last executing test programs: 2m57.71957506s ago: executing program 1 (id=808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='~', 0x1}], 0x1}, 0x40040) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r3, 0x2}, 0x8) 2m57.632469541s ago: executing program 1 (id=812): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1b, 0x12, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x804) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2011) 2m57.559943802s ago: executing program 1 (id=815): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, 0x0, 0xfdef) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 2m57.541396892s ago: executing program 1 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 2m57.520858422s ago: executing program 1 (id=817): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 2m57.175405987s ago: executing program 1 (id=822): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c0001"], 0x118}}, 0x0) 2m57.162400357s ago: executing program 32 (id=822): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c0001"], 0x118}}, 0x0) 2.147038062s ago: executing program 4 (id=5624): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 2.031820373s ago: executing program 4 (id=5629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000010a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) 1.860176445s ago: executing program 0 (id=5633): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.778794886s ago: executing program 0 (id=5636): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r1, &(0x7f00000027c0)={0x8, {"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", 0xffffffffffffff48}}, 0x1006) socket$key(0xf, 0x3, 0x2) fallocate(r0, 0x0, 0x803, 0x2000404) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000005c0)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 1.216001244s ago: executing program 0 (id=5649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2c, 0x20000000, 0x1, 0x0, 0x542, {0x2, 0x0, 0x794, 0x2, 0xfff, 0x966c}, {0x9, 0x1, 0x2, 0x2, 0x5, 0x5}, 0x7, 0x0, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x3, 0x7, 0x4, 0x9, 0x5, 0x3, 0x3, 0xa3d5, 0x9, 0x5, 0x7, 0xc23, 0x100, 0x7, 0x5a, 0x5, 0x5, 0xffffffff, 0x8, 0x4, 0x9, 0x4000, 0xfff, 0x1, 0x7fffffff, 0x400, 0x6cf3768d, 0xf, 0x2, 0x5, 0x9, 0x6, 0x5, 0x1, 0x0, 0x2, 0x8, 0x6, 0x2, 0x8000, 0x9, 0xf3, 0x8, 0x1, 0x800, 0xa9, 0x6, 0x56c, 0x9f, 0x7, 0x4, 0x4000, 0x4, 0xfffffff7, 0xfffffff7, 0x200, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0xc9ed, 0xfffffffc, 0x4, 0x1000, 0x7, 0x81, 0x101, 0x7851, 0x9, 0x7, 0x4, 0x6, 0x6, 0x5, 0x4, 0x4, 0xfff00000, 0x0, 0xe, 0x7, 0xc, 0x5, 0x7fff, 0x80000001, 0x3, 0xb, 0xa966, 0x3, 0x1ff, 0x0, 0x2069, 0x8000, 0x3, 0x8, 0x7, 0x5, 0x7, 0xffff, 0x6, 0x1ff, 0x0, 0x1, 0x3, 0x9, 0x9, 0x9, 0xd3, 0x9, 0x2, 0x3, 0x6, 0x9, 0x6, 0x5, 0xfff, 0x80000000, 0x401, 0x0, 0x0, 0x10, 0x1, 0x6, 0x10, 0xc0, 0x5, 0x2, 0x8, 0x3, 0x800, 0x5, 0xdb, 0x3, 0xdb, 0x8, 0x1, 0x6, 0x9, 0x1, 0x3, 0x6, 0x1, 0x2, 0xc4b4, 0x4, 0x40, 0x401, 0xf0e2, 0x4, 0x8, 0x2, 0x2, 0x7, 0x9, 0x3, 0x2, 0x3, 0x8, 0x3, 0x1, 0x4, 0x6, 0x6, 0x6, 0x4, 0x2, 0x5, 0xdc8, 0x15fb, 0x6, 0x6, 0xffffffef, 0x3, 0x2e80, 0x1, 0x0, 0x9c1, 0x0, 0x4, 0x4, 0x2, 0x8368, 0x9, 0x3, 0xa, 0x0, 0x158, 0x5, 0x8f, 0x7fffffff, 0x6, 0x7, 0x4, 0x7fff, 0x5, 0x200, 0x96, 0x1b6, 0x0, 0x0, 0x200, 0x9839, 0x6, 0x6, 0x7, 0x7, 0x6, 0x1f7c0000, 0x5, 0xfffffffd, 0x5, 0x4, 0x8, 0x1, 0x9, 0x3, 0x237a, 0x1a, 0x5, 0x2, 0x10001, 0x10000, 0x0, 0x4, 0x92, 0x0, 0xa, 0x9, 0x21, 0x4, 0x9, 0x7911159a, 0x6, 0x2, 0x80000000, 0x6, 0x7, 0xc, 0x101, 0x7ff, 0x7, 0x8, 0xfffffff8, 0xed60, 0x2, 0x3, 0x7, 0xdbf1, 0xf3, 0x3, 0xe, 0x4]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x81}, 0x800) 942.878387ms ago: executing program 4 (id=5660): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) 940.195037ms ago: executing program 0 (id=5661): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_usb_disconnect(0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 910.446188ms ago: executing program 4 (id=5662): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4040005) close(r1) 875.505708ms ago: executing program 4 (id=5665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 849.558579ms ago: executing program 5 (id=5666): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 787.092319ms ago: executing program 5 (id=5669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 757.071369ms ago: executing program 5 (id=5671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 683.009061ms ago: executing program 5 (id=5675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000001100)='./file0\x00', 0x968000, &(0x7f00000006c0)={[{@dax_always}, {@nouser_xattr}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@mblk_io_submit}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {}]}, 0x45, 0x7bd, &(0x7f0000001900)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 617.268671ms ago: executing program 5 (id=5678): perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1110}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'dvmrp1\x00', 0x200}) 586.810642ms ago: executing program 3 (id=5679): socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000280), 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 568.215832ms ago: executing program 5 (id=5681): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) unshare(0x60600) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 540.371733ms ago: executing program 3 (id=5682): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 522.807963ms ago: executing program 3 (id=5683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {0x0}], 0x2) 468.935813ms ago: executing program 3 (id=5684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 415.144454ms ago: executing program 2 (id=5685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 400.074374ms ago: executing program 2 (id=5686): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b17590818"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0) timer_create(0x8, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) setitimer(0x2, 0x0, 0x0) 360.740515ms ago: executing program 3 (id=5687): socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) 301.703075ms ago: executing program 2 (id=5688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) dup3(r0, r1, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/156, 0x9c}], 0x1}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 281.605286ms ago: executing program 3 (id=5689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rmdir(0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004f96d0008000c00010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000400"/28], 0x50) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0x4, "c045"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{}, {}, {@local}, {@private}, {@multicast2}]}]}}}}}}}, 0x0) 220.233327ms ago: executing program 2 (id=5690): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 175.147197ms ago: executing program 0 (id=5691): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x25, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 74.590229ms ago: executing program 2 (id=5692): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 35.340899ms ago: executing program 0 (id=5693): perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1110}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'dvmrp1\x00', 0x200}) 35.142159ms ago: executing program 2 (id=5694): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pipe(&(0x7f0000000200)) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/165, 0xa5}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) 0s ago: executing program 4 (id=5695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): .3.3200 not setting count and/or reply_len properly [ 142.264812][T11933] tipc: Failed to remove unknown binding: 66,1,1/2886997007:429491432/429491434 [ 142.274810][T11933] tipc: Failed to remove unknown binding: 66,1,1/2886997007:429491432/429491434 [ 142.284096][T11933] tipc: Failed to remove unknown binding: 66,1,1/2886997007:429491432/429491434 [ 142.415914][T11954] pim6reg1: entered promiscuous mode [ 142.421450][T11954] pim6reg1: entered allmulticast mode [ 142.468751][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 142.480993][T11956] erspan0: entered promiscuous mode [ 142.486408][T11956] macvtap0: entered promiscuous mode [ 142.491915][T11956] macvtap0: entered allmulticast mode [ 142.497363][T11956] erspan0: entered allmulticast mode [ 142.691103][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3212'. [ 142.834174][T11974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3214'. [ 142.946337][T11984] netlink: 'syz.3.3220': attribute type 1 has an invalid length. [ 142.976731][T11984] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 143.078203][T11999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11999 comm=syz.0.3230 [ 143.269452][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'. [ 143.284293][T12023] syz_tun: entered promiscuous mode [ 143.290999][T12023] syz_tun: left promiscuous mode [ 143.381255][T12030] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12030 comm=syz.2.3243 [ 143.393933][T12030] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12030 comm=syz.2.3243 [ 143.473598][T12041] netlink: 'syz.2.3248': attribute type 1 has an invalid length. [ 143.489712][T12041] bond4: entered promiscuous mode [ 143.498082][T12041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.513471][T12041] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3248'. [ 143.543100][T12041] batadv3: entered promiscuous mode [ 143.548362][T12041] batadv3: entered allmulticast mode [ 143.558197][T12041] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 143.567916][T12041] bond4: (slave batadv3): making interface the new active one [ 143.575722][T12056] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3248'. [ 143.576726][T12041] bond4: (slave batadv3): Enslaving as an active interface with an up link [ 143.616885][T12056] batadv4: entered promiscuous mode [ 143.622357][T12056] batadv4: entered allmulticast mode [ 143.634552][T12056] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 143.645151][T12056] bond4: (slave batadv4): Enslaving as an active interface with an up link [ 143.650246][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 144.998885][T12125] netlink: 'syz.4.3285': attribute type 7 has an invalid length. [ 145.205381][T12145] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 145.222884][T12145] bond_slave_1 (unregistering): left promiscuous mode [ 145.339701][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 145.339720][ T29] audit: type=1400 audit(145.320:5780): avc: denied { name_bind } for pid=12153 comm="syz.2.3298" src=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 145.374698][T12156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.386499][T12156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.419907][ T29] audit: type=1400 audit(145.400:5781): avc: denied { getopt } for pid=12155 comm="syz.2.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.551516][ T29] audit: type=1400 audit(145.540:5782): avc: denied { create } for pid=12161 comm="syz.5.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 145.779981][T12181] vxcan1 speed is unknown, defaulting to 1000 [ 145.892011][ T29] audit: type=1326 audit(145.880:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 145.915161][ T29] audit: type=1326 audit(145.880:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 145.960823][ T29] audit: type=1326 audit(145.880:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 145.983867][ T29] audit: type=1326 audit(145.880:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 146.006857][ T29] audit: type=1326 audit(145.880:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 146.029792][ T29] audit: type=1326 audit(145.930:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 146.052726][ T29] audit: type=1326 audit(145.930:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 146.142993][T12178] vxcan1 speed is unknown, defaulting to 1000 [ 146.570623][T12220] IPVS: Error connecting to the multicast addr [ 146.767259][T12225] netlink: 'syz.0.3329': attribute type 10 has an invalid length. [ 146.775933][T12225] net_ratelimit: 1 callbacks suppressed [ 146.776040][T12225] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 146.858823][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.866482][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.874439][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.882026][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.889561][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.897246][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.904938][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.912435][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.919887][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.927602][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.935085][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.942599][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.950342][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.957878][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.965364][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.972861][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.980276][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.987792][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 146.995389][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.002936][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.010598][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.018070][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.025532][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.033031][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.040622][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.048281][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.055827][ T7689] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 147.064003][ T7689] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 147.213411][T12263] __nla_validate_parse: 10 callbacks suppressed [ 147.213429][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3345'. [ 147.267894][T12269] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3348'. [ 147.303200][T12275] netlink: 'syz.4.3351': attribute type 1 has an invalid length. [ 147.336769][T12275] bond2: entered promiscuous mode [ 147.343964][T12275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.388969][T12285] xt_hashlimit: size too large, truncated to 1048576 [ 147.475504][T12273] vxcan1 speed is unknown, defaulting to 1000 [ 147.509930][T12275] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3351'. [ 147.526042][T12275] batadv2: entered promiscuous mode [ 147.531383][T12275] batadv2: entered allmulticast mode [ 147.539423][T12275] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 147.550645][T12275] bond2: (slave batadv2): making interface the new active one [ 147.559884][T12275] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 147.572930][T12281] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3351'. [ 147.649505][T12281] batadv3: entered promiscuous mode [ 147.654871][T12281] batadv3: entered allmulticast mode [ 147.661459][T12281] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 147.671407][T12281] bond2: (slave batadv3): Enslaving as an active interface with an up link [ 147.866601][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.874157][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.875953][T12307] bridge0: port 1(batadv2) entered blocking state [ 147.883082][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.888092][T12307] bridge0: port 1(batadv2) entered disabled state [ 147.895663][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.909651][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.917181][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.924754][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.932243][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.939750][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.947191][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.954633][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.956188][T12307] batadv2: entered allmulticast mode [ 147.962223][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.975512][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.983029][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.990633][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 147.998101][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.005607][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.010257][T12307] batadv2: entered promiscuous mode [ 148.013251][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.025887][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.033359][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.040910][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.048318][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.055781][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.063218][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.070779][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.078180][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.085709][ T7689] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 148.096054][ T7689] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 148.215912][T12313] vxcan1 speed is unknown, defaulting to 1000 [ 148.371594][ T3814] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 148.380955][ T3814] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 148.542055][T12337] netlink: 'syz.3.3372': attribute type 1 has an invalid length. [ 148.567251][T12337] bond4: entered promiscuous mode [ 148.607019][T12337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.659334][T12345] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3372'. [ 148.758636][T12337] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3372'. [ 148.804879][T12345] batadv3: entered promiscuous mode [ 148.810189][T12345] batadv3: entered allmulticast mode [ 148.838848][T12345] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 148.857790][T12345] bond4: (slave batadv3): making interface the new active one [ 148.904856][T12345] bond4: (slave batadv3): Enslaving as an active interface with an up link [ 148.928603][T12337] batadv4: entered promiscuous mode [ 148.933928][T12337] batadv4: entered allmulticast mode [ 148.943789][T12337] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 148.952583][T12337] bond4: (slave batadv4): Enslaving as an active interface with an up link [ 149.028956][T12390] smc: net device bond0 applied user defined pnetid SYZ0 [ 149.060639][T12390] smc: net device bond0 erased user defined pnetid SYZ0 [ 149.086106][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3388'. [ 149.108855][T12402] 9p: Unknown uid 00000000004294967295 [ 149.162566][T12401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.229299][T12401] macvlan0: entered promiscuous mode [ 149.234735][T12401] macvlan0: entered allmulticast mode [ 149.294398][T12401] bond3: (slave macvlan0): Opening slave failed [ 149.358294][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3394'. [ 149.555572][T12463] syzkaller0: entered promiscuous mode [ 149.561376][T12463] syzkaller0: entered allmulticast mode [ 150.375667][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 150.375706][ T29] audit: type=1326 audit(150.360:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.431148][ T29] audit: type=1326 audit(150.390:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.454214][ T29] audit: type=1326 audit(150.390:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.477143][ T29] audit: type=1326 audit(150.390:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.500159][ T29] audit: type=1326 audit(150.390:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.523538][ T29] audit: type=1326 audit(150.390:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.546514][ T29] audit: type=1326 audit(150.390:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.569432][ T29] audit: type=1326 audit(150.400:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.592318][ T29] audit: type=1326 audit(150.400:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.615260][ T29] audit: type=1326 audit(150.400:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 150.641185][T12559] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 150.811776][T12578] vlan2: entered allmulticast mode [ 150.817015][T12578] bridge_slave_0: entered allmulticast mode [ 150.987214][T12588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.324181][T12611] x_tables: duplicate underflow at hook 4 [ 151.517759][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 151.526983][T12635] netlink: 'syz.0.3454': attribute type 30 has an invalid length. [ 151.539277][T12635] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.547661][T12635] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.555911][T12635] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.564322][T12635] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.586414][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 151.595371][T12635] netlink: 'syz.0.3454': attribute type 30 has an invalid length. [ 151.775872][T12658] vxcan1 speed is unknown, defaulting to 1000 [ 152.396264][T12713] __nla_validate_parse: 2 callbacks suppressed [ 152.396279][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3485'. [ 152.411546][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3485'. [ 152.420611][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3485'. [ 152.429755][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3485'. [ 152.438949][T12713] netlink: 'syz.4.3485': attribute type 6 has an invalid length. [ 152.527522][T12725] 9pnet: p9_errstr2errno: server reported unknown error [ 153.403900][T12816] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 153.403900][T12816] The task syz.4.3529 (12816) triggered the difference, watch for misbehavior. [ 154.155240][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3544'. [ 154.213499][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.240998][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.440039][T12874] tipc: Enabling of bearer rejected, failed to enable media [ 155.314048][T12945] 9pnet: p9_errstr2errno: server reported unknown error [ 155.841957][T12960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12960 comm=syz.2.3591 [ 155.930542][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 155.930617][ T29] audit: type=1107 audit(155.860:6002): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 155.970647][T12966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3593'. [ 155.979861][T12966] netlink: 'syz.2.3593': attribute type 1 has an invalid length. [ 155.987877][T12966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3593'. [ 156.145232][ T29] audit: type=1326 audit(156.130:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.2.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 156.168320][ T29] audit: type=1326 audit(156.130:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.2.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 156.204032][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'. [ 156.285526][ T29] audit: type=1326 audit(156.190:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.2.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 156.308493][ T29] audit: type=1326 audit(156.190:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.2.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 156.331622][ T29] audit: type=1326 audit(156.190:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.2.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 156.675197][ T29] audit: type=1326 audit(156.660:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13007 comm="syz.3.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 156.727950][ T29] audit: type=1326 audit(156.690:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13007 comm="syz.3.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 156.750885][ T29] audit: type=1326 audit(156.690:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13007 comm="syz.3.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 156.773902][ T29] audit: type=1326 audit(156.690:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13007 comm="syz.3.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 156.840098][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3624'. [ 157.022675][T13026] block device autoloading is deprecated and will be removed. [ 157.055472][T13026] lo speed is unknown, defaulting to 1000 [ 157.062254][T13026] lo speed is unknown, defaulting to 1000 [ 157.077610][T13026] lo speed is unknown, defaulting to 1000 [ 157.085665][T13026] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 157.100217][T13026] lo speed is unknown, defaulting to 1000 [ 157.106730][T13026] lo speed is unknown, defaulting to 1000 [ 157.112876][T13026] lo speed is unknown, defaulting to 1000 [ 157.119099][T13026] lo speed is unknown, defaulting to 1000 [ 157.148535][T13026] lo speed is unknown, defaulting to 1000 [ 157.160651][T13042] netlink: 'syz.2.3627': attribute type 10 has an invalid length. [ 157.168968][T13042] syz_tun: entered promiscuous mode [ 157.182911][T13042] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 157.340315][T13063] bond0: (slave bond_slave_0): Releasing backup interface [ 157.356002][T13063] bond0: (slave bond_slave_1): Releasing backup interface [ 157.384681][T13063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.401060][T13063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.419392][T13063] bond1: (slave veth5): Releasing active interface [ 157.426118][T13063] bond1: (slave veth5): the permanent HWaddr of slave - 1a:41:50:97:e4:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 157.442867][T13063] batadv1: entered promiscuous mode [ 157.470135][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3641'. [ 157.479658][T13063] bond1: (slave batadv1): Releasing active interface [ 157.486499][T13063] batadv1: left promiscuous mode [ 157.538221][T13075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.552326][T13071] vxcan1 speed is unknown, defaulting to 1000 [ 157.588102][T13071] lo speed is unknown, defaulting to 1000 [ 157.965612][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3658'. [ 157.974707][T13119] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3658'. [ 157.983686][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3658'. [ 157.997216][T13119] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3658'. [ 158.028655][T13121] all: renamed from lo [ 158.077681][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3665'. [ 158.087504][T13123] SELinux: failed to load policy [ 158.092831][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3665'. [ 158.132570][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 158.527800][T13170] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3683'. [ 158.571521][T13173] atomic_op ffff88810b558d28 conn xmit_atomic 0000000000000000 [ 158.656141][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3693'. [ 158.799021][T13213] block device autoloading is deprecated and will be removed. [ 158.829729][T13198] vxcan1 speed is unknown, defaulting to 1000 [ 158.865761][T13217] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 158.906809][T13225] netlink: 'syz.5.3708': attribute type 7 has an invalid length. [ 158.915719][T13198] lo speed is unknown, defaulting to 1000 [ 158.926110][T13213] siw: device registration error -23 [ 159.380040][T13273] gtp0: entered promiscuous mode [ 159.634468][T13290] netlink: 'syz.3.3736': attribute type 1 has an invalid length. [ 159.696240][T13290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.740500][T13290] bond5: (slave bond6): making interface the new active one [ 159.751215][T13290] bond5: (slave bond6): Enslaving as an active interface with an up link [ 159.761514][T13295] bond5: entered allmulticast mode [ 159.766677][T13295] bond6: entered allmulticast mode [ 159.777321][T13294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1680 sclass=netlink_route_socket pid=13294 comm=syz.0.3737 [ 161.286032][T13346] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 161.286032][T13346] program syz.3.3760 not setting count and/or reply_len properly [ 161.846068][T13371] bridge: RTM_NEWNEIGH with invalid ether address [ 161.957152][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 161.957233][ T29] audit: type=1326 audit(161.940:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 161.993298][ T29] audit: type=1326 audit(161.940:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.020694][ T29] audit: type=1326 audit(162.010:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.043742][ T29] audit: type=1326 audit(162.010:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.066717][ T29] audit: type=1326 audit(162.010:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.098760][ T29] audit: type=1326 audit(162.010:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.121699][ T29] audit: type=1326 audit(162.010:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.144840][ T29] audit: type=1326 audit(162.010:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.167909][ T29] audit: type=1326 audit(162.010:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.190856][ T29] audit: type=1326 audit(162.010:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.0.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 162.476054][T13411] __nla_validate_parse: 7 callbacks suppressed [ 162.476121][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3788'. [ 162.498855][T13411] bridge0: port 2(batadv5) entered blocking state [ 162.505754][T13411] bridge0: port 2(batadv5) entered disabled state [ 162.512524][T13411] batadv5: entered allmulticast mode [ 162.518382][T13411] batadv5: entered promiscuous mode [ 162.525902][T13415] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.529375][T13414] netlink: 'syz.0.3789': attribute type 7 has an invalid length. [ 162.540940][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3789'. [ 162.570216][T13417] netlink: 'syz.4.3791': attribute type 10 has an invalid length. [ 162.579839][T13417] geneve1: entered promiscuous mode [ 162.585693][T13417] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.593992][T13417] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.602400][T13417] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.610690][T13417] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.636086][T13417] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 162.654504][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3793'. [ 162.665217][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3793'. [ 162.816265][T13445] 9pnet: p9_errstr2errno: server reported unknown error [ 162.899077][T13447] SELinux: failed to load policy [ 163.002933][ T3789] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 163.012399][ T3789] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 163.025152][T13457] SELinux: failed to load policy [ 163.623990][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3824'. [ 163.642031][T13497] bridge0: port 3(batadv4) entered blocking state [ 163.648590][T13497] bridge0: port 3(batadv4) entered disabled state [ 163.660050][T13497] batadv4: entered allmulticast mode [ 163.666305][T13497] batadv4: entered promiscuous mode [ 163.875757][T13513] serio: Serial port ptm0 [ 164.155240][ T3819] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 164.164655][ T3819] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 164.416465][ T3413] IPVS: starting estimator thread 0... [ 164.441278][T13559] netlink: 'syz.4.3849': attribute type 1 has an invalid length. [ 164.466067][T13559] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.479448][T13559] bond5: (slave bond6): making interface the new active one [ 164.487625][T13559] bond5: (slave bond6): Enslaving as an active interface with an up link [ 164.508201][T13559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3849'. [ 164.517610][T13557] IPVS: using max 2256 ests per chain, 112800 per kthread [ 164.525014][T13559] bond5: entered allmulticast mode [ 164.530188][T13559] bond6: entered allmulticast mode [ 164.621404][T13573] netlink: 'syz.0.3864': attribute type 6 has an invalid length. [ 164.634178][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3864'. [ 164.684664][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3864'. [ 164.832731][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3859'. [ 164.844540][T13585] vxcan1 speed is unknown, defaulting to 1000 [ 164.884647][T13585] lo speed is unknown, defaulting to 1000 [ 165.015897][T13598] xt_hashlimit: size too large, truncated to 1048576 [ 165.450814][T13633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13633 comm=syz.4.3878 [ 165.463483][T13633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13633 comm=syz.4.3878 [ 165.656453][T13650] tipc: Enabling of bearer rejected, failed to enable media [ 165.668534][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3886'. [ 165.702457][T13652] bridge0: port 4(batadv5) entered blocking state [ 165.709055][T13652] bridge0: port 4(batadv5) entered disabled state [ 165.720694][T13652] batadv5: entered allmulticast mode [ 165.726690][T13652] batadv5: entered promiscuous mode [ 165.960261][T13660] vxcan1 speed is unknown, defaulting to 1000 [ 166.071902][T13660] lo speed is unknown, defaulting to 1000 [ 166.185496][ T3772] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 166.194808][ T3772] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 166.369696][T13689] vxcan1 speed is unknown, defaulting to 1000 [ 166.483790][T13689] lo speed is unknown, defaulting to 1000 [ 166.719251][T13716] IPv4: Oversized IP packet from 127.202.26.0 [ 166.768333][T13719] bridge0: port 1(batadv2) entered blocking state [ 166.775076][T13719] bridge0: port 1(batadv2) entered disabled state [ 166.795719][T13719] batadv2: entered allmulticast mode [ 166.803747][T13719] batadv2: entered promiscuous mode [ 166.839594][T13727] $Hÿ: renamed from bond0 (while UP) [ 166.883413][T13727] $Hÿ: entered promiscuous mode [ 166.888579][T13727] bond_slave_0: entered promiscuous mode [ 166.894667][T13727] bond_slave_1: entered promiscuous mode [ 167.012976][T13735] sit0: entered allmulticast mode [ 167.043970][T13735] sit0: entered promiscuous mode [ 167.161868][T13744] netlink: 'syz.3.3928': attribute type 7 has an invalid length. [ 167.186193][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 167.186245][ T29] audit: type=1326 audit(167.170:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.5.3929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f855600e929 code=0x0 [ 167.277847][ T3765] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 167.287231][ T3765] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 167.444578][T13775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.464897][T13775] vlan0: entered allmulticast mode [ 167.470175][T13775] bond0: entered allmulticast mode [ 167.532208][T13780] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22 [ 167.667815][T13790] __nla_validate_parse: 2 callbacks suppressed [ 167.667836][T13790] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3945'. [ 167.778925][ T29] audit: type=1400 audit(167.760:6284): avc: denied { open } for pid=13796 comm="syz.0.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 167.797835][ T29] audit: type=1400 audit(167.760:6285): avc: denied { perfmon } for pid=13796 comm="syz.0.3948" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.818333][ T29] audit: type=1400 audit(167.760:6286): avc: denied { kernel } for pid=13796 comm="syz.0.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 167.875129][T13799] vxcan1 speed is unknown, defaulting to 1000 [ 167.879668][T13800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3947'. [ 167.890251][ T29] audit: type=1400 audit(167.860:6287): avc: denied { write } for pid=13792 comm="syz.4.3947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.916897][T13799] lo speed is unknown, defaulting to 1000 [ 167.951625][ T29] audit: type=1400 audit(167.940:6288): avc: denied { map_create } for pid=13796 comm="syz.0.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.976695][ T29] audit: type=1400 audit(167.960:6289): avc: denied { prog_load } for pid=13801 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.995500][ T29] audit: type=1400 audit(167.960:6290): avc: denied { bpf } for pid=13801 comm="syz.4.3949" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.015584][ T29] audit: type=1400 audit(167.960:6291): avc: denied { map_read map_write } for pid=13796 comm="syz.0.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.085028][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3952'. [ 168.099483][ T29] audit: type=1400 audit(168.050:6292): avc: denied { prog_run } for pid=13803 comm="syz.4.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.148147][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3953'. [ 168.534719][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3967'. [ 168.551240][T13853] netlink: 'syz.3.3972': attribute type 1 has an invalid length. [ 168.588610][T13853] bond7: entered promiscuous mode [ 168.593761][T13853] bond7: entered allmulticast mode [ 168.599114][T13853] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.614783][T13853] ip6gretap1: entered promiscuous mode [ 168.620551][T13853] ip6gretap1: entered allmulticast mode [ 168.626775][T13853] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 168.690916][ T3776] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 168.754007][T13872] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3979'. [ 168.780565][T13859] vxcan1 speed is unknown, defaulting to 1000 [ 168.820570][ T3776] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 168.835093][T13859] lo speed is unknown, defaulting to 1000 [ 169.222434][T13905] batadv_slave_1: entered promiscuous mode [ 169.228774][T13904] bridge: RTM_NEWNEIGH with invalid ether address [ 169.266528][T13905] batadv_slave_1: left promiscuous mode [ 169.667112][T13926] vxcan1 speed is unknown, defaulting to 1000 [ 169.762003][T13926] lo speed is unknown, defaulting to 1000 [ 170.101412][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4017'. [ 170.165397][T13965] bridge_slave_0: left allmulticast mode [ 170.171235][T13965] bridge_slave_0: left promiscuous mode [ 170.176988][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.191875][T13965] bridge_slave_1: left allmulticast mode [ 170.197612][T13965] bridge_slave_1: left promiscuous mode [ 170.203388][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.212112][T13965] bond0: (slave bond_slave_0): Releasing backup interface [ 170.222839][T13965] bond0: (slave bond_slave_1): Releasing backup interface [ 170.248531][T13965] team0: Port device team_slave_0 removed [ 170.255805][T13965] team0: Port device team_slave_1 removed [ 170.262480][T13965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.270381][T13965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.278754][T13965] bond0: (slave geneve1): Releasing backup interface [ 170.290133][T13965] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.298696][T13965] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.307174][T13965] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.315719][T13965] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.332927][T13965] bond1: (slave veth7): Releasing active interface [ 170.339499][T13965] bond1: (slave veth7): the permanent HWaddr of slave - ca:09:72:3e:90:43 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 170.357031][T13965] batadv1: entered promiscuous mode [ 170.363205][T13965] bond1: (slave batadv1): Releasing active interface [ 170.369934][T13965] batadv1: left promiscuous mode [ 170.377683][T13965] bond2: (slave batadv2): Releasing active interface [ 170.384510][T13965] bond2: (slave batadv2): the permanent HWaddr of slave - 2a:5a:35:9e:1d:1e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 170.406666][T13965] bond2: (slave batadv3): making interface the new active one [ 170.448687][T13965] bond2: (slave batadv3): Releasing active interface [ 170.475489][T13973] xt_TCPMSS: Only works on TCP SYN packets [ 170.478570][T13965] batadv4: left allmulticast mode [ 170.486517][T13965] batadv4: left promiscuous mode [ 170.491586][T13965] bridge0: port 3(batadv4) entered disabled state [ 170.528355][T13965] bond5: (slave bond6): Releasing backup interface [ 170.535063][T13965] bond6: left allmulticast mode [ 170.777009][T13989] wg2: entered promiscuous mode [ 170.782193][T13989] wg2: entered allmulticast mode [ 170.858045][T14002] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 170.864622][T14002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.872254][T14002] vhci_hcd vhci_hcd.0: Device attached [ 170.938074][T14009] vxcan1 speed is unknown, defaulting to 1000 [ 171.000995][T14003] vhci_hcd: connection closed [ 171.003779][ T3776] vhci_hcd: stop threads [ 171.012952][ T3776] vhci_hcd: release socket [ 171.017442][ T3776] vhci_hcd: disconnect device [ 171.035724][T14009] lo speed is unknown, defaulting to 1000 [ 171.062920][ T3413] vhci_hcd: vhci_device speed not set [ 171.078440][T14021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.087089][T14021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.118712][T14021] SELinux: failed to load policy [ 171.327216][T14036] vxcan1 speed is unknown, defaulting to 1000 [ 171.361927][T14036] lo speed is unknown, defaulting to 1000 [ 172.194940][T14071] wg2: entered promiscuous mode [ 172.199944][T14071] wg2: entered allmulticast mode [ 172.211139][T14068] vxcan1 speed is unknown, defaulting to 1000 [ 172.265702][T14068] lo speed is unknown, defaulting to 1000 [ 172.271774][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 172.271791][ T29] audit: type=1400 audit(172.270:6461): avc: denied { cpu } for pid=14067 comm="syz.2.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.362161][ T29] audit: type=1400 audit(172.350:6462): avc: denied { write } for pid=14067 comm="syz.2.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.428027][ T29] audit: type=1400 audit(172.410:6463): avc: denied { mount } for pid=14074 comm="syz.4.4061" name="/" dev="ramfs" ino=36105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 172.469518][ T29] audit: type=1400 audit(172.450:6464): avc: denied { block_suspend } for pid=14078 comm="syz.2.4063" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.538700][ T29] audit: type=1400 audit(172.520:6465): avc: denied { create } for pid=14080 comm="syz.4.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.574904][ T29] audit: type=1400 audit(172.550:6466): avc: denied { execute } for pid=14080 comm="syz.4.4064" name="file0" dev="tmpfs" ino=4146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.597016][ T29] audit: type=1400 audit(172.550:6467): avc: denied { execute_no_trans } for pid=14080 comm="syz.4.4064" path="/795/file0" dev="tmpfs" ino=4146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.637331][ T29] audit: type=1400 audit(172.620:6468): avc: denied { create } for pid=14084 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.713386][ T29] audit: type=1400 audit(172.700:6469): avc: denied { execute } for pid=14084 comm="syz.4.4065" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 172.835346][ T29] audit: type=1400 audit(172.820:6470): avc: denied { create } for pid=14086 comm="syz.4.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.856649][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4066'. [ 172.999132][T14094] netlink: 'syz.5.4069': attribute type 10 has an invalid length. [ 173.052047][T14094] geneve1: entered promiscuous mode [ 173.150890][T14094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.159781][T14094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.168576][T14094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.177445][T14094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.205822][T14094] $Hÿ: (slave geneve1): Enslaving as an active interface with an up link [ 173.276905][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4073'. [ 173.286909][T14099] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 173.300673][T14099] bond_slave_0: left promiscuous mode [ 173.307237][T14099] team0: Port device team_slave_0 removed [ 173.317660][T14099] team0: Port device team_slave_1 removed [ 173.330569][T14099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.339264][T14099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.349828][T14099] $Hÿ: (slave geneve1): Releasing backup interface [ 173.373085][T14099] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.382360][T14099] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.391383][T14099] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.400271][T14099] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.426019][T14099] bond1: (slave veth3): Releasing active interface [ 173.432676][T14099] bond1: (slave veth3): the permanent HWaddr of slave - 4e:85:2b:94:75:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 173.449507][T14099] batadv1: entered promiscuous mode [ 173.466373][T14099] bond1: (slave batadv1): Releasing active interface [ 173.478028][T14099] batadv1: left promiscuous mode [ 173.516208][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4080'. [ 174.125828][T14147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4093'. [ 174.366044][T14147] vxcan1 speed is unknown, defaulting to 1000 [ 174.459766][T14147] lo speed is unknown, defaulting to 1000 [ 174.569481][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4096'. [ 174.596824][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4096'. [ 174.842589][T14169] vlan0: entered allmulticast mode [ 174.848046][T14169] dummy0: entered allmulticast mode [ 174.902842][T14177] netlink: 'syz.3.4105': attribute type 4 has an invalid length. [ 175.186475][T14191] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 175.265335][T14195] ref_ctr increment failed for inode: 0x1073 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810b2b1b80 [ 175.277566][T14194] uprobe: syz.0.4112:14194 failed to unregister, leaking uprobe [ 175.467814][T14200] veth1_to_bond: entered allmulticast mode [ 175.480129][T14200] veth1_to_bond: left allmulticast mode [ 175.913042][ T7689] IPVS: starting estimator thread 0... [ 175.990210][T14231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14231 comm=syz.0.4128 [ 176.002919][T14231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14231 comm=syz.0.4128 [ 176.002982][T14226] IPVS: using max 2304 ests per chain, 115200 per kthread [ 176.117743][T14240] tipc: Enabled bearer , priority 0 [ 176.129030][T14239] tipc: Resetting bearer [ 176.141975][T14239] tipc: Disabling bearer [ 176.152097][T14244] wireguard0: entered promiscuous mode [ 176.157740][T14244] wireguard0: entered allmulticast mode [ 176.201973][T14245] vxcan1 speed is unknown, defaulting to 1000 [ 176.235464][T14245] lo speed is unknown, defaulting to 1000 [ 176.325445][T14251] vxcan1 speed is unknown, defaulting to 1000 [ 176.334222][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4138'. [ 176.348875][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4138'. [ 176.371863][T14251] lo speed is unknown, defaulting to 1000 [ 177.148740][T14314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4161'. [ 177.178935][T14312] wireguard0: entered promiscuous mode [ 177.184614][T14312] wireguard0: entered allmulticast mode [ 177.225059][T14309] vxcan1 speed is unknown, defaulting to 1000 [ 177.269466][T14309] lo speed is unknown, defaulting to 1000 [ 177.363281][T14324] all: renamed from lo [ 177.420090][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 177.420109][ T29] audit: type=1400 audit(177.400:6667): avc: denied { read } for pid=14328 comm="syz.0.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.464047][T14331] netlink: zone id is out of range [ 177.469266][T14331] netlink: zone id is out of range [ 177.476427][T14331] netlink: zone id is out of range [ 177.481622][T14331] netlink: zone id is out of range [ 177.489294][T14331] netlink: zone id is out of range [ 177.504391][T14331] netlink: zone id is out of range [ 177.509559][T14331] netlink: zone id is out of range [ 177.530581][T14331] netlink: zone id is out of range [ 177.541140][T14336] 9pnet_fd: Insufficient options for proto=fd [ 177.546062][T14331] netlink: zone id is out of range [ 177.554053][ T29] audit: type=1400 audit(177.530:6668): avc: denied { mounton } for pid=14335 comm="syz.3.4172" path=2F3839312FE91F7189591E9233614B dev="tmpfs" ino=4632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 177.562088][T14331] netlink: zone id is out of range [ 177.616816][ T29] audit: type=1400 audit(177.550:6669): avc: denied { cpu } for pid=14328 comm="syz.0.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.671716][ T29] audit: type=1400 audit(177.630:6670): avc: denied { read } for pid=14345 comm="syz.3.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.724694][ T29] audit: type=1400 audit(177.710:6671): avc: denied { bind } for pid=14349 comm="syz.3.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.783442][T14355] wireguard0: entered promiscuous mode [ 177.789155][T14355] wireguard0: entered allmulticast mode [ 177.878686][ T29] audit: type=1326 audit(177.860:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 177.916428][T14352] vxcan1 speed is unknown, defaulting to 1000 [ 177.954537][T14352] lo speed is unknown, defaulting to 1000 [ 177.979741][ T29] audit: type=1326 audit(177.860:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 178.002881][ T29] audit: type=1326 audit(177.860:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 178.026176][ T29] audit: type=1326 audit(177.870:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 178.049343][ T29] audit: type=1326 audit(177.870:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 178.078664][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4185'. [ 178.129706][T14370] $Hÿ: renamed from bond0 (while UP) [ 178.144350][T14370] $Hÿ: entered promiscuous mode [ 178.149536][T14370] bond_slave_0: entered promiscuous mode [ 178.155370][T14370] bond_slave_1: entered promiscuous mode [ 178.332312][T14380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4192'. [ 178.547740][T14387] vxcan1 speed is unknown, defaulting to 1000 [ 178.594531][T14387] lo speed is unknown, defaulting to 1000 [ 178.735876][T14401] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 178.865021][T14412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4204'. [ 178.933466][T14425] bridge: RTM_NEWNEIGH with invalid ether address [ 179.018711][T14431] netlink: 'syz.0.4223': attribute type 7 has an invalid length. [ 179.026722][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4223'. [ 179.058150][T14434] vlan0: entered allmulticast mode [ 179.068804][T14434] dummy0: entered allmulticast mode [ 179.681005][T14458] tipc: New replicast peer: 255.255.255.255 [ 179.687202][T14458] tipc: Enabled bearer , priority 10 [ 179.713914][T14462] $Hÿ: renamed from bond0 (while UP) [ 179.721629][T14462] $Hÿ: entered promiscuous mode [ 179.868940][T14471] vxcan1 speed is unknown, defaulting to 1000 [ 179.903430][T14471] lo speed is unknown, defaulting to 1000 [ 180.728275][T14550] tipc: Enabling of bearer rejected, failed to enable media [ 180.800551][ T3637] tipc: Node number set to 1560635376 [ 180.996709][T14573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4274'. [ 181.194202][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4277'. [ 181.512205][T14596] vlan0: entered allmulticast mode [ 181.517604][T14596] dummy0: entered allmulticast mode [ 181.801119][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4288'. [ 181.878540][T14605] ipvlan0: entered promiscuous mode [ 182.099316][T14606] vxcan1 speed is unknown, defaulting to 1000 [ 182.177922][T14606] lo speed is unknown, defaulting to 1000 [ 182.296972][T14620] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 182.406065][T14622] tipc: Enabled bearer , priority 0 [ 182.426997][T14621] tipc: Resetting bearer [ 182.486023][T14621] tipc: Disabling bearer [ 183.040414][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 183.040432][ T29] audit: type=1400 audit(183.020:6796): avc: denied { rmdir } for pid=3305 comm="syz-executor" name="837" dev="tmpfs" ino=4360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="/usr/sbin/cupsd" [ 183.155279][ T29] audit: type=1400 audit(183.140:6797): avc: denied { read } for pid=14649 comm="syz.0.4306" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.177830][ T29] audit: type=1400 audit(183.140:6798): avc: denied { open } for pid=14649 comm="syz.0.4306" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.274728][ T29] audit: type=1400 audit(183.150:6799): avc: denied { connect } for pid=14649 comm="syz.0.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.294177][ T29] audit: type=1400 audit(183.210:6800): avc: denied { write } for pid=14649 comm="syz.0.4306" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.316696][ T29] audit: type=1400 audit(183.210:6801): avc: denied { mounton } for pid=14649 comm="syz.0.4306" path="/846" dev="tmpfs" ino=4413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.395068][ T29] audit: type=1400 audit(183.260:6802): avc: denied { write } for pid=14649 comm="syz.0.4306" path="socket:[37334]" dev="sockfs" ino=37334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.418465][ T29] audit: type=1400 audit(183.340:6803): avc: denied { name_bind } for pid=14658 comm="syz.2.4309" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 183.476220][ T29] audit: type=1400 audit(183.440:6804): avc: denied { bind } for pid=14661 comm="syz.4.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.495275][ T29] audit: type=1400 audit(183.440:6805): avc: denied { name_bind } for pid=14661 comm="syz.4.4310" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 183.766210][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4313'. [ 184.079330][T14700] batadv_slave_1: entered promiscuous mode [ 184.086486][T14700] batadv_slave_1: left promiscuous mode [ 184.205311][T14711] macsec0: entered promiscuous mode [ 184.548720][T14730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4339'. [ 184.582267][T14732] netlink: 'syz.5.4340': attribute type 1 has an invalid length. [ 184.598754][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4340'. [ 184.611782][T14732] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 184.619661][T14732] bond0: (slave batadv2): Enslaving as a backup interface with an up link [ 184.632845][T14732] bond0 (unregistering): (slave batadv2): Releasing backup interface [ 184.641958][T14732] bond0 (unregistering): Released all slaves [ 184.839789][T14745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4345'. [ 185.081122][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4349'. [ 185.760627][T14801] x_tables: duplicate underflow at hook 3 [ 186.395816][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.404493][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.668352][T14842] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 186.945580][T14850] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 187.004800][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4389'. [ 187.407462][T14836] 9pnet_fd: p9_fd_create_tcp (14836): problem connecting socket to 127.0.0.1 [ 187.624042][T14850] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 187.651891][T14850] bond3: (slave batadv3): Enslaving as a backup interface with an up link [ 187.670590][T14855] bond3 (unregistering): (slave batadv3): Releasing backup interface [ 187.712904][T14855] bond3 (unregistering): Released all slaves [ 187.901320][T14864] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.975683][T14864] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.079841][T14867] 9pnet_fd: Insufficient options for proto=fd [ 188.088933][T14864] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.165909][T14864] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.274482][T14864] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.322766][T14864] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.379343][T14864] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.409417][T14864] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.417813][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 188.417828][ T29] audit: type=1400 audit(188.410:6850): avc: denied { getopt } for pid=14879 comm="syz.4.4402" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.930998][T14900] netlink: 'syz.0.4410': attribute type 10 has an invalid length. [ 188.938945][T14900] dummy0: left promiscuous mode [ 188.995958][ T29] audit: type=1326 audit(188.980:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.059498][ T29] audit: type=1326 audit(189.010:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.082496][ T29] audit: type=1326 audit(189.010:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.105478][ T29] audit: type=1326 audit(189.010:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.128438][ T29] audit: type=1326 audit(189.020:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.151416][ T29] audit: type=1326 audit(189.020:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.174449][ T29] audit: type=1326 audit(189.020:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.197451][ T29] audit: type=1326 audit(189.020:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.220333][ T29] audit: type=1326 audit(189.020:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 189.293893][T14918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.301489][T14918] IPv6: NLM_F_CREATE should be set when creating new route [ 189.390868][T14929] block device autoloading is deprecated and will be removed. [ 189.539979][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4426'. [ 190.434813][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4441'. [ 190.621758][T15051] syzkaller1: entered promiscuous mode [ 190.627369][T15051] syzkaller1: entered allmulticast mode [ 190.801095][T15068] wg2: entered promiscuous mode [ 190.806000][T15068] wg2: entered allmulticast mode [ 191.389799][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4466'. [ 191.550715][T15105] wg2: left promiscuous mode [ 191.555382][T15105] wg2: left allmulticast mode [ 191.570978][T15105] wg2: entered promiscuous mode [ 191.575888][T15105] wg2: entered allmulticast mode [ 191.688441][T15102] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 191.775435][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4473'. [ 192.086622][T15131] wg2: left promiscuous mode [ 192.091356][T15131] wg2: left allmulticast mode [ 192.103145][T15131] wg2: entered promiscuous mode [ 192.108141][T15131] wg2: entered allmulticast mode [ 192.341400][T15142] netlink: 'syz.4.4484': attribute type 10 has an invalid length. [ 192.349337][T15142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4484'. [ 192.358416][T15142] dummy0: entered promiscuous mode [ 192.364656][T15142] bridge0: port 1(dummy0) entered blocking state [ 192.371189][T15142] bridge0: port 1(dummy0) entered disabled state [ 193.181498][T15221] ip6gre1: entered allmulticast mode [ 193.351829][T15237] block device autoloading is deprecated and will be removed. [ 193.460548][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 193.460563][ T29] audit: type=1400 audit(193.440:7040): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.489531][ T29] audit: type=1400 audit(193.440:7041): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.512194][ T29] audit: type=1400 audit(193.440:7042): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=630 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.677806][ T29] audit: type=1400 audit(193.660:7043): avc: denied { ioctl } for pid=15251 comm="gtp" path="socket:[39337]" dev="sockfs" ino=39337 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.814326][T15254] vxcan1 speed is unknown, defaulting to 1000 [ 194.166475][T15261] vxcan1 speed is unknown, defaulting to 1000 [ 194.172909][T15254] lo speed is unknown, defaulting to 1000 [ 194.270556][T15261] lo speed is unknown, defaulting to 1000 [ 194.788298][ T29] audit: type=1326 audit(194.770:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.2.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 194.844497][ T29] audit: type=1326 audit(194.810:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.2.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 194.867502][ T29] audit: type=1326 audit(194.810:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.2.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 194.890627][ T29] audit: type=1326 audit(194.810:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.2.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 194.913644][ T29] audit: type=1326 audit(194.820:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.2.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 194.936564][ T29] audit: type=1326 audit(194.820:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.2.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8613e7e929 code=0x7ffc0000 [ 194.966027][T15354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4543'. [ 194.975134][T15354] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4543'. [ 194.999747][T15354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4543'. [ 195.015175][T15354] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4543'. [ 195.024352][T15354] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4543'. [ 195.136759][T15367] 9pnet: p9_errstr2errno: server reported unknown error [ 195.645114][T15387] wg2: left promiscuous mode [ 195.649850][T15387] wg2: left allmulticast mode [ 195.670409][T15387] wg2: entered promiscuous mode [ 195.675341][T15387] wg2: entered allmulticast mode [ 195.924703][T15399] loop0: detected capacity change from 0 to 128 [ 195.941200][T15399] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.966671][T15399] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.999170][T15403] bridge: RTM_NEWNEIGH with invalid ether address [ 196.194802][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4565'. [ 196.211539][T15412] Restarting kernel threads ... [ 196.216634][T15412] Done restarting kernel threads. [ 196.314467][T15422] netlink: 'syz.5.4572': attribute type 1 has an invalid length. [ 196.327352][T15412] vxcan1 speed is unknown, defaulting to 1000 [ 196.352639][T15422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.389028][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4572'. [ 196.434726][T15426] bond0 (unregistering): Released all slaves [ 196.449662][T15412] lo speed is unknown, defaulting to 1000 [ 196.571209][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4574'. [ 196.654349][T15445] vxcan1 speed is unknown, defaulting to 1000 [ 196.712411][T15453] loop0: detected capacity change from 0 to 512 [ 196.719732][T15445] lo speed is unknown, defaulting to 1000 [ 196.776199][T15459] set match dimension is over the limit! [ 196.776505][T15453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.838670][T15464] tipc: Enabling of bearer rejected, failed to enable media [ 196.887216][T15466] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4585'. [ 196.932370][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4587'. [ 196.941550][T15471] bridge0: port 1(dummy0) entered disabled state [ 197.103738][T15472] vxcan1 speed is unknown, defaulting to 1000 [ 197.226548][T15472] lo speed is unknown, defaulting to 1000 [ 197.605895][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.833137][T15501] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 198.019782][T15481] syz.2.4592 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 198.034352][T15481] CPU: 1 UID: 0 PID: 15481 Comm: syz.2.4592 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 198.034420][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.034438][T15481] Call Trace: [ 198.034447][T15481] [ 198.034456][T15481] __dump_stack+0x1d/0x30 [ 198.034549][T15481] dump_stack_lvl+0xe8/0x140 [ 198.034576][T15481] dump_stack+0x15/0x1b [ 198.034598][T15481] dump_header+0x81/0x220 [ 198.034641][T15481] oom_kill_process+0x334/0x3f0 [ 198.034688][T15481] out_of_memory+0x979/0xb80 [ 198.034728][T15481] try_charge_memcg+0x5e6/0x9e0 [ 198.034782][T15481] obj_cgroup_charge_pages+0xa6/0x150 [ 198.034828][T15481] __memcg_kmem_charge_page+0x9f/0x170 [ 198.034867][T15481] __alloc_frozen_pages_noprof+0x188/0x360 [ 198.034985][T15481] alloc_pages_mpol+0xb3/0x250 [ 198.035025][T15481] alloc_pages_noprof+0x90/0x130 [ 198.035112][T15481] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 198.035167][T15481] __kvmalloc_node_noprof+0x30f/0x4e0 [ 198.035202][T15481] ? ip_set_alloc+0x1f/0x30 [ 198.035284][T15481] ? ip_set_alloc+0x1f/0x30 [ 198.035320][T15481] ? __kmalloc_cache_noprof+0x189/0x320 [ 198.035357][T15481] ip_set_alloc+0x1f/0x30 [ 198.035453][T15481] hash_netiface_create+0x282/0x740 [ 198.035495][T15481] ? __pfx_hash_netiface_create+0x10/0x10 [ 198.035540][T15481] ip_set_create+0x3c9/0x960 [ 198.035618][T15481] ? __nla_parse+0x40/0x60 [ 198.035735][T15481] nfnetlink_rcv_msg+0x4c3/0x590 [ 198.035791][T15481] ? selinux_capable+0x1f9/0x270 [ 198.035853][T15481] netlink_rcv_skb+0x120/0x220 [ 198.035894][T15481] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 198.035933][T15481] nfnetlink_rcv+0x16b/0x1690 [ 198.035964][T15481] ? __kfree_skb+0x109/0x150 [ 198.036070][T15481] ? nlmon_xmit+0x4f/0x60 [ 198.036095][T15481] ? consume_skb+0x49/0x150 [ 198.036131][T15481] ? nlmon_xmit+0x4f/0x60 [ 198.036155][T15481] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 198.036198][T15481] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 198.036306][T15481] ? __dev_queue_xmit+0x182/0x1fb0 [ 198.036348][T15481] ? ref_tracker_free+0x37d/0x3e0 [ 198.036390][T15481] ? __netlink_deliver_tap+0x4dc/0x500 [ 198.036467][T15481] netlink_unicast+0x5a5/0x680 [ 198.036507][T15481] netlink_sendmsg+0x58b/0x6b0 [ 198.036616][T15481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.036650][T15481] __sock_sendmsg+0x145/0x180 [ 198.036680][T15481] ____sys_sendmsg+0x31e/0x4e0 [ 198.036749][T15481] ___sys_sendmsg+0x17b/0x1d0 [ 198.036868][T15481] __x64_sys_sendmsg+0xd4/0x160 [ 198.036904][T15481] x64_sys_call+0x2999/0x2fb0 [ 198.036964][T15481] do_syscall_64+0xd2/0x200 [ 198.036985][T15481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.037063][T15481] ? clear_bhb_loop+0x40/0x90 [ 198.037084][T15481] ? clear_bhb_loop+0x40/0x90 [ 198.037107][T15481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.037161][T15481] RIP: 0033:0x7f8613e7e929 [ 198.037185][T15481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.037267][T15481] RSP: 002b:00007f86124e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.037319][T15481] RAX: ffffffffffffffda RBX: 00007f86140a5fa0 RCX: 00007f8613e7e929 [ 198.037358][T15481] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 198.037371][T15481] RBP: 00007f8613f00b39 R08: 0000000000000000 R09: 0000000000000000 [ 198.037383][T15481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.037395][T15481] R13: 0000000000000000 R14: 00007f86140a5fa0 R15: 00007fffd03794e8 [ 198.037415][T15481] [ 198.037425][T15481] memory: usage 307200kB, limit 307200kB, failcnt 132 [ 198.392173][T15481] memory+swap: usage 307204kB, limit 9007199254740988kB, failcnt 0 [ 198.400236][T15481] kmem: usage 306720kB, limit 9007199254740988kB, failcnt 0 [ 198.407706][T15481] Memory cgroup stats for /syz2: [ 198.407941][T15481] cache 106496 [ 198.416315][T15481] rss 339968 [ 198.419555][T15481] shmem 0 [ 198.422542][T15481] mapped_file 106496 [ 198.426461][T15481] dirty 106496 [ 198.429847][T15481] writeback 36864 [ 198.433555][T15481] workingset_refault_anon 3087 [ 198.438339][T15481] workingset_refault_file 66 [ 198.442987][T15481] swap 4096 [ 198.446192][T15481] swapcached 40960 [ 198.449928][T15481] pgpgin 195218 [ 198.453523][T15481] pgpgout 195098 [ 198.457218][T15481] pgfault 262074 [ 198.460857][T15481] pgmajfault 402 [ 198.464525][T15481] inactive_anon 118784 [ 198.468685][T15481] active_anon 0 [ 198.472311][T15481] inactive_file 0 [ 198.475959][T15481] active_file 110592 [ 198.479891][T15481] unevictable 0 [ 198.483390][T15481] hierarchical_memory_limit 314572800 [ 198.488801][T15481] hierarchical_memsw_limit 9223372036854771712 [ 198.495142][T15481] total_cache 106496 [ 198.499064][T15481] total_rss 339968 [ 198.502843][T15481] total_shmem 0 [ 198.506327][T15481] total_mapped_file 106496 [ 198.510764][T15481] total_dirty 106496 [ 198.514667][T15481] total_writeback 36864 [ 198.518905][T15481] total_workingset_refault_anon 3087 [ 198.524249][T15481] total_workingset_refault_file 66 [ 198.529450][T15481] total_swap 4096 [ 198.533135][T15481] total_swapcached 40960 [ 198.537392][T15481] total_pgpgin 195218 [ 198.541405][T15481] total_pgpgout 195098 [ 198.545490][T15481] total_pgfault 262075 [ 198.549577][T15481] total_pgmajfault 402 [ 198.553777][T15481] total_inactive_anon 118784 [ 198.558383][T15481] total_active_anon 0 [ 198.562412][T15481] total_inactive_file 0 [ 198.566590][T15481] total_active_file 110592 [ 198.571121][T15481] total_unevictable 0 [ 198.575110][T15481] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4592,pid=15480,uid=0 [ 198.589990][T15481] Memory cgroup out of memory: Killed process 15480 (syz.2.4592) total-vm:95804kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 198.608747][ T3413] IPVS: starting estimator thread 0... [ 198.643927][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 198.643940][ T29] audit: type=1326 audit(198.630:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.673398][ T29] audit: type=1326 audit(198.630:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.697270][ T29] audit: type=1326 audit(198.630:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.720363][ T29] audit: type=1326 audit(198.630:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.743284][ T29] audit: type=1326 audit(198.630:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.766431][ T29] audit: type=1326 audit(198.630:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.789356][ T29] audit: type=1326 audit(198.630:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.814685][T15522] loop0: detected capacity change from 0 to 128 [ 198.850714][T15519] IPVS: using max 2064 ests per chain, 103200 per kthread [ 198.919128][ T29] audit: type=1326 audit(198.690:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.942204][ T29] audit: type=1326 audit(198.750:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 198.965228][ T29] audit: type=1326 audit(198.750:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.0.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 199.482528][T15581] loop0: detected capacity change from 0 to 1024 [ 199.487333][T15573] vxcan1 speed is unknown, defaulting to 1000 [ 199.512225][T15581] EXT4-fs: Ignoring removed nobh option [ 199.517879][T15581] EXT4-fs: Ignoring removed nobh option [ 199.576335][T15573] lo speed is unknown, defaulting to 1000 [ 199.591040][T15581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.686995][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.436412][T15671] __nla_validate_parse: 2 callbacks suppressed [ 200.436428][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4670'. [ 200.451594][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4670'. [ 200.532995][T15677] loop0: detected capacity change from 0 to 512 [ 200.548685][T15681] sit0: entered allmulticast mode [ 200.578256][T15677] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.4675: iget: bad i_size value: 38620345925642 [ 200.593865][T15681] sit0: entered promiscuous mode [ 200.620467][T15677] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4675: couldn't read orphan inode 15 (err -117) [ 200.645769][T15677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.732309][ T3790] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:32: bg 0: block 5: invalid block bitmap [ 200.775872][ T3790] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 200.788157][ T3790] EXT4-fs (loop0): This should not happen!! Data will be lost [ 200.788157][ T3790] [ 200.797954][ T3790] EXT4-fs (loop0): Total free blocks count 0 [ 200.804159][ T3790] EXT4-fs (loop0): Free/Dirty block details [ 200.810214][ T3790] EXT4-fs (loop0): free_blocks=0 [ 200.815250][ T3790] EXT4-fs (loop0): dirty_blocks=1 [ 200.820366][ T3790] EXT4-fs (loop0): Block reservation details [ 200.826510][ T3790] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 200.834935][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.901340][T15711] syzkaller0: entered promiscuous mode [ 200.906980][T15711] syzkaller0: entered allmulticast mode [ 200.955453][T15715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15715 comm=syz.4.4693 [ 201.041561][T15725] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4697'. [ 201.158178][T15735] tipc: Failed to remove unknown binding: 66,3,3/4:3581988387/3581988388 [ 201.381052][T15723] vxcan1 speed is unknown, defaulting to 1000 [ 201.439411][T15723] lo speed is unknown, defaulting to 1000 [ 201.598232][T15766] IPVS: Error connecting to the multicast addr [ 201.730886][T15775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4717'. [ 202.246970][T15815] vlan0: entered allmulticast mode [ 202.252188][T15815] bridge_slave_0: entered allmulticast mode [ 202.546038][T15839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4742'. [ 202.555381][T15839] netem: change failed [ 203.631169][T15925] tipc: New replicast peer: 255.255.255.255 [ 203.637354][T15925] tipc: Enabled bearer , priority 10 [ 204.147885][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 204.147899][ T29] audit: type=1400 audit(204.130:7480): avc: denied { connect } for pid=15959 comm="syz.0.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.221858][ T29] audit: type=1326 audit(204.200:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 204.245034][ T29] audit: type=1326 audit(204.200:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 204.268122][ T29] audit: type=1326 audit(204.210:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 204.291046][ T29] audit: type=1326 audit(204.210:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbac2cbe963 code=0x7ffc0000 [ 204.313906][ T29] audit: type=1326 audit(204.210:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbac2cbd3df code=0x7ffc0000 [ 204.346592][ T29] audit: type=1326 audit(204.210:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbac2cbe9b7 code=0x7ffc0000 [ 204.369671][ T29] audit: type=1326 audit(204.320:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbac2cbd290 code=0x7ffc0000 [ 204.392833][ T29] audit: type=1326 audit(204.320:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbac2cbd58a code=0x7ffc0000 [ 204.415858][ T29] audit: type=1326 audit(204.320:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 204.658297][T15974] vxcan1 speed is unknown, defaulting to 1000 [ 204.736449][T15974] lo speed is unknown, defaulting to 1000 [ 204.750413][ T3413] tipc: Node number set to 32008569 [ 205.435277][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.442872][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.450555][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.458131][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.465713][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.473338][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.480789][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.488260][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.495691][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.503126][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.510645][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.518064][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.542954][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.550606][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.558123][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.565562][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.572997][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.580436][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.587953][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.595381][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.602885][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.610473][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.617977][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.625474][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.632929][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.640432][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.647832][ T7688] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 205.698902][T16022] netlink: 'syz.4.4815': attribute type 10 has an invalid length. [ 205.699252][ T7688] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 205.727293][T16022] dummy0: left promiscuous mode [ 205.755809][T16022] team0: Port device dummy0 added [ 205.775982][T16022] netlink: 'syz.4.4815': attribute type 10 has an invalid length. [ 205.785993][T16022] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 205.810622][T16022] team0: Failed to send options change via netlink (err -105) [ 205.826706][T16022] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 205.843571][T16022] team0: Port device dummy0 removed [ 205.850039][T16022] dummy0: entered promiscuous mode [ 205.855890][T16022] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 205.957317][T16048] tipc: Enabling of bearer rejected, failed to enable media [ 206.023052][T16056] sch_fq: defrate 0 ignored. [ 206.113205][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4835'. [ 206.294917][T16082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4843'. [ 206.390888][T16097] tipc: Enabling of bearer rejected, already enabled [ 206.642476][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'. [ 206.684563][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'. [ 206.790643][T16128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4862'. [ 207.132577][T16148] vxcan1 speed is unknown, defaulting to 1000 [ 207.233083][T16148] lo speed is unknown, defaulting to 1000 [ 207.858163][T16173] netlink: 'syz.2.4880': attribute type 10 has an invalid length. [ 207.891899][T16173] bridge0: port 3(dummy0) entered disabled state [ 207.904620][T16173] dummy0: left allmulticast mode [ 207.917357][T16173] dummy0: left promiscuous mode [ 207.917536][T16175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4882'. [ 207.922460][T16173] bridge0: port 3(dummy0) entered disabled state [ 207.957834][T16178] netlink: 'syz.2.4880': attribute type 10 has an invalid length. [ 207.981537][T16173] team0: Port device dummy0 added [ 207.994066][T16178] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 208.060131][T16178] team0: Failed to send options change via netlink (err -105) [ 208.080552][T16178] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 208.098362][T16178] team0: Port device dummy0 removed [ 208.122737][T16178] dummy0: entered promiscuous mode [ 208.141055][T16178] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 208.360194][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4887'. [ 208.411044][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4887'. [ 208.442850][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4890'. [ 208.451899][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4890'. [ 208.508928][T16203] tipc: Enabling of bearer rejected, failed to enable media [ 208.789539][T16218] netlink: 'syz.3.4897': attribute type 10 has an invalid length. [ 208.814388][T16218] netlink: 'syz.3.4897': attribute type 10 has an invalid length. [ 208.831172][T16218] dummy0: entered promiscuous mode [ 208.837333][T16218] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 208.987847][T16231] netlink: 'syz.2.4903': attribute type 1 has an invalid length. [ 209.007210][T16231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.039205][T16231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.048023][T16231] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.059595][T16231] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 209.080792][T16235] ip6erspan0: entered promiscuous mode [ 209.088353][T16235] bond0: (slave ip6erspan0): making interface the new active one [ 209.096608][T16235] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 209.191813][T16249] tipc: Enabling of bearer rejected, failed to enable media [ 209.223011][T16253] netlink: 'syz.4.4913': attribute type 1 has an invalid length. [ 209.237961][T16253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.260419][T16253] bond0 (unregistering): Released all slaves [ 209.545971][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 209.546027][ T29] audit: type=1326 audit(209.530:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 209.604847][ T29] audit: type=1326 audit(209.530:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 209.627873][ T29] audit: type=1326 audit(209.540:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 209.650875][ T29] audit: type=1326 audit(209.540:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 209.673824][ T29] audit: type=1326 audit(209.550:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 209.696757][ T29] audit: type=1326 audit(209.550:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff64106e929 code=0x7ffc0000 [ 209.719713][ T29] audit: type=1326 audit(209.560:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff64106e963 code=0x7ffc0000 [ 209.762169][ T29] audit: type=1326 audit(209.730:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff64106d3df code=0x7ffc0000 [ 209.843511][ T29] audit: type=1326 audit(209.820:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff64106e9b7 code=0x7ffc0000 [ 209.884989][ T29] audit: type=1326 audit(209.830:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64106d290 code=0x7ffc0000 [ 209.910848][T16289] netlink: 'syz.5.4929': attribute type 10 has an invalid length. [ 209.924461][T16289] dummy0: left promiscuous mode [ 209.933058][T16289] team0: Port device dummy0 added [ 209.945024][T16289] netlink: 'syz.5.4929': attribute type 10 has an invalid length. [ 209.958806][T16289] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 209.973636][T16289] team0: Failed to send options change via netlink (err -105) [ 209.981541][T16289] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 209.991054][T16289] team0: Port device dummy0 removed [ 210.014109][T16289] dummy0: entered promiscuous mode [ 210.019879][T16289] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 210.028639][T16293] batadv2: left allmulticast mode [ 210.033850][T16293] batadv2: left promiscuous mode [ 210.038936][T16293] bridge0: port 1(batadv2) entered disabled state [ 210.387201][ T10] IPVS: starting estimator thread 0... [ 210.480774][T16319] IPVS: using max 2400 ests per chain, 120000 per kthread [ 210.636989][T16331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.661363][T16331] bond5 (unregistering): Released all slaves [ 210.736742][T16333] vxcan1 speed is unknown, defaulting to 1000 [ 210.790095][T16333] lo speed is unknown, defaulting to 1000 [ 210.880660][T16342] batadv5: left allmulticast mode [ 210.885745][T16342] batadv5: left promiscuous mode [ 210.890964][T16342] bridge0: port 2(batadv5) entered disabled state [ 210.904368][T16342] batadv2: left allmulticast mode [ 210.909460][T16342] batadv2: left promiscuous mode [ 210.914847][T16342] bridge0: port 1(batadv2) entered disabled state [ 211.094388][ T7687] IPVS: starting estimator thread 0... [ 211.180686][T16359] IPVS: using max 2352 ests per chain, 117600 per kthread [ 211.231725][T16369] validate_nla: 1 callbacks suppressed [ 211.231745][T16369] netlink: 'syz.3.4960': attribute type 1 has an invalid length. [ 211.265837][T16371] __nla_validate_parse: 17 callbacks suppressed [ 211.265850][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'. [ 211.281130][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'. [ 211.294969][T16369] 8021q: adding VLAN 0 to HW filter on device bond8 [ 211.329183][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4960'. [ 211.338508][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'. [ 211.361920][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'. [ 211.370951][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'. [ 211.394571][T16373] bond8 (unregistering): Released all slaves [ 211.531451][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4969'. [ 211.556157][T16390] batadv5: left allmulticast mode [ 211.561370][T16390] batadv5: left promiscuous mode [ 211.566543][T16390] bridge0: port 4(batadv5) entered disabled state [ 211.590305][T16390] bridge_slave_1: left allmulticast mode [ 211.596127][T16390] bridge_slave_1: left promiscuous mode [ 211.601880][T16390] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.630060][T16390] bridge_slave_0: left allmulticast mode [ 211.635839][T16390] bridge_slave_0: left promiscuous mode [ 211.641715][T16390] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.917856][T16411] vxcan1 speed is unknown, defaulting to 1000 [ 211.974669][T16411] lo speed is unknown, defaulting to 1000 [ 212.296193][T16420] netlink: 'syz.0.4981': attribute type 1 has an invalid length. [ 212.320695][T16420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.334549][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4981'. [ 212.358193][T16420] bond3 (unregistering): Released all slaves [ 212.564814][T16445] syzkaller0: entered allmulticast mode [ 212.572083][T16445] syzkaller0 (unregistering): left allmulticast mode [ 212.783458][T16456] vxcan1 speed is unknown, defaulting to 1000 [ 212.818398][T16456] lo speed is unknown, defaulting to 1000 [ 213.124897][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5008'. [ 213.215695][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5012'. [ 213.296590][T16492] netlink: 'syz.2.5016': attribute type 1 has an invalid length. [ 213.315626][T16492] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.355234][T16492] bond5 (unregistering): Released all slaves [ 213.497978][T16520] netlink: 'syz.0.5037': attribute type 1 has an invalid length. [ 213.558852][T16520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.575881][T16523] bond3 (unregistering): Released all slaves [ 213.599396][T16514] vxcan1 speed is unknown, defaulting to 1000 [ 213.688070][T16514] lo speed is unknown, defaulting to 1000 [ 213.779462][T16532] netlink: 'syz.0.5041': attribute type 1 has an invalid length. [ 213.818707][T16532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.849685][T16534] can0: slcan on ttyS3. [ 213.877742][T16532] bond3 (unregistering): Released all slaves [ 213.930536][T16533] can0 (unregistered): slcan off ttyS3. [ 214.099796][T16555] 0ªX¹¦À: renamed from caif0 [ 214.114181][T16555] 0ªX¹¦À: entered allmulticast mode [ 214.119526][T16555] net_ratelimit: 1 callbacks suppressed [ 214.119540][T16555] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 214.350907][T16572] netlink: 'syz.5.5049': attribute type 1 has an invalid length. [ 214.387631][T16572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.414421][T16572] bond0 (unregistering): Released all slaves [ 214.781142][T16601] syzkaller0: entered allmulticast mode [ 214.798403][T16601] syzkaller0 (unregistering): left allmulticast mode [ 215.151138][T16608] 0ªX¹¦À: renamed from caif0 [ 215.168402][T16608] 0ªX¹¦À: entered allmulticast mode [ 215.173740][T16608] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 215.229865][T16612] netlink: 'syz.3.5064': attribute type 1 has an invalid length. [ 215.252209][T16612] bond8: entered promiscuous mode [ 215.257299][T16612] bond8: entered allmulticast mode [ 215.271696][T16612] geneve2: entered allmulticast mode [ 215.278020][T16612] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.286344][T16612] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.294773][T16612] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.303001][T16612] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.312678][T16612] bond8: (slave geneve2): making interface the new active one [ 215.320338][T16612] geneve2: entered promiscuous mode [ 215.326956][T16612] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 215.336052][T16618] bond8: left promiscuous mode [ 215.341068][T16618] geneve2: left promiscuous mode [ 215.346153][T16618] bond8: left allmulticast mode [ 215.399563][T16618] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.458047][T16625] netlink: 'syz.2.5069': attribute type 1 has an invalid length. [ 215.510910][T16625] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.561381][T16625] bond5 (unregistering): Released all slaves [ 215.705074][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 215.705092][ T29] audit: type=1400 audit(215.690:7621): avc: denied { name_bind } for pid=16640 comm="syz.0.5075" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 215.771603][ T29] audit: type=1400 audit(215.730:7622): avc: denied { write } for pid=16642 comm="syz.2.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 216.095279][ T29] audit: type=1326 audit(216.080:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.2.5087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8613e758e7 code=0x0 [ 216.196382][T16672] 0ªX¹¦À: renamed from caif0 [ 216.209210][T16672] 0ªX¹¦À: entered allmulticast mode [ 216.214777][T16672] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 216.265309][ T29] audit: type=1400 audit(216.250:7624): avc: denied { mounton } for pid=16680 comm="syz.3.5093" path="/file0" dev="rootfs" ino=43479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 216.298615][ T29] audit: type=1400 audit(216.280:7625): avc: denied { associate } for pid=16682 comm="syz.3.5093" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 216.487345][T16702] __nla_validate_parse: 15 callbacks suppressed [ 216.487364][T16702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 216.561566][T16711] vlan2: entered allmulticast mode [ 217.282989][T16743] vxcan1 speed is unknown, defaulting to 1000 [ 217.376525][T16743] lo speed is unknown, defaulting to 1000 [ 217.385801][T16763] netlink: 'syz.4.5125': attribute type 1 has an invalid length. [ 217.401082][T16763] bond0: entered promiscuous mode [ 217.406181][T16763] bond0: entered allmulticast mode [ 217.442741][T16763] geneve2: entered allmulticast mode [ 217.448836][T16763] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.457176][T16763] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.465457][T16763] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.473792][T16763] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.482819][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5125'. [ 217.483587][T16763] bond0: (slave geneve2): making interface the new active one [ 217.499363][T16763] geneve2: entered promiscuous mode [ 217.506535][T16763] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 217.518519][T16768] bond0: left promiscuous mode [ 217.523420][T16768] geneve2: left promiscuous mode [ 217.528503][T16768] bond0: left allmulticast mode [ 217.551239][T16768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.729335][T16785] wg2: left promiscuous mode [ 217.734107][T16785] wg2: left allmulticast mode [ 217.764952][T16785] wg2: entered promiscuous mode [ 217.769915][T16785] wg2: entered allmulticast mode [ 217.842421][T16800] siw: device registration error -23 [ 217.864484][T16802] netlink: 'syz.4.5143': attribute type 1 has an invalid length. [ 217.901357][T16802] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.920830][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5143'. [ 217.935615][T16802] bond7 (unregistering): Released all slaves [ 218.225618][T16846] netlink: 'syz.3.5161': attribute type 1 has an invalid length. [ 218.246665][T16843] bridge0: entered promiscuous mode [ 218.252161][T16843] bridge0: entered allmulticast mode [ 218.317023][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5161'. [ 218.321446][T16846] 8021q: adding VLAN 0 to HW filter on device bond9 [ 218.338345][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5159'. [ 218.359888][T16856] bond9 (unregistering): Released all slaves [ 218.777427][T16882] vxcan1 speed is unknown, defaulting to 1000 [ 218.817334][T16904] wg2: left promiscuous mode [ 218.822195][T16904] wg2: left allmulticast mode [ 218.837994][T16882] lo speed is unknown, defaulting to 1000 [ 218.853203][T16904] wg2: entered promiscuous mode [ 218.858132][T16904] wg2: entered allmulticast mode [ 218.957434][T16917] siw: device registration error -23 [ 219.196681][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5196'. [ 219.227308][T16939] Cannot find add_set index 0 as target [ 219.414366][T16969] sch_fq: defrate 0 ignored. [ 219.448453][T16973] wg2: left promiscuous mode [ 219.453221][T16973] wg2: left allmulticast mode [ 219.465794][T16975] Cannot find add_set index 0 as target [ 219.466972][T16973] wg2: entered promiscuous mode [ 219.476621][T16973] wg2: entered allmulticast mode [ 219.555757][T16986] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5228'. [ 219.574930][T16986] batadv3: entered promiscuous mode [ 219.580468][T16986] batadv3: entered allmulticast mode [ 219.701544][T17003] wg2: left promiscuous mode [ 219.706288][T17003] wg2: left allmulticast mode [ 219.726011][T17003] wg2: entered promiscuous mode [ 219.731215][T17003] wg2: entered allmulticast mode [ 219.952671][T17011] vxcan1 speed is unknown, defaulting to 1000 [ 219.965900][ T29] audit: type=1326 audit(219.950:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17021 comm="syz.3.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 220.041618][ T29] audit: type=1326 audit(219.980:7627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17021 comm="syz.3.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 220.064668][ T29] audit: type=1326 audit(219.980:7628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17021 comm="syz.3.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 220.087708][ T29] audit: type=1326 audit(219.980:7629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17021 comm="syz.3.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 220.105268][T17025] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 220.110978][ T29] audit: type=1326 audit(219.980:7630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17021 comm="syz.3.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 220.159794][T17011] lo speed is unknown, defaulting to 1000 [ 220.169736][T17029] sch_fq: defrate 0 ignored. [ 220.292682][T17036] wg2: entered promiscuous mode [ 220.297633][T17036] wg2: entered allmulticast mode [ 220.792446][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5258'. [ 220.821999][T17079] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5259'. [ 221.168268][T17103] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5269'. [ 221.178642][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 221.178680][ T29] audit: type=1326 audit(221.170:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.5.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 221.186804][T17103] 1ªX¹¦À: renamed from 60ªX¹¦À [ 221.227464][ T29] audit: type=1326 audit(221.200:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.5.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 221.250435][ T29] audit: type=1326 audit(221.200:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.5.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 221.273593][ T29] audit: type=1326 audit(221.210:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.5.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 221.299860][T17103] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 221.322627][T17112] batadv6: entered promiscuous mode [ 221.327912][T17112] batadv6: entered allmulticast mode [ 221.370127][ T29] audit: type=1400 audit(221.350:7692): avc: denied { accept } for pid=17108 comm="syz.5.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.449487][T17124] netlink: 'syz.0.5278': attribute type 1 has an invalid length. [ 221.457339][T17124] netlink: 'syz.0.5278': attribute type 4 has an invalid length. [ 221.505684][T17124] netlink: 'syz.0.5278': attribute type 1 has an invalid length. [ 221.513549][T17124] netlink: 'syz.0.5278': attribute type 4 has an invalid length. [ 221.521502][T17124] __nla_validate_parse: 2 callbacks suppressed [ 221.521518][T17124] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5278'. [ 221.618033][ T29] audit: type=1400 audit(221.600:7693): avc: denied { setopt } for pid=17135 comm="syz.0.5283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.695500][ T29] audit: type=1326 audit(221.680:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17141 comm="syz.5.5286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 221.718515][ T29] audit: type=1326 audit(221.680:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17141 comm="syz.5.5286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 221.754104][ T29] audit: type=1326 audit(221.680:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17141 comm="syz.5.5286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 221.777126][ T29] audit: type=1326 audit(221.680:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17141 comm="syz.5.5286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855600e929 code=0x7ffc0000 [ 221.927983][T17152] vxcan1 speed is unknown, defaulting to 1000 [ 221.974199][T17152] lo speed is unknown, defaulting to 1000 [ 222.086252][T17166] 9pnet: p9_errstr2errno: server reported unknown error [ 223.337305][T17253] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5330'. [ 223.365664][T17253] batadv5: entered promiscuous mode [ 223.371028][T17253] batadv5: entered allmulticast mode [ 223.454188][T17251] vxcan1 speed is unknown, defaulting to 1000 [ 223.505816][T17251] lo speed is unknown, defaulting to 1000 [ 223.567000][T17266] tipc: Enabling of bearer rejected, failed to enable media [ 224.551056][T17297] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5347'. [ 224.572024][T17297] batadv4: entered promiscuous mode [ 224.577294][T17297] batadv4: entered allmulticast mode [ 224.995443][T17295] Set syz1 is full, maxelem 65536 reached [ 225.091331][T17336] ip6gre2: entered allmulticast mode [ 225.113252][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5368'. [ 225.125376][T17340] ip6gre2: entered allmulticast mode [ 225.424027][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5390'. [ 225.428433][T17385] ip6gre2: entered allmulticast mode [ 225.453797][T17383] ip6gre2: entered allmulticast mode [ 225.863321][T17419] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.997438][T17434] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.062294][T17434] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.104575][T17438] tipc: Enabling of bearer rejected, failed to enable media [ 226.123077][T17434] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.172045][T17434] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.234043][T17434] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.249616][T17434] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.262807][T17434] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.278773][T17434] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.289137][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 226.289152][ T29] audit: type=1326 audit(226.270:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17433 comm="syz.3.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 226.336321][ T29] audit: type=1326 audit(226.270:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17433 comm="syz.3.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 226.391318][ T29] audit: type=1326 audit(226.380:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 226.414330][ T29] audit: type=1326 audit(226.380:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 226.507003][ T29] audit: type=1326 audit(226.430:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 226.530306][ T29] audit: type=1326 audit(226.430:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 226.553501][ T29] audit: type=1326 audit(226.430:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 226.576602][ T29] audit: type=1326 audit(226.430:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 226.599585][ T29] audit: type=1326 audit(226.430:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 226.622505][ T29] audit: type=1326 audit(226.430:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.4.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac2cbe929 code=0x7ffc0000 [ 227.046901][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5431'. [ 227.090510][T17488] IPVS: Error joining to the multicast group [ 227.398322][T17512] xt_TPROXY: Can be used only with -p tcp or -p udp [ 227.792516][T17549] xt_TPROXY: Can be used only with -p tcp or -p udp [ 227.821135][T17552] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.911842][T17552] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.971612][T17552] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.022044][T17552] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.088052][T17552] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.105662][T17552] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.123375][T17552] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.139400][T17552] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.410704][T17583] all: renamed from lo [ 228.906145][T17636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5482'. [ 228.975101][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5491'. [ 229.075678][T17653] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 229.817011][T17692] netlink: 'syz.5.5510': attribute type 1 has an invalid length. [ 229.831623][T17692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.846328][T17692] bond0: (slave gretap0): making interface the new active one [ 229.854660][T17692] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 229.867292][T17692] vlan0: entered allmulticast mode [ 229.872512][T17692] bond0: entered allmulticast mode [ 229.877633][T17692] gretap0: entered allmulticast mode [ 229.883769][T17692] bond0: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 230.050889][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5515'. [ 230.210046][T17733] tipc: New replicast peer: 255.255.255.255 [ 230.216270][T17733] tipc: Enabled bearer , priority 10 [ 230.224565][T17731] $Hÿ: (slave dummy0): Releasing backup interface [ 230.240440][T17731] dummy0: left promiscuous mode [ 230.261453][T17731] bond0: (slave geneve2): Releasing active interface [ 230.272922][T17731] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.281453][T17731] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.289836][T17731] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.298370][T17731] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.614166][T17781] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5545'. [ 230.650550][T17785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5546'. [ 230.665410][T17785] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.673793][T17785] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.682236][T17785] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.690494][T17785] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.699708][T17785] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.708173][T17785] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.716649][T17785] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.725108][T17785] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.878723][T17801] vxcan1 speed is unknown, defaulting to 1000 [ 230.918891][T17801] lo speed is unknown, defaulting to 1000 [ 231.471858][T17845] wireguard0: entered promiscuous mode [ 231.753070][T17863] syzkaller0: entered allmulticast mode [ 231.772811][T17863] syzkaller0: entered promiscuous mode [ 231.816366][T17863] syzkaller0 (unregistering): left allmulticast mode [ 231.823148][T17863] syzkaller0 (unregistering): left promiscuous mode [ 232.155024][T17841] Set syz1 is full, maxelem 65536 reached [ 232.383467][T17897] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 232.556747][T17905] ip6gre3: entered allmulticast mode [ 232.608256][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 232.608270][ T29] audit: type=1326 audit(232.590:8047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.642424][ T29] audit: type=1326 audit(232.630:8048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.665380][ T29] audit: type=1326 audit(232.630:8049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.688397][ T29] audit: type=1326 audit(232.630:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.711326][ T29] audit: type=1326 audit(232.630:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.734328][ T29] audit: type=1326 audit(232.630:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.757396][ T29] audit: type=1326 audit(232.630:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.780332][ T29] audit: type=1326 audit(232.630:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.803350][ T29] audit: type=1326 audit(232.630:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 232.826353][ T29] audit: type=1326 audit(232.630:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505f40e929 code=0x7ffc0000 [ 233.000120][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5607'. [ 233.045803][T17944] sch_fq: defrate 4294967295 ignored. [ 233.111426][T17951] netlink: 'syz.5.5615': attribute type 3 has an invalid length. [ 233.486133][T17980] netlink: 'syz.5.5627': attribute type 4 has an invalid length. [ 233.522864][T17980] netlink: 'syz.5.5627': attribute type 4 has an invalid length. [ 233.546270][T17986] all: renamed from lo [ 233.621107][T17990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17990 comm=syz.5.5632 [ 233.916836][T18011] netlink: 'syz.3.5642': attribute type 1 has an invalid length. [ 234.340066][T18034] IPVS: Error connecting to the multicast addr [ 234.672833][T18075] Invalid ELF header magic: != ELF [ 235.023196][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5685'. [ 235.110934][T18117] netlink: 'syz.2.5686': attribute type 3 has an invalid length. [ 235.118725][T18117] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5686'. [ 235.145176][T18119] IPVS: Error connecting to the multicast addr [ 235.642576][T18112] ================================================================== [ 235.650706][T18112] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 235.657171][T18112] [ 235.659509][T18112] write to 0xffffc900160e7bc0 of 4 bytes by task 18109 on cpu 1: [ 235.667237][T18112] pollwake+0xb6/0x100 [ 235.671334][T18112] __wake_up+0x66/0xb0 [ 235.675443][T18112] ep_poll_callback+0x4fe/0x630 [ 235.680489][T18112] __wake_up+0x66/0xb0 [ 235.684591][T18112] ep_poll_callback+0x4fe/0x630 [ 235.689472][T18112] __wake_up+0x66/0xb0 [ 235.693580][T18112] unix_dgram_peer_wake_relay+0xd3/0xf0 [ 235.699176][T18112] __wake_up_sync_key+0x52/0x80 [ 235.704056][T18112] __unix_dgram_recvmsg+0x3b2/0x840 [ 235.709282][T18112] unix_dgram_recvmsg+0x81/0x90 [ 235.714158][T18112] sock_recvmsg_nosec+0x107/0x130 [ 235.719201][T18112] ____sys_recvmsg+0x26f/0x280 [ 235.723993][T18112] ___sys_recvmsg+0x11f/0x370 [ 235.728679][T18112] do_recvmmsg+0x1ef/0x540 [ 235.733106][T18112] __x64_sys_recvmmsg+0xe5/0x170 [ 235.738062][T18112] x64_sys_call+0x1c6a/0x2fb0 [ 235.742756][T18112] do_syscall_64+0xd2/0x200 [ 235.747268][T18112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.753177][T18112] [ 235.755507][T18112] read to 0xffffc900160e7bc0 of 4 bytes by task 18112 on cpu 0: [ 235.763150][T18112] do_sys_poll+0x99c/0xbd0 [ 235.767579][T18112] __se_sys_ppoll+0x1b9/0x200 [ 235.772290][T18112] __x64_sys_ppoll+0x67/0x80 [ 235.776910][T18112] x64_sys_call+0x2de5/0x2fb0 [ 235.781605][T18112] do_syscall_64+0xd2/0x200 [ 235.786123][T18112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.792031][T18112] [ 235.794361][T18112] value changed: 0x00000000 -> 0x00000001 [ 235.800089][T18112] [ 235.802424][T18112] Reported by Kernel Concurrency Sanitizer on: [ 235.808586][T18112] CPU: 0 UID: 0 PID: 18112 Comm: syz.5.5681 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 235.821100][T18112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.831173][T18112] ==================================================================