last executing test programs: 1m28.267064159s ago: executing program 3 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000300)={0x1a, 0x0, 0x1f, 0x0, 0xc9, 0x8, @local}, 0x10) 1m27.394885933s ago: executing program 3 (id=494): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@nodioread_nolock}, {}, {@grpquota}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00\b'], &(0x7f0000000680), 0x600) 1m27.307496694s ago: executing program 3 (id=497): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 1m27.246741595s ago: executing program 3 (id=500): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m27.045518908s ago: executing program 3 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) inotify_init1(0x0) 1m26.851460071s ago: executing program 3 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m26.821915572s ago: executing program 32 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m15.716633236s ago: executing program 1 (id=867): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7e7e13a6, 0xffff}]}}}}}}}, 0x0) 1m15.692838487s ago: executing program 1 (id=858): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1m15.635421668s ago: executing program 1 (id=859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) 1m15.561845599s ago: executing program 1 (id=861): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m15.4954009s ago: executing program 1 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r2) 1m15.303142283s ago: executing program 1 (id=877): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 1m15.275881014s ago: executing program 33 (id=877): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 7.720932458s ago: executing program 6 (id=3501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x880, 0x9) finit_module(r3, 0x0, 0x3) 7.63464521s ago: executing program 6 (id=3507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) 7.57683779s ago: executing program 6 (id=3508): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r0, 0x0, 0x3a) 7.451255703s ago: executing program 6 (id=3514): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) move_mount(r0, &(0x7f0000000100)='./file0/../file0\x00', r0, &(0x7f00000001c0)='./file0/file0\x00', 0x210) 7.390537644s ago: executing program 6 (id=3519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setlease(r1, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xc200) 7.054842579s ago: executing program 6 (id=3529): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 7.032407109s ago: executing program 34 (id=3529): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 3.753625431s ago: executing program 2 (id=3622): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xfc, "0062ba7d820000000001001f820dac4eb71f11"}) r2 = syz_open_pts(r0, 0x0) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 3.728682061s ago: executing program 2 (id=3623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x33000, 0x0, 0x3) 2.176637016s ago: executing program 2 (id=3688): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r2}}, 0x48) 1.875744541s ago: executing program 2 (id=3689): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)="ec0811d2dc7b4b6e", 0x8}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 1.332565969s ago: executing program 5 (id=3694): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'sh\x00'}, 0x2c) 1.29126462s ago: executing program 5 (id=3697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) 1.245857931s ago: executing program 7 (id=3698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.244719131s ago: executing program 7 (id=3700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.223882061s ago: executing program 5 (id=3703): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 1.176770142s ago: executing program 5 (id=3704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.093630403s ago: executing program 7 (id=3709): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x43, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.031655944s ago: executing program 7 (id=3712): r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.031489404s ago: executing program 2 (id=3713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000b80)=""/215, 0xd7) ioprio_set$pid(0x3, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x2000) 1.010083874s ago: executing program 7 (id=3715): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendfile(r1, r0, 0x0, 0x578410e9) 966.473595ms ago: executing program 5 (id=3717): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000200001000000000000000000020000000000000000000000140011006765ee657665310000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 881.172676ms ago: executing program 4 (id=3722): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000280)=""/247, 0xf7, 0x0, 0x0}}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}}], 0x2, 0x4008440) 859.553677ms ago: executing program 4 (id=3723): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd97c4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000002c0)='pagemap\x00') read$char_usb(r2, 0x0, 0x0) 631.66681ms ago: executing program 4 (id=3729): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000045b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 562.076891ms ago: executing program 4 (id=3730): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52c, &(0x7f0000000640)="$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") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/25]}, 0x91) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 509.757872ms ago: executing program 4 (id=3732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000500)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 451.593743ms ago: executing program 4 (id=3734): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000480)=0x40001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) sendto$inet(r1, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaff", 0x59, 0x4044000, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000940)={0x4, 0x1, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/93, 0x5d}, {&(0x7f0000000740)=""/88, 0x58}, {&(0x7f00000007c0)=""/196, 0xc4}, {&(0x7f0000000600)=""/31, 0x1f}], &(0x7f0000000900)=[0x2, 0x2, 0x9, 0x7f, 0x4]}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000020000000000004cd6b88808599fcd6c40e000"/32], 0x48) syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioBUSOqAHEopBKZUQ0Ae9uAaPPeuR/NeB7eD7gpt7N+9mZ8N9tWxr8V+pLsmwHHPLW6bkJW0tffRTltynxlQyX77XuD91fp6/h7RNxjV9vXe7quuY1+TpePvtz29dPv9utSYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLJDAAAA//+4SRWs") r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x10d801, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='sy\xd3\v\xe2\xc7\xaef\x96\xe7') recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 198.175347ms ago: executing program 2 (id=3736): r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) 177.122267ms ago: executing program 0 (id=3737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) open(0x0, 0x64842, 0x0) syz_open_procfs(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 111.925758ms ago: executing program 0 (id=3738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f3a1173fb9462d3589e67197f90be6e423ceb0ab0912f9f6a31844ec98e950cfed21fcad7ff0fbcb566a0982f8938caa0600000000000000d56ad59300"}, 0x63, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705320725930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e67f3fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 111.472979ms ago: executing program 0 (id=3739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 111.250979ms ago: executing program 7 (id=3740): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0xffe) 109.892088ms ago: executing program 5 (id=3741): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x1090, &(0x7f0000000340)={0x0, 0xf1bd, 0x400, 0x0, 0x400132a}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47ba, 0x233a, 0x0, 0x0, 0x41) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r4 = dup(r0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) 90.307599ms ago: executing program 0 (id=3742): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000002100)=0x7, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r1, 0x0, 0x0, 0x20004045, 0x0, 0x0) 62.232519ms ago: executing program 0 (id=3743): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012", 0x5}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0 (id=3744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0xf4ff, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) kernel console output (not intermixed with test programs): 6101] loop2: p4 size 65536 extends beyond EOD, truncated [ 62.901568][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1131'. [ 62.912484][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1131'. [ 63.085187][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.093638][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.129845][ T6129] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6129 comm=syz.5.1134 [ 63.348319][ T6147] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 63.393926][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 63.401728][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 63.409712][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.410210][ T6155] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1146'. [ 63.417394][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.417421][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.417507][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.449593][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.457322][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.465022][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.472688][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.480401][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.488161][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.495947][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.503602][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.511382][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.519114][ T3377] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 63.528013][ T3377] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 63.598071][ T6166] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 63.624270][ T6168] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1152'. [ 63.733036][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 63.742298][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'. [ 63.786584][ T6183] syzkaller0: entered promiscuous mode [ 63.816403][ T6197] loop4: detected capacity change from 0 to 128 [ 63.832539][ T6197] FAT-fs (loop4): Directory bread(block 162) failed [ 63.851331][ T6199] netlink: 'syz.0.1166': attribute type 5 has an invalid length. [ 63.851594][ T6197] FAT-fs (loop4): Directory bread(block 163) failed [ 63.868968][ T6197] FAT-fs (loop4): Directory bread(block 164) failed [ 63.876044][ T6197] FAT-fs (loop4): Directory bread(block 165) failed [ 63.882814][ T6197] FAT-fs (loop4): Directory bread(block 166) failed [ 63.892021][ T6197] FAT-fs (loop4): Directory bread(block 167) failed [ 63.900360][ T6197] FAT-fs (loop4): Directory bread(block 168) failed [ 63.907174][ T6197] FAT-fs (loop4): Directory bread(block 169) failed [ 63.918864][ T6201] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1167'. [ 63.927976][ T6201] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1167'. [ 63.937110][ T6201] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1167'. [ 63.937678][ T6197] FAT-fs (loop4): Directory bread(block 162) failed [ 63.955142][ T6197] FAT-fs (loop4): Directory bread(block 163) failed [ 63.961197][ T6201] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1167'. [ 63.962275][ T6197] syz.4.1165: attempt to access beyond end of device [ 63.962275][ T6197] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 63.984421][ T6197] syz.4.1165: attempt to access beyond end of device [ 63.984421][ T6197] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 64.242312][ T6228] loop4: detected capacity change from 0 to 8192 [ 64.296776][ T6228] loop4: p1 p2 p3 p4 [ 64.300885][ T6228] loop4: p1 size 108922248 extends beyond EOD, truncated [ 64.307194][ T6256] nci: nci_ntf_packet: unknown ntf opcode 0x138 [ 64.318888][ T6228] loop4: p2 start 861536256 is beyond EOD, truncated [ 64.325767][ T6228] loop4: p3 start 851968 is beyond EOD, truncated [ 64.332205][ T6228] loop4: p4 size 65536 extends beyond EOD, truncated [ 64.660714][ T6319] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 64.660714][ T6319] program syz.2.1191 not setting count and/or reply_len properly [ 65.300120][ T6362] SELinux: syz.0.1210 (6362) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 65.360463][ T6370] hub 9-0:1.0: USB hub found [ 65.371003][ T6370] hub 9-0:1.0: 8 ports detected [ 65.403631][ T6376] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.412714][ T6376] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.653803][ T6413] loop4: detected capacity change from 0 to 512 [ 65.672320][ T6413] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.1234: corrupted xattr block 95: invalid header [ 65.689630][ T6413] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1234: bg 0: block 7: invalid block bitmap [ 65.703686][ T6413] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 65.714635][ T6413] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.1234: corrupted xattr block 95: invalid header [ 65.732231][ T6413] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 65.741696][ T6413] EXT4-fs (loop4): 1 orphan inode deleted [ 65.755565][ T6422] IPv6: Can't replace route, no match found [ 65.843366][ T6438] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.859143][ T6438] vhci_hcd: invalid port number 9 [ 65.864227][ T6438] vhci_hcd: default hub control req: 6003 v00a6 i0009 l0 [ 65.882046][ T3377] Process accounting resumed [ 66.003162][ T6463] IPv6: Can't replace route, no match found [ 66.074231][ T6470] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 66.081132][ T6472] loop4: detected capacity change from 0 to 736 [ 66.098356][ T6472] rock: directory entry would overflow storage [ 66.104566][ T6472] rock: sig=0x3b10, size=4, remaining=3 [ 66.116682][ T6477] SELinux: policydb version 0 does not match my version range 15-34 [ 66.126285][ T6477] SELinux: failed to load policy [ 66.207423][ T6488] loop2: detected capacity change from 0 to 128 [ 66.241410][ T6488] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.425955][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 66.425971][ T29] audit: type=1400 audit(2000000006.400:1562): avc: denied { write } for pid=6504 comm="syz.0.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.554358][ T6513] loop2: detected capacity change from 0 to 2048 [ 66.622872][ T29] audit: type=1400 audit(2000000006.590:1563): avc: denied { name_bind } for pid=6518 comm="syz.0.1277" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.667604][ T29] audit: type=1400 audit(2000000006.630:1564): avc: denied { shutdown } for pid=6520 comm="syz.2.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.748263][ T6529] 9pnet: Could not find request transport: xen [ 66.874949][ T29] audit: type=1400 audit(2000000006.850:1565): avc: denied { tracepoint } for pid=6549 comm="syz.2.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.904062][ T29] audit: type=1400 audit(2000000006.870:1566): avc: denied { read } for pid=6549 comm="syz.2.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.976782][ T29] audit: type=1400 audit(2000000006.950:1567): avc: denied { mount } for pid=6559 comm="syz.6.1297" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.999891][ T29] audit: type=1400 audit(2000000006.970:1568): avc: denied { unmount } for pid=5513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.107592][ T29] audit: type=1326 audit(2000000007.080:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 67.131151][ T29] audit: type=1326 audit(2000000007.080:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1210be169 code=0x7ffc0000 [ 67.154802][ T29] audit: type=1326 audit(2000000007.080:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.6.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1210be169 code=0x7ffc0000 [ 67.234594][ T6588] 9pnet: Could not find request transport: 0xffffffffffffffff [ 67.279693][ T6603] loop4: detected capacity change from 0 to 1024 [ 67.286769][ T6603] EXT4-fs: Ignoring removed nobh option [ 67.292462][ T6603] EXT4-fs: Ignoring removed bh option [ 67.309290][ T6603] EXT4-fs mount: 43 callbacks suppressed [ 67.309310][ T6603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.389030][ T6603] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1315: Allocating blocks 385-513 which overlap fs metadata [ 67.421278][ T6603] EXT4-fs (loop4): pa ffff888106104700: logic 16, phys. 129, len 24 [ 67.429403][ T6603] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 67.443260][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.562055][ T6632] hub 9-0:1.0: USB hub found [ 67.566963][ T6632] hub 9-0:1.0: 8 ports detected [ 67.626527][ T6640] ALSA: seq fatal error: cannot create timer (-22) [ 67.652522][ T6644] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.760804][ T6650] SELinux: failed to load policy [ 67.974479][ T6663] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.982138][ T6663] vhci_hcd: invalid port number 9 [ 67.987268][ T6663] vhci_hcd: default hub control req: 6003 v00a6 i0009 l0 [ 68.128098][ T6677] batadv_slave_1: entered promiscuous mode [ 68.158366][ T6676] batadv_slave_1: left promiscuous mode [ 68.163212][ T6673] loop2: detected capacity change from 0 to 8192 [ 68.235317][ T6673] loop2: p1 p2 p3 p4 [ 68.239492][ T6673] loop2: p1 size 108922248 extends beyond EOD, truncated [ 68.255872][ T6673] loop2: p2 start 861536256 is beyond EOD, truncated [ 68.262626][ T6673] loop2: p3 start 851968 is beyond EOD, truncated [ 68.269152][ T6673] loop2: p4 size 65536 extends beyond EOD, truncated [ 68.295736][ T6690] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.317236][ T6690] vhci_hcd: invalid port number 9 [ 68.322315][ T6690] vhci_hcd: default hub control req: 6003 v00a6 i0009 l0 [ 68.401500][ T6704] vhci_hcd: default hub control req: 6003 v0001 i0003 l0 [ 68.577905][ T6728] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 68.628189][ T6731] SELinux: policydb version 0 does not match my version range 15-34 [ 68.649501][ T6733] syz.4.1374: attempt to access beyond end of device [ 68.649501][ T6733] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 68.668698][ T6731] SELinux: failed to load policy [ 68.737169][ T6741] vhci_hcd: default hub control req: 600f v0000 i0000 l0 [ 68.778044][ T6747] loop4: detected capacity change from 0 to 128 [ 68.815436][ T6747] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 68.883126][ T6753] loop2: detected capacity change from 0 to 1024 [ 68.896117][ T6267] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 68.913742][ T6753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.914260][ T6753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.023159][ T6777] lo speed is unknown, defaulting to 1000 [ 69.029254][ T6777] lo speed is unknown, defaulting to 1000 [ 69.035204][ T6777] lo speed is unknown, defaulting to 1000 [ 69.041558][ T6777] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.049436][ T6777] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 69.060389][ T6777] lo speed is unknown, defaulting to 1000 [ 69.067602][ T6775] SELinux: failed to load policy [ 69.068291][ T6777] lo speed is unknown, defaulting to 1000 [ 69.084257][ T6777] lo speed is unknown, defaulting to 1000 [ 69.090363][ T6777] lo speed is unknown, defaulting to 1000 [ 69.100906][ T6777] lo speed is unknown, defaulting to 1000 [ 69.107533][ T6777] lo speed is unknown, defaulting to 1000 [ 69.114585][ T6777] lo speed is unknown, defaulting to 1000 [ 69.124589][ T6777] lo speed is unknown, defaulting to 1000 [ 69.131103][ T6777] lo speed is unknown, defaulting to 1000 [ 69.137364][ T6777] lo speed is unknown, defaulting to 1000 [ 69.452941][ T6817] loop4: detected capacity change from 0 to 512 [ 69.472919][ T6817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1411: bg 0: block 393: padding at end of block bitmap is not set [ 69.490940][ T6817] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 69.500201][ T6817] EXT4-fs (loop4): 2 truncates cleaned up [ 69.508247][ T6817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.555835][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.897978][ T6851] xt_hashlimit: max too large, truncated to 1048576 [ 70.492012][ T6892] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.595729][ T6908] loop9: detected capacity change from 0 to 7 [ 70.602213][ T6908] Buffer I/O error on dev loop9, logical block 0, async page read [ 70.610235][ T6908] Buffer I/O error on dev loop9, logical block 0, async page read [ 70.618152][ T6908] loop9: unable to read partition table [ 70.623853][ T6908] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 70.623853][ T6908] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 71.138242][ T6944] block device autoloading is deprecated and will be removed. [ 71.147713][ T6944] syz.6.1469: attempt to access beyond end of device [ 71.147713][ T6944] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 71.337374][ T6955] lo speed is unknown, defaulting to 1000 [ 71.406505][ T6933] netlink: 'syz.5.1463': attribute type 1 has an invalid length. [ 71.408911][ T6968] siw: device registration error -23 [ 71.658146][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 71.658162][ T29] audit: type=1400 audit(2000000001.560:1603): avc: denied { setopt } for pid=6988 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.765626][ T29] audit: type=1400 audit(2000000001.660:1604): avc: denied { remount } for pid=6990 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.020317][ T29] audit: type=1326 audit(2000000001.920:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 72.046974][ T29] audit: type=1326 audit(2000000001.920:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 72.070492][ T29] audit: type=1326 audit(2000000001.920:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f6b59cad0 code=0x7ffc0000 [ 72.094062][ T29] audit: type=1326 audit(2000000001.920:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 72.117793][ T29] audit: type=1326 audit(2000000001.920:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 72.141175][ T29] audit: type=1326 audit(2000000001.920:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 72.164612][ T29] audit: type=1326 audit(2000000001.950:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 72.270164][ T29] audit: type=1326 audit(2000000002.170:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 72.625432][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 72.633168][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 72.643917][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.651732][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.659459][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.667494][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.675219][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.682950][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.690751][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.698512][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.706299][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.713948][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.721625][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.729402][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.737084][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.744735][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 72.752997][ T23] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 72.753465][ T7066] SELinux: security policydb version 17 (MLS) not backwards compatible [ 72.771377][ T7066] SELinux: failed to load policy [ 72.860325][ T7081] __nla_validate_parse: 12 callbacks suppressed [ 72.860343][ T7081] netlink: 404 bytes leftover after parsing attributes in process `syz.6.1526'. [ 72.952383][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 72.960177][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 72.977985][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 72.985786][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 72.993446][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.001140][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.008854][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.016541][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.024373][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.032168][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.039909][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.047674][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.055386][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.063125][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.070824][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.078578][ T23] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 73.092079][ T23] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 73.164305][ T7110] SELinux: security policydb version 17 (MLS) not backwards compatible [ 73.181642][ T7110] SELinux: failed to load policy [ 73.251013][ T7125] random: crng reseeded on system resumption [ 73.594894][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 73.604025][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 73.613268][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 73.642232][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 73.651638][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 73.660705][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 73.683935][ T7162] SELinux: security policydb version 17 (MLS) not backwards compatible [ 73.702461][ T7165] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 73.707721][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 73.710480][ T7162] SELinux: failed to load policy [ 73.718925][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 73.718943][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1570'. [ 74.143410][ T7210] lo speed is unknown, defaulting to 1000 [ 74.208532][ T7228] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 74.208532][ T7228] program syz.0.1595 not setting count and/or reply_len properly [ 74.260168][ T7236] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 74.401913][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.439624][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.512015][ T7267] lo speed is unknown, defaulting to 1000 [ 74.623444][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.633319][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.642654][ T7287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7287 comm=syz.6.1623 [ 74.670370][ T7289] hub 9-0:1.0: USB hub found [ 74.686365][ T7289] hub 9-0:1.0: 8 ports detected [ 74.853119][ T7320] hub 9-0:1.0: USB hub found [ 74.868031][ T7314] lo speed is unknown, defaulting to 1000 [ 74.868472][ T7320] hub 9-0:1.0: 8 ports detected [ 75.473100][ T7365] SELinux: Context system_u:object_r:inetd_child_exec_t:s0 is not valid (left unmapped). [ 75.761054][ T7390] IPv6: Can't replace route, no match found [ 76.041622][ T7416] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 76.169714][ T7424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.255391][ T7424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.353394][ T7424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.441452][ T7424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.538604][ T7424] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.569066][ T7424] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.585534][ T7424] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.588435][ T7433] netlink: 'syz.6.1687': attribute type 1 has an invalid length. [ 76.603418][ T7429] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.608434][ T7424] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.748490][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 76.748506][ T29] audit: type=1404 audit(2000000006.650:1686): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 76.780660][ T29] audit: type=1400 audit(2000000006.650:1687): avc: denied { sqpoll } for pid=7426 comm="syz.0.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 76.800042][ T29] audit: type=1400 audit(2000000006.650:1688): avc: denied { allowed } for pid=7436 comm="syz.6.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 76.819447][ T29] audit: type=1404 audit(2000000006.680:1689): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 76.841606][ T29] audit: type=1400 audit(2000000006.740:1690): avc: denied { read } for pid=7441 comm="syz.5.1691" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.867130][ T29] audit: type=1400 audit(2000000006.740:1691): avc: denied { open } for pid=7441 comm="syz.5.1691" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.890381][ T29] audit: type=1400 audit(2000000006.740:1692): avc: denied { ioctl } for pid=7441 comm="syz.5.1691" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.915178][ T29] audit: type=1400 audit(2000000006.800:1693): avc: denied { map_create } for pid=7443 comm="syz.6.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.934396][ T29] audit: type=1400 audit(2000000006.800:1694): avc: denied { bpf } for pid=7443 comm="syz.6.1692" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.954986][ T29] audit: type=1400 audit(2000000006.800:1695): avc: denied { map_read map_write } for pid=7443 comm="syz.6.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.089156][ T7459] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 77.128660][ T7464] SELinux: syz.6.1703 (7464) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 77.155007][ T7465] SELinux: failed to load policy [ 77.190343][ T7472] serio: Serial port ptm0 [ 77.320389][ T7498] SELinux: syz.4.1716 (7498) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 77.374807][ T7507] vhci_hcd: default hub control req: 0007 v0003 i0005 l0 [ 77.407127][ T7503] SELinux: failed to load policy [ 77.566632][ T7533] vhci_hcd: default hub control req: 0007 v0003 i0005 l0 [ 77.774507][ T7545] SELinux: failed to load policy [ 78.008383][ T7594] __nla_validate_parse: 16 callbacks suppressed [ 78.008401][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1759'. [ 78.158040][ T7617] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 78.166379][ T7617] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 78.468304][ T7646] hub 9-0:1.0: USB hub found [ 78.477494][ T7646] hub 9-0:1.0: 8 ports detected [ 78.628390][ T7654] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 78.855541][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1796'. [ 79.106718][ T7694] netlink: 'syz.4.1803': attribute type 5 has an invalid length. [ 79.239828][ T7702] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 79.260575][ T7701] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 79.327478][ T7718] ipvlan2: entered promiscuous mode [ 79.332790][ T7718] ipvlan2: entered allmulticast mode [ 79.338176][ T7718] bridge0: entered allmulticast mode [ 79.349539][ T7718] batman_adv: batadv0: Adding interface: ipvlan2 [ 79.355951][ T7718] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.381737][ T7718] batman_adv: batadv0: Interface activated: ipvlan2 [ 79.438718][ T7724] loop9: detected capacity change from 0 to 7 [ 79.462787][ T7724] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.481479][ T7736] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 79.487098][ T7724] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.499214][ T7724] loop9: unable to read partition table [ 79.513011][ T7724] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 79.513011][ T7724] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 79.646328][ T7752] smc: net device bond0 applied user defined pnetid SYZ2 [ 79.653879][ T7759] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1832'. [ 79.671736][ T7752] smc: net device bond0 erased user defined pnetid SYZ2 [ 79.741138][ T3377] lo speed is unknown, defaulting to 1000 [ 79.778857][ T7769] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 79.799415][ T7771] vlan2: entered promiscuous mode [ 79.804540][ T7771] team0: entered promiscuous mode [ 79.809736][ T7771] team_slave_0: entered promiscuous mode [ 79.815606][ T7771] team_slave_1: entered promiscuous mode [ 79.823332][ T7771] team0: Device vlan2 is already an upper device of the team interface [ 79.837049][ T7768] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 79.933501][ T7789] syz_tun: refused to change device tx_queue_len [ 80.016650][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.017226][ T7802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1855'. [ 80.024190][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.040594][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.048066][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.055561][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.062976][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.070534][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.077961][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.085394][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.092826][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.100248][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.107669][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.115177][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.122579][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.130090][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.137549][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.144975][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.152461][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.159877][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.167337][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.174787][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.182241][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.189783][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.197321][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.204790][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.212251][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.219680][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.227167][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.234702][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.242114][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.249518][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.256937][ T3380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.269209][ T3380] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 80.272154][ T7807] bridge0: entered promiscuous mode [ 80.287865][ T7807] macvlan2: entered promiscuous mode [ 80.294396][ T7807] bridge0: port 3(macvlan2) entered blocking state [ 80.300993][ T7807] bridge0: port 3(macvlan2) entered disabled state [ 80.309254][ T7807] macvlan2: entered allmulticast mode [ 80.314663][ T7807] bridge0: entered allmulticast mode [ 80.325097][ T7807] macvlan2: left allmulticast mode [ 80.330266][ T7807] bridge0: left allmulticast mode [ 80.354459][ T7811] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 80.357722][ T7807] bridge0: left promiscuous mode [ 80.413263][ T7817] syz_tun: refused to change device tx_queue_len [ 80.512902][ T7831] netlink: 'syz.5.1867': attribute type 3 has an invalid length. [ 80.659460][ T7853] SELinux: policydb version 0 does not match my version range 15-34 [ 80.668759][ T7853] SELinux: failed to load policy [ 80.702469][ T7868] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 80.750776][ T7878] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1892'. [ 80.896217][ T7901] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1903' sets config #1 [ 81.083939][ T7923] program syz.4.1910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.377151][ T7929] usb usb1: usbfs: process 7929 (syz.4.1913) did not claim interface 0 before use [ 81.409774][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.418921][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.832277][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 81.832294][ T29] audit: type=1326 audit(2000000011.730:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 81.862203][ T29] audit: type=1326 audit(2000000011.730:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 81.897643][ T29] audit: type=1326 audit(2000000011.770:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 81.921188][ T29] audit: type=1326 audit(2000000011.770:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 81.944837][ T29] audit: type=1326 audit(2000000011.770:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 81.968277][ T29] audit: type=1326 audit(2000000011.770:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 81.991706][ T29] audit: type=1400 audit(2000000011.770:1933): avc: denied { mount } for pid=7958 comm="syz.2.1928" name="/" dev="ramfs" ino=19072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.014313][ T29] audit: type=1326 audit(2000000011.770:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 82.037796][ T29] audit: type=1326 audit(2000000011.770:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 82.061309][ T29] audit: type=1326 audit(2000000011.770:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 82.094284][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1931'. [ 82.240432][ T7988] SELinux: ebitmap: truncated map [ 82.249807][ T7988] SELinux: failed to load policy [ 82.276103][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1944'. [ 82.293586][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.301126][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.308619][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.316040][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.323509][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.330968][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338400][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338427][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338450][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338516][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338540][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338562][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338585][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338608][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338680][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338703][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338732][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338826][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338850][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338950][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338973][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.338997][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339020][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339043][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339118][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339142][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339168][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339193][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339218][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339243][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339308][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.339333][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.366646][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 82.673227][ T8019] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 82.673227][ T8019] program syz.4.1955 not setting count and/or reply_len properly [ 82.700919][ T8021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.708307][ T8021] IPv6: NLM_F_CREATE should be set when creating new route [ 82.973643][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.982314][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.267627][ T8051] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1968'. [ 83.483173][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1971'. [ 83.808974][ T8078] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1982'. [ 83.819962][ T8079] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 83.819962][ T8079] program syz.5.1981 not setting count and/or reply_len properly [ 83.872770][ T8083] netlink: 'syz.5.1984': attribute type 1 has an invalid length. [ 84.229201][ T8125] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 84.412348][ T8140] xt_CT: No such helper "pptp" [ 84.427623][ T8147] netlink: 'syz.0.2011': attribute type 39 has an invalid length. [ 84.554802][ T8154] SELinux: syz.6.2014 (8154) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 84.663235][ T8162] bridge_slave_0: left allmulticast mode [ 84.669181][ T8162] bridge_slave_0: left promiscuous mode [ 84.675040][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.690643][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 84.701655][ T8162] bridge_slave_1: left allmulticast mode [ 84.707584][ T8162] bridge_slave_1: left promiscuous mode [ 84.713307][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.714917][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.744258][ T8162] bond0: (slave bond_slave_0): Releasing backup interface [ 84.768119][ T8162] bond0: (slave bond_slave_1): Releasing backup interface [ 84.818497][ T8162] team0: Port device team_slave_0 removed [ 84.843197][ T8162] team0: Port device team_slave_1 removed [ 84.850494][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.858040][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.132740][ T8188] loop0: detected capacity change from 0 to 1024 [ 85.149603][ T8188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.199389][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.266589][ T8206] loop0: detected capacity change from 0 to 1024 [ 85.274412][ T8206] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.292542][ T8206] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.2034: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.308552][ T8206] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2034: Failed to acquire dquot type 0 [ 85.320772][ T8206] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.2034: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.336945][ T8206] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2034: Invalid inode bitmap blk 0 in block_group 0 [ 85.357544][ T6302] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.372038][ T8206] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 85.375640][ T6302] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:58: Failed to release dquot type 0 [ 85.382925][ T8206] EXT4-fs (loop0): 1 orphan inode deleted [ 85.399853][ T8206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.445143][ T8206] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.492968][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.743722][ T8267] sd 0:0:1:0: device reset [ 85.850468][ T8271] bridge_slave_0: left allmulticast mode [ 85.856245][ T8271] bridge_slave_0: left promiscuous mode [ 85.861967][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.880899][ T8271] bridge_slave_1: left allmulticast mode [ 85.886651][ T8271] bridge_slave_1: left promiscuous mode [ 85.892395][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.907057][ T8271] bond0: (slave bond_slave_0): Releasing backup interface [ 85.918266][ T8271] bond0: (slave bond_slave_1): Releasing backup interface [ 85.930143][ T8271] team0: Port device team_slave_0 removed [ 85.938878][ T8271] team0: Port device team_slave_1 removed [ 85.946031][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.953471][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.962243][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.969788][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.032222][ T8286] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 86.032222][ T8286] program syz.5.2073 not setting count and/or reply_len properly [ 86.069460][ T8290] siw: device registration error -23 [ 86.121535][ T8295] pim6reg1: entered promiscuous mode [ 86.127091][ T8295] pim6reg1: entered allmulticast mode [ 86.157912][ T8300] netlink: 'syz.5.2079': attribute type 39 has an invalid length. [ 86.207452][ T8296] lo speed is unknown, defaulting to 1000 [ 86.284531][ T8302] loop0: detected capacity change from 0 to 8192 [ 86.291872][ T8317] sd 0:0:1:0: device reset [ 86.296916][ T8302] loop0: p1 p2 p3 p4 [ 86.300964][ T8302] loop0: p1 size 108922248 extends beyond EOD, truncated [ 86.308614][ T8302] loop0: p2 start 861536256 is beyond EOD, truncated [ 86.315422][ T8302] loop0: p3 start 851968 is beyond EOD, truncated [ 86.321885][ T8302] loop0: p4 size 65536 extends beyond EOD, truncated [ 86.460631][ T8342] sch_fq: defrate 129 ignored. [ 86.468793][ T8346] netlink: 'syz.6.2098': attribute type 1 has an invalid length. [ 86.574142][ T8360] SELinux: failed to load policy [ 86.603447][ T8367] tmpfs: Bad value for 'mpol' [ 86.655520][ T8373] netlink: 344 bytes leftover after parsing attributes in process `syz.2.2110'. [ 87.054730][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 87.056759][ T8415] Invalid ELF header magic: != ELF [ 87.060996][ T29] audit: type=1400 audit(2000000016.950:2079): avc: denied { sys_module } for pid=8414 comm="syz.0.2125" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.091990][ T29] audit: type=1400 audit(2000000016.960:2080): avc: denied { module_load } for pid=8414 comm="syz.0.2125" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 87.319495][ T29] audit: type=1400 audit(2000000017.220:2081): avc: denied { remount } for pid=8445 comm="syz.2.2130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.426999][ T29] audit: type=1400 audit(2000000017.330:2082): avc: denied { append } for pid=8459 comm="syz.2.2131" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.688363][ T29] audit: type=1400 audit(2000000017.590:2083): avc: denied { create } for pid=8495 comm="syz.0.2136" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.741775][ T29] audit: type=1400 audit(2000000017.590:2084): avc: denied { mounton } for pid=8495 comm="syz.0.2136" path="/488/file0" dev="tmpfs" ino=2524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 87.764962][ T29] audit: type=1326 audit(2000000017.640:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 87.788508][ T29] audit: type=1326 audit(2000000017.640:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 87.812179][ T29] audit: type=1326 audit(2000000017.640:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 87.813702][ T8501] openvswitch: netlink: Message has 6 unknown bytes. [ 87.835631][ T29] audit: type=1326 audit(2000000017.640:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 87.867765][ T3309] block device autoloading is deprecated and will be removed. [ 87.957916][ T8508] SELinux: failed to load policy [ 88.151937][ T8539] SELinux: failed to load policy [ 88.176115][ T8550] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.202312][ T8550] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 88.387161][ T8576] sd 0:0:1:0: device reset [ 88.393200][ T8580] loop7: detected capacity change from 0 to 16384 [ 88.495956][ T8579] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.531443][ T8579] SELinux: failed to load policy [ 88.546176][ T8588] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.559939][ T8588] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 88.644875][ T8584] loop7: detected capacity change from 16384 to 16383 [ 88.654408][ T8584] I/O error, dev loop7, sector 9984 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 88.664416][ T8584] Buffer I/O error on dev loop7, logical block 1248, lost async page write [ 88.673124][ T8584] Buffer I/O error on dev loop7, logical block 1249, lost async page write [ 88.681799][ T8584] Buffer I/O error on dev loop7, logical block 1250, lost async page write [ 88.690515][ T8584] Buffer I/O error on dev loop7, logical block 1251, lost async page write [ 88.699197][ T8584] Buffer I/O error on dev loop7, logical block 1252, lost async page write [ 88.707863][ T8584] Buffer I/O error on dev loop7, logical block 1253, lost async page write [ 88.716591][ T8584] Buffer I/O error on dev loop7, logical block 1254, lost async page write [ 88.725224][ T8584] Buffer I/O error on dev loop7, logical block 1255, lost async page write [ 88.733847][ T8584] Buffer I/O error on dev loop7, logical block 1256, lost async page write [ 88.742587][ T8584] Buffer I/O error on dev loop7, logical block 1257, lost async page write [ 88.757443][ T8584] I/O error, dev loop7, sector 11008 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 88.800980][ T8584] I/O error, dev loop7, sector 12032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 88.830507][ T8584] I/O error, dev loop7, sector 13056 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 88.845676][ T8584] I/O error, dev loop7, sector 14080 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 88.873372][ T8584] I/O error, dev loop7, sector 15104 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 88.892864][ T8584] I/O error, dev loop7, sector 16128 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 88.910571][ T8584] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.920109][ T8584] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.929454][ T8584] loop7: unable to read partition table [ 88.935398][ T8584] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 89.019501][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2197'. [ 89.141932][ T8648] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 89.758951][ T8691] sd 0:0:1:0: device reset [ 90.076571][ T8706] SELinux: ebitmap: truncated map [ 90.096861][ T8706] SELinux: failed to load policy [ 90.253329][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 90.494338][ T8684] 9pnet_fd: p9_fd_create_tcp (8684): problem connecting socket to 127.0.0.1 [ 90.494919][ T8737] netlink: 'syz.6.2241': attribute type 1 has an invalid length. [ 90.992298][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 91.068379][ T8849] syzkaller1: entered promiscuous mode [ 91.073941][ T8849] syzkaller1: entered allmulticast mode [ 91.117380][ T8856] pim6reg1: entered promiscuous mode [ 91.122774][ T8856] pim6reg1: entered allmulticast mode [ 91.386894][ T8909] netlink: 'syz.4.2279': attribute type 1 has an invalid length. [ 91.446653][ T8916] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 91.904841][ T8946] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 91.911384][ T8946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 91.919185][ T8946] vhci_hcd vhci_hcd.0: Device attached [ 91.935385][ T8953] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.966613][ T8953] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.010310][ T8949] vhci_hcd: connection closed [ 92.010632][ T6302] vhci_hcd: stop threads [ 92.019735][ T6302] vhci_hcd: release socket [ 92.024187][ T6302] vhci_hcd: disconnect device [ 92.038446][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 92.048367][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.059429][ T8956] bridge0: entered promiscuous mode [ 92.068103][ T8956] bridge0: port 1(macsec1) entered blocking state [ 92.074593][ T8956] bridge0: port 1(macsec1) entered disabled state [ 92.081340][ T8956] macsec1: entered allmulticast mode [ 92.086766][ T8956] bridge0: entered allmulticast mode [ 92.135513][ T8956] macsec1: left allmulticast mode [ 92.140835][ T8956] bridge0: left allmulticast mode [ 92.147880][ T8956] bridge0: left promiscuous mode [ 92.179668][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2301'. [ 92.189105][ T8962] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.269106][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 92.347616][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 92.347633][ T29] audit: type=1400 audit(2000000022.250:2235): avc: denied { create } for pid=8977 comm="syz.5.2308" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.394956][ T29] audit: type=1400 audit(2000000022.250:2236): avc: denied { write } for pid=8977 comm="syz.5.2308" name="file0" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.417505][ T29] audit: type=1400 audit(2000000022.250:2237): avc: denied { open } for pid=8977 comm="syz.5.2308" path="/391/file0" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.440433][ T29] audit: type=1400 audit(2000000022.250:2238): avc: denied { ioctl } for pid=8977 comm="syz.5.2308" path="/391/file0" dev="tmpfs" ino=2027 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.478434][ T8981] macvlan1: entered promiscuous mode [ 92.499405][ T8981] ipvlan0: entered promiscuous mode [ 92.504867][ T29] audit: type=1400 audit(2000000022.330:2239): avc: denied { unlink } for pid=4607 comm="syz-executor" name="file0" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.510792][ T8981] ipvlan0: left promiscuous mode [ 92.563557][ T8981] macvlan1: left promiscuous mode [ 92.584239][ T29] audit: type=1400 audit(2000000022.480:2240): avc: denied { create } for pid=8985 comm="syz.5.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.669855][ T29] audit: type=1400 audit(2000000022.550:2241): avc: denied { bind } for pid=8985 comm="syz.5.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.689280][ T29] audit: type=1400 audit(2000000022.550:2242): avc: denied { name_bind } for pid=8985 comm="syz.5.2312" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 92.710105][ T29] audit: type=1400 audit(2000000022.550:2243): avc: denied { node_bind } for pid=8985 comm="syz.5.2312" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 92.731016][ T29] audit: type=1400 audit(2000000022.550:2244): avc: denied { listen } for pid=8985 comm="syz.5.2312" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.977499][ T9024] hub 2-0:1.0: USB hub found [ 92.984826][ T9024] hub 2-0:1.0: 8 ports detected [ 93.119522][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 93.129474][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.143427][ T9041] bridge0: entered promiscuous mode [ 93.149593][ T9041] bridge0: port 1(macsec1) entered blocking state [ 93.156112][ T9041] bridge0: port 1(macsec1) entered disabled state [ 93.164538][ T9041] macsec1: entered allmulticast mode [ 93.169958][ T9041] bridge0: entered allmulticast mode [ 93.177453][ T9041] macsec1: left allmulticast mode [ 93.182521][ T9041] bridge0: left allmulticast mode [ 93.188333][ T9041] bridge0: left promiscuous mode [ 93.287693][ T9060] block device autoloading is deprecated and will be removed. [ 93.296438][ T9060] syz.0.2349: attempt to access beyond end of device [ 93.296438][ T9060] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 93.395330][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2353'. [ 93.827775][ T9106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 93.837683][ T9106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.875355][ T9106] bridge0: entered promiscuous mode [ 93.882678][ T9106] bridge0: port 4(macsec1) entered blocking state [ 93.889252][ T9106] bridge0: port 4(macsec1) entered disabled state [ 93.906162][ T9106] macsec1: entered allmulticast mode [ 93.911514][ T9106] bridge0: entered allmulticast mode [ 93.940699][ T9106] macsec1: left allmulticast mode [ 93.945837][ T9106] bridge0: left allmulticast mode [ 93.960063][ T9106] bridge0: left promiscuous mode [ 93.993399][ T9110] macvlan1: entered promiscuous mode [ 93.999716][ T9110] ipvlan0: entered promiscuous mode [ 94.005535][ T9110] ipvlan0: left promiscuous mode [ 94.010918][ T9110] macvlan1: left promiscuous mode [ 94.221097][ T9122] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 94.316322][ T9155] macvlan1: entered promiscuous mode [ 94.322883][ T9155] ipvlan0: entered promiscuous mode [ 94.328995][ T9155] ipvlan0: left promiscuous mode [ 94.334213][ T9155] macvlan1: left promiscuous mode [ 95.422312][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 95.432350][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.445623][ T9213] bridge0: entered promiscuous mode [ 95.451685][ T9213] bridge0: port 1(macsec1) entered blocking state [ 95.458341][ T9213] bridge0: port 1(macsec1) entered disabled state [ 95.466050][ T9213] macsec1: entered allmulticast mode [ 95.471382][ T9213] bridge0: entered allmulticast mode [ 95.477764][ T9213] macsec1: left allmulticast mode [ 95.482861][ T9213] bridge0: left allmulticast mode [ 95.488588][ T9213] bridge0: left promiscuous mode [ 95.640394][ T9234] capability: warning: `syz.0.2420' uses 32-bit capabilities (legacy support in use) [ 96.152623][ T9281] netlink: zone id is out of range [ 96.157891][ T9281] netlink: zone id is out of range [ 96.163056][ T9281] netlink: zone id is out of range [ 96.168210][ T9281] netlink: zone id is out of range [ 96.173446][ T9281] netlink: zone id is out of range [ 96.178821][ T9281] netlink: zone id is out of range [ 96.184110][ T9281] netlink: zone id is out of range [ 96.189292][ T9281] netlink: zone id is out of range [ 96.194405][ T9281] netlink: zone id is out of range [ 96.199575][ T9281] netlink: zone id is out of range [ 96.652866][ T9319] batadv0: entered promiscuous mode [ 96.661561][ T9319] batadv0: left promiscuous mode [ 96.718132][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2461'. [ 96.745188][ T9323] program syz.5.2462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.800040][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2464'. [ 96.858662][ T9338] bridge0: entered promiscuous mode [ 96.867207][ T9338] bridge0: port 4(macvlan2) entered blocking state [ 96.873784][ T9338] bridge0: port 4(macvlan2) entered disabled state [ 96.880616][ T9338] macvlan2: entered allmulticast mode [ 96.886228][ T9338] bridge0: entered allmulticast mode [ 96.892614][ T9338] macvlan2: left allmulticast mode [ 96.897900][ T9338] bridge0: left allmulticast mode [ 96.908940][ T9338] bridge0: left promiscuous mode [ 96.940571][ T9345] netlink: 'syz.5.2471': attribute type 1 has an invalid length. [ 96.948694][ T9345] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2471'. [ 96.982677][ T9351] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2474'. [ 96.991934][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2474'. [ 97.067017][ T9361] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 97.191630][ T9379] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 97.245983][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.253835][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.261852][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.269815][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.277596][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.285548][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.293392][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.301228][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.309038][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.316903][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.324776][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.332619][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.340515][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.348358][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.356134][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.363881][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.371675][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.379457][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.387270][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.395121][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.402956][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.410824][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.418632][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.426479][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.434225][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.442122][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.449954][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.457726][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.465498][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.473239][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.481022][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.488836][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.496631][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.504428][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.512278][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.520078][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.527849][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.535704][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.543472][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.551244][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.559073][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.566872][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.574632][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 97.585313][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 97.585328][ T29] audit: type=1400 audit(2000000027.490:2362): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 97.615099][ T29] audit: type=1400 audit(2000000027.490:2363): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 97.638763][ T3495] hid-generic 0000:007F:FFFFFFFE.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.968462][ T29] audit: type=1326 audit(2000000027.870:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 98.024776][ T29] audit: type=1326 audit(2000000027.870:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 98.048368][ T29] audit: type=1326 audit(2000000027.870:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 98.072296][ T29] audit: type=1326 audit(2000000027.870:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 98.114218][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 98.124201][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.137490][ T9401] bridge0: entered promiscuous mode [ 98.145234][ T9401] bridge0: port 1(macsec1) entered blocking state [ 98.151717][ T9401] bridge0: port 1(macsec1) entered disabled state [ 98.159193][ T29] audit: type=1400 audit(2000000028.050:2368): avc: denied { create } for pid=9402 comm="syz.2.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.178995][ T9401] macsec1: entered allmulticast mode [ 98.184383][ T9401] bridge0: entered allmulticast mode [ 98.191602][ T29] audit: type=1400 audit(2000000028.070:2369): avc: denied { bind } for pid=9402 comm="syz.2.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.211035][ T29] audit: type=1400 audit(2000000028.070:2370): avc: denied { name_bind } for pid=9402 comm="syz.2.2497" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 98.231957][ T29] audit: type=1400 audit(2000000028.070:2371): avc: denied { node_bind } for pid=9402 comm="syz.2.2497" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 98.262062][ T9401] macsec1: left allmulticast mode [ 98.267213][ T9401] bridge0: left allmulticast mode [ 98.272932][ T9401] bridge0: left promiscuous mode [ 98.569247][ T9438] bond0: entered promiscuous mode [ 98.618488][ T9440] ALSA: seq fatal error: cannot create timer (-19) [ 98.958225][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811813c200: rx timeout, send abort [ 98.966605][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811813c200: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.006342][ T9467] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 99.014654][ T9467] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 99.093187][ T9481] ALSA: seq fatal error: cannot create timer (-19) [ 99.153915][ T9492] syzkaller1: entered promiscuous mode [ 99.159513][ T9492] syzkaller1: entered allmulticast mode [ 99.183936][ T9496] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2541'. [ 99.228206][ T9500] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 99.236500][ T9500] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 99.259645][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.268275][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.403542][ T3377] lo speed is unknown, defaulting to 1000 [ 99.409412][ T3377] syz0: Port: 1 Link DOWN [ 99.772566][ T9572] netlink: 'syz.0.2576': attribute type 3 has an invalid length. [ 99.831421][ T9576] SELinux: ebitmap: truncated map [ 99.838729][ T9576] SELinux: failed to load policy [ 100.145046][ T3380] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec [ 100.377516][ T9610] macvlan2: entered promiscuous mode [ 100.382878][ T9610] macvlan2: entered allmulticast mode [ 100.392230][ T9610] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.719445][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2610'. [ 101.255748][ T9667] SELinux: syz.6.2618 (9667) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.588673][ T9720] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 101.688739][ T9729] netlink: 'syz.4.2644': attribute type 10 has an invalid length. [ 101.714481][ T9729] batman_adv: batadv0: Adding interface: team0 [ 101.720769][ T9729] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.746314][ T9729] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.765991][ T9737] netlink: 'syz.4.2644': attribute type 10 has an invalid length. [ 101.773893][ T9737] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2644'. [ 101.787761][ T9737] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.796526][ T9737] batman_adv: batadv0: Interface activated: team0 [ 101.803169][ T9737] batman_adv: batadv0: Interface deactivated: team0 [ 101.809896][ T9737] batman_adv: batadv0: Removing interface: team0 [ 101.819231][ T9737] bridge0: port 3(team0) entered blocking state [ 101.825594][ T9737] bridge0: port 3(team0) entered disabled state [ 101.832601][ T9737] team0: entered allmulticast mode [ 101.837831][ T9737] team_slave_0: entered allmulticast mode [ 101.843709][ T9737] team_slave_1: entered allmulticast mode [ 101.851104][ T9737] bridge0: port 3(team0) entered blocking state [ 101.857429][ T9737] bridge0: port 3(team0) entered forwarding state [ 102.050438][ T9748] macvlan2: entered promiscuous mode [ 102.056070][ T9748] macvlan2: entered allmulticast mode [ 102.062094][ T9748] bond0: entered promiscuous mode [ 102.067313][ T9748] bond_slave_0: entered promiscuous mode [ 102.073230][ T9748] bond_slave_1: entered promiscuous mode [ 102.079635][ T9748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.106300][ T9748] bond0: left promiscuous mode [ 102.111180][ T9748] bond_slave_0: left promiscuous mode [ 102.116876][ T9748] bond_slave_1: left promiscuous mode [ 102.625774][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 102.625793][ T29] audit: type=1400 audit(2000000032.530:2443): avc: denied { execute } for pid=9816 comm="syz.5.2684" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 102.708640][ T29] audit: type=1326 audit(2000000032.610:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.739334][ T29] audit: type=1326 audit(2000000032.640:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.802590][ T29] audit: type=1326 audit(2000000032.660:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.826260][ T29] audit: type=1326 audit(2000000032.660:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.849824][ T29] audit: type=1326 audit(2000000032.660:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.873474][ T29] audit: type=1326 audit(2000000032.670:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.897107][ T29] audit: type=1326 audit(2000000032.670:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.920616][ T29] audit: type=1326 audit(2000000032.670:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.944034][ T29] audit: type=1326 audit(2000000032.670:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad59ae169 code=0x7ffc0000 [ 102.978400][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 103.382973][ T9866] SELinux: ebitmap: truncated map [ 103.396438][ T9866] SELinux: failed to load policy [ 103.510854][ T9873] random: crng reseeded on system resumption [ 103.957351][ T3377] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 103.969641][ T3377] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.242198][ T9938] SELinux: syz.0.2738 (9938) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 104.528114][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2751'. [ 104.591139][ T9970] hub 9-0:1.0: USB hub found [ 104.597746][ T9970] hub 9-0:1.0: 8 ports detected [ 105.051701][T10006] tmpfs: Bad value for 'mpol' [ 105.726245][T10037] syzkaller0: entered promiscuous mode [ 105.732142][T10037] syzkaller0: entered allmulticast mode [ 105.853120][T10052] binfmt_misc: register: failed to install interpreter file ./file2 [ 105.947402][T10061] random: crng reseeded on system resumption [ 106.018474][T10065] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2795'. [ 106.128620][T10079] binfmt_misc: register: failed to install interpreter file ./file2 [ 106.151333][T10074] random: crng reseeded on system resumption [ 106.189418][T10085] hub 2-0:1.0: USB hub found [ 106.194292][T10085] hub 2-0:1.0: 8 ports detected [ 106.368496][T10104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2810'. [ 106.440494][T10116] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.651833][T10117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.660672][T10117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.899635][T10161] bridge0: entered promiscuous mode [ 106.907803][T10161] bridge0: port 3(macvlan2) entered blocking state [ 106.914410][T10161] bridge0: port 3(macvlan2) entered disabled state [ 106.921350][T10161] macvlan2: entered allmulticast mode [ 106.926977][T10161] bridge0: entered allmulticast mode [ 106.934345][T10161] macvlan2: left allmulticast mode [ 106.940402][T10161] bridge0: left allmulticast mode [ 106.946712][T10161] bridge0: left promiscuous mode [ 107.091925][T10176] SELinux: failed to load policy [ 107.256069][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2855'. [ 107.278750][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2858'. [ 107.640757][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2877'. [ 107.652724][T10229] vlan2: entered allmulticast mode [ 107.657936][T10229] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 107.672011][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 107.672029][ T29] audit: type=1400 audit(2000000037.580:2592): avc: denied { name_connect } for pid=10232 comm="syz.2.2869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 107.748226][ T29] audit: type=1400 audit(2000000037.650:2593): avc: denied { append } for pid=10241 comm="syz.2.2873" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.853396][ T29] audit: type=1400 audit(2000000037.750:2594): avc: denied { write } for pid=10246 comm="syz.6.2875" laddr=127.0.0.1 lport=36784 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 108.234133][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.246839][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.249182][T10286] SELinux: failed to load policy [ 108.475387][ T3495] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 108.649260][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2907'. [ 108.725740][ T29] audit: type=1326 audit(2000000038.630:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 108.794910][ T29] audit: type=1326 audit(2000000038.630:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.2.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 108.850931][ T3381] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 108.858852][ T3381] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 108.858883][ T3381] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 108.875303][ T3381] hid-generic 0000:0004:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 108.921663][ T29] audit: type=1400 audit(2000000038.820:2597): avc: denied { mount } for pid=10337 comm="syz.4.2918" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 108.962151][T10346] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2922'. [ 108.971392][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2922'. [ 109.003962][ T29] audit: type=1400 audit(2000000038.850:2598): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.026928][ T29] audit: type=1400 audit(2000000038.930:2599): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 109.081183][T10351] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2924'. [ 109.130863][ T3495] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 109.138405][ T3495] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 109.143906][ T29] audit: type=1400 audit(2000000039.040:2600): avc: denied { mounton } for pid=10362 comm="syz.2.2929" path="/543/bus" dev="tmpfs" ino=2822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.146046][ T3495] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 109.221634][ T3495] hid-generic 0000:0004:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 109.409201][T10393] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 109.443345][ T29] audit: type=1400 audit(2000000039.340:2601): avc: denied { getopt } for pid=10396 comm="syz.4.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.469405][T10393] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 109.715258][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2958'. [ 109.742006][T10431] ALSA: seq fatal error: cannot create timer (-22) [ 109.813123][T10436] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 109.849799][T10441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2964'. [ 109.858998][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2964'. [ 109.911411][T10447] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.103938][T10467] syzkaller0: entered promiscuous mode [ 110.110202][T10467] syzkaller0: entered allmulticast mode [ 110.341917][T10475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.357974][T10475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.574250][T10517] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.959534][T10533] SELinux: syz.6.3008 (10533) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 111.802257][T10587] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3032' sets config #1 [ 111.812989][T10592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.822096][T10592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.891566][T10605] SET target dimension over the limit! [ 112.294625][T10654] SELinux: syz.0.3065 (10654) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 112.330457][T10657] program syz.0.3074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.371698][T10661] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 112.401875][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.412562][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.699169][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 112.699188][ T29] audit: type=1400 audit(2000000042.600:2793): avc: denied { read write } for pid=10702 comm="syz.5.3088" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.765100][ T29] audit: type=1400 audit(2000000042.600:2794): avc: denied { open } for pid=10702 comm="syz.5.3088" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.788389][ T29] audit: type=1400 audit(2000000042.600:2795): avc: denied { ioctl } for pid=10702 comm="syz.5.3088" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.833473][ T29] audit: type=1326 audit(2000000042.730:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 112.857192][ T29] audit: type=1326 audit(2000000042.730:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 112.880779][ T29] audit: type=1326 audit(2000000042.730:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 112.904439][ T29] audit: type=1326 audit(2000000042.730:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 112.904468][ T29] audit: type=1326 audit(2000000042.730:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 113.025499][T10726] hub 1-0:1.0: USB hub found [ 113.033242][ T29] audit: type=1400 audit(2000000042.900:2801): avc: denied { write } for pid=10723 comm="syz.5.3095" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.058327][T10726] hub 1-0:1.0: 8 ports detected [ 113.077573][ T29] audit: type=1400 audit(2000000042.970:2802): avc: denied { bind } for pid=10728 comm="syz.4.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.178640][T10747] __nla_validate_parse: 7 callbacks suppressed [ 113.178658][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3108'. [ 113.441572][T10754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.441868][T10771] netlink: 680 bytes leftover after parsing attributes in process `syz.2.3120'. [ 113.450203][T10754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.100230][T10798] SELinux: failed to load policy [ 114.179660][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 114.187391][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 114.197225][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.205121][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.212874][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.220597][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.228412][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.236487][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.244232][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.251954][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.259649][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.267412][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.275161][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.282899][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.290684][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.298376][ T3381] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 114.307832][ T3381] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.462254][T10834] SELinux: failed to load policy [ 114.646015][T10856] bridge: RTM_NEWNEIGH with invalid ether address [ 114.665307][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3159'. [ 114.666086][T10858] hub 1-0:1.0: USB hub found [ 114.674314][T10860] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3159'. [ 114.674470][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3159'. [ 114.705582][T10858] hub 1-0:1.0: 8 ports detected [ 114.727263][T10863] Cannot find add_set index 0 as target [ 114.733293][T10860] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3159'. [ 114.742394][T10860] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3159'. [ 114.861487][T10878] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3167'. [ 114.918578][T10885] bridge: RTM_NEWNEIGH with invalid ether address [ 114.956558][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 114.964364][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 114.998996][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.006838][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.014591][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.014801][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.024523][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.030005][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.037764][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.037789][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.037812][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.037834][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.037924][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.037947][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.038042][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.038176][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.038201][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.038227][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.049333][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.054135][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.061763][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.070121][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.077157][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.084866][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.092563][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.092594][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.092619][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.101169][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.108295][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.115958][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.123664][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.132144][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.139053][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.146797][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.146821][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.146844][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.154506][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.163202][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.169985][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.170009][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.170030][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.177784][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.185534][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.185563][ T3381] hid-generic 0000:0000:20000000.0012: unknown main item tag 0x0 [ 115.236514][ T3381] hid-generic 0000:0000:20000000.0012: hidraw0: HID v0.01 Device [syz0] on syz1 [ 115.240782][ T3495] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 115.347652][ T3495] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 115.432572][T10916] net_ratelimit: 336 callbacks suppressed [ 115.432586][T10916] IPv4: Oversized IP packet from 127.202.26.0 [ 115.623775][T10948] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 115.965245][T10976] usb usb8: usbfs: process 10976 (syz.4.3209) did not claim interface 0 before use [ 116.055860][T10994] netlink: 'syz.2.3214': attribute type 10 has an invalid length. [ 116.069050][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.076943][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.084709][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.093409][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.101219][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.109356][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.117105][T10994] team0: Device hsr_slave_0 failed to register rx_handler [ 116.124318][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.132951][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.140766][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.148674][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.157249][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.165076][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.172900][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.180747][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.189810][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.197623][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.205506][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.213286][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.221781][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.229674][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.237740][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.246207][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.254160][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.262061][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.269851][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.278363][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.286298][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.294270][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.302071][ T3495] hid-generic 0000:0000:20000000.0013: unknown main item tag 0x0 [ 116.311181][ T3495] hid-generic 0000:0000:20000000.0013: hidraw0: HID v0.01 Device [syz0] on syz1 [ 116.421120][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3228'. [ 116.473698][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3228'. [ 116.537685][T11034] usb usb8: usbfs: process 11034 (syz.6.3234) did not claim interface 0 before use [ 116.683225][T11054] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 116.869309][T11068] vlan2: entered allmulticast mode [ 116.874477][T11068] bridge_slave_0: entered allmulticast mode [ 117.001234][T11082] sd 0:0:1:0: device reset [ 117.193479][T11098] netlink: 'syz.5.3264': attribute type 10 has an invalid length. [ 117.213895][T11098] team0: Device hsr_slave_0 failed to register rx_handler [ 117.275329][T11107] SELinux: failed to load policy [ 117.404338][T11129] syzkaller0: entered promiscuous mode [ 117.409896][T11129] syzkaller0: entered allmulticast mode [ 117.429123][T11129] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 117.529500][T11135] netlink: 'syz.6.3283': attribute type 10 has an invalid length. [ 117.564969][T11135] team0: Device hsr_slave_0 failed to register rx_handler [ 117.742851][T11167] SELinux: syz.2.3308 (11167) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.813248][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 117.813265][ T29] audit: type=1400 audit(2000000047.710:3032): avc: denied { sqpoll } for pid=11170 comm="syz.2.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 117.847827][T11173] sd 0:0:1:0: device reset [ 117.864152][ T29] audit: type=1400 audit(2000000047.760:3033): avc: denied { mount } for pid=11175 comm="syz.6.3301" name="/" dev="ramfs" ino=29577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 118.002311][ T29] audit: type=1326 audit(2000000047.900:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.2.3311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x0 [ 118.047082][ T29] audit: type=1400 audit(2000000047.940:3035): avc: denied { execute } for pid=11191 comm="syz.0.3310" path="/730/cpu.stat" dev="tmpfs" ino=3767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.382738][T11213] syz.4.3320: attempt to access beyond end of device [ 118.382738][T11213] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.572764][ T29] audit: type=1400 audit(2000000048.470:3036): avc: denied { mounton } for pid=11231 comm="syz.5.3329" path="/proc/1303/task" dev="proc" ino=29664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 118.596460][ T29] audit: type=1400 audit(2000000048.470:3037): avc: denied { mount } for pid=11231 comm="syz.5.3329" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.621698][ T29] audit: type=1326 audit(2000000048.470:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 118.645345][ T29] audit: type=1326 audit(2000000048.470:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 118.669060][ T29] audit: type=1326 audit(2000000048.510:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 118.692608][ T29] audit: type=1326 audit(2000000048.510:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.0.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6b59e169 code=0x7ffc0000 [ 118.804936][T11244] Falling back ldisc for ttyS3. [ 118.950705][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 118.958508][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 118.984788][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 118.992520][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.000246][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.008038][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.015778][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.023446][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.031163][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.038850][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.046526][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.054189][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.061932][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.069610][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.077291][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.085009][ T3381] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 119.132405][ T3381] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 119.219593][T11276] only policy match revision 0 supported [ 119.219610][T11276] unable to load match [ 119.318184][T11288] __nla_validate_parse: 7 callbacks suppressed [ 119.318202][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3350'. [ 119.335730][T11283] Falling back ldisc for ttyS3. [ 119.709160][T11324] lo: entered promiscuous mode [ 119.714068][T11324] lo: entered allmulticast mode [ 119.739245][T11329] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in; [ 119.739245][T11329] program syz.4.3373 not setting count and/or reply_len properly [ 120.043988][T11372] random: crng reseeded on system resumption [ 120.346070][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 120.353875][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 120.403314][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.411126][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.418924][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.426698][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.434446][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.442134][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.449840][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.457630][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.465338][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.473138][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.480848][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.488599][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.496296][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.503970][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 120.518943][ T9] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 120.601277][T11423] random: crng reseeded on system resumption [ 120.712749][T11428] only policy match revision 0 supported [ 120.712765][T11428] unable to load match [ 120.927154][T11446] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in; [ 120.927154][T11446] program syz.2.3423 not setting count and/or reply_len properly [ 120.957728][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3425'. [ 120.969620][T11450] macvtap0: entered promiscuous mode [ 120.975667][T11450] macvtap0: left promiscuous mode [ 121.002201][T11453] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3424'. [ 121.012820][T11448] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3424'. [ 121.042989][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 121.050740][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 121.062313][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.070051][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.077883][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.085642][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.093380][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.101157][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.108975][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.116909][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.124632][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.132414][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.136908][T11462] random: crng reseeded on system resumption [ 121.140250][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.153991][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.161685][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.169397][ T9] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 121.241823][ T9] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 121.388287][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 121.487894][T11498] random: crng reseeded on system resumption [ 121.623831][T11510] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in; [ 121.623831][T11510] program syz.0.3449 not setting count and/or reply_len properly [ 121.772422][T11534] pim6reg1: entered promiscuous mode [ 121.778571][T11534] pim6reg1: entered allmulticast mode [ 122.028905][T11563] Cannot find add_set index 0 as target [ 122.052906][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3473'. [ 122.064979][T11565] macvtap0: entered promiscuous mode [ 122.071046][T11565] macvtap0: left promiscuous mode [ 122.258867][T11576] block device autoloading is deprecated and will be removed. [ 122.267242][T11576] syz.6.3486: attempt to access beyond end of device [ 122.267242][T11576] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 122.423950][T11593] pimreg: entered allmulticast mode [ 122.432849][T11593] pimreg: left allmulticast mode [ 122.767050][T11624] Invalid ELF header magic: != ELF [ 122.799710][T11633] syz.4.3504: attempt to access beyond end of device [ 122.799710][T11633] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 122.848273][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 122.848290][ T29] audit: type=1400 audit(2000000052.750:3255): avc: denied { write } for pid=11636 comm="syz.0.3506" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.897392][ T29] audit: type=1400 audit(2000000052.790:3256): avc: denied { create } for pid=11638 comm="syz.6.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.918423][ T29] audit: type=1400 audit(2000000052.790:3257): avc: denied { ioctl } for pid=11638 comm="syz.6.3507" path="socket:[31381]" dev="sockfs" ino=31381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.979833][T11653] IPv4: Oversized IP packet from 127.202.26.0 [ 122.997019][T11654] pim6reg1: entered promiscuous mode [ 123.002371][T11654] pim6reg1: entered allmulticast mode [ 123.063445][T11662] Cannot find add_set index 0 as target [ 123.089065][ T29] audit: type=1400 audit(2000000052.960:3258): avc: denied { unmount } for pid=5513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.123523][T11664] syz.5.3517: attempt to access beyond end of device [ 123.123523][T11664] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 123.204239][ T29] audit: type=1400 audit(2000000053.100:3259): avc: denied { write } for pid=11674 comm="syz.2.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.224670][ T29] audit: type=1400 audit(2000000053.100:3260): avc: denied { nlmsg_write } for pid=11674 comm="syz.2.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.227550][T11675] loop0: detected capacity change from 0 to 128 [ 123.258611][ T29] audit: type=1326 audit(2000000053.160:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 123.277653][T11675] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 123.285899][ T29] audit: type=1326 audit(2000000053.180:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 123.314299][ T29] audit: type=1326 audit(2000000053.180:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 123.337959][ T29] audit: type=1326 audit(2000000053.180:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b465ce169 code=0x7ffc0000 [ 123.392381][T11684] syz.2.3528: attempt to access beyond end of device [ 123.392381][T11684] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 123.474567][T11690] netlink: 'syz.0.3532': attribute type 3 has an invalid length. [ 123.482711][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3532'. [ 123.546255][T11706] pimreg: entered allmulticast mode [ 123.569160][T11706] pimreg: left allmulticast mode [ 123.609476][T11714] loop0: detected capacity change from 0 to 1024 [ 123.624515][T11716] SELinux: syz.2.3539 (11716) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 123.631540][T11695] lo speed is unknown, defaulting to 1000 [ 123.679797][T11714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.786849][T11695] chnl_net:caif_netlink_parms(): no params data found [ 123.800613][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.840526][T11746] SELinux: syz.4.3552 (11746) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 123.880315][T11695] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.887511][T11695] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.897566][T11749] SELinux: failed to load policy [ 123.900862][T11695] bridge_slave_0: entered allmulticast mode [ 123.915643][T11695] bridge_slave_0: entered promiscuous mode [ 123.934678][T11695] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.941895][T11695] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.951195][T11695] bridge_slave_1: entered allmulticast mode [ 123.957839][T11695] bridge_slave_1: entered promiscuous mode [ 123.981560][T11695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.993263][T11695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.033063][T11695] team0: Port device team_slave_0 added [ 124.041744][T11695] team0: Port device team_slave_1 added [ 124.068975][T11695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.076099][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.102323][T11695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.122391][T11695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.129477][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.156045][T11695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.183137][T11695] hsr_slave_0: entered promiscuous mode [ 124.191369][T11695] hsr_slave_1: entered promiscuous mode [ 124.198172][T11695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.206940][T11695] Cannot create hsr debugfs directory [ 124.228888][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3563'. [ 124.268316][T11782] syzkaller1: entered promiscuous mode [ 124.274168][T11782] syzkaller1: entered allmulticast mode [ 124.332902][T11695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.343600][T11695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.352994][T11695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.361889][T11695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.423499][T11695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.437147][T11695] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.450231][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.457431][ T6268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.470463][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.477713][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.580801][T11695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.652335][T11803] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3570'. [ 124.661875][T11803] netlink: 'syz.5.3570': attribute type 5 has an invalid length. [ 124.669741][T11803] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3570'. [ 124.742725][T11695] veth0_vlan: entered promiscuous mode [ 124.760348][T11695] veth1_vlan: entered promiscuous mode [ 124.799871][T11695] veth0_macvtap: entered promiscuous mode [ 124.824705][T11695] veth1_macvtap: entered promiscuous mode [ 124.846184][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.856748][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.866629][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.877806][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.887789][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.898335][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.909057][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.919712][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.952467][T11695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.979841][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.990470][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.000340][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.007436][T11837] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3582'. [ 125.011719][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.022429][T11837] netlink: 'syz.0.3582': attribute type 5 has an invalid length. [ 125.030064][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.037601][T11837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3582'. [ 125.038436][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3581'. [ 125.048875][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.048916][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.087783][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.102267][T11695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.113073][T11695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.121925][T11695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.131871][T11695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.140705][T11695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.329875][T11864] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 125.551371][T11877] netlink: 'syz.5.3597': attribute type 10 has an invalid length. [ 125.559261][T11877] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3597'. [ 125.583416][T11877] team0: Port device geneve1 added [ 125.659172][T11887] SELinux: Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped). [ 125.690181][T11889] random: crng reseeded on system resumption [ 126.287304][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3616'. [ 126.740501][T11930] xt_hashlimit: max too large, truncated to 1048576 [ 126.755628][T11930] Cannot find set identified by id 0 to match [ 126.922751][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.930977][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.938495][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.945951][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.953357][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.961407][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.968911][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.976351][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.983744][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.991747][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 126.999324][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.006764][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.014217][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.022425][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.030057][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.037502][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.045746][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.053202][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.060751][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.068248][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.076345][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.083847][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.091289][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.098725][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.107048][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.114520][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.121960][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.129648][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.137778][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.145506][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.152924][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.160450][ T3495] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.170055][ T3495] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 127.358371][T11994] block device autoloading is deprecated and will be removed. [ 127.430197][T11998] binfmt_misc: register: failed to install interpreter file ./file2 [ 127.631123][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'. [ 127.835516][T12034] netlink: 'syz.4.3667': attribute type 21 has an invalid length. [ 127.891630][T12042] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3671'. [ 127.902732][T12042] netlink: 'syz.4.3671': attribute type 9 has an invalid length. [ 127.910558][T12042] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3671'. [ 127.922315][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 127.922331][ T29] audit: type=1400 audit(2000000057.820:3482): avc: denied { ioctl } for pid=12043 comm="syz.0.3670" path="socket:[34096]" dev="sockfs" ino=34096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.065897][T12050] Falling back ldisc for ttyS3. [ 128.145147][ T29] audit: type=1326 audit(2000000058.030:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.7.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666dcee169 code=0x7ffc0000 [ 128.168673][ T29] audit: type=1326 audit(2000000058.030:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.7.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f666dcee169 code=0x7ffc0000 [ 128.192184][ T29] audit: type=1326 audit(2000000058.030:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.7.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666dcee169 code=0x7ffc0000 [ 128.215907][ T29] audit: type=1326 audit(2000000058.030:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.7.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f666dcee169 code=0x7ffc0000 [ 128.239589][ T29] audit: type=1326 audit(2000000058.030:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.7.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666dcee169 code=0x7ffc0000 [ 128.301764][ T29] audit: type=1326 audit(2000000058.200:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12075 comm="syz.7.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666dcee169 code=0x7ffc0000 [ 128.326030][ T29] audit: type=1326 audit(2000000058.200:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12075 comm="syz.7.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666dcee169 code=0x7ffc0000 [ 128.349723][ T29] audit: type=1326 audit(2000000058.200:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12075 comm="syz.7.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f666dcee169 code=0x7ffc0000 [ 128.373253][ T29] audit: type=1326 audit(2000000058.200:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12075 comm="syz.7.3686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f666dcee169 code=0x0 [ 129.152699][ T3380] IPVS: starting estimator thread 0... [ 129.255351][T12098] IPVS: using max 2304 ests per chain, 115200 per kthread [ 129.280267][T12110] pim6reg1: entered promiscuous mode [ 129.285802][T12110] pim6reg1: entered allmulticast mode [ 129.472983][T12139] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 129.635067][T12162] SELinux: syz.0.3720 (12162) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 129.672955][T12164] smc: net device bond0 applied user defined pnetid SYZ0 [ 129.680366][T12164] smc: net device bond0 erased user defined pnetid SYZ0 [ 129.946277][T12177] SELinux: failed to load policy [ 130.436006][T12205] ================================================================== [ 130.444145][T12205] BUG: KCSAN: data-race in n_tty_poll / tty_set_termios [ 130.451132][T12205] [ 130.453479][T12205] write to 0xffff88812fd42d1e of 1 bytes by task 12210 on cpu 1: [ 130.453501][T12205] tty_set_termios+0x3a5/0x8b0 [ 130.453527][T12205] set_termios+0x4af/0x4f0 [ 130.453548][T12205] tty_mode_ioctl+0x394/0x5d0 [ 130.453569][T12205] n_tty_ioctl_helper+0x8d/0x240 [ 130.453587][T12205] n_tty_ioctl+0xfd/0x210 [ 130.453613][T12205] tty_ioctl+0x878/0xbd0 [ 130.453632][T12205] __se_sys_ioctl+0xc9/0x140 [ 130.453661][T12205] __x64_sys_ioctl+0x43/0x50 [ 130.453691][T12205] x64_sys_call+0x168d/0x2e10 [ 130.453718][T12205] do_syscall_64+0xc9/0x1c0 [ 130.453753][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.453777][T12205] [ 130.453784][T12205] read to 0xffff88812fd42d1e of 1 bytes by task 12205 on cpu 0: [ 130.523776][T12205] n_tty_poll+0xc3/0x4b0 [ 130.528227][T12205] tty_poll+0x78/0xf0 [ 130.532232][T12205] __io_read+0x2e1/0xc20 [ 130.536619][T12205] io_read+0x1e/0x60 [ 130.541222][T12205] io_issue_sqe+0x15f/0xaf0 [ 130.546285][T12205] io_submit_sqes+0x67f/0x1050 [ 130.551148][T12205] __se_sys_io_uring_enter+0x1ce/0x1c00 [ 130.556708][T12205] __x64_sys_io_uring_enter+0x78/0x90 [ 130.562093][T12205] x64_sys_call+0x26cb/0x2e10 [ 130.566878][T12205] do_syscall_64+0xc9/0x1c0 [ 130.571399][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.577307][T12205] [ 130.579806][T12205] value changed: 0x00 -> 0xff [ 130.584485][T12205] [ 130.586814][T12205] Reported by Kernel Concurrency Sanitizer on: [ 130.592970][T12205] CPU: 0 UID: 0 PID: 12205 Comm: syz.5.3741 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 130.607060][T12205] Tainted: [W]=WARN [ 130.610864][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.620925][T12205] ================================================================== [ 132.154821][ T3377] page_pool_release_retry() stalled pool shutdown: id 40, 1 inflight 60 sec [ 133.477526][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 133.477544][ T29] audit: type=1400 audit(2000000063.380:3557): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 133.506454][ T29] audit: type=1400 audit(2000000063.380:3558): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.528272][ T29] audit: type=1400 audit(2000000063.380:3559): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.551090][ T29] audit: type=1400 audit(2000000063.380:3560): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.573620][ T29] audit: type=1400 audit(2000000063.380:3561): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.064890][ T3380] page_pool_release_retry() stalled pool shutdown: id 41, 1 inflight 60 sec [ 134.465427][ T23] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec