 0 [ 350.737363][T19347] total_workingset_refault_anon 685 [ 350.742590][T19347] total_workingset_refault_file 64 [ 350.747701][T19347] total_swap 974848 [ 350.751563][T19347] total_swapcached 106496 [ 350.755954][T19347] total_pgpgin 363568 [ 350.759994][T19347] total_pgpgout 363505 [ 350.764185][T19347] total_pgfault 339587 [ 350.768270][T19347] total_pgmajfault 127 [ 350.772391][T19347] total_inactive_anon 98304 [ 350.777012][T19347] total_active_anon 8192 [ 350.781610][T19347] total_inactive_file 90112 [ 350.786157][T19347] total_active_file 45056 [ 350.790734][T19347] total_unevictable 16384 [ 350.795093][T19347] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5361,pid=19345,uid=0 [ 350.810505][T19347] Memory cgroup out of memory: Killed process 19347 (syz.4.5361) total-vm:93632kB, anon-rss:1024kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 350.948817][ T29] audit: type=1400 audit(1573219.432:39401): avc: denied { ioctl } for pid=19397 comm="syz.3.5382" path="socket:[59437]" dev="sockfs" ino=59437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.020304][ T29] audit: type=1400 audit(1573219.501:39402): avc: denied { read } for pid=19407 comm="syz.1.5387" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 351.041649][ T29] audit: type=1400 audit(1573219.501:39403): avc: denied { open } for pid=19407 comm="syz.1.5387" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 351.090836][T19347] syz.4.5361 (19347) used greatest stack depth: 6408 bytes left [ 351.122056][T19412] __nla_validate_parse: 3 callbacks suppressed [ 351.122074][T19412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5389'. [ 351.175649][T19420] ALSA: seq fatal error: cannot create timer (-19) [ 351.270789][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5402'. [ 351.293124][T19443] bridge0: entered promiscuous mode [ 351.310610][T19443] bridge0: port 1(macvlan0) entered blocking state [ 351.317484][T19443] bridge0: port 1(macvlan0) entered disabled state [ 351.330351][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5408'. [ 351.348970][T19443] macvlan0: entered allmulticast mode [ 351.354581][T19443] bridge0: entered allmulticast mode [ 351.376335][T19443] macvlan0: left allmulticast mode [ 351.381580][T19443] bridge0: left allmulticast mode [ 351.388963][T19443] bridge0: left promiscuous mode [ 351.414541][T19462] ALSA: seq fatal error: cannot create timer (-19) [ 351.607902][T19496] 9pnet_fd: Insufficient options for proto=fd [ 351.677690][T19513] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 351.887565][T19549] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 351.887565][T19549] program syz.4.5453 not setting count and/or reply_len properly [ 352.030486][T19562] 9pnet_fd: Insufficient options for proto=fd [ 352.362407][T19586] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 352.622650][T19617] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 352.861101][T19634] rdma_op ffff888119aa7980 conn xmit_rdma 0000000000000000 [ 353.034648][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5500'. [ 353.079119][T19656] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 353.189005][T19668] all: renamed from lo (while UP) [ 353.226593][T19668] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 353.247221][T19678] SELinux: policydb version 51586048 does not match my version range 15-35 [ 353.266663][T19678] SELinux: failed to load policy [ 353.326459][T19691] 9p: Unknown access argument 0xffffffffffffffff: -22 [ 353.438328][T19705] all: renamed from lo (while UP) [ 353.460180][T19705] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 353.493218][T19716] dummy0: mtu less than device minimum [ 353.653956][T19735] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 353.989158][T19772] netlink: 'syz.5.5555': attribute type 1 has an invalid length. [ 354.436871][T19790] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5563'. [ 354.825198][T19839] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 354.891252][T19849] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 355.029328][T19866] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 355.082570][T19877] IPv6: Can't replace route, no match found [ 355.127376][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5608'. [ 355.137435][T19885] IPVS: Error joining to the multicast group [ 355.193370][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 355.193389][ T29] audit: type=1326 audit(1573223.639:39937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.1.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.234320][T19891] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 355.234540][ T29] audit: type=1326 audit(1573223.649:39938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.243018][T19891] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 355.266391][ T29] audit: type=1326 audit(1573223.649:39939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.297348][ T29] audit: type=1326 audit(1573223.649:39940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.304344][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5613'. [ 355.321304][ T29] audit: type=1326 audit(1573223.649:39941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.332601][T19897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5613'. [ 355.354017][ T29] audit: type=1326 audit(1573223.649:39942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.385093][T19899] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 355.387441][ T29] audit: type=1326 audit(1573223.649:39943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.419998][ T29] audit: type=1326 audit(1573223.649:39944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.443425][ T29] audit: type=1326 audit(1573223.649:39945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.467195][ T29] audit: type=1326 audit(1573223.649:39946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.1.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 355.516217][T19906] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 355.516217][T19906] program syz.3.5616 not setting count and/or reply_len properly [ 355.742791][T19928] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 355.755631][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5629'. [ 355.905056][T19959] vhci_hcd: invalid port number 96 [ 355.910338][T19959] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 356.018747][T19979] syzkaller1: entered promiscuous mode [ 356.024391][T19979] syzkaller1: entered allmulticast mode [ 356.109572][T19997] ALSA: seq fatal error: cannot create timer (-22) [ 356.277554][T20019] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 356.362941][T20027] IPv6: Can't replace route, no match found [ 356.482449][T20041] program syz.5.5681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.494188][T20043] random: crng reseeded on system resumption [ 356.507315][T20043] Restarting kernel threads ... [ 356.512564][T20043] Done restarting kernel threads. [ 356.589676][T20054] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 356.613194][T20053] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 356.706119][T20060] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 356.810753][T20064] sctp: [Deprecated]: syz.5.5690 (pid 20064) Use of int in maxseg socket option. [ 356.810753][T20064] Use struct sctp_assoc_value instead [ 356.985252][T20083] sd 0:0:1:0: device reset [ 357.105874][T20102] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 357.177115][T20116] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 357.216521][T20114] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 357.288541][T20132] random: crng reseeded on system resumption [ 357.299695][T20132] Restarting kernel threads ... [ 357.305112][T20132] Done restarting kernel threads. [ 357.320212][T20135] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 358.489584][T20215] netlink: 'syz.5.5757': attribute type 9 has an invalid length. [ 358.564873][T20227] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 358.935708][T20254] all: renamed from lo (while UP) [ 358.946842][T20254] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 359.136452][T20285] tbf_change: 1 callbacks suppressed [ 359.136471][T20285] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 359.154757][T20287] all: renamed from lo (while UP) [ 359.169401][T20287] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 359.481730][T20321] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 360.053538][T20333] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 360.163622][T20336] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 360.171483][T20336] SELinux: failed to load policy [ 360.207120][T20341] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 360.232393][T20343] syzkaller1: entered promiscuous mode [ 360.238163][T20343] syzkaller1: entered allmulticast mode [ 360.250205][T20345] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 360.268557][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 360.268571][ T29] audit: type=1326 audit(1573228.682:40757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.327696][ T29] audit: type=1326 audit(1573228.721:40758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.351242][ T29] audit: type=1326 audit(1573228.721:40759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.376268][ T29] audit: type=1326 audit(1573228.721:40760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.399781][ T29] audit: type=1326 audit(1573228.721:40761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.423280][ T29] audit: type=1326 audit(1573228.721:40762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.446636][ T29] audit: type=1326 audit(1573228.721:40763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.470104][ T29] audit: type=1326 audit(1573228.721:40764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.493535][ T29] audit: type=1326 audit(1573228.721:40765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.517217][ T29] audit: type=1326 audit(1573228.721:40766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20344 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb61981eb69 code=0x7ffc0000 [ 360.629875][T20363] dummy0: entered promiscuous mode [ 360.645169][T20367] hub 6-0:1.0: USB hub found [ 360.650359][T20367] hub 6-0:1.0: 8 ports detected [ 360.678311][T20363] dummy0: left promiscuous mode [ 360.700220][T20373] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 361.012758][T20411] SELinux: policydb version 0 does not match my version range 15-35 [ 361.030334][T20411] SELinux: failed to load policy [ 361.076071][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5848'. [ 361.085396][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5848'. [ 361.175209][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5857'. [ 361.297047][T20453] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 361.431921][T20475] binfmt_misc: register: failed to install interpreter file ./file0 [ 361.665519][T20489] netlink: 'syz.5.5881': attribute type 1 has an invalid length. [ 361.983396][T20505] netlink: 'syz.0.5889': attribute type 4 has an invalid length. [ 362.048945][T20509] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 362.362446][ T37] kernel write not supported for file bpf-prog (pid: 37 comm: kworker/1:1) [ 362.442827][T20527] SELinux: failed to load policy [ 362.454407][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5901'. [ 362.706867][T20501] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 362.746369][T20554] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5913'. [ 362.994468][T20577] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5924'. [ 363.084995][T20580] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 363.501281][T20609] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5939'. [ 363.556487][T20619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5943'. [ 363.752299][T20651] netlink: 268 bytes leftover after parsing attributes in process `syz.4.5958'. [ 364.125252][T20684] netlink: 'syz.4.5974': attribute type 4 has an invalid length. [ 364.285569][T20696] program syz.4.5980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.398457][T20703] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 364.454214][T20707] SELinux: failed to load policy [ 364.598978][T20717] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 364.687970][T20727] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 364.941289][T20744] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 365.091902][T20753] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 365.178721][T20757] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 365.388003][T20777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6013'. [ 365.475516][T20787] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 365.491366][T20788] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 365.509075][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 365.509090][ T29] audit: type=1326 audit(1573233.886:41180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20784 comm="syz.4.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff240a1eb69 code=0x7ffc0000 [ 365.572543][ T29] audit: type=1326 audit(1573233.886:41181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 365.596115][ T29] audit: type=1326 audit(1573233.886:41182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 365.619823][ T29] audit: type=1326 audit(1573233.886:41183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 365.643205][ T29] audit: type=1326 audit(1573233.886:41184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 365.666994][ T29] audit: type=1326 audit(1573233.886:41185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 365.690392][ T29] audit: type=1326 audit(1573233.886:41186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 365.714115][ T29] audit: type=1326 audit(1573233.886:41187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 365.737687][ T29] audit: type=1326 audit(1573233.886:41188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 365.761932][ T29] audit: type=1326 audit(1573233.886:41189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20782 comm="syz.3.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 366.053809][T20803] SELinux: policydb table sizes (131080,302) do not match mine (8,9) [ 366.062220][T20803] SELinux: failed to load policy [ 366.161943][T20827] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6037'. [ 366.302105][T20851] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6049'. [ 366.367114][T20861] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6054'. [ 366.484334][T20876] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 366.547340][T20885] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 366.694290][T20896] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6069'. [ 367.799785][T20947] gretap0: entered promiscuous mode [ 367.895986][T20952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6094'. [ 368.380097][T20994] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6114'. [ 368.654849][T21008] syzkaller1: entered promiscuous mode [ 368.660590][T21008] syzkaller1: entered allmulticast mode [ 369.124120][T21054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6143'. [ 369.302347][T21073] 9pnet_fd: Insufficient options for proto=fd [ 369.437371][T21094] loop9: detected capacity change from 0 to 7 [ 369.454407][T21094] buffer_io_error: 6 callbacks suppressed [ 369.454433][T21094] Buffer I/O error on dev loop9, logical block 0, async page read [ 369.469324][T21094] Buffer I/O error on dev loop9, logical block 0, async page read [ 369.477533][T21094] loop9: unable to read partition table [ 369.483755][T21094] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 369.483755][T21094] ) failed (rc=-5) [ 369.500497][T21097] Buffer I/O error on dev loop9, logical block 0, async page read [ 369.524868][T21097] Buffer I/O error on dev loop9, logical block 0, async page read [ 369.536667][T21097] Buffer I/O error on dev loop9, logical block 0, async page read [ 369.565294][T21097] Buffer I/O error on dev loop9, logical block 0, async page read [ 369.585371][T21097] Buffer I/O error on dev loop9, logical block 0, async page read [ 369.634978][T21103] ref_ctr_offset mismatch. inode: 0x1a79 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000020 [ 369.791413][T21116] tbf_change: 5 callbacks suppressed [ 369.791433][T21116] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 369.886656][T21125] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 369.940563][T21129] speed is unknown, defaulting to 1000 [ 369.948530][T21129] speed is unknown, defaulting to 1000 [ 369.967183][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6180'. [ 369.991824][T21137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6182'. [ 370.076999][T21129] speed is unknown, defaulting to 1000 [ 370.303738][T21163] syzkaller1: entered promiscuous mode [ 370.309490][T21163] syzkaller1: entered allmulticast mode [ 370.463052][T21189] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 370.556157][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 370.556175][ T29] audit: type=1326 audit(1573238.904:41628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21181 comm="syz.1.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 370.594447][ T29] audit: type=1326 audit(1573238.934:41629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21181 comm="syz.1.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4225eb69 code=0x7ffc0000 [ 370.723659][T21208] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 370.755031][ T29] audit: type=1326 audit(1573239.103:41630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.3.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 370.778702][ T29] audit: type=1326 audit(1573239.103:41631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.3.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 370.803589][ T29] audit: type=1326 audit(1573239.103:41632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.3.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 370.830020][ T29] audit: type=1326 audit(1573239.103:41633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.3.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 370.997303][T21218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6219'. [ 371.025131][ T29] audit: type=1326 audit(1573239.202:41634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.3.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 371.052531][ T29] audit: type=1326 audit(1573239.202:41635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.3.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 371.080110][ T29] audit: type=1326 audit(1573239.202:41636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.3.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 371.105492][ T29] audit: type=1326 audit(1573239.252:41637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.3.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 371.177458][T21236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21236 comm=syz.0.6225 [ 371.190751][T21236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21236 comm=syz.0.6225 [ 371.339620][T21257] 9pnet_fd: Insufficient options for proto=fd [ 371.373344][T21262] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 371.439421][T21271] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 371.470139][T21275] syzkaller1: entered promiscuous mode [ 371.475838][T21275] syzkaller1: entered allmulticast mode [ 371.625278][T21284] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 371.771522][T21292] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6251'. [ 371.821676][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6254'. [ 371.853622][T21298] bond1: entered promiscuous mode [ 371.858694][T21298] bond1: entered allmulticast mode [ 371.874509][T21298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.889269][T21300] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 372.316654][T21341] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 372.368358][T21347] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6274'. [ 372.382750][T21343] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6274'. [ 372.387722][T21349] sctp: [Deprecated]: syz.0.6276 (pid 21349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.387722][T21349] Use struct sctp_sack_info instead [ 372.744670][T21375] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 373.195161][T21404] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 373.308511][T21414] batadv_slave_0: entered promiscuous mode [ 373.323131][T21413] batadv_slave_0: left promiscuous mode [ 373.678033][T21447] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21447 comm=syz.0.6322 [ 373.691528][T21447] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21447 comm=syz.0.6322 [ 374.032123][T21475] netlink: 'syz.0.6342': attribute type 3 has an invalid length. [ 374.344487][ T37] IPVS: starting estimator thread 0... [ 374.349253][T21484] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.427392][T21502] netlink: 'syz.4.6343': attribute type 3 has an invalid length. [ 374.444304][T21503] netlink: 'syz.1.6344': attribute type 1 has an invalid length. [ 374.462800][T21494] IPVS: using max 2352 ests per chain, 117600 per kthread [ 374.505144][T21507] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 374.522420][T21507] SELinux: failed to load policy [ 374.570670][T21512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6349'. [ 374.589329][T21515] SELinux: policydb version -1661192459 does not match my version range 15-35 [ 374.614159][T21515] SELinux: failed to load policy [ 374.713061][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6353'. [ 374.724361][T21522] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6353'. [ 374.746097][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6353'. [ 374.757260][T21522] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6353'. [ 374.766468][T21522] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6353'. [ 374.992661][T21541] tbf_change: 8 callbacks suppressed [ 374.992682][T21541] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 375.598876][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 375.598930][ T29] audit: type=1400 audit(1573243.915:42131): avc: denied { read write } for pid=21615 comm="syz.5.6396" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.615796][T21620] GUP no longer grows the stack in syz.3.6398 (21620): 200000004000-200000005000 (200000002000) [ 375.629112][ T29] audit: type=1400 audit(1573243.915:42132): avc: denied { open } for pid=21615 comm="syz.5.6396" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.639658][T21620] CPU: 0 UID: 0 PID: 21620 Comm: syz.3.6398 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 375.639697][T21620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.639715][T21620] Call Trace: [ 375.639725][T21620] [ 375.639737][T21620] __dump_stack+0x1d/0x30 [ 375.639770][T21620] dump_stack_lvl+0xe8/0x140 [ 375.639881][T21620] dump_stack+0x15/0x1b [ 375.639906][T21620] __get_user_pages+0x198d/0x1fa0 [ 375.639954][T21620] ? __rcu_read_unlock+0x4f/0x70 [ 375.639986][T21620] get_user_pages_remote+0x1d5/0x6d0 [ 375.640098][T21620] __access_remote_vm+0x15c/0x590 [ 375.640184][T21620] access_remote_vm+0x32/0x40 [ 375.640219][T21620] proc_pid_cmdline_read+0x32b/0x6c0 [ 375.640258][T21620] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 375.640350][T21620] vfs_readv+0x3f8/0x690 [ 375.640486][T21620] __x64_sys_preadv+0xfd/0x1c0 [ 375.640524][T21620] x64_sys_call+0x282a/0x2ff0 [ 375.640592][T21620] do_syscall_64+0xd2/0x200 [ 375.640628][T21620] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 375.640705][T21620] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 375.640736][T21620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.640847][T21620] RIP: 0033:0x7fbf734deb69 [ 375.640870][T21620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.640898][T21620] RSP: 002b:00007fbf71b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 375.640925][T21620] RAX: ffffffffffffffda RBX: 00007fbf73705fa0 RCX: 00007fbf734deb69 [ 375.640944][T21620] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 375.640962][T21620] RBP: 00007fbf73561df1 R08: 00000000fffffff9 R09: 0000000000000000 [ 375.640981][T21620] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 375.641007][T21620] R13: 0000000000000000 R14: 00007fbf73705fa0 R15: 00007ffc95689048 [ 375.641036][T21620] [ 375.654144][T21621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.687300][ T29] audit: type=1400 audit(1573243.964:42133): avc: denied { ioctl } for pid=21615 comm="syz.5.6396" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.722710][T21621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.739785][ T29] audit: type=1400 audit(1573244.014:42134): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 375.941443][T21634] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 375.950779][ T29] audit: type=1326 audit(1573244.253:42135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 375.974645][ T29] audit: type=1326 audit(1573244.253:42136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 375.998692][ T29] audit: type=1326 audit(1573244.253:42137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 376.023359][ T29] audit: type=1326 audit(1573244.253:42138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 376.049186][ T29] audit: type=1326 audit(1573244.253:42139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 376.073079][ T29] audit: type=1326 audit(1573244.273:42140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.3.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 376.130166][T21642] netlink: 'syz.0.6405': attribute type 1 has an invalid length. [ 376.627646][T21690] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 376.907410][T21716] __nla_validate_parse: 5 callbacks suppressed [ 376.907432][T21716] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6438'. [ 377.117563][T21735] netlink: 'syz.0.6447': attribute type 298 has an invalid length. [ 377.154254][T21741] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6450'. [ 377.250401][T21749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6454'. [ 377.313121][T21767] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6462'. [ 377.351884][T21771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6464'. [ 377.360933][T21771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6464'. [ 377.476985][T21787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6470'. [ 377.486488][T21787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6470'. [ 377.643638][T21805] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 377.847161][T21818] batadv_slave_1: entered promiscuous mode [ 377.854496][T21817] batadv_slave_1: left promiscuous mode [ 377.970227][T21825] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 378.165450][T21829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6485'. [ 378.175170][T21829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6485'. [ 378.269209][T21845] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 378.387163][T21851] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 378.479209][T21857] netlink: 'syz.1.6497': attribute type 1 has an invalid length. [ 378.750579][T21890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.759604][T21891] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 378.760009][T21890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.806003][T21897] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 378.899094][T21908] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 379.317470][T21931] netlink: 'syz.5.6532': attribute type 1 has an invalid length. [ 379.344596][T21933] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 379.644462][T21958] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 380.281716][T22015] tbf_change: 2 callbacks suppressed [ 380.281817][T22015] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 380.389323][ T385] tipc: Subscription rejected, illegal request [ 380.650829][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 380.650848][ T29] audit: type=1400 audit(1573248.947:42555): avc: denied { create } for pid=22037 comm="syz.5.6583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.703781][ T29] audit: type=1400 audit(1573248.957:42556): avc: denied { create } for pid=22041 comm="syz.4.6585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 380.724681][ T29] audit: type=1400 audit(1573248.957:42557): avc: denied { write } for pid=22041 comm="syz.4.6585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 380.745578][ T29] audit: type=1400 audit(1573248.977:42558): avc: denied { ioctl } for pid=22037 comm="syz.5.6583" path="socket:[67724]" dev="sockfs" ino=67724 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.770892][ T29] audit: type=1400 audit(1573248.997:42559): avc: denied { create } for pid=22043 comm="syz.4.6586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 380.796717][ T29] audit: type=1400 audit(1573249.056:42560): avc: denied { open } for pid=22045 comm="syz.4.6587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 380.816616][ T29] audit: type=1400 audit(1573249.056:42561): avc: denied { kernel } for pid=22045 comm="syz.4.6587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 380.883803][T22048] netlink: 'syz.1.6588': attribute type 1 has an invalid length. [ 380.925676][ T29] audit: type=1400 audit(1573249.166:42562): avc: denied { create } for pid=22047 comm="syz.1.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.946965][ T29] audit: type=1400 audit(1573249.166:42563): avc: denied { map_create } for pid=22047 comm="syz.1.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.971030][ T29] audit: type=1400 audit(1573249.166:42564): avc: denied { map_read map_write } for pid=22047 comm="syz.1.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 381.055728][T22050] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 381.190051][T22064] $H: left promiscuous mode [ 381.195450][T22064] bond_slave_0: left promiscuous mode [ 381.201453][T22064] bond_slave_1: left promiscuous mode [ 381.232347][T22064] 8021q: adding VLAN 0 to HW filter on device $H [ 381.254043][T22064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.400124][T22084] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 381.849503][T22137] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 381.866959][T22141] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 381.956791][T22153] Invalid ELF header magic: != ELF [ 382.035261][T22165] __nla_validate_parse: 22 callbacks suppressed [ 382.035280][T22165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6637'. [ 382.120810][T22174] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 382.590015][T22236] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 382.598739][T22234] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 382.748237][T22253] program syz.1.6671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.878808][T22265] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 383.068756][T22282] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 383.212604][T22296] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 383.328962][T22308] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 383.354953][T22312] openvswitch: netlink: Message has 6 unknown bytes. [ 383.444987][T22322] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6702'. [ 384.135960][T22357] netlink: 'syz.1.6718': attribute type 1 has an invalid length. [ 384.144066][T22357] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6718'. [ 384.598757][T22417] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6744'. [ 384.654992][T22424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6749'. [ 384.745544][T22441] netem: incorrect ge model size [ 384.750784][T22441] netem: change failed [ 385.095985][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6774'. [ 385.349337][T22506] tbf_change: 7 callbacks suppressed [ 385.349351][T22506] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 385.412515][T22513] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 385.530499][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6792'. [ 385.530524][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6792'. [ 386.257499][T22550] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 386.278400][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 386.278419][ T29] audit: type=1326 audit(1573254.549:43150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.405201][T22556] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 386.407439][ T29] audit: type=1326 audit(1573254.549:43151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.436022][ T29] audit: type=1326 audit(1573254.549:43152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.459848][ T29] audit: type=1326 audit(1573254.549:43153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.483372][ T29] audit: type=1326 audit(1573254.549:43154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.506944][ T29] audit: type=1326 audit(1573254.549:43155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.530735][ T29] audit: type=1326 audit(1573254.549:43156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.555053][ T29] audit: type=1326 audit(1573254.549:43157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.579175][ T29] audit: type=1326 audit(1573254.549:43158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.602727][ T29] audit: type=1326 audit(1573254.549:43159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.3.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf734deb69 code=0x7ffc0000 [ 386.726116][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6816'. [ 386.812822][T22583] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 386.864768][T22589] netem: incorrect ge model size [ 386.870312][T22589] netem: change failed [ 387.236967][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6837'. [ 387.305265][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6837'. [ 387.467455][T22610] Set syz1 is full, maxelem 65536 reached [ 387.517312][T22638] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6845'. [ 387.618316][T22633] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 387.643269][T22647] SELinux: failed to load policy [ 387.716289][T22657] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 387.805255][T22664] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 388.053657][T22673] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 388.391890][T22684] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6863'. [ 388.466068][T22688] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 388.572155][T22691] SELinux: failed to load policy [ 388.642000][T22700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6866'. [ 388.654794][ T31] bond0 (unregistering): (slave bridge2): Releasing active interface [ 388.709833][ T31] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 388.781082][ T31] $H (unregistering): (slave dummy0): Releasing backup interface [ 388.794390][ T31] $H (unregistering): Released all slaves [ 388.804080][ T31] bond1 (unregistering): Released all slaves [ 388.818131][ T31] bond0 (unregistering): Released all slaves [ 388.829858][ T31] bond2 (unregistering): Released all slaves [ 388.840897][ T10] infiniband srz1: ib_query_port failed (-19) [ 388.885790][ T31] tipc: Disabling bearer [ 388.891441][ T31] tipc: Disabling bearer [ 388.896841][ T31] tipc: Left network mode [ 388.925595][T22713] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 389.043111][ T31] veth1_to_team: left promiscuous mode [ 389.054793][ T31] bond_slave_0: left promiscuous mode [ 389.553104][T22791] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 389.842345][T22808] netlink: 404 bytes leftover after parsing attributes in process `syz.1.6897'. [ 390.050583][T22821] bridge0: port 1(batadv1) entered blocking state [ 390.057785][T22821] bridge0: port 1(batadv1) entered disabled state [ 390.070956][T22821] batadv1: entered allmulticast mode [ 390.077342][T22821] batadv1: entered promiscuous mode [ 390.148534][T22826] SELinux: failed to load policy [ 390.558277][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 390.567786][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 390.671605][T22899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6917'. [ 390.775453][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811a364a00: rx timeout, send abort [ 390.783854][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811a364e00: rx timeout, send abort [ 390.792385][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811a364a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 390.806866][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811a364e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 390.822195][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a365a00: rx timeout, send abort [ 390.830645][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a365a00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 390.867903][T22916] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 391.048660][T22939] speed is unknown, defaulting to 1000 [ 391.062419][T22939] speed is unknown, defaulting to 1000 [ 391.109095][T22941] netlink: 'syz.1.6925': attribute type 6 has an invalid length. [ 391.161872][T22939] speed is unknown, defaulting to 1000 [ 391.300410][ C0] ================================================================== [ 391.308674][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 391.316004][ C0] [ 391.318353][ C0] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 1: [ 391.326867][ C0] wq_worker_tick+0x60/0x230 [ 391.331514][ C0] sched_tick+0x11a/0x270 [ 391.335921][ C0] update_process_times+0x15f/0x190 [ 391.341252][ C0] tick_nohz_handler+0x249/0x2d0 [ 391.346218][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 391.351434][ C0] hrtimer_interrupt+0x21a/0x460 [ 391.356481][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 391.362430][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 391.368695][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 391.374710][ C0] __sanitizer_cov_trace_pc+0x0/0x70 [ 391.380145][ C0] n_tty_receive_buf_common+0x947/0xbe0 [ 391.385851][ C0] n_tty_receive_buf2+0x33/0x40 [ 391.390786][ C0] tty_ldisc_receive_buf+0x63/0xf0 [ 391.395952][ C0] tty_port_default_receive_buf+0x59/0x90 [ 391.401736][ C0] flush_to_ldisc+0x148/0x340 [ 391.406460][ C0] process_scheduled_works+0x4ce/0x9d0 [ 391.411968][ C0] worker_thread+0x582/0x770 [ 391.416621][ C0] kthread+0x486/0x510 [ 391.420729][ C0] ret_from_fork+0xdd/0x150 [ 391.425356][ C0] ret_from_fork_asm+0x1a/0x30 [ 391.430261][ C0] [ 391.432691][ C0] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 0: [ 391.440773][ C0] wq_worker_tick+0x60/0x230 [ 391.445956][ C0] sched_tick+0x11a/0x270 [ 391.450485][ C0] update_process_times+0x15f/0x190 [ 391.455820][ C0] tick_nohz_handler+0x249/0x2d0 [ 391.461121][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 391.466422][ C0] hrtimer_interrupt+0x21a/0x460 [ 391.471554][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 391.477678][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 391.483606][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 391.489734][ C0] __tsan_unaligned_write8+0x11e/0x190 [ 391.495317][ C0] n_tty_receive_char+0x437/0x6a0 [ 391.500540][ C0] n_tty_receive_buf_standard+0x473/0x2f10 [ 391.506484][ C0] n_tty_receive_buf_common+0x805/0xbe0 [ 391.512067][ C0] n_tty_receive_buf2+0x33/0x40 [ 391.517148][ C0] tty_ldisc_receive_buf+0x63/0xf0 [ 391.522412][ C0] tty_port_default_receive_buf+0x59/0x90 [ 391.528245][ C0] flush_to_ldisc+0x148/0x340 [ 391.533040][ C0] process_scheduled_works+0x4ce/0x9d0 [ 391.538661][ C0] worker_thread+0x582/0x770 [ 391.543292][ C0] kthread+0x486/0x510 [ 391.547384][ C0] ret_from_fork+0xdd/0x150 [ 391.552013][ C0] ret_from_fork_asm+0x1a/0x30 [ 391.556895][ C0] [ 391.559417][ C0] value changed: 0x000000000186a000 -> 0x000000000186c710 [ 391.566621][ C0] [ 391.568956][ C0] Reported by Kernel Concurrency Sanitizer on: [ 391.575111][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 391.587627][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.597963][ C0] Workqueue: events_unbound flush_to_ldisc [ 391.603898][ C0] ==================================================================