last executing test programs: 2h44m0.303246664s ago: executing program 1 (id=2): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2h43m47.124220574s ago: executing program 1 (id=4): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000200)='personality\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, 0x401, 0x5c) 2h43m37.745024952s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) 2h43m34.098663406s ago: executing program 1 (id=7): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2h43m28.153677216s ago: executing program 1 (id=8): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) 2h43m21.85556568s ago: executing program 32 (id=8): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) 2h43m6.02858369s ago: executing program 0 (id=11): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x20, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2h42m44.293858055s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) 2h42m39.126048028s ago: executing program 0 (id=14): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x40000010) 2h42m31.474582621s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x3ac5048, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2h42m26.706773544s ago: executing program 0 (id=16): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {0x0, 0x0, 0x2}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000740)={0x1d, r3, 0x1, {0x0, 0xff, 0x4}, 0xfe}, 0x18) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r3, 0x7ffffffe, {0x2, 0xff, 0x3}, 0xff}, 0x18) 2h42m20.763046384s ago: executing program 0 (id=17): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 2h42m6.90040577s ago: executing program 33 (id=17): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 1m33.154720312s ago: executing program 3 (id=1608): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_disconnect(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mlockall(0x7) munlockall() r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m18.816761936s ago: executing program 2 (id=1611): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_disconnect(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mlockall(0x7) munlockall() r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000", 0x1c}], 0x1) 1m11.948279996s ago: executing program 3 (id=1612): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 1m5.724611163s ago: executing program 3 (id=1613): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 58.309036912s ago: executing program 3 (id=1614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x5, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, &(0x7f0000001800)="bad386dd8f873cf84e59eab26fa89c7ea84841949efd07e9c8213ddc7e7cb6b4afbd68b8c3427ba1", 0x28, 0x40, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 53.17932901s ago: executing program 2 (id=1615): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 46.018777482s ago: executing program 2 (id=1616): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) 37.06689443s ago: executing program 3 (id=1617): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 30.292149434s ago: executing program 3 (id=1618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.291862534s ago: executing program 2 (id=1619): socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 7.711623759s ago: executing program 2 (id=1620): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 0s ago: executing program 2 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:2634' (ED25519) to the list of known hosts. syzkaller login: [ 432.730895][ T3195] cgroup: Unknown subsys name 'net' [ 433.296372][ T3195] cgroup: Unknown subsys name 'cpuset' [ 433.418740][ T3195] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 508.021031][ T3195] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 614.987843][ T3203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.109105][ T3203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.170223][ T3205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.368115][ T3205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.307298][ T3203] hsr_slave_0: entered promiscuous mode [ 627.422904][ T3203] hsr_slave_1: entered promiscuous mode [ 628.865025][ T3205] hsr_slave_0: entered promiscuous mode [ 628.896951][ T3205] hsr_slave_1: entered promiscuous mode [ 628.946781][ T3205] debugfs: 'hsr0' already exists in 'hsr' [ 628.950108][ T3205] Cannot create hsr debugfs directory [ 637.639244][ T3203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.020170][ T3203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.216042][ T3203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.665908][ T3203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 641.057625][ T3205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 641.317851][ T3205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 641.640058][ T3205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 641.928674][ T3205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 654.610432][ T3203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.137789][ T3205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.255694][ T3203] veth0_vlan: entered promiscuous mode [ 699.995107][ T3203] veth1_vlan: entered promiscuous mode [ 702.567755][ T3205] veth0_vlan: entered promiscuous mode [ 703.688039][ T3203] veth0_macvtap: entered promiscuous mode [ 703.899430][ T3205] veth1_vlan: entered promiscuous mode [ 704.467960][ T3203] veth1_macvtap: entered promiscuous mode [ 707.926834][ T3205] veth0_macvtap: entered promiscuous mode [ 708.246565][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.300672][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.313644][ T3483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.367462][ T3483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.456685][ T3205] veth1_macvtap: entered promiscuous mode [ 712.297236][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.413581][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.416748][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.484958][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.076606][ T3203] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 731.066289][ T3820] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 741.958777][ T3198] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 742.388598][ T3198] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 742.395677][ T3198] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 742.398198][ T3198] usb 1-1: config 0 interface 0 has no altsetting 0 [ 742.423377][ T3198] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 742.425645][ T3198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.147248][ T3198] usb 1-1: config 0 descriptor?? [ 743.250780][ T3828] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 744.836635][ T3198] logitech 0003:046D:C24F.0001: unbalanced collection at end of report description [ 744.878244][ T3198] logitech 0003:046D:C24F.0001: parse failed [ 744.885385][ T3198] logitech 0003:046D:C24F.0001: probe with driver logitech failed with error -22 [ 745.233598][ T3198] usb 1-1: USB disconnect, device number 2 [ 750.718360][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.895719][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.790954][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.589368][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.924705][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.140721][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.323664][ T56] bond0 (unregistering): Released all slaves [ 769.306811][ T56] hsr_slave_0: left promiscuous mode [ 769.408488][ T56] hsr_slave_1: left promiscuous mode [ 770.343873][ T56] veth1_macvtap: left promiscuous mode [ 770.347531][ T56] veth0_macvtap: left promiscuous mode [ 770.372863][ T56] veth1_vlan: left promiscuous mode [ 770.403709][ T56] veth0_vlan: left promiscuous mode [ 778.374346][ T3877] netlink: 51 bytes leftover after parsing attributes in process `syz.0.11'. [ 799.079393][ T3884] ======================================================= [ 799.079393][ T3884] WARNING: The mand mount option has been deprecated and [ 799.079393][ T3884] and is ignored by this kernel. Remove the mand [ 799.079393][ T3884] option from the mount to silence this warning. [ 799.079393][ T3884] ======================================================= [ 804.388132][ T3892] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 819.063924][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.588700][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.483012][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.476325][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.529596][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.849101][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.056408][ T56] bond0 (unregistering): Released all slaves [ 841.176599][ T56] hsr_slave_0: left promiscuous mode [ 841.239368][ T56] hsr_slave_1: left promiscuous mode [ 842.023229][ T56] veth1_macvtap: left promiscuous mode [ 842.026817][ T56] veth0_macvtap: left promiscuous mode [ 842.077888][ T56] veth1_vlan: left promiscuous mode [ 842.114789][ T56] veth0_vlan: left promiscuous mode [ 864.985226][ T3873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.290175][ T3873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.568315][ T3873] hsr_slave_0: entered promiscuous mode [ 884.627810][ T3873] hsr_slave_1: entered promiscuous mode [ 900.190590][ T3873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 900.766816][ T3873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 901.478059][ T3873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 901.904699][ T3873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 908.138226][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.417368][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.594379][ T3873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.537076][ T4024] hsr_slave_0: entered promiscuous mode [ 931.705540][ T4024] hsr_slave_1: entered promiscuous mode [ 931.913887][ T4024] debugfs: 'hsr0' already exists in 'hsr' [ 931.915134][ T4024] Cannot create hsr debugfs directory [ 949.087194][ T4024] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 949.597415][ T4024] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 949.920126][ T4024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 950.484667][ T4024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 969.246621][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.690298][ T3873] veth0_vlan: entered promiscuous mode [ 1014.477966][ T3873] veth1_vlan: entered promiscuous mode [ 1016.619303][ T3873] veth0_macvtap: entered promiscuous mode [ 1016.888434][ T3873] veth1_macvtap: entered promiscuous mode [ 1021.380286][ T3812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.399005][ T3812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.469861][ T3812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.585648][ T3812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.208811][ T4024] veth0_vlan: entered promiscuous mode [ 1059.947724][ T4024] veth1_vlan: entered promiscuous mode [ 1064.138161][ T4024] veth0_macvtap: entered promiscuous mode [ 1064.603322][ T4024] veth1_macvtap: entered promiscuous mode [ 1068.848215][ T27] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.850112][ T27] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.930063][ T27] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.149897][ T3349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.878225][ T4608] IPv4: Oversized IP packet from 172.20.20.24 [ 1069.896445][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1069.903931][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1113.430712][ T4642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.524542][ T4642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.926477][ T4642] input: syz0 as /devices/virtual/input/input0 [ 1133.772673][ T4660] Illegal XDP return value 4294967282 on prog (id 10) dev syz_tun, expect packet loss! [ 1159.231161][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 1159.426726][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 1172.595591][ T4689] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 1238.654615][ T4748] random: crng reseeded on system resumption [ 1249.758115][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 1249.760289][ T4753] netlink: 48 bytes leftover after parsing attributes in process `syz.2.51'. [ 1249.797643][ T4753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'. [ 1252.148900][ T4753] vlan2: entered allmulticast mode [ 1252.161146][ T4753] dummy0: entered allmulticast mode [ 1291.464403][ T4788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.107026][ T4788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.003439][ T4821] syz_tun: entered allmulticast mode [ 1343.173484][ T4820] syz_tun: left allmulticast mode [ 1367.727947][ T4839] input: syz1 as /devices/virtual/input/input1 [ 1381.361005][ T4859] random: crng reseeded on system resumption [ 1389.480421][ T4866] syz.2.84 uses obsolete (PF_INET,SOCK_PACKET) [ 1389.598279][ T4864] netlink: 96 bytes leftover after parsing attributes in process `syz.3.85'. [ 1391.310354][ T4863] syzkaller1: entered promiscuous mode [ 1391.328775][ T4863] syzkaller1: entered allmulticast mode [ 1427.180821][ T4891] Zero length message leads to an empty skb [ 1484.810600][ T4934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.860226][ T4934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.805248][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 1496.169443][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 1496.245752][ T4854] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.250037][ T4854] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.264155][ T3349] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1496.266943][ T3349] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1500.892346][ C0] vxcan0: j1939_tp_rxtimer: 0xffffaf8018c5fc00: rx timeout, send abort [ 1501.398770][ C0] vxcan0: j1939_tp_rxtimer: 0xffffaf8018c5fc00: abort rx timeout. Force session deactivation [ 1556.636103][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 1556.867593][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 1563.178226][ T5010] netlink: 96 bytes leftover after parsing attributes in process `syz.2.130'. [ 1563.579072][ T31] audit: type=1326 audit(1562.520:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1563.609796][ T31] audit: type=1326 audit(1562.540:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1563.819015][ T31] audit: type=1326 audit(1562.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1564.006373][ T31] audit: type=1326 audit(1562.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1564.039627][ T31] audit: type=1326 audit(1562.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1564.697910][ T31] audit: type=1326 audit(1563.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1565.397344][ T31] audit: type=1326 audit(1564.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1566.159204][ T31] audit: type=1326 audit(1565.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1566.769377][ T31] audit: type=1326 audit(1565.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=26 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1566.829610][ T31] audit: type=1326 audit(1565.780:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.3.131" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 1622.990290][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 1664.350638][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.404810][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.973724][ T5107] syzkaller0: entered promiscuous mode [ 1676.380271][ T5117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.465504][ T5117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.274676][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1833.275119][ T31] audit: type=1804 audit(1832.220:21): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.197" name="bus" dev="ramfs" ino=6719 res=1 errno=0 [ 1919.029673][ T5298] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 1930.928548][ T5309] input: syz1 as /devices/virtual/input/input2 [ 1962.843304][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1962.900138][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.160393][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.298119][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1967.227735][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.327816][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2006.058885][ T5363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2007.533190][ T31] audit: type=1804 audit(2006.440:22): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.226" name="file2" dev="ramfs" ino=6888 res=1 errno=0 [ 2017.710310][ T5368] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2099.865200][ T5417] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2138.586768][ T5448] binder: 5447:5448 ioctl c0306201 0 returned -14 [ 2141.407424][ T31] audit: type=1326 audit(2140.360:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2141.722942][ T31] audit: type=1326 audit(2140.640:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2141.936875][ T31] audit: type=1326 audit(2140.850:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2141.959545][ T31] audit: type=1326 audit(2140.910:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2141.972663][ T31] audit: type=1326 audit(2140.910:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2142.007776][ T31] audit: type=1326 audit(2140.960:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2142.040248][ T31] audit: type=1326 audit(2140.970:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2142.052514][ T31] audit: type=1326 audit(2141.000:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2142.326108][ T31] audit: type=1326 audit(2141.250:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2142.412361][ T31] audit: type=1326 audit(2141.290:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.258" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2159.786400][ T5465] all: renamed from bond_slave_1 (while UP) [ 2193.908124][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 2193.908491][ T31] audit: type=1326 audit(2192.830:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2193.911049][ T31] audit: type=1326 audit(2192.860:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2194.269218][ T31] audit: type=1326 audit(2193.220:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=222 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2194.417123][ T31] audit: type=1326 audit(2193.370:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2194.483077][ T31] audit: type=1326 audit(2193.370:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2194.543253][ T31] audit: type=1326 audit(2193.480:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=216 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2194.655966][ T31] audit: type=1326 audit(2193.610:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2194.742481][ T31] audit: type=1326 audit(2193.680:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2194.774912][ T31] audit: type=1326 audit(2193.730:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2194.795868][ T31] audit: type=1326 audit(2193.750:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.3.274" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2288.925109][ T5576] syzkaller1: entered promiscuous mode [ 2288.926501][ T5576] syzkaller1: entered allmulticast mode [ 2372.923138][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 2372.924745][ T31] audit: type=1326 audit(2371.860:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2373.458518][ T31] audit: type=1326 audit(2372.380:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2373.693166][ T31] audit: type=1326 audit(2372.640:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=147 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2373.773312][ T31] audit: type=1326 audit(2372.720:65): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2373.869227][ T31] audit: type=1326 audit(2372.750:66): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2373.923818][ T31] audit: type=1326 audit(2372.810:67): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2374.155366][ T31] audit: type=1326 audit(2373.090:68): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2374.209408][ T31] audit: type=1326 audit(2373.140:69): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2374.372165][ T31] audit: type=1326 audit(2373.320:70): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2374.600826][ T31] audit: type=1326 audit(2373.520:71): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.2.326" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2465.620625][ T5700] trusted_key: syz.2.349 sent an empty control message without MSG_MORE. [ 2569.193064][ T5838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2569.265401][ T5838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.754342][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.371'. [ 2722.984193][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.402'. [ 2726.100303][ T5950] veth5: entered promiscuous mode [ 2793.868326][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 2882.026299][ T6065] cgroup: Unknown subsys name 'cpuset' [ 2886.890626][ T6067] binder: 6066:6067 ioctl c0306201 2000000001c0 returned -14 [ 2937.424649][ T6093] syzkaller0: entered allmulticast mode [ 2981.836733][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 2981.837243][ T31] audit: type=1326 audit(2980.760:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2981.873131][ T31] audit: type=1326 audit(2980.820:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2982.054174][ T31] audit: type=1326 audit(2981.000:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2982.080241][ T31] audit: type=1326 audit(2981.030:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=151 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2982.103996][ T31] audit: type=1326 audit(2981.030:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2982.167274][ T31] audit: type=1326 audit(2981.030:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2982.249474][ T31] audit: type=1326 audit(2981.190:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2982.324617][ T31] audit: type=1326 audit(2981.250:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=436 compat=0 ip=0xdc402 code=0x7ffc0000 [ 2982.521101][ T31] audit: type=1326 audit(2981.450:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c00000f3 syscall=94 compat=0 ip=0xdc402 code=0x7ffc0000 [ 3013.796434][ T6141] random: crng reseeded on system resumption [ 3014.487729][ T6141] Restarting kernel threads ... [ 3014.536436][ T6141] Done restarting kernel threads. [ 3020.995592][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.466'. [ 3041.227894][ T6164] random: crng reseeded on system resumption [ 3042.274473][ T6164] Restarting kernel threads ... [ 3042.385997][ T6164] Done restarting kernel threads. [ 3078.869614][ T6193] random: crng reseeded on system resumption [ 3079.914248][ T6193] Restarting kernel threads ... [ 3079.965605][ T6193] Done restarting kernel threads. [ 3152.919238][ T6241] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 3216.685369][ T6296] IPv4: Oversized IP packet from 172.20.20.24 [ 3216.705037][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 3216.716214][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 3289.505385][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3289.547476][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3294.300457][ T5259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3296.770755][ T5259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3298.933023][ T5259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3300.378420][ T5259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3320.918632][ T5259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3321.658751][ T5259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3321.914780][ T5259] bond0 (unregistering): Released all slaves [ 3323.918311][ T5259] hsr_slave_0: left promiscuous mode [ 3324.009250][ T5259] hsr_slave_1: left promiscuous mode [ 3324.480205][ T5259] veth1_macvtap: left promiscuous mode [ 3324.485358][ T5259] veth0_macvtap: left promiscuous mode [ 3324.488839][ T5259] veth1_vlan: left promiscuous mode [ 3324.508054][ T5259] veth0_vlan: left promiscuous mode [ 3391.108602][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3391.235691][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3412.335463][ T6357] hsr_slave_0: entered promiscuous mode [ 3412.398972][ T6357] hsr_slave_1: entered promiscuous mode [ 3412.437534][ T6357] debugfs: 'hsr0' already exists in 'hsr' [ 3412.439547][ T6357] Cannot create hsr debugfs directory [ 3432.650360][ T6357] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3433.023292][ T6357] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3433.566687][ T6357] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3433.906655][ T6357] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3453.267870][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3523.588722][ T6357] veth0_vlan: entered promiscuous mode [ 3524.590913][ T6357] veth1_vlan: entered promiscuous mode [ 3529.258031][ T6357] veth0_macvtap: entered promiscuous mode [ 3530.177614][ T6357] veth1_macvtap: entered promiscuous mode [ 3532.760222][ T6352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3532.775423][ T6352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3532.778330][ T6352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3532.780887][ T6352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3562.903718][ T6760] netlink: 96 bytes leftover after parsing attributes in process `syz.3.528'. [ 3573.540812][ T6764] input: syz1 as /devices/virtual/input/input3 [ 3607.395100][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.402999][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.407722][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.412942][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.417160][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.422056][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.426471][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.430483][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.435719][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3607.440212][ T6797] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3635.336331][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 3635.730918][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 3653.868318][ T6830] net_ratelimit: 44 callbacks suppressed [ 3653.869105][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.876856][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.882385][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.887421][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.892963][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.897556][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.903172][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.907804][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.913454][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3653.918034][ T6830] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.912443][ T6852] net_ratelimit: 44 callbacks suppressed [ 3687.912794][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.916187][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.918682][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.922333][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.925358][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.928242][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.932013][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.934505][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.936990][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3687.939501][ T6852] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3712.548193][ T6865] netlink: 80 bytes leftover after parsing attributes in process `syz.2.556'. [ 3766.149966][ T6896] net_ratelimit: 44 callbacks suppressed [ 3766.150546][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.157954][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.164591][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.171110][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.177225][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.183047][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.188643][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.194775][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.199626][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3766.205866][ T6896] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.063877][ T6943] net_ratelimit: 44 callbacks suppressed [ 3846.064472][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.070355][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.076717][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.082292][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.086907][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.092349][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.097113][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.102857][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.107499][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3846.113003][ T6943] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 3904.838034][ T6973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.589'. [ 3905.195740][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3905.211132][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4010.307872][ T7036] netlink: 'syz.3.610': attribute type 13 has an invalid length. [ 4013.394257][ T7036] gretap0: refused to change device tx_queue_len [ 4013.508828][ T7036] net_ratelimit: 44 callbacks suppressed [ 4013.509468][ T7036] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 4056.487531][ T7071] ip6gre1: entered promiscuous mode [ 4056.488784][ T7071] ip6gre1: entered allmulticast mode [ 4108.694890][ T31] audit: type=1326 audit(4107.600:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 4108.872928][ T31] audit: type=1326 audit(4107.640:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 4128.221876][ C0] vxcan0: j1939_tp_rxtimer: 0xffffaf802eae7800: rx timeout, send abort [ 4128.724696][ C0] vxcan0: j1939_tp_rxtimer: 0xffffaf802eae7800: abort rx timeout. Force session deactivation [ 4149.228527][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 4150.004590][ T5259] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 4150.006873][ T5259] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 4150.009144][ T5259] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 4150.035851][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 4150.129432][ T5259] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 4170.969817][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4171.003165][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4172.197087][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4172.256721][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4173.469478][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4173.604134][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4175.404171][ T31] audit: type=1326 audit(4174.180:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.2.645" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x0 [ 4196.839900][ T7171] netlink: 'syz.2.647': attribute type 3 has an invalid length. [ 4233.509538][ T7201] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 4233.548867][ T7201] syzkaller1: Linktype set failed because interface is up [ 4345.536656][ T31] audit: type=1326 audit(4344.480:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.673" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 4345.565708][ T31] audit: type=1326 audit(4344.500:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.673" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 4345.914838][ T31] audit: type=1326 audit(4344.840:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.673" exe="/syz-executor" sig=0 arch=c00000f3 syscall=81 compat=0 ip=0xdc402 code=0x7ffc0000 [ 4347.243520][ T31] audit: type=1326 audit(4346.170:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.673" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 4347.262943][ T31] audit: type=1326 audit(4346.210:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.673" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 4381.673377][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4381.727994][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4460.717491][ T31] audit: type=1326 audit(4459.630:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.695" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x0 [ 4556.405007][ T7474] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 4594.378022][ T7494] netlink: 'syz.2.717': attribute type 13 has an invalid length. [ 4595.059158][ T7494] gretap0: refused to change device tx_queue_len [ 4595.166390][ T7494] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 4603.640845][ T7499] input: syz1 as /devices/virtual/input/input4 [ 4691.045704][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4691.075726][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4867.757701][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'. [ 4931.345338][ T7751] netlink: 'syz.3.770': attribute type 13 has an invalid length. [ 4978.126652][ T7771] input: syz1 as /devices/virtual/input/input5 [ 5068.809714][ T7813] syzkaller0: entered promiscuous mode [ 5068.810942][ T7813] syzkaller0: entered allmulticast mode [ 5389.084659][ T7983] netlink: 'syz.3.841': attribute type 12 has an invalid length. [ 5559.554929][ T8079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 5559.568982][ T8075] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 5559.585261][ T8079] block device autoloading is deprecated and will be removed. [ 5559.603201][ T8075] block device autoloading is deprecated and will be removed. [ 5619.446715][ T8115] netlink: 96 bytes leftover after parsing attributes in process `syz.3.880'. [ 5674.026317][ T8143] syz_tun: entered allmulticast mode [ 5674.506356][ T8142] syz_tun: left allmulticast mode [ 5820.666234][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5820.760934][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5898.763525][ T8242] netlink: 'syz.2.931': attribute type 13 has an invalid length. [ 5898.959041][ T8242] gretap0: refused to change device tx_queue_len [ 5898.991085][ T8242] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 5941.565899][ T8261] netlink: 96 bytes leftover after parsing attributes in process `syz.3.938'. [ 6025.650200][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6025.759729][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6042.465880][ T8316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 6042.469199][ T8316] IPv6: NLM_F_CREATE should be set when creating new route [ 6130.070613][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 6130.110895][ T8367] bridge_slave_0: entered promiscuous mode [ 6134.560539][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 6175.493432][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.974'. [ 6216.118649][ T8411] v: renamed from lo (while UP) [ 6329.780012][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6329.824540][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6372.145694][ T8494] syz_tun: entered allmulticast mode [ 6374.324944][ T8493] syz_tun: left allmulticast mode [ 6486.535510][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'. [ 6618.407339][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 6619.626865][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 6648.214565][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6648.300652][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6696.619876][ T8666] syz_tun: entered allmulticast mode [ 6698.080521][ T8665] syz_tun: left allmulticast mode [ 6736.692580][ T8691] vlan0: entered promiscuous mode [ 6789.578793][ T8725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 6824.703383][ T31] audit: type=1804 audit(6823.600:99): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1081" name="bus" dev="ramfs" ino=21633 res=1 errno=0 [ 6843.257682][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1084'. [ 6939.548104][ T8834] syzkaller1: entered promiscuous mode [ 6939.549707][ T8834] syzkaller1: entered allmulticast mode [ 6970.629801][ T8854] ip6t_REJECT: ECHOREPLY is not supported [ 6970.810066][ T8854] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1104'. [ 7205.325143][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7205.596501][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7279.187325][ T9062] netlink: 'syz.2.1158': attribute type 12 has an invalid length. [ 7287.134280][ T31] audit: type=1326 audit(7798.087:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.3.1159" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x0 [ 7334.516131][ T9091] syz_tun: entered allmulticast mode [ 7390.951148][ T9118] dvmrp1: entered allmulticast mode [ 7482.798116][ T9157] wg2: entered promiscuous mode [ 7482.800195][ T9157] wg2: entered allmulticast mode [ 7515.136958][ T9175] fuse: Bad value for 'fd' [ 7537.059644][ T9186] fuse: root generation should be zero [ 7543.239292][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 7579.279151][ T31] audit: type=1804 audit(8090.217:101): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1207" name="file2" dev="ramfs" ino=23497 res=1 errno=0 [ 7692.599838][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7692.787736][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7707.355838][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 7707.358530][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 7729.268038][ T9332] binder_alloc: 9330: binder_alloc_buf size 4120 failed, no address space [ 7729.329784][ T9332] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 7793.265514][ T9365] syz_tun: entered allmulticast mode [ 7797.228778][ T9364] syz_tun: left allmulticast mode [ 7889.444873][ T9407] netlink: 'syz.3.1257': attribute type 4 has an invalid length. [ 7890.669153][ T9408] netlink: 'syz.3.1257': attribute type 4 has an invalid length. [ 8024.365768][ T9463] syzkaller0: entered promiscuous mode [ 8024.367915][ T9463] syzkaller0: entered allmulticast mode [ 8079.733165][ T31] audit: type=1800 audit(8590.547:102): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1278" name="/" dev="fuse" ino=9 res=0 errno=0 [ 8087.848669][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1280'. [ 8093.438007][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 8194.246563][ T31] audit: type=1326 audit(8705.157:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8194.374372][ T31] audit: type=1326 audit(8705.327:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8194.607038][ T31] audit: type=1326 audit(8705.557:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8194.609384][ T31] audit: type=1326 audit(8705.557:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8194.638657][ T31] audit: type=1326 audit(8705.597:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8195.565461][ T31] audit: type=1326 audit(8706.487:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8195.978065][ T31] audit: type=1326 audit(8706.937:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8196.055057][ T31] audit: type=1326 audit(8706.967:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8196.956502][ T31] audit: type=1326 audit(8707.897:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8197.219838][ T31] audit: type=1326 audit(8708.137:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.1296" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8220.595864][ T9690] binder: 9689:9690 ioctl c0306201 2000000001c0 returned -14 [ 8239.784925][ T9701] netlink: 'syz.3.1304': attribute type 10 has an invalid length. [ 8264.384660][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 8264.385219][ T31] audit: type=1326 audit(8775.337:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.3.1309" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x0 [ 8272.099205][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8272.226232][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8274.536431][ T9721] ip6t_REJECT: ECHOREPLY is not supported [ 8274.694503][ T9721] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1310'. [ 8333.279314][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 8333.305316][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 8333.308978][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 8391.568653][ T9796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1330'. [ 8392.381559][ T9796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1330'. [ 8467.458842][ T9842] netlink: 'syz.2.1344': attribute type 4 has an invalid length. [ 8469.124255][ T9844] netlink: 'syz.2.1344': attribute type 4 has an invalid length. [ 8487.987025][ T9854] ptrace attach of "/syz-executor exec"[6357] was attempted by "/syz-executor exec"[9854] [ 8539.171483][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8539.440172][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8540.369553][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8540.381471][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8540.925959][ T9893] TCP: TCP_TX_DELAY enabled [ 8557.867626][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 8559.791595][ T9903] syz_tun (unregistering): left allmulticast mode [ 8571.966035][ T31] audit: type=1326 audit(9082.897:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9912 comm="syz.2.1360" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x0 [ 8688.045473][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf8018c6c800: rx timeout, send abort [ 8688.054327][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf8018c6c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 8688.740032][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf8018c6f000: rx timeout, send abort [ 8689.247349][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf8018c6f000: abort rx timeout. Force session deactivation [ 8734.894771][T10020] syzkaller0: entered promiscuous mode [ 8734.896387][T10020] syzkaller0: entered allmulticast mode [ 8752.306190][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'. [ 8828.329490][T10073] veth1_macvtap: left promiscuous mode [ 8828.399225][T10073] macsec0: entered promiscuous mode [ 8853.116957][T10083] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 8853.164885][T10083] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 8885.658179][T10102] syz_tun: entered allmulticast mode [ 8886.002847][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 8889.726174][T10102] syz_tun (unregistering): left allmulticast mode [ 8951.859857][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 8983.521037][ T31] audit: type=1326 audit(9494.477:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8983.700576][ T31] audit: type=1326 audit(9494.517:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8984.718364][ T31] audit: type=1326 audit(9495.647:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=154 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8984.733705][ T31] audit: type=1326 audit(9495.667:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8984.867884][ T31] audit: type=1326 audit(9495.787:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8984.936692][ T31] audit: type=1326 audit(9495.847:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8985.051199][ T31] audit: type=1326 audit(9496.007:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8985.144625][ T31] audit: type=1326 audit(9496.087:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8985.629905][ T31] audit: type=1326 audit(9496.587:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=200 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8985.719833][ T31] audit: type=1326 audit(9496.597:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.3.1420" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc402 code=0x7ffc0000 [ 8989.014621][T10150] capability: warning: `syz.2.1421' uses deprecated v2 capabilities in a way that may be insecure [ 9018.020763][ T9523] af_packet: tpacket_rcv: packet too big, clamped from 196 to 4294967272. macoff=96 [ 9072.799041][T10178] pim6reg1: entered promiscuous mode [ 9072.801389][T10178] pim6reg1: entered allmulticast mode [ 9090.499931][T10189] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1432'. [ 9106.080942][T10194] binder_alloc: 10193: pid 10193 spamming oneway? 1 buffers allocated for a total size of 4096 [ 9147.456448][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'. [ 9166.287587][T10235] binder_alloc: 10234: pid 10234 spamming oneway? 1 buffers allocated for a total size of 4096 [ 9166.956559][T10235] binder_alloc: 10234: pid 10234 spamming oneway? 2 buffers allocated for a total size of 5120 [ 9208.914073][T10247] IPv6: sit2: Disabled Multicast RS [ 9275.200782][T10284] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1456'. [ 9304.783271][T10302] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 9365.400443][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1468'. [ 9365.591364][T10324] netlink: 'syz.3.1468': attribute type 7 has an invalid length. [ 9365.727314][T10324] netlink: 'syz.3.1468': attribute type 8 has an invalid length. [ 9365.729157][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 9378.276519][T10329] netlink: 'syz.3.1470': attribute type 39 has an invalid length. [ 9406.498479][T10358] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1473'. [ 9423.405632][T10361] binder: BINDER_SET_CONTEXT_MGR already set [ 9423.408675][T10361] binder: 10359:10361 ioctl 4018620d 200000000100 returned -16 [ 9424.641256][T10361] binder: BINDER_SET_CONTEXT_MGR already set [ 9424.663485][T10361] binder: 10359:10361 ioctl 4018620d 200000004a80 returned -16 [ 9462.473399][T10379] xt_TCPMSS: Only works on TCP SYN packets [ 9535.097684][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 9535.147221][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 9548.994579][T10412] netlink: 'syz.2.1489': attribute type 4 has an invalid length. [ 9562.960652][T10419] netlink: 'syz.2.1491': attribute type 39 has an invalid length. [ 9681.258711][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'. [ 9714.328470][T10476] xt_l2tp: missing protocol rule (udp|l2tpip) [ 9804.826801][ T9234] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 9804.993289][ T9234] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 9931.256469][T10592] lo speed is unknown, defaulting to 1000 [ 9931.279504][T10592] lo speed is unknown, defaulting to 1000 [ 9931.474609][T10592] lo speed is unknown, defaulting to 1000 [ 9931.881352][T10592] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 9932.667144][T10592] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 9935.990715][T10592] lo speed is unknown, defaulting to 1000 [ 9936.078462][T10592] lo speed is unknown, defaulting to 1000 [ 9948.323644][T10607] syzkaller0: entered promiscuous mode [ 9948.328956][T10607] syzkaller0: entered allmulticast mode [ 9951.009765][T10612] ip6gre2: entered promiscuous mode [ 9951.033758][T10612] ip6gre2: entered allmulticast mode [10017.229808][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1546'. [10055.973465][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [10056.105347][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [10056.107741][T10661] netlink: 'syz.2.1550': attribute type 30 has an invalid length. [10098.628804][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf802cb6b000: rx timeout, send abort [10098.640241][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffffaf802cb6b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [10099.029171][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf80198ef400: rx timeout, send abort [10099.533126][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf80198ef400: abort rx timeout. Force session deactivation [10162.811443][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'. [10167.956012][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [10208.868577][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [10237.488401][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf802cb68800: Timeout. Failed to send simple message. [10237.721314][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf801e006000: Timeout. Failed to send simple message. [10246.769597][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf80198ec000: rx timeout, send abort [10246.778252][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffffaf80198ec000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [10246.960193][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf801fbf5000: rx timeout, send abort [10247.463814][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf801fbf5000: abort rx timeout. Force session deactivation [10254.778674][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [10274.108387][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1576'. [10288.484527][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf801e006000: rx timeout, send abort [10288.490253][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffffaf801e006000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [10288.993814][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf801e001000: rx timeout, send abort [10289.496833][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf801e001000: abort rx timeout. Force session deactivation [10292.278641][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1581'. [10295.637407][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [10362.907939][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf80188c9000: rx timeout, send abort [10362.925477][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffffaf80188c9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [10363.134835][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf801c98b000: rx timeout, send abort [10363.637812][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf801c98b000: abort rx timeout. Force session deactivation [10371.025852][T10866] xt_CT: You must specify a L4 protocol and not use inversions on it [10455.656845][T10898] binder: BINDER_SET_CONTEXT_MGR already set [10455.658687][T10898] binder: 10897:10898 ioctl 4018620d 200000000100 returned -16 [10456.581288][T10898] binder: BINDER_SET_CONTEXT_MGR already set [10456.708130][T10898] binder: 10897:10898 ioctl 4018620d 2000000001c0 returned -16 [10478.317920][T10910] netlink: 'syz.3.1608': attribute type 4 has an invalid length. [10567.220423][T10957] BUG: sleeping function called from invalid context at fs/inode.c:1928 [10567.226614][T10957] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10957, name: syz.2.1621 [10567.228494][T10957] preempt_count: 1, expected: 0 [10567.229893][T10957] RCU nest depth: 0, expected: 0 [10567.231271][T10957] 2 locks held by syz.2.1621/10957: [10567.241445][T10957] #0: ffffaf801c36c0e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0x7e/0x98 [10567.250123][T10957] #1: ffffaf801c36c998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0x12e/0xbde [10567.256981][T10957] Preemption disabled at: [10567.257549][T10957] [] hook_sb_delete+0x12e/0xbde [10567.261121][T10957] CPU: 0 UID: 0 PID: 10957 Comm: syz.2.1621 Not tainted syzkaller #0 PREEMPT [10567.261885][T10957] Hardware name: riscv-virtio,qemu (DT) [10567.262511][T10957] Call Trace: [10567.262908][T10957] [] dump_backtrace+0x2e/0x3c [10567.263575][T10957] [] show_stack+0x30/0x3c [10567.264028][T10957] [] dump_stack_lvl+0x12a/0x1a2 [10567.264799][T10957] [] dump_stack+0x1c/0x24 [10567.265514][T10957] [] __might_resched+0x59c/0x5f8 [10567.266122][T10957] [] __might_sleep+0x86/0xca [10567.266727][T10957] [] iput+0x3c/0xb22 [10567.267430][T10957] [] hook_sb_delete+0x86e/0xbde [10567.268110][T10957] [] security_sb_delete+0xac/0x184 [10567.268832][T10957] [] generic_shutdown_super+0xba/0x37c [10567.269571][T10957] [] kill_litter_super+0x74/0xb0 [10567.270281][T10957] [] deactivate_locked_super+0xd8/0x19c [10567.270947][T10957] [] deactivate_super+0x84/0x98 [10567.271677][T10957] [] cleanup_mnt+0x1dc/0x3e6 [10567.272333][T10957] [] __cleanup_mnt+0x1c/0x26 [10567.272925][T10957] [] task_work_run+0x16a/0x25e [10567.273402][T10957] [] exit_to_user_mode_loop+0x110/0x142 [10567.273905][T10957] [] do_trap_ecall_u+0x3f8/0x53a [10567.274547][T10957] [] handle_exception+0x146/0x152