last executing test programs: 3.010672655s ago: executing program 4 (id=679): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x2ab9, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x33e}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 2.93636114s ago: executing program 4 (id=682): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2.761354328s ago: executing program 4 (id=685): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$inet6(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 1.588790216s ago: executing program 0 (id=702): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000030601010000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.519980172s ago: executing program 2 (id=703): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 1.482641823s ago: executing program 0 (id=704): r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r0, 0x4004480d, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) 1.439921254s ago: executing program 4 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x12d}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) 1.422106215s ago: executing program 4 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@get={0x1, &(0x7f0000000180)=""/202, 0x6}) syz_pidfd_open(0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) timerfd_create(0x0, 0x0) 1.369852175s ago: executing program 2 (id=707): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r3}, 0x18) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.331608813s ago: executing program 0 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18011}]}}]}, 0x40}}, 0x0) 1.202759615s ago: executing program 2 (id=709): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b", 0xa, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 1.202114038s ago: executing program 1 (id=710): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 1.125771027s ago: executing program 1 (id=711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e00000020000000000000000000000000000000000000000000000000000000000000000007b9d01e0ebf6c78200000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1.064257012s ago: executing program 0 (id=712): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.028708151s ago: executing program 1 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 974.738589ms ago: executing program 0 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x0, r2}) 843.329709ms ago: executing program 2 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 820.900112ms ago: executing program 1 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 812.445237ms ago: executing program 3 (id=718): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11}, {0xe61, 0x0, 0x0, 0x8, 0xb, 0x800, 0xffd, 0xffffffffffffffff}, {0x7, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb3, 0x0, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x3c}, 0x2, @in6=@remote, 0x3500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, &(0x7f0000000100)) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x8800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1}}, {@access_user}, {@posixacl}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}, {@fowner_eq}, {@obj_type={'obj_type', 0x3d, 'ramfs\x00'}}, {@seclabel}, {@hash}, {@appraise}, {@uid_eq={'uid', 0x3d, r3}}]}}) 640.282821ms ago: executing program 1 (id=719): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) 617.873642ms ago: executing program 3 (id=720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x0, 0x0, 0x4000000}, 0x0, 0x0, 0x2, 0x0, 0xdf}}, 0xf0}}, 0x0) 566.488963ms ago: executing program 1 (id=721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$9p(&(0x7f0000000040), 0x4080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r5, r4) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r3, 0xffffffffffffffff, 0x0) 472.223351ms ago: executing program 3 (id=722): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x8a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 416.922108ms ago: executing program 3 (id=723): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) 309.198865ms ago: executing program 3 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x40) 227.525331ms ago: executing program 3 (id=725): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xb1ce, 0x0, 0x2, 0xbfdffffd}, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff0000}, 0xffffffffffffffd2}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x60842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/sync_on_suspend', 0x143b02, 0x1c0) r10 = dup(r9) r11 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r10, r11, 0x0, 0x8000fffffffe) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 218.713752ms ago: executing program 2 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) lsm_list_modules(0x0, 0x0, 0x0) 90.018395ms ago: executing program 2 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19.042506ms ago: executing program 4 (id=728): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x102, &(0x7f0000000300)={0x0, 0xebe0, 0x10, 0x3, 0x200008d}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 0s ago: executing program 0 (id=729): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x14, 0x15, 0x1, 0x170bd28, 0x25dfdbfe, {0x9, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20010010}, 0x20040090) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. [ 64.622213][ T30] audit: type=1400 audit(1756678025.425:62): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.625882][ T5833] cgroup: Unknown subsys name 'net' [ 64.645184][ T30] audit: type=1400 audit(1756678025.425:63): avc: denied { mount } for pid=5833 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.674087][ T30] audit: type=1400 audit(1756678025.475:64): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.833454][ T5833] cgroup: Unknown subsys name 'cpuset' [ 64.841210][ T5833] cgroup: Unknown subsys name 'rlimit' [ 65.007007][ T30] audit: type=1400 audit(1756678025.805:65): avc: denied { setattr } for pid=5833 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.039701][ T30] audit: type=1400 audit(1756678025.805:66): avc: denied { create } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.068452][ T30] audit: type=1400 audit(1756678025.805:67): avc: denied { write } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.089409][ T30] audit: type=1400 audit(1756678025.805:68): avc: denied { read } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.104032][ T5835] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.110015][ T30] audit: type=1400 audit(1756678025.815:69): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.143163][ T30] audit: type=1400 audit(1756678025.815:70): avc: denied { mount } for pid=5833 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.167435][ T30] audit: type=1400 audit(1756678025.855:71): avc: denied { read } for pid=5515 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.121137][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.348946][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.372762][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.389825][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.397913][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.405984][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.415465][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.416303][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.423396][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.431185][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.444599][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.452466][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.460100][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.465011][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.475139][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.476075][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.482997][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.490267][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.497325][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.504085][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.511166][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.517139][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.531745][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.539985][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.547228][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.555135][ T5170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.043767][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 69.061003][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 69.118881][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 69.138287][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 69.175203][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 69.290473][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.298558][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.306021][ T5850] bridge_slave_0: entered allmulticast mode [ 69.313293][ T5850] bridge_slave_0: entered promiscuous mode [ 69.320891][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.327958][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.335424][ T5845] bridge_slave_0: entered allmulticast mode [ 69.342170][ T5845] bridge_slave_0: entered promiscuous mode [ 69.375463][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.382599][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.390149][ T5850] bridge_slave_1: entered allmulticast mode [ 69.397819][ T5850] bridge_slave_1: entered promiscuous mode [ 69.404559][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.411794][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.418874][ T5845] bridge_slave_1: entered allmulticast mode [ 69.425698][ T5845] bridge_slave_1: entered promiscuous mode [ 69.495483][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.502681][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.509769][ T5861] bridge_slave_0: entered allmulticast mode [ 69.517138][ T5861] bridge_slave_0: entered promiscuous mode [ 69.524541][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.531680][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.538771][ T5861] bridge_slave_1: entered allmulticast mode [ 69.545976][ T5861] bridge_slave_1: entered promiscuous mode [ 69.559211][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.566339][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.573603][ T5844] bridge_slave_0: entered allmulticast mode [ 69.580254][ T5844] bridge_slave_0: entered promiscuous mode [ 69.598274][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.616577][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.623840][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.631255][ T5852] bridge_slave_0: entered allmulticast mode [ 69.637885][ T5852] bridge_slave_0: entered promiscuous mode [ 69.644994][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.652259][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.659341][ T5844] bridge_slave_1: entered allmulticast mode [ 69.666677][ T5844] bridge_slave_1: entered promiscuous mode [ 69.683832][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.694594][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.721264][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.728355][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.735816][ T5852] bridge_slave_1: entered allmulticast mode [ 69.743452][ T5852] bridge_slave_1: entered promiscuous mode [ 69.757772][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.784130][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.794935][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.821783][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.833576][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.852097][ T5845] team0: Port device team_slave_0 added [ 69.858985][ T5850] team0: Port device team_slave_0 added [ 69.887840][ T5845] team0: Port device team_slave_1 added [ 69.894552][ T5850] team0: Port device team_slave_1 added [ 69.902150][ T5861] team0: Port device team_slave_0 added [ 69.909570][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.951955][ T5861] team0: Port device team_slave_1 added [ 69.958871][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.976706][ T5844] team0: Port device team_slave_0 added [ 69.990845][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.997776][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.023984][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.057461][ T5844] team0: Port device team_slave_1 added [ 70.064273][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.071293][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.097444][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.108757][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.116553][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.143018][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.162206][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.169149][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.195341][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.208698][ T5852] team0: Port device team_slave_0 added [ 70.234320][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.241606][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.268130][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.288629][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.295584][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.321884][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.333952][ T5852] team0: Port device team_slave_1 added [ 70.340119][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.347398][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.373418][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.385630][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.392613][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.418487][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.492320][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.499287][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.527686][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.541391][ T5851] Bluetooth: hci0: command tx timeout [ 70.547103][ T5170] Bluetooth: hci4: command tx timeout [ 70.576993][ T5844] hsr_slave_0: entered promiscuous mode [ 70.583116][ T5844] hsr_slave_1: entered promiscuous mode [ 70.589682][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.596932][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.622894][ T5170] Bluetooth: hci3: command tx timeout [ 70.623133][ T5170] Bluetooth: hci2: command tx timeout [ 70.628503][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.634267][ T5851] Bluetooth: hci1: command tx timeout [ 70.654966][ T5850] hsr_slave_0: entered promiscuous mode [ 70.661361][ T5850] hsr_slave_1: entered promiscuous mode [ 70.667280][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 70.673095][ T5850] Cannot create hsr debugfs directory [ 70.682820][ T5845] hsr_slave_0: entered promiscuous mode [ 70.688821][ T5845] hsr_slave_1: entered promiscuous mode [ 70.694866][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 70.700816][ T5845] Cannot create hsr debugfs directory [ 70.719442][ T5861] hsr_slave_0: entered promiscuous mode [ 70.726177][ T5861] hsr_slave_1: entered promiscuous mode [ 70.732491][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 70.738204][ T5861] Cannot create hsr debugfs directory [ 70.823670][ T5852] hsr_slave_0: entered promiscuous mode [ 70.829775][ T5852] hsr_slave_1: entered promiscuous mode [ 70.836302][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 70.842069][ T5852] Cannot create hsr debugfs directory [ 70.944346][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.950949][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.181617][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.194327][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.203429][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.214674][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.266492][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.279004][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.296610][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.306106][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.358593][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.375286][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.399237][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.419304][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.464430][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.474954][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.484708][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.494564][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.598154][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.609398][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.633207][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.643351][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.655354][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.687253][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.719751][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.735835][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.752419][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.759541][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.785132][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.792208][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.802008][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.809060][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.824367][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.838927][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.846025][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.866731][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.895673][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.906336][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.919771][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.934714][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.941814][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.953880][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.960976][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.014103][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.046004][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.046018][ T30] audit: type=1400 audit(1756678032.845:86): avc: denied { sys_module } for pid=5850 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.090419][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.097530][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.109757][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.116903][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.139887][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.156669][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.167788][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.278597][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.335235][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.368141][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.375258][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.435059][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.442190][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.489436][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.617709][ T5844] veth0_vlan: entered promiscuous mode [ 72.625266][ T5851] Bluetooth: hci4: command tx timeout [ 72.625584][ T5170] Bluetooth: hci0: command tx timeout [ 72.633643][ T5850] veth0_vlan: entered promiscuous mode [ 72.657004][ T5844] veth1_vlan: entered promiscuous mode [ 72.669156][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.701253][ T5170] Bluetooth: hci2: command tx timeout [ 72.703191][ T5851] Bluetooth: hci1: command tx timeout [ 72.706652][ T5853] Bluetooth: hci3: command tx timeout [ 72.730977][ T5850] veth1_vlan: entered promiscuous mode [ 72.738714][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.781547][ T5844] veth0_macvtap: entered promiscuous mode [ 72.857217][ T5844] veth1_macvtap: entered promiscuous mode [ 72.900215][ T5852] veth0_vlan: entered promiscuous mode [ 72.917385][ T5850] veth0_macvtap: entered promiscuous mode [ 72.937465][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.947613][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.964640][ T5850] veth1_macvtap: entered promiscuous mode [ 72.986165][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.005703][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.016710][ T5852] veth1_vlan: entered promiscuous mode [ 73.029740][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.049239][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.069249][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.094879][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.104302][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.122477][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.144075][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.153447][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.169871][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.197319][ T5852] veth0_macvtap: entered promiscuous mode [ 73.228658][ T5852] veth1_macvtap: entered promiscuous mode [ 73.256594][ T5845] veth0_vlan: entered promiscuous mode [ 73.289153][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.289188][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.302752][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.314352][ T5861] veth0_vlan: entered promiscuous mode [ 73.326758][ T5845] veth1_vlan: entered promiscuous mode [ 73.339042][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.353374][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.379894][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.388986][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.411573][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.419445][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.423164][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.441865][ T5861] veth1_vlan: entered promiscuous mode [ 73.482493][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.490331][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.517785][ T5845] veth0_macvtap: entered promiscuous mode [ 73.540402][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.549386][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.558606][ T5861] veth0_macvtap: entered promiscuous mode [ 73.562303][ T30] audit: type=1400 audit(1756678034.355:87): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.7SVxqS/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.596532][ T5845] veth1_macvtap: entered promiscuous mode [ 73.611774][ T30] audit: type=1400 audit(1756678034.395:88): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.625547][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.650145][ T30] audit: type=1400 audit(1756678034.395:89): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.7SVxqS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.678282][ T5861] veth1_macvtap: entered promiscuous mode [ 73.694308][ T30] audit: type=1400 audit(1756678034.395:90): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.704790][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.721666][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.744339][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.748446][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.771428][ T30] audit: type=1400 audit(1756678034.405:91): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.7SVxqS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.773944][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.804604][ T30] audit: type=1400 audit(1756678034.405:92): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.7SVxqS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.838776][ T30] audit: type=1400 audit(1756678034.415:93): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.858954][ T30] audit: type=1400 audit(1756678034.435:94): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.886453][ T30] audit: type=1400 audit(1756678034.435:95): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="gadgetfs" ino=7696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.912495][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.957480][ T3613] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.029911][ T3613] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.045095][ T3613] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.072974][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.085284][ T3613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.104421][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.110544][ T3613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.139707][ T3613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.173273][ T3613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.238134][ T3613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.294326][ T5980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'. [ 74.388455][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.430811][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.470313][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.513825][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.650529][ T5988] netlink: 'syz.2.13': attribute type 13 has an invalid length. [ 74.655002][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.684245][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.691936][ T5988] gretap0: refused to change device tx_queue_len [ 74.698621][ T5988] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.721953][ T5853] Bluetooth: hci0: command tx timeout [ 74.722818][ T5851] Bluetooth: hci4: command tx timeout [ 74.773605][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.782774][ T5851] Bluetooth: hci3: command tx timeout [ 74.794494][ T5853] Bluetooth: hci1: command tx timeout [ 74.794519][ T5851] Bluetooth: hci2: command tx timeout [ 74.799934][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.875490][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17'. [ 74.953338][ T5997] team0: No ports can be present during mode change [ 75.155704][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 76.759796][ T5851] Bluetooth: hci0: command tx timeout [ 76.765271][ T5853] Bluetooth: hci4: command tx timeout [ 76.842667][ T5851] Bluetooth: hci1: command tx timeout [ 76.842680][ T5853] Bluetooth: hci2: command tx timeout [ 76.842707][ T5853] Bluetooth: hci3: command tx timeout [ 77.676938][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'. [ 77.748881][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 77.748896][ T30] audit: type=1400 audit(1756678806.616:199): avc: denied { write } for pid=6087 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.966630][ T6102] SELinux: Context is not valid (left unmapped). [ 78.130944][ T30] audit: type=1400 audit(1756678807.015:200): avc: denied { create } for pid=6107 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.189978][ T6112] Zero length message leads to an empty skb [ 78.240511][ T30] audit: type=1400 audit(1756678807.130:201): avc: denied { create } for pid=6107 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.319077][ T30] audit: type=1400 audit(1756678807.151:202): avc: denied { write } for pid=6107 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.386531][ T30] audit: type=1326 audit(1756678807.183:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 78.470047][ T30] audit: type=1326 audit(1756678807.183:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 78.493536][ T30] audit: type=1326 audit(1756678807.183:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 78.518618][ T30] audit: type=1326 audit(1756678807.183:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 78.546661][ T30] audit: type=1326 audit(1756678807.183:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 78.577663][ T30] audit: type=1326 audit(1756678807.183:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 78.655639][ T5914] IPVS: starting estimator thread 0... [ 78.672891][ T6131] IPVS: lc: FWM 3 0x00000003 - no destination available [ 78.709086][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 78.752263][ T6133] IPVS: using max 41 ests per chain, 98400 per kthread [ 79.002847][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 80.597210][ T6187] SELinux: policydb string length 453001224 does not match expected length 8 [ 80.646509][ T6187] SELinux: failed to load policy [ 80.652620][ T6187] netlink: 104 bytes leftover after parsing attributes in process `syz.1.79'. [ 80.715449][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 80.965336][ T6210] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 80.981186][ T1208] cfg80211: failed to load regulatory.db [ 80.993765][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.002098][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.067385][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 81.222255][ T6219] netlink: 'syz.2.93': attribute type 13 has an invalid length. [ 81.449746][ T6219] gretap0: refused to change device tx_queue_len [ 81.457715][ T6219] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.602954][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 81.619579][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 81.960397][ T6253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.004541][ T6259] pim6reg: entered allmulticast mode [ 82.021644][ T6259] pim6reg: left allmulticast mode [ 82.072404][ T6253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.226200][ T6253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.377854][ T6253] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.514487][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 82.514502][ T30] audit: type=1400 audit(1756679579.626:299): avc: denied { create } for pid=6256 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.565092][ T30] audit: type=1400 audit(1756679579.647:300): avc: denied { write } for pid=6256 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2320 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.596506][ T30] audit: type=1400 audit(1756679579.647:301): avc: denied { append } for pid=6256 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2320 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.679701][ T1090] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.731188][ T1090] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.781198][ T30] audit: type=1400 audit(1756679579.899:302): avc: denied { unlink } for pid=6294 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2320 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.802091][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.888486][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.959977][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 83.068946][ T6305] netlink: 'syz.3.122': attribute type 7 has an invalid length. [ 83.076186][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 83.101272][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 83.192376][ T6308] syz.2.124 uses obsolete (PF_INET,SOCK_PACKET) [ 83.278270][ T30] audit: type=1400 audit(1756679580.424:303): avc: denied { append } for pid=6313 comm="syz.1.126" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.404207][ T30] audit: type=1400 audit(1756679580.445:304): avc: denied { open } for pid=6313 comm="syz.1.126" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.498143][ T30] audit: type=1400 audit(1756679580.476:305): avc: denied { ioctl } for pid=6313 comm="syz.1.126" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.629833][ T30] audit: type=1326 audit(1756679580.476:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 83.695539][ T30] audit: type=1326 audit(1756679580.476:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 83.784257][ T30] audit: type=1326 audit(1756679580.476:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 83.827597][ T6339] netlink: 104 bytes leftover after parsing attributes in process `syz.2.135'. [ 83.838473][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'. [ 84.366660][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.392381][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.427960][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.453718][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.471494][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.502951][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.522207][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.547585][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.565069][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.578706][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.587877][ T5924] hid-generic 0000:0000:0000.0001: item fetching failed at offset 30/43 [ 84.597702][ T5924] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 84.854619][ T6384] netlink: 'syz.3.151': attribute type 3 has an invalid length. [ 85.168218][ T6410] program syz.0.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.202899][ T6410] mmap: syz.0.162 (6410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.242542][ T6414] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 85.256287][ T6414] netlink: 'syz.2.166': attribute type 2 has an invalid length. [ 86.162883][ T6470] netem: change failed [ 86.192073][ T6469] tipc: Started in network mode [ 86.197339][ T6469] tipc: Node identity d27e85d7566, cluster identity 4711 [ 86.220962][ T6469] tipc: Enabled bearer , priority 0 [ 86.249907][ T6469] syzkaller0: entered promiscuous mode [ 86.265496][ T6469] syzkaller0: entered allmulticast mode [ 86.312784][ T6467] tipc: Resetting bearer [ 86.361857][ T6467] tipc: Disabling bearer [ 86.402071][ T6486] netlink: 'syz.3.200': attribute type 3 has an invalid length. [ 86.418801][ T6480] netlink: 'syz.0.196': attribute type 13 has an invalid length. [ 86.487455][ T6480] gretap0: refused to change device tx_queue_len [ 86.508264][ T6480] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 86.674032][ T6505] syzkaller0: refused to change device tx_queue_len [ 86.682746][ T6498] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.594034][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 87.594049][ T30] audit: type=1400 audit(1756680352.947:442): avc: denied { ioctl } for pid=6520 comm="syz.0.212" path="socket:[9997]" dev="sockfs" ino=9997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.635980][ T30] audit: type=1400 audit(1756680352.979:443): avc: denied { connect } for pid=6520 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.659995][ T30] audit: type=1400 audit(1756680352.989:444): avc: denied { write } for pid=6520 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.724252][ T6525] netlink: 'syz.4.214': attribute type 3 has an invalid length. [ 87.820489][ T6532] __nla_validate_parse: 5 callbacks suppressed [ 87.820505][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.218'. [ 88.074649][ T30] audit: type=1326 audit(1756680353.451:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 88.129391][ T30] audit: type=1326 audit(1756680353.451:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 88.197672][ T30] audit: type=1326 audit(1756680353.451:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 88.252108][ T30] audit: type=1326 audit(1756680353.451:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 88.311748][ T30] audit: type=1326 audit(1756680353.451:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 88.379102][ T30] audit: type=1326 audit(1756681121.463:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cb38ebe9 code=0x7ffc0000 [ 88.435870][ T30] audit: type=1400 audit(1756681121.673:451): avc: granted { setsecparam } for pid=6559 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 89.144599][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.240'. [ 90.355013][ T6625] serio: Serial port ttyS3 [ 90.807504][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 90.865966][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 90.984575][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 91.352256][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'. [ 91.803632][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 92.025496][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 92.234422][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 92.493361][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 92.493378][ T30] audit: type=1400 audit(1756681126.062:496): avc: denied { write } for pid=5914 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11424 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.030214][ T30] audit: type=1326 audit(1756681126.660:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.103149][ T30] audit: type=1326 audit(1756681126.692:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.130573][ T30] audit: type=1326 audit(1756681126.692:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.158620][ T30] audit: type=1326 audit(1756681126.692:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.207574][ T30] audit: type=1326 audit(1756681126.692:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.237533][ T30] audit: type=1326 audit(1756681126.692:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.265950][ T30] audit: type=1326 audit(1756681126.692:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.292772][ T30] audit: type=1326 audit(1756681126.692:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.356131][ T30] audit: type=1326 audit(1756681126.692:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 93.640802][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 93.654930][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 93.673985][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 93.830077][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 93.914230][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 93.975691][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 93.992587][ T6765] netlink: 104 bytes leftover after parsing attributes in process `syz.1.315'. [ 94.126730][ T6773] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 94.203305][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 94.218809][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 94.245201][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 94.914452][ T6813] netlink: 'syz.4.335': attribute type 3 has an invalid length. [ 94.954669][ T6771] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 94.984966][ T6771] SELinux: failed to load policy [ 96.254076][ T6847] netlink: 'syz.1.349': attribute type 13 has an invalid length. [ 96.281995][ T6847] gretap0: refused to change device tx_queue_len [ 96.290849][ T6847] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 96.372460][ T6851] loop9: detected capacity change from 0 to 7 [ 96.379459][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.425557][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.437990][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.461519][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.475123][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.492118][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.509991][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.524396][ T6851] ldm_validate_partition_table(): Disk read failed. [ 96.531082][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.559560][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.581797][ T6851] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.593105][ T6851] Dev loop9: unable to read RDB block 0 [ 96.602456][ T6851] loop9: unable to read partition table [ 96.628672][ T6851] loop9: partition table beyond EOD, truncated [ 96.634849][ T6851] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 96.634849][ T6851] ) failed (rc=-5) [ 96.833759][ T6876] netlink: 'syz.0.362': attribute type 3 has an invalid length. [ 97.009172][ T6880] netlink: 'syz.3.364': attribute type 13 has an invalid length. [ 97.047907][ T6880] gretap0: refused to change device tx_queue_len [ 97.067456][ T6880] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 97.199841][ T6893] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 97.238121][ T6893] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 97.252044][ T6893] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 97.643335][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 97.643351][ T30] audit: type=1400 audit(1756681899.506:562): avc: denied { create } for pid=6908 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.680126][ T30] audit: type=1400 audit(1756681899.537:563): avc: denied { read } for pid=6900 comm="syz.4.373" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.703322][ T30] audit: type=1400 audit(1756681899.537:564): avc: denied { open } for pid=6900 comm="syz.4.373" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.745291][ T30] audit: type=1400 audit(1756681899.537:565): avc: denied { setopt } for pid=6908 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.777218][ T30] audit: type=1400 audit(1756681899.537:566): avc: denied { connect } for pid=6908 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.808173][ T6915] process 'syz.1.379' launched '/dev/fd/8' with NULL argv: empty string added [ 97.823481][ T30] audit: type=1400 audit(1756681899.695:567): avc: denied { execute_no_trans } for pid=6912 comm="syz.1.379" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.056715][ T6922] team0: No ports can be present during mode change [ 98.116861][ T6910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.127916][ T6910] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.143646][ T6910] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.151321][ T6910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.161759][ T6910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.168601][ T6910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.183003][ T6910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.188780][ T30] audit: type=1326 audit(1756681900.073:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e698ebe9 code=0x7ffc0000 [ 98.189459][ T6910] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.222333][ T30] audit: type=1326 audit(1756681900.115:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e698ebe9 code=0x7ffc0000 [ 98.247445][ T30] audit: type=1326 audit(1756681900.115:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e698ebe9 code=0x7ffc0000 [ 98.271045][ T30] audit: type=1326 audit(1756681900.115:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e698ebe9 code=0x7ffc0000 [ 98.279918][ T6910] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.302003][ T6910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.308310][ T6910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.318315][ T6910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.327089][ T6910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.335174][ T6910] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.341739][ T6910] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.384304][ T7009] loop9: detected capacity change from 0 to 7 [ 99.394242][ T7009] ldm_validate_partition_table(): Disk read failed. [ 99.403660][ T7009] Dev loop9: unable to read RDB block 0 [ 99.412129][ T7009] loop9: unable to read partition table [ 99.417986][ T7009] loop9: partition table beyond EOD, truncated [ 99.425251][ T7011] __nla_validate_parse: 10 callbacks suppressed [ 99.425266][ T7011] netlink: 212 bytes leftover after parsing attributes in process `syz.0.421'. [ 99.426483][ T7009] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 99.426483][ T7009] ) failed (rc=-5) [ 99.433726][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 99.464155][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 99.771857][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.778701][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 99.962190][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 100.078360][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.152159][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.155460][ T7029] netlink: 224 bytes leftover after parsing attributes in process `syz.4.428'. [ 100.169137][ T7029] ksmbd: Unknown IPC event: 4, ignore. [ 100.190333][ T7029] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 100.229838][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.304536][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 100.378547][ T7046] bridge_slave_0: left allmulticast mode [ 100.385259][ T7046] bridge_slave_0: left promiscuous mode [ 100.394587][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.408024][ T7046] bridge_slave_1: left allmulticast mode [ 100.416088][ T7046] bridge_slave_1: left promiscuous mode [ 100.420827][ T7050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.433'. [ 100.423054][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.473988][ T7046] bond0: (slave bond_slave_0): Releasing backup interface [ 100.497306][ T7046] bond0: (slave bond_slave_1): Releasing backup interface [ 100.511937][ T7046] team0: Failed to send options change via netlink (err -105) [ 100.520784][ T7046] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 100.530724][ T7046] team0: Port device team_slave_0 removed [ 100.545955][ T7046] team0: Failed to send options change via netlink (err -105) [ 100.598966][ T7046] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 100.614921][ T7046] team0: Port device team_slave_1 removed [ 100.621542][ T7046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.629242][ T7046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.638035][ T7046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.645426][ T7046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.673604][ T7050] team0: Failed to send options change via netlink (err -105) [ 100.683101][ T7050] team0: Mode changed to "loadbalance" [ 100.820623][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 100.841291][ T7067] bridge0: entered promiscuous mode [ 100.846863][ T7067] macvtap1: entered promiscuous mode [ 100.852353][ T7067] macvtap1: entered allmulticast mode [ 100.857935][ T7067] bridge0: entered allmulticast mode [ 100.913328][ T7067] bridge0: left allmulticast mode [ 100.927409][ T7067] bridge0: left promiscuous mode [ 101.567696][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 101.584565][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 101.692340][ T7109] sd 0:0:1:0: device reset [ 101.753816][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.058839][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.134324][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.209531][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.282541][ T7138] tipc: Started in network mode [ 102.298322][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.313875][ T7138] tipc: Node identity 96edeed7bc0f, cluster identity 4711 [ 102.347009][ T7138] tipc: Enabled bearer , priority 0 [ 102.396807][ T7138] syzkaller0: entered promiscuous mode [ 102.443897][ T7138] syzkaller0: entered allmulticast mode [ 102.470950][ T7138] tipc: Resetting bearer [ 102.494047][ T7137] tipc: Resetting bearer [ 102.510077][ T7137] tipc: Disabling bearer [ 102.750459][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 102.750475][ T30] audit: type=1400 audit(1756681904.860:636): avc: denied { read write } for pid=7155 comm="syz.0.482" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.827804][ T30] audit: type=1400 audit(1756681904.902:637): avc: denied { open } for pid=7155 comm="syz.0.482" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.888894][ T30] audit: type=1400 audit(1756681904.902:638): avc: denied { ioctl } for pid=7155 comm="syz.0.482" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.337867][ T30] audit: type=1326 audit(1756681905.480:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe795b8ebe9 code=0x7ffc0000 [ 103.762456][ T7182] netlink: 'syz.4.485': attribute type 4 has an invalid length. [ 103.864156][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.038884][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.125799][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.191038][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.267167][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.329271][ T30] audit: type=1326 audit(1756681905.532:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe795b8ebe9 code=0x7ffc0000 [ 104.352603][ T30] audit: type=1326 audit(1756681906.047:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe795b8ebe9 code=0x7ffc0000 [ 104.785641][ T7198] __nla_validate_parse: 4 callbacks suppressed [ 104.785659][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 104.817517][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 104.990337][ T30] audit: type=1326 audit(1756681906.246:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe795b8ebe9 code=0x7ffc0000 [ 105.018707][ T30] audit: type=1326 audit(1756681906.257:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe795b8ebe9 code=0x7ffc0000 [ 105.050681][ T30] audit: type=1326 audit(1756681906.288:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe795b8ebe9 code=0x7ffc0000 [ 105.075189][ T30] audit: type=1326 audit(1756681906.320:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe795b8ebe9 code=0x7ffc0000 [ 105.242452][ T7210] netlink: 104 bytes leftover after parsing attributes in process `syz.1.502'. [ 105.425842][ T7223] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 105.460073][ T7225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.508'. [ 105.469163][ T7218] IPVS: stopping master sync thread 7223 ... [ 105.679243][ T7241] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.366768][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 106.500810][ T7300] binfmt_misc: register: failed to install interpreter file ./file2 [ 106.816066][ T7323] netlink: 224 bytes leftover after parsing attributes in process `syz.0.553'. [ 106.843915][ T7323] ksmbd: Unknown IPC event: 4, ignore. [ 106.924402][ T7323] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 107.484267][ T7348] Bluetooth: MGMT ver 1.23 [ 107.649706][ T7352] bridge_slave_0: left allmulticast mode [ 107.681787][ T7352] bridge_slave_0: left promiscuous mode [ 107.707552][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.767623][ T7352] bridge_slave_1: left allmulticast mode [ 107.775795][ T7352] bridge_slave_1: left promiscuous mode [ 107.796747][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.812456][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 107.865141][ T7352] bond0: (slave bond_slave_0): Releasing backup interface [ 107.907812][ T7352] bond0: (slave bond_slave_1): Releasing backup interface [ 107.952121][ T7352] team0: Failed to send options change via netlink (err -105) [ 107.971712][ T7352] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 107.984699][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 107.984715][ T30] audit: type=1400 audit(1756681910.362:685): avc: denied { create } for pid=7361 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.011854][ T7352] team0: Port device team_slave_0 removed [ 108.019071][ T30] audit: type=1400 audit(1756681910.393:686): avc: denied { read } for pid=7361 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.043601][ T7364] netlink: 'syz.4.567': attribute type 13 has an invalid length. [ 108.045446][ T7352] team0: Failed to send options change via netlink (err -105) [ 108.077136][ T7352] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 108.097298][ T7352] team0: Port device team_slave_1 removed [ 108.106178][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.113691][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.123790][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.133449][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.210579][ T7364] gretap0: refused to change device tx_queue_len [ 108.217583][ T7364] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 108.349222][ T7369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7369 comm=syz.3.569 [ 108.363408][ T7369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.569'. [ 108.620453][ T30] audit: type=1400 audit(1756681911.023:687): avc: denied { connect } for pid=7385 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.033730][ T7397] netlink: 'syz.2.580': attribute type 4 has an invalid length. [ 109.041434][ T7397] netlink: 17 bytes leftover after parsing attributes in process `syz.2.580'. [ 109.115539][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'. [ 109.705815][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 109.987323][ T30] audit: type=1400 audit(1756681912.462:688): avc: denied { ioctl } for pid=7404 comm="syz.3.585" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.486091][ T1208] hid_parser_main: 11 callbacks suppressed [ 110.486109][ T1208] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.497325][ T30] audit: type=1400 audit(1756681912.976:689): avc: denied { setopt } for pid=7416 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.549247][ T1208] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.564319][ T7428] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 110.572934][ T7428] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 110.585520][ T7428] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 110.758655][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 111.247370][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 111.563194][ T30] audit: type=1326 audit(1756681914.068:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44c78ebe9 code=0x7ffc0000 [ 111.602327][ T30] audit: type=1326 audit(1756681914.068:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44c78ebe9 code=0x7ffc0000 [ 112.598652][ T30] audit: type=1326 audit(1756681915.202:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 112.662642][ T30] audit: type=1326 audit(1756681915.202:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 112.689395][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.617'. [ 112.823886][ T30] audit: type=1326 audit(1756681915.202:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 112.883142][ T30] audit: type=1326 audit(1756681915.202:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 112.938173][ T30] audit: type=1326 audit(1756681915.202:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 113.022219][ T30] audit: type=1326 audit(1756681915.202:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 113.048905][ T30] audit: type=1326 audit(1756681915.202:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 113.086911][ T30] audit: type=1326 audit(1756681915.202:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 113.116859][ T7501] netlink: 64 bytes leftover after parsing attributes in process `syz.4.625'. [ 113.172807][ T7501] team0: No ports can be present during mode change [ 113.300291][ T30] audit: type=1326 audit(1756681915.202:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 113.324402][ T30] audit: type=1326 audit(1756681915.202:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 113.371139][ T30] audit: type=1326 audit(1756681915.202:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f638ebe9 code=0x7ffc0000 [ 113.509358][ T30] audit: type=1326 audit(1756681916.000:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e698ebe9 code=0x7ffc0000 [ 113.569891][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.632'. [ 113.677122][ T7525] netem: change failed [ 114.664369][ T7591] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 114.665508][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.669'. [ 114.742322][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 114.761188][ T7597] openvswitch: netlink: Flow key attr not present in new flow. [ 115.253897][ T7628] syzkaller0: entered promiscuous mode [ 115.261759][ T7628] syzkaller0: entered allmulticast mode [ 115.465190][ T7645] serio: Serial port ptm0 [ 116.752379][ T7684] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.809342][ T7684] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.867071][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'. [ 117.179942][ T7703] netlink: 224 bytes leftover after parsing attributes in process `syz.3.718'. [ 117.200549][ T7703] ksmbd: Unknown IPC event: 4, ignore. [ 117.219858][ T7703] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 117.790953][ T30] kauditd_printk_skb: 620 callbacks suppressed [ 117.790970][ T30] audit: type=1326 audit(119.833:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44c78ebe9 code=0x7fc00000 [ 117.872180][ T30] audit: type=1326 audit(119.833:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd44c78ebe9 code=0x7fc00000 [ 117.925522][ T7724] ------------[ cut here ]------------ [ 117.931088][ T7724] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)(1) [ 117.957096][ T7724] WARNING: CPU: 0 PID: 7724 at kernel/bpf/verifier.c:2722 reg_bounds_sanity_check+0x62b/0x1200 [ 117.967772][ T7724] Modules linked in: [ 117.971672][ T7724] CPU: 0 UID: 0 PID: 7724 Comm: syz.3.725 Not tainted syzkaller #0 PREEMPT(full) [ 117.981252][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.991647][ T7724] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 117.992776][ T30] audit: type=1326 audit(119.833:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44c78ebe9 code=0x7fc00000 [ 117.998293][ T7724] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 66 76 aa ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 118.041769][ T7724] RSP: 0018:ffffc9000b5772f8 EFLAGS: 00010286 [ 118.047852][ T7724] RAX: 0000000000000000 RBX: 0000000004000000 RCX: ffffc9000d3bb000 [ 118.056665][ T7724] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 118.064786][ T7724] RBP: ffffc9000b5773f0 R08: 0000000000000001 R09: 0000000000000000 [ 118.072873][ T7724] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888078098000 [ 118.080900][ T7724] R13: ffff88807c66e324 R14: ffff88807c66e31c R15: ffff88807c66e2d0 [ 118.088905][ T7724] FS: 00007f17e78726c0(0000) GS:ffff8881246b8000(0000) knlGS:0000000000000000 [ 118.093279][ T30] audit: type=1326 audit(119.833:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44c78ebe9 code=0x7fc00000 [ 118.097881][ T7724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.127148][ T7724] CR2: 0000001b32021ff8 CR3: 00000000361d6000 CR4: 00000000003526f0 [ 118.135997][ T7724] Call Trace: [ 118.139276][ T7724] [ 118.142220][ T7724] reg_set_min_max+0x1dc/0x2c0 [ 118.147755][ T7724] check_cond_jmp_op+0xc97/0x72d0 [ 118.152833][ T7724] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 118.158360][ T7724] ? check_alu_op+0x7b3/0x3cc0 [ 118.163137][ T7724] do_check_common+0xa13e/0xb410 [ 118.164782][ T30] audit: type=1326 audit(119.833:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44c78ebe9 code=0x7fc00000 [ 118.168124][ T7724] ? __pfx_do_check_common+0x10/0x10 [ 118.196101][ T7724] ? lockdep_hardirqs_on+0x51/0x110 [ 118.201316][ T7724] ? kfree+0x2b4/0x4d0 [ 118.207151][ T7724] ? bpf_check+0x7c34/0xc670 [ 118.212146][ T7724] bpf_check+0x869f/0xc670 [ 118.216602][ T7724] ? __pfx_bpf_check+0x10/0x10 [ 118.221428][ T7724] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 118.226905][ T7724] bpf_prog_load+0xe41/0x2490 [ 118.232490][ T7724] ? __pfx_bpf_prog_load+0x10/0x10 [ 118.238229][ T7724] ? avc_has_perm+0x144/0x1f0 [ 118.243008][ T7724] ? selinux_bpf+0xde/0x130 [ 118.247524][ T7724] ? bpf_lsm_bpf+0x9/0x10 [ 118.251925][ T7724] __sys_bpf+0x4a3f/0x4de0 [ 118.256365][ T7724] ? __pfx_futex_wake+0x10/0x10 [ 118.261287][ T7724] ? __pfx___sys_bpf+0x10/0x10 [ 118.266320][ T7724] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 118.268386][ T30] audit: type=1326 audit(119.833:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44c78ebe9 code=0x7fc00000 [ 118.272794][ T7724] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 118.302259][ T7724] ? do_futex+0x122/0x350 [ 118.306642][ T7724] ? __pfx_do_futex+0x10/0x10 [ 118.311347][ T7724] ? xfd_validate_state+0x61/0x180 [ 118.316540][ T7724] ? __sys_setsockopt+0x1c0/0x230 [ 118.321575][ T7724] __x64_sys_bpf+0x78/0xc0 [ 118.326058][ T7724] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.332015][ T7724] do_syscall_64+0xcd/0x4c0 [ 118.340181][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.346146][ T7724] RIP: 0033:0x7f17e698ebe9 [ 118.350567][ T7724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.352231][ T30] audit: type=1326 audit(119.833:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44c78ebe9 code=0x7fc00000 [ 118.370472][ T7724] RSP: 002b:00007f17e7872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.370499][ T7724] RAX: ffffffffffffffda RBX: 00007f17e6bc6090 RCX: 00007f17e698ebe9 [ 118.370510][ T7724] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 118.370522][ T7724] RBP: 00007f17e6a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 118.370535][ T7724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.435116][ T7724] R13: 00007f17e6bc6128 R14: 00007f17e6bc6090 R15: 00007ffc64812528 [ 118.443210][ T7724] [ 118.446229][ T7724] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.453510][ T7724] CPU: 0 UID: 0 PID: 7724 Comm: syz.3.725 Not tainted syzkaller #0 PREEMPT(full) [ 118.462712][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.472776][ T7724] Call Trace: [ 118.476043][ T7724] [ 118.478961][ T7724] dump_stack_lvl+0x3d/0x1f0 [ 118.483540][ T7724] vpanic+0x6e8/0x7a0 [ 118.487526][ T7724] ? __pfx_vpanic+0x10/0x10 [ 118.492023][ T7724] ? reg_bounds_sanity_check+0x62b/0x1200 [ 118.497725][ T7724] panic+0xca/0xd0 [ 118.501451][ T7724] ? __pfx_panic+0x10/0x10 [ 118.505887][ T7724] check_panic_on_warn+0xab/0xb0 [ 118.510805][ T7724] __warn+0xf6/0x3c0 [ 118.514697][ T7724] ? reg_bounds_sanity_check+0x62b/0x1200 [ 118.520412][ T7724] report_bug+0x3c3/0x580 [ 118.524724][ T7724] ? reg_bounds_sanity_check+0x62b/0x1200 [ 118.530426][ T7724] handle_bug+0x184/0x210 [ 118.534751][ T7724] exc_invalid_op+0x17/0x50 [ 118.539239][ T7724] asm_exc_invalid_op+0x1a/0x20 [ 118.544067][ T7724] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 118.550376][ T7724] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 66 76 aa ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 118.570399][ T7724] RSP: 0018:ffffc9000b5772f8 EFLAGS: 00010286 [ 118.576448][ T7724] RAX: 0000000000000000 RBX: 0000000004000000 RCX: ffffc9000d3bb000 [ 118.584401][ T7724] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 118.592348][ T7724] RBP: ffffc9000b5773f0 R08: 0000000000000001 R09: 0000000000000000 [ 118.600296][ T7724] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888078098000 [ 118.608244][ T7724] R13: ffff88807c66e324 R14: ffff88807c66e31c R15: ffff88807c66e2d0 [ 118.616199][ T7724] ? __warn_printk+0x1a5/0x350 [ 118.620961][ T7724] ? reg_bounds_sanity_check+0x62a/0x1200 [ 118.626683][ T7724] reg_set_min_max+0x1dc/0x2c0 [ 118.631436][ T7724] check_cond_jmp_op+0xc97/0x72d0 [ 118.636455][ T7724] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 118.641895][ T7724] ? check_alu_op+0x7b3/0x3cc0 [ 118.646648][ T7724] do_check_common+0xa13e/0xb410 [ 118.651585][ T7724] ? __pfx_do_check_common+0x10/0x10 [ 118.656847][ T7724] ? lockdep_hardirqs_on+0x51/0x110 [ 118.662028][ T7724] ? kfree+0x2b4/0x4d0 [ 118.666081][ T7724] ? bpf_check+0x7c34/0xc670 [ 118.670653][ T7724] bpf_check+0x869f/0xc670 [ 118.675065][ T7724] ? __pfx_bpf_check+0x10/0x10 [ 118.679826][ T7724] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 118.685266][ T7724] bpf_prog_load+0xe41/0x2490 [ 118.689933][ T7724] ? __pfx_bpf_prog_load+0x10/0x10 [ 118.695028][ T7724] ? avc_has_perm+0x144/0x1f0 [ 118.699695][ T7724] ? selinux_bpf+0xde/0x130 [ 118.704176][ T7724] ? bpf_lsm_bpf+0x9/0x10 [ 118.708493][ T7724] __sys_bpf+0x4a3f/0x4de0 [ 118.712890][ T7724] ? __pfx_futex_wake+0x10/0x10 [ 118.717722][ T7724] ? __pfx___sys_bpf+0x10/0x10 [ 118.722469][ T7724] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 118.728874][ T7724] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 118.735624][ T7724] ? do_futex+0x122/0x350 [ 118.739940][ T7724] ? __pfx_do_futex+0x10/0x10 [ 118.744616][ T7724] ? xfd_validate_state+0x61/0x180 [ 118.749717][ T7724] ? __sys_setsockopt+0x1c0/0x230 [ 118.754725][ T7724] __x64_sys_bpf+0x78/0xc0 [ 118.759124][ T7724] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.764303][ T7724] do_syscall_64+0xcd/0x4c0 [ 118.768789][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.774658][ T7724] RIP: 0033:0x7f17e698ebe9 [ 118.779052][ T7724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.798639][ T7724] RSP: 002b:00007f17e7872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.807116][ T7724] RAX: ffffffffffffffda RBX: 00007f17e6bc6090 RCX: 00007f17e698ebe9 [ 118.815334][ T7724] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 118.823296][ T7724] RBP: 00007f17e6a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 118.831254][ T7724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.839210][ T7724] R13: 00007f17e6bc6128 R14: 00007f17e6bc6090 R15: 00007ffc64812528 [ 118.847174][ T7724] [ 118.850414][ T7724] Kernel Offset: disabled [ 118.855143][ T7724] Rebooting in 86400 seconds..