last executing test programs: 3m28.446711626s ago: executing program 32 (id=526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) open(0x0, 0x60840, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea00403c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0) 2m47.406129111s ago: executing program 0 (id=2539): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x200d, 0x5, 0x8, 0x80000000, 0xb, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x379b, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x3, 0x40b6}, &(0x7f0000000240)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2m47.150188902s ago: executing program 0 (id=2558): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x47f, 0x2, 0x8, 0x7, r2}, &(0x7f0000000100)=0x10) 2m46.30208707s ago: executing program 0 (id=2584): socket$nl_route(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000014c0), 0x101202, 0x0) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xffff7ffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 2m46.192213334s ago: executing program 0 (id=2585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 2m46.177384295s ago: executing program 0 (id=2588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m46.106879468s ago: executing program 0 (id=2592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 2m30.813211358s ago: executing program 33 (id=2592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 2m7.656493549s ago: executing program 4 (id=3684): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m7.595789972s ago: executing program 4 (id=3686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x0, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x16, 0x3313, @empty, @multicast2, {[@end, @generic={0x94, 0x0, "4fcf02d60e646404e8e478505e"}, @end, @noop, @cipso={0x86, 0x0, 0x3, [{0x1, 0x0, "97e3eedcb1b4f0f6c3fb95c6087f31"}, {0x5, 0x0, "2d3110a90aa230a1"}, {0x5e232c06587b5052, 0x0, "66079e88e964c34418c418a7ed5b"}]}, @rr={0x7, 0x0, 0x16, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @loopback]}, @timestamp={0x44, 0x0, 0x84, 0x0, 0x4, [0x4, 0x0, 0x6, 0x1, 0x1]}]}}, "c819"}}}, 0xfe30) 2m7.428858269s ago: executing program 4 (id=3691): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") close(r0) 2m7.121005123s ago: executing program 4 (id=3696): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') 2m7.089034344s ago: executing program 4 (id=3698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2m6.923698451s ago: executing program 4 (id=3702): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x4, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x162, 0x0, 0x0) 2m6.923293331s ago: executing program 34 (id=3702): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x4, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x162, 0x0, 0x0) 32.847726209s ago: executing program 1 (id=7990): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 32.623489929s ago: executing program 1 (id=7992): socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)) 32.60058607s ago: executing program 1 (id=7994): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x82d) 32.387133809s ago: executing program 1 (id=8001): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x505, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r1, 0x0, r1, &(0x7f0000000500)=0xffff, 0x9, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 32.303651362s ago: executing program 1 (id=8002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 32.221967536s ago: executing program 1 (id=8005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) open(0x0, 0x4000, 0x0) mq_open(0x0, 0x40, 0x1d4, 0x0) 30.901401843s ago: executing program 7 (id=8051): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 30.881647254s ago: executing program 7 (id=8053): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 30.879173304s ago: executing program 6 (id=8063): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 30.820217857s ago: executing program 7 (id=8055): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0x6, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) 30.799237167s ago: executing program 7 (id=8058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 30.765669339s ago: executing program 6 (id=8060): openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x6}}, {@nogrpid}, {@acl}, {@delalloc}, {@dioread_lock}]}, 0x1, 0x570, &(0x7f0000000680)="$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") mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 30.765139459s ago: executing program 7 (id=8061): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 30.74032159s ago: executing program 6 (id=8062): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socketpair(0x26, 0x6, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) 30.716357511s ago: executing program 7 (id=8066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) 30.492095271s ago: executing program 6 (id=8083): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b55f8ff00000000bfa1002ee7f8c700070100eff7ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.334277807s ago: executing program 6 (id=8077): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 30.29022108s ago: executing program 6 (id=8092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fee3ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 17.167710617s ago: executing program 35 (id=8005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) open(0x0, 0x4000, 0x0) mq_open(0x0, 0x40, 0x1d4, 0x0) 15.681812061s ago: executing program 36 (id=8066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) 15.117394866s ago: executing program 37 (id=8092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fee3ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.472051596s ago: executing program 8 (id=8925): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) r1 = socket$inet(0xa, 0x801, 0x84) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.324859142s ago: executing program 5 (id=8933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) rt_sigqueueinfo(0x0, 0x23, 0x0) 1.300723064s ago: executing program 5 (id=8935): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 906.77216ms ago: executing program 2 (id=8946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf6ebfb138881d28d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 838.310604ms ago: executing program 2 (id=8948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 701.380639ms ago: executing program 2 (id=8953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 681.00233ms ago: executing program 2 (id=8955): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) 647.931332ms ago: executing program 2 (id=8958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) 618.545873ms ago: executing program 8 (id=8961): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 597.278534ms ago: executing program 3 (id=8962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 592.743484ms ago: executing program 8 (id=8964): r0 = syz_clone(0x11, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x0) 550.187246ms ago: executing program 8 (id=8965): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1}, 0xa16}], 0x1, 0x100, 0x0) shutdown(r0, 0x1) 479.185429ms ago: executing program 3 (id=8966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 444.00318ms ago: executing program 3 (id=8967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) 412.119442ms ago: executing program 5 (id=8968): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) 397.195473ms ago: executing program 8 (id=8969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050001000000030000000200000006e60a004e"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) 388.997273ms ago: executing program 9 (id=8970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='task_rename\x00', r1, 0x0, 0x8}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='+j\xf5@\x00\xc9\xd2\xf5\x81\xf7\xc6\x051\xdc\xb1h-OC\xf6\xbd\xd2>\x12`\x0fO|\xf3O+\x9bf\x050\"G\x91\xf9\xb3\rCC\x88y\xb4\xadOF\xd7$\xea4\xfd\nW\xaa\xf0:\xefbj\x9f*Q+\x8c\x9e\x0eY\xb2\x8d\x1aG\x13\x0e\xdb>![\x86yI\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00') 330.545936ms ago: executing program 5 (id=8971): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1f4, r0, &(0x7f00000000c0)={0x10}) 330.294986ms ago: executing program 8 (id=8972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 329.941336ms ago: executing program 9 (id=8973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 304.710977ms ago: executing program 3 (id=8974): socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f0000008440)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) setreuid(0xffffffffffffffff, 0xee00) fchown(r0, 0xffffffffffffffff, 0x0) 303.829577ms ago: executing program 5 (id=8975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0) 277.430418ms ago: executing program 2 (id=8976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 247.979069ms ago: executing program 5 (id=8977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 209.225591ms ago: executing program 9 (id=8978): sendmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="4741aa2d2693d37b2a5600", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x8044) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 143.645213ms ago: executing program 9 (id=8979): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f00000000c0), 0x4) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/30, 0x1e}, 0x2120) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="5bca9741eb", 0x5}], 0x1, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x44080}, 0x8800) 56.230108ms ago: executing program 3 (id=8980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) close(r1) 54.006278ms ago: executing program 9 (id=8981): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 29.595548ms ago: executing program 3 (id=8982): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) set_robust_list(0x0, 0x0) 0s ago: executing program 9 (id=8983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x8) kernel console output (not intermixed with test programs): rt 6081 - 0 [ 178.513409][ T7462] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.522184][ T7462] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.533825][ T7462] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.542315][ T7462] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.554127][ T7462] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.562532][ T7462] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.573999][ T7462] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.582385][ T7462] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.625068][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 178.625086][ T29] audit: type=1326 audit(1763635009.104:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 178.666536][ T29] audit: type=1326 audit(1763635009.104:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 178.670108][ T3408] hid_parser_main: 19 callbacks suppressed [ 178.670133][ T3408] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 178.690351][ T29] audit: type=1326 audit(1763635009.134:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 178.696161][ T3408] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 178.703869][ T29] audit: type=1326 audit(1763635009.134:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 178.739398][ T3408] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 178.758798][ T29] audit: type=1326 audit(1763635009.134:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 178.767103][ T3408] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 178.789887][ T29] audit: type=1400 audit(1763635009.144:5459): avc: denied { read write } for pid=15823 comm="syz.1.5317" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 178.789921][ T29] audit: type=1400 audit(1763635009.144:5460): avc: denied { open } for pid=15823 comm="syz.1.5317" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 178.896133][ T29] audit: type=1326 audit(1763635009.374:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.5.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 178.919854][ T29] audit: type=1326 audit(1763635009.374:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.5.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 178.946014][ T29] audit: type=1326 audit(1763635009.374:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.5.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 178.993755][ T3408] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 179.002557][ T3408] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.451794][ T1034] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 179.460263][ T1034] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 179.469038][ T1034] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x3 [ 179.477177][ T1034] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 179.764608][T15891] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 179.771331][T15891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.778965][T15891] vhci_hcd vhci_hcd.0: Device attached [ 179.785947][T15892] vhci_hcd: connection closed [ 179.786412][ T7475] vhci_hcd: stop threads [ 179.795662][ T7475] vhci_hcd: release socket [ 179.800191][ T7475] vhci_hcd: disconnect device [ 179.988590][T15906] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5345'. [ 180.057342][T15916] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 180.124380][T15927] geneve3: entered promiscuous mode [ 180.132110][ T7475] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 39454 - 0 [ 180.140701][ T7475] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 39454 - 0 [ 180.149616][ T7475] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 39454 - 0 [ 180.158269][ T7475] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 39454 - 0 [ 180.364204][T15946] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 180.372083][T15948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5362'. [ 180.381243][T15948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5362'. [ 180.390272][T15948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5362'. [ 180.449130][T15958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 180.520728][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5373'. [ 180.565636][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5379'. [ 180.756561][T16006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.053377][T16056] ip6t_srh: unknown srh match flags 4000 [ 181.160184][T16076] netlink: 'syz.6.5423': attribute type 9 has an invalid length. [ 181.168097][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5423'. [ 181.181490][T16076] hsr0: entered promiscuous mode [ 181.186742][T16076] macvlan2: entered promiscuous mode [ 181.192240][T16076] macvlan2: entered allmulticast mode [ 181.197691][T16076] hsr0: entered allmulticast mode [ 181.202726][T16076] hsr_slave_0: entered allmulticast mode [ 181.208433][T16076] hsr_slave_1: entered allmulticast mode [ 181.216840][T16080] pimreg: tun_chr_ioctl cmd 1074812117 [ 181.227888][T16080] pimreg: tun_chr_ioctl cmd 1074025673 [ 181.239078][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5426'. [ 181.248143][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5426'. [ 181.311291][T16090] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 181.321532][T16090] SELinux: failed to load policy [ 181.462455][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5442'. [ 181.751605][T16134] veth3: entered promiscuous mode [ 181.756708][T16134] veth3: entered allmulticast mode [ 182.231658][T16182] program syz.7.5473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.604973][T16227] ref_ctr_offset mismatch. inode: 0x69a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 182.618229][T16229] netlink: 'syz.5.5496': attribute type 1 has an invalid length. [ 182.761080][T16243] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 183.324323][T16302] $Hÿ: renamed from .` [ 183.334337][T16302] $Hÿ: entered promiscuous mode [ 183.339556][T16302] bond_slave_0: entered promiscuous mode [ 183.345374][T16302] bond_slave_1: entered promiscuous mode [ 183.402441][T16309] block device autoloading is deprecated and will be removed. [ 183.463625][T16317] macvtap0: refused to change device tx_queue_len [ 183.629405][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 183.629425][ T29] audit: type=1400 audit(1763635014.114:5714): avc: denied { mount } for pid=16352 comm="syz.7.5553" name="/" dev="ramfs" ino=52221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 183.743167][ T29] audit: type=1400 audit(1763635014.224:5715): avc: denied { cpu } for pid=16363 comm="syz.7.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 183.803605][ T29] audit: type=1400 audit(1763635014.254:5716): avc: denied { create } for pid=16367 comm="syz.5.5561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.823242][ T29] audit: type=1400 audit(1763635014.254:5717): avc: denied { write } for pid=16367 comm="syz.5.5561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.843051][ T29] audit: type=1400 audit(1763635014.264:5718): avc: denied { name_bind } for pid=16369 comm="syz.1.5562" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 183.864965][ T29] audit: type=1400 audit(1763635014.264:5719): avc: denied { node_bind } for pid=16369 comm="syz.1.5562" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 183.891447][ T29] audit: type=1400 audit(1763635014.374:5720): avc: denied { create } for pid=16372 comm="syz.5.5564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.911255][ T29] audit: type=1326 audit(1763635014.374:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.1.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 183.934939][ T29] audit: type=1326 audit(1763635014.374:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.1.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 183.958666][ T29] audit: type=1326 audit(1763635014.374:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.1.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 184.178903][T16410] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 184.242141][T16421] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 184.242141][T16421] The task syz.1.5578 (16421) triggered the difference, watch for misbehavior. [ 184.526885][T16447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.836172][T16468] netlink: 'syz.7.5605': attribute type 3 has an invalid length. [ 184.844050][T16468] netlink: 'syz.7.5605': attribute type 1 has an invalid length. [ 184.867894][T16447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.083297][T16498] __nla_validate_parse: 5 callbacks suppressed [ 185.083312][T16498] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5618'. [ 185.207883][T16447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.357998][T16447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.504453][T16541] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.548083][T16543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5638'. [ 185.837237][T16584] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.228237][T16642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.482044][ T3408] IPVS: starting estimator thread 0... [ 186.577834][T16669] IPVS: using max 1632 ests per chain, 81600 per kthread [ 186.986082][T16688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5705'. [ 187.201475][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 187.237870][T16730] pimreg: tun_chr_ioctl cmd 1074812117 [ 187.248767][T16730] pimreg: tun_chr_ioctl cmd 1074025673 [ 187.434281][T16764] syzkaller0: entered promiscuous mode [ 187.440131][T16764] syzkaller0: entered allmulticast mode [ 187.476039][T16772] lo: left promiscuous mode [ 187.480660][T16772] lo: left allmulticast mode [ 187.488663][T16772] tunl0: left promiscuous mode [ 187.493497][T16772] tunl0: left allmulticast mode [ 187.501510][T16772] gre0: left promiscuous mode [ 187.506229][T16772] gre0: left allmulticast mode [ 187.515320][T16772] gretap0: left promiscuous mode [ 187.520556][T16772] gretap0: left allmulticast mode [ 187.527818][T16772] erspan0: left promiscuous mode [ 187.532855][T16772] erspan0: left allmulticast mode [ 187.541284][T16772] ip_vti0: left promiscuous mode [ 187.546316][T16772] ip_vti0: left allmulticast mode [ 187.555696][T16772] ip6_vti0: left promiscuous mode [ 187.560891][T16772] ip6_vti0: left allmulticast mode [ 187.567390][T16772] sit0: left promiscuous mode [ 187.572168][T16772] sit0: left allmulticast mode [ 187.578962][T16772] ip6tnl0: left promiscuous mode [ 187.584064][T16772] ip6tnl0: left allmulticast mode [ 187.592003][T16772] ip6gre0: left promiscuous mode [ 187.597165][T16772] ip6gre0: left allmulticast mode [ 187.603373][T16772] syz_tun: left promiscuous mode [ 187.608418][T16772] syz_tun: left allmulticast mode [ 187.614391][T16772] bridge0: left promiscuous mode [ 187.619466][T16772] bridge0: left allmulticast mode [ 187.625524][T16772] vcan0: left promiscuous mode [ 187.630319][T16772] vcan0: left allmulticast mode [ 187.636181][T16772] .`: left promiscuous mode [ 187.640763][T16772] bond_slave_0: left promiscuous mode [ 187.646208][T16772] bond_slave_1: left promiscuous mode [ 187.651752][T16772] batadv0: left promiscuous mode [ 187.656921][T16772] .`: left allmulticast mode [ 187.661607][T16772] bond_slave_0: left allmulticast mode [ 187.667393][T16772] bond_slave_1: left allmulticast mode [ 187.697275][T16772] team0: left promiscuous mode [ 187.702177][T16772] team_slave_0: left promiscuous mode [ 187.707835][T16772] team0: left allmulticast mode [ 187.712719][T16772] team_slave_0: left allmulticast mode [ 187.721207][T16772] dummy0: left promiscuous mode [ 187.726145][T16772] dummy0: left allmulticast mode [ 187.732917][T16772] nlmon0: left promiscuous mode [ 187.738011][T16772] nlmon0: left allmulticast mode [ 187.745754][T16772] caif0: left promiscuous mode [ 187.750858][T16772] caif0: left allmulticast mode [ 187.755799][T16772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.103228][T16830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16830 comm=syz.5.5774 [ 188.116134][T16830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16830 comm=syz.5.5774 [ 188.247844][T16857] syzkaller0: entered promiscuous mode [ 188.253434][T16857] syzkaller0: entered allmulticast mode [ 188.269065][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.279434][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.361329][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5792'. [ 188.380653][T16871] program syz.1.5793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.417356][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5792'. [ 188.446253][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5792'. [ 188.485792][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5792'. [ 188.577414][T16882] hub 2-0:1.0: USB hub found [ 188.593304][T16882] hub 2-0:1.0: 8 ports detected [ 188.767178][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 188.767196][ T29] audit: type=1326 audit(1763635020.244:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 188.825995][T16868] veth3: entered promiscuous mode [ 188.831133][T16868] veth3: entered allmulticast mode [ 188.850577][ T29] audit: type=1326 audit(1763635020.294:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 188.874233][ T29] audit: type=1326 audit(1763635020.294:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 188.897942][ T29] audit: type=1326 audit(1763635020.294:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 188.923641][ T29] audit: type=1326 audit(1763635020.294:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 188.947255][ T29] audit: type=1326 audit(1763635020.304:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 188.970842][ T29] audit: type=1326 audit(1763635020.304:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 188.995815][ T29] audit: type=1326 audit(1763635020.304:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 189.019522][ T29] audit: type=1326 audit(1763635020.304:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 189.043223][ T29] audit: type=1326 audit(1763635020.304:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16901 comm="syz.2.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 189.073586][T16913] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 189.284723][ T3403] IPVS: starting estimator thread 0... [ 189.377724][T16934] IPVS: using max 2352 ests per chain, 117600 per kthread [ 189.393707][T16944] ref_ctr_offset mismatch. inode: 0x14e6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 189.746340][T16978] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 189.869101][T16996] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=16996 comm=syz.2.5853 [ 190.541385][T17063] hub 2-0:1.0: USB hub found [ 190.558031][T17063] hub 2-0:1.0: 8 ports detected [ 190.637524][T17069] sctp: [Deprecated]: syz.5.5884 (pid 17069) Use of int in maxseg socket option. [ 190.637524][T17069] Use struct sctp_assoc_value instead [ 190.789908][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5894'. [ 190.820278][T17087] dummy0: entered promiscuous mode [ 190.836752][T17087] bond_slave_0: entered promiscuous mode [ 190.842710][T17087] bond_slave_0: left promiscuous mode [ 190.853880][T17087] dummy0: left promiscuous mode [ 191.392420][T17133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.934079][T17189] netlink: 'syz.1.5942': attribute type 10 has an invalid length. [ 191.961134][T17189] team0: Port device dummy0 added [ 191.976269][T17197] xt_hashlimit: max too large, truncated to 1048576 [ 192.226009][T17237] batadv_slave_1: entered promiscuous mode [ 192.237921][T17236] batadv_slave_1: left promiscuous mode [ 192.315145][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5971'. [ 192.379121][T17249] ªªªªªª: renamed from vlan0 (while UP) [ 192.516299][T17261] sctp: [Deprecated]: syz.2.5975 (pid 17261) Use of int in maxseg socket option. [ 192.516299][T17261] Use struct sctp_assoc_value instead [ 192.608948][T17277] netlink: 'syz.1.5982': attribute type 6 has an invalid length. [ 192.786505][T17297] No such timeout policy "syz0" [ 192.847805][T17307] netlink: 'syz.2.5995': attribute type 10 has an invalid length. [ 192.892840][T17307] team0: Port device dummy0 added [ 193.086933][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6014'. [ 193.114278][T17348] netlink: 'syz.7.6015': attribute type 10 has an invalid length. [ 193.139593][T17348] team0: Port device dummy0 added [ 193.167990][T17353] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 193.174638][T17353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.182316][T17353] vhci_hcd vhci_hcd.0: Device attached [ 193.215151][T17355] vhci_hcd: connection closed [ 193.216666][ T7462] vhci_hcd: stop threads [ 193.225722][ T7462] vhci_hcd: release socket [ 193.230177][ T7462] vhci_hcd: disconnect device [ 193.561498][T17421] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.685172][T17449] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.767750][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 193.767769][ T29] audit: type=1400 audit(1763635025.254:6310): avc: denied { prog_load } for pid=17464 comm="syz.5.6070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 193.800572][ T29] audit: type=1400 audit(1763635025.284:6311): avc: denied { map_create } for pid=17466 comm="syz.2.6072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 193.820072][ T29] audit: type=1400 audit(1763635025.284:6312): avc: denied { prog_load } for pid=17466 comm="syz.2.6072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 193.839353][ T29] audit: type=1400 audit(1763635025.284:6313): avc: denied { create } for pid=17466 comm="syz.2.6072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 193.869557][ T29] audit: type=1400 audit(1763635025.284:6314): avc: denied { create } for pid=17469 comm="syz.1.6074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 193.889197][ T29] audit: type=1326 audit(1763635025.284:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 193.913390][ T29] audit: type=1326 audit(1763635025.284:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 193.937149][ T29] audit: type=1326 audit(1763635025.284:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 193.960935][ T29] audit: type=1400 audit(1763635025.284:6318): avc: denied { prog_load } for pid=17473 comm="syz.2.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 193.980167][ T29] audit: type=1326 audit(1763635025.284:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.2.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 194.245713][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6099'. [ 194.254930][T17524] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6099'. [ 194.264269][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6099'. [ 194.273665][T17524] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6099'. [ 194.282887][T17524] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6099'. [ 194.996042][T17621] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6144'. [ 195.250348][T17653] usb usb8: usbfs: process 17653 (+}[@) did not claim interface 0 before use [ 195.339016][T17664] netlink: 'syz.6.6164': attribute type 13 has an invalid length. [ 195.359796][T17664] gretap0: refused to change device tx_queue_len [ 195.379649][T17664] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 195.630726][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6181'. [ 195.703712][T17709] bond0: option ad_select: invalid value (40) [ 195.707086][T17709] bond0 (unregistering): Released all slaves [ 196.035184][T17752] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.045941][T17752] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.100077][T17764] lo: left promiscuous mode [ 196.104827][T17764] lo: left allmulticast mode [ 196.128642][T17764] tunl0: left promiscuous mode [ 196.133525][T17764] tunl0: left allmulticast mode [ 196.141132][T17764] gre0: left promiscuous mode [ 196.145911][T17764] gre0: left allmulticast mode [ 196.170040][T17764] gretap0: left allmulticast mode [ 196.191556][T17764] erspan0: left promiscuous mode [ 196.196568][T17764] erspan0: left allmulticast mode [ 196.205680][T17764] ip_vti0: left promiscuous mode [ 196.210736][T17764] ip_vti0: left allmulticast mode [ 196.217210][T17764] ip6_vti0: left promiscuous mode [ 196.222424][T17764] ip6_vti0: left allmulticast mode [ 196.229002][T17764] sit0: left promiscuous mode [ 196.233912][T17764] sit0: left allmulticast mode [ 196.240120][T17764] ip6tnl0: left promiscuous mode [ 196.245159][T17764] ip6tnl0: left allmulticast mode [ 196.251391][T17764] ip6gre0: left promiscuous mode [ 196.256371][T17764] ip6gre0: left allmulticast mode [ 196.262685][T17764] syz_tun: left promiscuous mode [ 196.267802][T17764] syz_tun: left allmulticast mode [ 196.273975][T17764] ip6gretap0: left promiscuous mode [ 196.279275][T17764] ip6gretap0: left allmulticast mode [ 196.285935][T17764] bridge0: left promiscuous mode [ 196.291082][T17764] bridge0: left allmulticast mode [ 196.299019][T17764] vcan0: left promiscuous mode [ 196.303840][T17764] vcan0: left allmulticast mode [ 196.310963][T17764] .`: left promiscuous mode [ 196.315569][T17764] bond_slave_1: left promiscuous mode [ 196.321378][T17764] .`: left allmulticast mode [ 196.326214][T17764] bond_slave_1: left allmulticast mode [ 196.333888][T17764] team0: left promiscuous mode [ 196.338870][T17764] team_slave_0: left promiscuous mode [ 196.344464][T17764] team_slave_1: left promiscuous mode [ 196.350268][T17764] team0: left allmulticast mode [ 196.355155][T17764] team_slave_0: left allmulticast mode [ 196.360751][T17764] team_slave_1: left allmulticast mode [ 196.369244][T17764] dummy0: left promiscuous mode [ 196.374182][T17764] dummy0: left allmulticast mode [ 196.380360][T17764] nlmon0: left promiscuous mode [ 196.385274][T17764] nlmon0: left allmulticast mode [ 196.391955][T17764] caif0: left promiscuous mode [ 196.396814][T17764] caif0: left allmulticast mode [ 196.412472][T17764] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.418774][T17786] __nla_validate_parse: 1 callbacks suppressed [ 196.418795][T17786] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6219'. [ 196.419612][T17764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.425756][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6219'. [ 196.454277][T17764] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.461389][T17764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.506293][T17764] macvlan2: left promiscuous mode [ 196.511641][T17764] macvlan2: left allmulticast mode [ 196.516773][T17764] hsr0: left allmulticast mode [ 196.521675][T17764] hsr_slave_0: left allmulticast mode [ 196.527322][T17764] hsr_slave_1: left allmulticast mode [ 196.545099][T17786] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6219'. [ 196.884362][T17767] Process accounting resumed [ 197.210946][T17859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6248'. [ 197.235080][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6255'. [ 197.276763][T17859] bond0: option ad_select: invalid value (40) [ 197.313766][T17859] bond0 (unregistering): Released all slaves [ 197.385871][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6260'. [ 197.416360][T17876] team0: Port device team_slave_0 removed [ 197.529730][T17895] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 197.618129][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6276'. [ 197.705796][T17921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6283'. [ 197.942051][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6304'. [ 197.956448][T17962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6301'. [ 198.096026][T17984] syzkaller1: entered promiscuous mode [ 198.101851][T17984] syzkaller1: entered allmulticast mode [ 198.393545][T18006] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 198.440868][T18006] SELinux: failed to load policy [ 198.663710][T18021] syzkaller1: entered promiscuous mode [ 198.669339][T18021] syzkaller1: entered allmulticast mode [ 198.684043][T18026] netlink: 'syz.1.6328': attribute type 1 has an invalid length. [ 198.781068][T18035] SELinux: failed to load policy [ 198.817990][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 198.818012][ T29] audit: type=1400 audit(1763635031.292:6684): avc: denied { ioctl } for pid=18036 comm="syz.1.6332" path="socket:[58797]" dev="sockfs" ino=58797 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.887069][ T29] audit: type=1400 audit(1763635031.372:6685): avc: denied { write } for pid=18040 comm="syz.6.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.967351][T18044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18044 comm=syz.2.6335 [ 199.137926][T18048] syzkaller1: entered promiscuous mode [ 199.143498][T18048] syzkaller1: entered allmulticast mode [ 199.161051][ T29] audit: type=1400 audit(1763635031.652:6686): avc: denied { setopt } for pid=18055 comm="syz.7.6344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.225206][ T29] audit: type=1400 audit(1763635031.712:6687): avc: denied { setopt } for pid=18060 comm="syz.1.6346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.255119][T18066] dummy0: Device is already in use. [ 199.283323][ T29] audit: type=1326 audit(1763635031.772:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.5.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 199.324061][T18072] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 199.339967][ T29] audit: type=1326 audit(1763635031.772:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.5.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 199.363619][ T29] audit: type=1326 audit(1763635031.772:6690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.5.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 199.387280][ T29] audit: type=1326 audit(1763635031.802:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.5.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 199.410930][ T29] audit: type=1400 audit(1763635031.812:6692): avc: denied { relabelfrom } for pid=18070 comm="syz.6.6350" name="" dev="pipefs" ino=58153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 199.433649][ T29] audit: type=1400 audit(1763635031.812:6693): avc: denied { mac_admin } for pid=18070 comm="syz.6.6350" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.538401][T18089] team_slave_0: entered promiscuous mode [ 199.544187][T18089] team_slave_1: entered promiscuous mode [ 199.549894][T18089] dummy0: entered promiscuous mode [ 199.557327][T18089] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 199.576214][T18089] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 199.915846][T18131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.944354][T18131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.038340][T18143] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 200.163342][T18131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.178083][T18131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.533869][T18219] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 200.543688][T18220] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 1 [ 200.553348][T18221] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 2 [ 200.553631][T18222] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 3 [ 201.620386][T18311] macvtap0: refused to change device tx_queue_len [ 201.834329][T18340] netlink: 'syz.5.6471': attribute type 1 has an invalid length. [ 201.854872][T18344] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.925979][T18350] __nla_validate_parse: 21 callbacks suppressed [ 201.926007][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 201.941673][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 201.950706][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 201.977806][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 201.986872][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 201.995874][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 202.035241][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 202.044319][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 202.053487][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6476'. [ 202.104247][T18365] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6482'. [ 202.162348][T18373] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 202.236021][T18383] netlink: 'syz.7.6493': attribute type 1 has an invalid length. [ 202.490302][T18409] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 202.499471][T18409] vhci_hcd: invalid port number 96 [ 202.504626][T18409] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 203.400432][T18523] program syz.7.6555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.555391][T18539] hsr0: entered promiscuous mode [ 203.568448][T18539] hsr_slave_0: left promiscuous mode [ 203.574763][T18539] hsr_slave_1: left promiscuous mode [ 203.589916][T18539] hsr0 (unregistering): left promiscuous mode [ 203.635092][T18551] syzkaller1: entered promiscuous mode [ 203.640739][T18551] syzkaller1: entered allmulticast mode [ 203.780517][T18564] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 203.788146][T18564] vhci_hcd: invalid port number 96 [ 203.793268][T18564] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 203.890442][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 203.890460][ T29] audit: type=1326 audit(1763635036.382:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 203.935750][T18578] usb usb1: check_ctrlrecip: process 18578 (syz.5.6583) requesting ep 01 but needs 81 [ 203.939383][ T29] audit: type=1326 audit(1763635036.382:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 203.945521][T18578] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 203.968890][ T29] audit: type=1326 audit(1763635036.382:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 204.000158][ T29] audit: type=1326 audit(1763635036.382:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 204.024122][ T29] audit: type=1326 audit(1763635036.382:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 204.047980][ T29] audit: type=1326 audit(1763635036.382:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 204.071804][ T29] audit: type=1326 audit(1763635036.382:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 204.095552][ T29] audit: type=1326 audit(1763635036.382:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 204.119524][ T29] audit: type=1326 audit(1763635036.412:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 204.143863][ T29] audit: type=1326 audit(1763635036.412:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287d2f749 code=0x7ffc0000 [ 204.178807][T18586] veth1_macvtap: left promiscuous mode [ 204.184572][T18586] macsec0: entered promiscuous mode [ 204.190031][T18586] macsec0: entered allmulticast mode [ 204.204739][T18586] veth1_macvtap: entered promiscuous mode [ 204.211142][T18586] veth1_macvtap: entered allmulticast mode [ 204.218181][T18586] macsec0: left promiscuous mode [ 204.223368][T18586] macsec0: left allmulticast mode [ 204.228738][T18586] veth1_macvtap: left allmulticast mode [ 204.243812][T18590] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 204.261610][T18590] vhci_hcd: invalid port number 96 [ 204.266915][T18590] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 204.358210][T18610] rdma_op ffff888119558180 conn xmit_rdma 0000000000000000 [ 204.445091][T18622] sd 0:0:1:0: device reset [ 204.491406][T18626] atomic_op ffff888123305128 conn xmit_atomic 0000000000000000 [ 205.692971][T18734] block device autoloading is deprecated and will be removed. [ 205.875261][T18752] pim6reg: entered allmulticast mode [ 205.961809][T18752] team0: entered allmulticast mode [ 205.967134][T18752] team_slave_1: entered allmulticast mode [ 206.010855][T18752] team0: left allmulticast mode [ 206.015863][T18752] team_slave_1: left allmulticast mode [ 206.053603][T18752] pim6reg: left allmulticast mode [ 206.279845][T18776] 9pnet_fd: Insufficient options for proto=fd [ 206.717787][T18831] syzkaller1: entered promiscuous mode [ 206.723348][T18831] syzkaller1: entered allmulticast mode [ 206.809862][T18844] SELinux: failed to load policy [ 206.834816][T18851] netlink: 'syz.1.6710': attribute type 1 has an invalid length. [ 206.864043][T18855] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 207.297525][T18917] pim6reg: entered allmulticast mode [ 207.320817][T18917] team0: entered allmulticast mode [ 207.326134][T18917] team_slave_0: entered allmulticast mode [ 207.332026][T18917] team_slave_1: entered allmulticast mode [ 207.339253][T18917] team0: left allmulticast mode [ 207.344181][T18917] team_slave_0: left allmulticast mode [ 207.349929][T18917] team_slave_1: left allmulticast mode [ 207.356853][T18917] pim6reg: left allmulticast mode [ 208.055057][T19012] __nla_validate_parse: 22 callbacks suppressed [ 208.055078][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6779'. [ 208.101408][T19012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6779'. [ 208.566394][T19082] block device autoloading is deprecated and will be removed. [ 208.911330][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 208.911345][ T29] audit: type=1400 audit(1763635041.402:7208): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.941089][ T29] audit: type=1400 audit(1763635041.402:7209): avc: denied { open } for pid=3324 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.964426][ T29] audit: type=1400 audit(1763635041.402:7210): avc: denied { ioctl } for pid=3324 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.015040][ T29] audit: type=1400 audit(1763635041.492:7211): avc: denied { execmem } for pid=19144 comm="syz.6.6796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 209.043715][ T29] audit: type=1400 audit(1763635041.502:7212): avc: denied { name_bind } for pid=19153 comm="syz.2.6799" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 209.085530][T19161] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 209.098510][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6801'. [ 209.107984][ T29] audit: type=1400 audit(1763635041.582:7213): avc: denied { create } for pid=19160 comm="syz.1.6801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.129032][ T29] audit: type=1400 audit(1763635041.592:7214): avc: denied { write } for pid=19160 comm="syz.1.6801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.167492][ T29] audit: type=1400 audit(1763635041.652:7215): avc: denied { read } for pid=19168 comm="syz.6.6805" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 209.191079][ T29] audit: type=1400 audit(1763635041.652:7216): avc: denied { open } for pid=19168 comm="syz.6.6805" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 209.220861][ T29] audit: type=1400 audit(1763635041.712:7217): avc: denied { create } for pid=19170 comm="syz.2.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.401163][T19197] sd 0:0:1:0: device reset [ 209.417135][T19169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.425703][T19169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.486048][T19209] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6824'. [ 209.625500][T19216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6827'. [ 209.774263][ T7462] Bluetooth: hci0: Frame reassembly failed (-84) [ 209.883410][T19240] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6838'. [ 209.892485][T19240] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6838'. [ 209.902440][T19240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.918068][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6866'. [ 211.218318][T19341] batadv_slave_1: entered promiscuous mode [ 211.225224][T19340] batadv_slave_1: left promiscuous mode [ 211.302701][T19360] netlink: 'syz.1.6895': attribute type 3 has an invalid length. [ 211.310648][T19360] netlink: 'syz.1.6895': attribute type 4 has an invalid length. [ 211.318559][T19360] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.6895'. [ 211.409271][T19376] netlink: 'syz.7.6903': attribute type 4 has an invalid length. [ 211.417639][T19376] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6903'. [ 211.426915][T19376] .`: renamed from $Hÿ [ 211.580883][T19403] atomic_op ffff88810457a928 conn xmit_atomic 0000000000000000 [ 211.624065][ T3403] kernel write not supported for file /uhid (pid: 3403 comm: kworker/0:4) [ 211.706425][T19421] pim6reg1: entered allmulticast mode [ 211.827634][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.833892][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 211.914508][T19437] netlink: 'syz.1.6931': attribute type 1 has an invalid length. [ 212.125798][T19448] xt_hashlimit: size too large, truncated to 1048576 [ 212.157513][T19453] xt_hashlimit: max too large, truncated to 1048576 [ 212.310622][T19467] rdma_op ffff88811e2a4580 conn xmit_rdma 0000000000000000 [ 212.556262][T19503] loop2: detected capacity change from 0 to 736 [ 212.708046][T19515] netlink: 'syz.1.6966': attribute type 6 has an invalid length. [ 212.749002][T19519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=19519 comm=syz.6.6968 [ 212.762090][T19519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=19519 comm=syz.6.6968 [ 212.824619][T19525] netlink: 'syz.2.6971': attribute type 4 has an invalid length. [ 213.880154][T19673] netlink: 'syz.1.7016': attribute type 3 has an invalid length. [ 213.946578][T19687] __nla_validate_parse: 8 callbacks suppressed [ 213.946598][T19687] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7020'. [ 213.978901][T19691] xt_hashlimit: max too large, truncated to 1048576 [ 214.008870][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 214.008889][ T29] audit: type=1400 audit(1763635046.502:7488): avc: denied { connect } for pid=19697 comm="syz.6.7023" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.227241][ T29] audit: type=1400 audit(1763635046.712:7489): avc: denied { watch watch_reads } for pid=19742 comm="syz.2.7034" path="/1549" dev="tmpfs" ino=7913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.271930][ T29] audit: type=1326 audit(1763635046.742:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 214.295650][ T29] audit: type=1326 audit(1763635046.742:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 214.319479][ T29] audit: type=1326 audit(1763635046.742:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 214.343958][ T29] audit: type=1326 audit(1763635046.742:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 214.367603][ T29] audit: type=1326 audit(1763635046.742:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 214.391412][ T29] audit: type=1326 audit(1763635046.742:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 214.414990][ T29] audit: type=1326 audit(1763635046.742:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 214.438849][ T29] audit: type=1326 audit(1763635046.742:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 214.510677][T19767] batadv_slave_1: entered promiscuous mode [ 214.518129][T19765] batadv_slave_1: left promiscuous mode [ 214.639571][T19786] netlink: 268 bytes leftover after parsing attributes in process `syz.7.7049'. [ 214.784439][T19820] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7059'. [ 214.918899][T19843] binfmt_misc: register: failed to install interpreter file ./file2 [ 215.031617][T19859] serio: Serial port ptm0 [ 215.076226][T19869] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7073'. [ 215.085372][T19869] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7073'. [ 215.538601][T19930] SELinux: failed to load policy [ 215.832213][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7098'. [ 216.168818][T20066] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 216.179143][T20065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7118'. [ 216.217929][T20074] SELinux: policydb version -1599557993 does not match my version range 15-35 [ 216.227237][T20074] SELinux: failed to load policy [ 216.259983][T20080] SELinux: failed to load policy [ 216.455833][T20124] netlink: 'syz.6.7129': attribute type 2 has an invalid length. [ 216.467871][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7128'. [ 216.808727][T20165] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 216.816950][T20165] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 216.870330][T20175] rdma_op ffff88811bcd4980 conn xmit_rdma 0000000000000000 [ 216.922406][T20181] netlink: 'syz.5.7154': attribute type 21 has an invalid length. [ 216.930411][T20181] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7154'. [ 217.001358][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7160'. [ 217.279911][T20226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.330619][T20226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.621191][T20265] batadv0: Device is already in use. [ 217.905658][T20300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 217.950250][T20309] macvtap0: refused to change device tx_queue_len [ 217.963287][T20311] netlink: 'syz.1.7212': attribute type 21 has an invalid length. [ 218.627619][ T10] page_pool_release_retry() stalled pool shutdown: id 87, 1 inflight 60 sec [ 219.062130][ T10] kernel read not supported for file /rfkill (pid: 10 comm: kworker/0:1) [ 219.147655][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 219.147674][ T29] audit: type=1400 audit(1763635051.632:7631): avc: denied { create } for pid=20430 comm="syz.2.7266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.193470][ T29] audit: type=1400 audit(1763635051.672:7632): avc: denied { ioctl } for pid=20430 comm="syz.2.7266" path="socket:[65659]" dev="sockfs" ino=65659 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.228846][ T7449] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.248337][T20441] __nla_validate_parse: 6 callbacks suppressed [ 219.248353][T20441] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7272'. [ 219.316019][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 219.360423][T20449] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.368136][ T29] audit: type=1400 audit(1763635051.852:7633): avc: denied { map } for pid=20446 comm="syz.7.7275" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 219.396159][T20449] vhci_hcd: invalid port number 96 [ 219.401393][T20449] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 219.479542][ T29] audit: type=1400 audit(1763635051.962:7634): avc: denied { read } for pid=20464 comm="syz.6.7283" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.502951][ T29] audit: type=1400 audit(1763635051.962:7635): avc: denied { open } for pid=20464 comm="syz.6.7283" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.526646][ T29] audit: type=1400 audit(1763635051.972:7636): avc: denied { write } for pid=20464 comm="syz.6.7283" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.549873][ T29] audit: type=1400 audit(1763635051.972:7637): avc: denied { block_suspend } for pid=20464 comm="syz.6.7283" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.589794][ T29] audit: type=1326 audit(1763635052.062:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.5.7282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 219.613477][ T29] audit: type=1326 audit(1763635052.062:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.5.7282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 219.637344][ T29] audit: type=1326 audit(1763635052.062:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.5.7282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 219.878954][T20485] block device autoloading is deprecated and will be removed. [ 220.303923][T20536] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.323029][T20536] vhci_hcd: invalid port number 96 [ 220.328350][T20536] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 220.454829][T20563] netlink: 'syz.7.7328': attribute type 3 has an invalid length. [ 220.953067][T20592] netlink: 'syz.5.7341': attribute type 4 has an invalid length. [ 220.953089][T20592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7341'. [ 221.038762][T20601] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7345'. [ 221.047932][T20601] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7345'. [ 221.143020][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7349'. [ 221.143738][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7349'. [ 221.162041][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7349'. [ 221.162356][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7349'. [ 221.267791][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.419364][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7361'. [ 221.429766][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7361'. [ 221.552572][T20667] block device autoloading is deprecated and will be removed. [ 221.908580][T20721] netlink: 'syz.6.7400': attribute type 1 has an invalid length. [ 222.306942][T20776] sch_fq: defrate 4294967295 ignored. [ 223.323664][T20887] netlink: 'syz.2.7476': attribute type 1 has an invalid length. [ 223.624154][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 223.632154][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 223.647215][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 223.656484][ T10] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 224.514264][T20957] __nla_validate_parse: 8 callbacks suppressed [ 224.514284][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7510'. [ 224.623045][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 224.623065][ T29] audit: type=1400 audit(1763635057.112:7902): avc: denied { append } for pid=20971 comm="syz.7.7513" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.678053][ T29] audit: type=1400 audit(1763635057.172:7903): avc: denied { bind } for pid=20973 comm="syz.6.7515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.678391][T20974] rdma_op ffff888110bedd80 conn xmit_rdma 0000000000000000 [ 224.742641][ T29] audit: type=1400 audit(1763635057.172:7904): avc: denied { write } for pid=20973 comm="syz.6.7515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.762315][ T29] audit: type=1326 audit(1763635057.202:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20977 comm="syz.1.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 224.786058][ T29] audit: type=1326 audit(1763635057.202:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20977 comm="syz.1.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 224.810026][ T29] audit: type=1326 audit(1763635057.202:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20977 comm="syz.1.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 224.833675][ T29] audit: type=1400 audit(1763635057.232:7908): avc: denied { relabelfrom } for pid=20979 comm="syz.5.7521" name="MPTCP" dev="sockfs" ino=66457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 224.856757][ T29] audit: type=1400 audit(1763635057.232:7909): avc: denied { mac_admin } for pid=20979 comm="syz.5.7521" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.878007][ T29] audit: type=1400 audit(1763635057.232:7910): avc: denied { relabelto } for pid=20979 comm="syz.5.7521" name="MPTCP" dev="sockfs" ino=66457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 224.920917][ T29] audit: type=1326 audit(1763635057.412:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20988 comm="syz.5.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 225.105954][T21008] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 225.236955][T21024] ALSA: seq fatal error: cannot create timer (-19) [ 225.268440][T21028] netlink: 'syz.6.7541': attribute type 6 has an invalid length. [ 225.352054][T21037] Falling back ldisc for ttyS3. [ 225.369714][T21043] block device autoloading is deprecated and will be removed. [ 225.477644][T21052] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7551'. [ 225.619527][T21063] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 225.921323][T21104] random: crng reseeded on system resumption [ 225.934823][T21104] Restarting kernel threads ... [ 225.940241][T21104] Done restarting kernel threads. [ 226.178671][T21147] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 226.188317][T21148] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 1 [ 226.197725][T21149] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 2 [ 226.204023][T21152] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 3 [ 226.239501][T21154] 9pnet_fd: Insufficient options for proto=fd [ 226.621563][T21201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7619'. [ 226.720163][T21219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21219 comm=syz.2.7628 [ 227.025169][T21247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.290550][T21286] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.367515][T21295] netlink: 'syz.7.7661': attribute type 1 has an invalid length. [ 227.390133][T21295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.690853][T21326] sctp: [Deprecated]: syz.6.7670 (pid 21326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.690853][T21326] Use struct sctp_sack_info instead [ 227.731755][T21230] Process accounting paused [ 228.052892][T21368] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 228.064505][T21370] x_tables: duplicate underflow at hook 2 [ 228.093434][T21372] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21372 comm=syz.7.7697 [ 228.106228][T21372] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21372 comm=syz.7.7697 [ 228.159086][T21377] SELinux: policydb version 1024 does not match my version range 15-35 [ 228.170885][T21377] SELinux: failed to load policy [ 228.186824][T21379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7699'. [ 228.196060][T21379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7699'. [ 228.367419][ T7450] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.704324][T21426] netlink: 'syz.2.7723': attribute type 1 has an invalid length. [ 229.484762][T21493] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7756'. [ 229.495549][T21493] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7756'. [ 229.563244][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7762'. [ 229.572298][T21504] tipc: Enabling of bearer rejected, media not registered [ 229.673226][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7771'. [ 229.682569][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 229.682583][ T29] audit: type=1400 audit(1763635062.172:8076): avc: denied { listen } for pid=21512 comm="syz.5.7766" lport=53083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.734552][ T29] audit: type=1400 audit(1763635062.202:8077): avc: denied { accept } for pid=21512 comm="syz.5.7766" lport=53083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.777888][T21526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.788637][ T29] audit: type=1326 audit(1763635062.252:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.6.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf1f749 code=0x7ffc0000 [ 229.817035][ T29] audit: type=1326 audit(1763635062.252:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.6.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf1f749 code=0x7ffc0000 [ 229.840719][ T29] audit: type=1326 audit(1763635062.262:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.6.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42aaf1f749 code=0x7ffc0000 [ 229.864494][ T29] audit: type=1326 audit(1763635062.262:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.6.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf1f749 code=0x7ffc0000 [ 229.888010][ T29] audit: type=1326 audit(1763635062.262:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.6.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf1f749 code=0x7ffc0000 [ 229.911810][ T29] audit: type=1326 audit(1763635062.262:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.6.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42aaf1f749 code=0x7ffc0000 [ 229.935363][ T29] audit: type=1326 audit(1763635062.262:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.6.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aaf1f749 code=0x7ffc0000 [ 229.959026][ T29] audit: type=1326 audit(1763635062.262:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21529 comm="syz.6.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42aaf1f749 code=0x7ffc0000 [ 229.996649][T21531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.387605][ T3568] Bluetooth: hci0: command 0x1003 tx timeout [ 230.387667][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.613421][T21549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7782'. [ 231.013185][T21575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.021032][T21575] batadv_slave_0: entered promiscuous mode [ 231.279762][T21596] netlink: 'syz.2.7803': attribute type 6 has an invalid length. [ 231.428076][T21620] xt_hashlimit: max too large, truncated to 1048576 [ 231.465574][T21628] netlink: 83992 bytes leftover after parsing attributes in process `+“[@'. [ 231.476860][T21628] netlink: zone id is out of range [ 231.482188][T21628] netlink: zone id is out of range [ 231.488280][T21628] netlink: zone id is out of range [ 231.488324][T21622] hub 6-0:1.0: USB hub found [ 231.488878][T21622] hub 6-0:1.0: 8 ports detected [ 231.493501][T21628] netlink: zone id is out of range [ 231.508625][T21628] netlink: zone id is out of range [ 231.513881][T21628] netlink: zone id is out of range [ 231.519066][T21628] netlink: zone id is out of range [ 231.524281][T21628] netlink: zone id is out of range [ 231.661311][ T3424] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 231.669156][ T3424] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 231.682832][ T3424] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x3 [ 231.701009][ T3424] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 231.778192][T21663] ip6gre0: Caught tx_queue_len zero misconfig [ 231.804049][T21663] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 231.988344][T21703] 9pnet_fd: Insufficient options for proto=fd [ 232.012792][T21709] batadv_slave_1: entered promiscuous mode [ 232.019484][T21709] batadv_slave_1: left promiscuous mode [ 232.040800][T21713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7860'. [ 232.151165][T21729] tipc: Started in network mode [ 232.156278][T21729] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 232.165773][T21729] tipc: Enabled bearer , priority 10 [ 232.187713][T21731] netlink: 'syz.1.7870': attribute type 4 has an invalid length. [ 232.287907][T21739] SELinux: ebitmap start bit (7341184) is beyond the end of the bitmap (1472) [ 232.297356][T21739] SELinux: failed to load policy [ 232.638737][T21785] netlink: 'syz.7.7896': attribute type 12 has an invalid length. [ 233.105427][T21832] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.136659][T21835] netlink: 35 bytes leftover after parsing attributes in process `syz.2.7919'. [ 233.145747][T21835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7919'. [ 233.170492][T21839] tipc: Started in network mode [ 233.175487][T21839] tipc: Node identity ac14140f, cluster identity 4711 [ 233.182980][T21839] tipc: New replicast peer: 255.255.255.83 [ 233.189099][T21839] tipc: Enabled bearer , priority 10 [ 233.287628][ T3379] tipc: Node number set to 4269801494 [ 233.368683][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7933'. [ 233.448138][T21846] ------------[ cut here ]------------ [ 233.453772][T21846] WARNING: CPU: 1 PID: 21846 at mm/page_alloc.c:5154 __alloc_frozen_pages_noprof+0x218/0x360 [ 233.464238][T21846] Modules linked in: [ 233.468233][T21846] CPU: 1 UID: 0 PID: 21846 Comm: syz.6.7922 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.479708][T21846] Tainted: [W]=WARN [ 233.483532][T21846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.493664][T21846] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 233.500359][T21846] Code: 83 3d 83 f5 4f 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 4f f3 4b 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 233.520151][T21846] RSP: 0018:ffffc90000e23b90 EFLAGS: 00010246 [ 233.526272][T21846] RAX: e889071d2f217b00 RBX: 0000000000000013 RCX: 0000000000000000 [ 233.534429][T21846] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 233.542555][T21846] RBP: 0000000000000000 R08: 0001ffff88ea8ff5 R09: 0000000000000000 [ 233.550581][T21846] R10: 0000000000000006 R11: 0000000000000002 R12: ffffffff88ea8ff4 [ 233.558816][T21846] R13: 0000000000000001 R14: 0000000000040cc0 R15: 0000000000000000 [ 233.566819][T21846] FS: 00007f42a997f6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 233.575866][T21846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.582539][T21846] CR2: 0000001b35020ff8 CR3: 00000001248f0000 CR4: 00000000003506f0 [ 233.590818][T21846] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.598968][T21846] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 233.607088][T21846] Call Trace: [ 233.610418][T21846] [ 233.613415][T21846] alloc_pages_mpol+0xb3/0x260 [ 233.618211][T21846] ? __rcu_read_unlock+0x4f/0x70 [ 233.623202][T21846] alloc_frozen_pages_noprof+0x90/0x110 [ 233.628784][T21846] ___kmalloc_large_node+0x52/0x100 [ 233.634006][T21846] __kmalloc_large_node_noprof+0x16/0xa0 [ 233.639703][T21846] __kmalloc_noprof+0x348/0x570 [ 233.644667][T21846] ? raw_ioctl+0xfb8/0x1d00 [ 233.649289][T21846] raw_ioctl+0xfb8/0x1d00 [ 233.653730][T21846] ? ioctl_has_perm+0x257/0x2a0 [ 233.658687][T21846] ? do_vfs_ioctl+0x866/0xe10 [ 233.663457][T21846] ? selinux_file_ioctl+0x308/0x3a0 [ 233.668960][T21846] ? __fget_files+0x184/0x1c0 [ 233.673751][T21846] ? __pfx_raw_ioctl+0x10/0x10 [ 233.678603][T21846] __se_sys_ioctl+0xce/0x140 [ 233.683266][T21846] __x64_sys_ioctl+0x43/0x50 [ 233.687893][T21846] x64_sys_call+0x1816/0x3000 [ 233.692615][T21846] do_syscall_64+0xd2/0x200 [ 233.697133][T21846] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.703344][T21846] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 233.709602][T21846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.715539][T21846] RIP: 0033:0x7f42aaf1f749 [ 233.720082][T21846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.739733][T21846] RSP: 002b:00007f42a997f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.748274][T21846] RAX: ffffffffffffffda RBX: 00007f42ab175fa0 RCX: 00007f42aaf1f749 [ 233.756252][T21846] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000003 [ 233.764251][T21846] RBP: 00007f42aafa3f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.772245][T21846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.780278][T21846] R13: 00007f42ab176038 R14: 00007f42ab175fa0 R15: 00007ffd82d1fea8 [ 233.788299][T21846] [ 233.791323][T21846] ---[ end trace 0000000000000000 ]--- [ 233.947269][T21889] sit0: Caught tx_queue_len zero misconfig [ 234.312528][ T3403] tipc: Node number set to 2886997007 [ 234.368754][T21910] vhci_hcd: invalid port number 96 [ 234.373970][T21910] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 234.608919][T21943] vhci_hcd: invalid port number 96 [ 234.614185][T21943] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 234.852846][T21964] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 234.852846][T21964] program syz.6.7981 not setting count and/or reply_len properly [ 234.932935][T21972] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 234.986955][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 234.986972][ T29] audit: type=1326 audit(1763635067.472:8261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 235.021261][ T29] audit: type=1326 audit(1763635067.512:8262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 235.044905][ T29] audit: type=1326 audit(1763635067.512:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 235.068509][ T29] audit: type=1326 audit(1763635067.512:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 235.092036][ T29] audit: type=1326 audit(1763635067.512:8265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 235.115840][ T29] audit: type=1326 audit(1763635067.512:8266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 235.139525][ T29] audit: type=1326 audit(1763635067.512:8267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 235.163443][ T29] audit: type=1326 audit(1763635067.512:8268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef211f749 code=0x7ffc0000 [ 235.299340][T21997] vhci_hcd: invalid port number 96 [ 235.304505][T21997] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 235.361651][ T29] audit: type=1326 audit(1763635067.852:8269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.5.7999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 235.399168][ T29] audit: type=1326 audit(1763635067.852:8270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.5.7999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 235.474221][T22013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.846071][T22045] syzkaller1: entered promiscuous mode [ 235.851615][T22045] syzkaller1: entered allmulticast mode [ 236.511288][T22083] netlink: 'syz.6.8035': attribute type 29 has an invalid length. [ 236.528677][T22083] netlink: 'syz.6.8035': attribute type 29 has an invalid length. [ 236.537251][T22083] netlink: 500 bytes leftover after parsing attributes in process `syz.6.8035'. [ 236.834696][T22108] x_tables: duplicate underflow at hook 2 [ 236.973712][T22123] SELinux: failed to load policy [ 237.130772][T22145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8065'. [ 237.808476][T22187] syzkaller1: entered promiscuous mode [ 237.814113][T22187] syzkaller1: entered allmulticast mode [ 238.357181][ T7449] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.405491][T22204] netlink: 'syz.5.8093': attribute type 29 has an invalid length. [ 238.428725][T22204] netlink: 'syz.5.8093': attribute type 29 has an invalid length. [ 238.448500][T22204] netlink: 500 bytes leftover after parsing attributes in process `syz.5.8093'. [ 240.388413][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.494716][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 240.494732][ T29] audit: type=1400 audit(1763635072.980:8322): avc: denied { create } for pid=22213 comm="syz.2.8110" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 240.578933][T22219] netlink: 'syz.5.8100': attribute type 1 has an invalid length. [ 240.585094][ T29] audit: type=1326 audit(1763635073.010:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.2.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 240.610649][ T29] audit: type=1326 audit(1763635073.010:8324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.2.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 240.634388][ T29] audit: type=1400 audit(1763635073.010:8325): avc: denied { write } for pid=22213 comm="syz.2.8110" name="file0" dev="tmpfs" ino=8830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 240.657192][ T29] audit: type=1326 audit(1763635073.010:8326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.2.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 240.680816][ T29] audit: type=1400 audit(1763635073.030:8327): avc: denied { unlink } for pid=3324 comm="syz-executor" name="file0" dev="tmpfs" ino=8830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 240.968054][T22236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8107'. [ 240.976980][T22236] tipc: Enabling of bearer rejected, media not registered [ 241.063615][T22242] netlink: 'syz.5.8113': attribute type 27 has an invalid length. [ 241.128333][ T29] audit: type=1326 audit(1763635073.600:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22243 comm="syz.5.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 241.152372][ T29] audit: type=1326 audit(1763635073.600:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22243 comm="syz.5.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 241.175993][ T29] audit: type=1326 audit(1763635073.600:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22243 comm="syz.5.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1555ff749 code=0x7ffc0000 [ 241.301725][ T29] audit: type=1326 audit(1763635073.790:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22247 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 241.388363][T22252] SELinux: failed to load policy [ 241.410121][T22254] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 241.830357][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8132'. [ 241.830391][T22279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8132'. [ 241.833091][T22279] geneve4: entered promiscuous mode [ 241.833119][T22279] geneve4: entered allmulticast mode [ 242.968369][T22296] hub 6-0:1.0: USB hub found [ 242.973180][T22298] SELinux: policydb version 704780991 does not match my version range 15-35 [ 242.987917][T22296] hub 6-0:1.0: 8 ports detected [ 242.998074][T22298] SELinux: failed to load policy [ 243.053104][T22300] xt_hashlimit: max too large, truncated to 1048576 [ 243.741560][T22342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8161'. [ 243.880256][T22350] sctp: [Deprecated]: syz.2.8165 (pid 22350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.880256][T22350] Use struct sctp_sack_info instead [ 244.090185][T22360] 9pnet_fd: Insufficient options for proto=fd [ 244.256708][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8171'. [ 244.772509][T22393] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 244.817937][T22393] SELinux: failed to load policy [ 246.218628][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 246.218647][ T29] audit: type=1400 audit(1763635078.710:8395): avc: denied { write } for pid=22450 comm="syz.5.8212" name="tcp6" dev="proc" ino=4026532744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 246.477086][T22458] syzkaller1: entered promiscuous mode [ 246.482742][T22458] syzkaller1: entered allmulticast mode [ 246.681614][T22466] SELinux: Context system_u:object_r:dbusd_exec_t:s0 is not valid (left unmapped). [ 246.687962][ T29] audit: type=1400 audit(1763635079.170:8396): avc: denied { relabelfrom } for pid=22465 comm="syz.5.8218" name="" dev="pipefs" ino=71665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 246.767907][ T29] audit: type=1400 audit(1763635079.180:8397): avc: denied { relabelto } for pid=22465 comm="syz.5.8218" name="" dev="pipefs" ino=71665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dbusd_exec_t:s0" [ 246.977612][ T29] audit: type=1400 audit(1763635079.450:8398): avc: denied { mount } for pid=22479 comm="syz.5.8225" name="/" dev="hugetlbfs" ino=72737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 247.001061][ T29] audit: type=1400 audit(1763635079.460:8399): avc: denied { unmount } for pid=4767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 247.041730][ T29] audit: type=1400 audit(1763635079.460:8400): avc: denied { setopt } for pid=22481 comm="syz.5.8226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.408142][ T29] audit: type=1400 audit(1763635079.880:8401): avc: denied { setopt } for pid=22504 comm="syz.2.8236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 247.532851][T22513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8240'. [ 247.610825][ T29] audit: type=1400 audit(1763635080.100:8402): avc: denied { ioctl } for pid=22514 comm="syz.2.8241" path="socket:[72816]" dev="sockfs" ino=72816 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.852107][ T29] audit: type=1326 audit(1763635080.340:8403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.2.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 247.938657][T22522] C: renamed from team_slave_0 (while UP) [ 247.944598][ T29] audit: type=1326 audit(1763635080.340:8404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.2.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 247.979478][T22522] netlink: 'syz.2.8244': attribute type 3 has an invalid length. [ 247.987240][T22522] netlink: 'syz.2.8244': attribute type 1 has an invalid length. [ 247.995147][T22522] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8244'. [ 248.004370][T22522] net_ratelimit: 346 callbacks suppressed [ 248.004433][T22522] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 249.773639][T22610] netlink: 'syz.2.8286': attribute type 2 has an invalid length. [ 249.781502][T22610] netlink: 23 bytes leftover after parsing attributes in process `syz.2.8286'. [ 249.916884][ T3403] kernel read not supported for file bpf-prog (pid: 3403 comm: kworker/0:4) [ 250.079175][T22628] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 250.102087][T22629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.907632][ T7449] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.917468][ T7449] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.962730][T22673] netlink: 2184 bytes leftover after parsing attributes in process `syz.2.8312'. [ 250.972084][T22673] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8312'. [ 251.029614][ T7449] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.039707][ T7449] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.123534][ T7449] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.133426][ T7449] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.241569][ T7449] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.251568][ T7449] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.290036][T22654] chnl_net:caif_netlink_parms(): no params data found [ 251.344393][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 251.344413][ T29] audit: type=1400 audit(1763635083.830:8488): avc: denied { create } for pid=22692 comm="syz.2.8320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.404904][ T29] audit: type=1400 audit(1763635083.860:8489): avc: denied { write } for pid=22692 comm="syz.2.8320" path="socket:[72450]" dev="sockfs" ino=72450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.463930][ T29] audit: type=1326 audit(1763635083.950:8490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.2.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 251.487677][ T29] audit: type=1326 audit(1763635083.950:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.2.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 251.512558][ T29] audit: type=1326 audit(1763635083.950:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.2.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 251.536788][ T29] audit: type=1326 audit(1763635083.950:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.2.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 251.560549][ T29] audit: type=1326 audit(1763635083.950:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.2.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 251.584153][ T29] audit: type=1326 audit(1763635083.950:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.2.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 251.608117][ T29] audit: type=1326 audit(1763635083.950:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.2.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 251.631617][ T29] audit: type=1326 audit(1763635083.950:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.2.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 251.682039][T22654] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.689280][T22654] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.703788][T22654] bridge_slave_0: entered allmulticast mode [ 251.725269][T22654] bridge_slave_0: entered promiscuous mode [ 251.737135][T22654] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.744390][T22654] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.764103][T22654] bridge_slave_1: entered allmulticast mode [ 251.779207][T22654] bridge_slave_1: entered promiscuous mode [ 251.867430][T22654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.888849][ T7449] bridge_slave_1: left allmulticast mode [ 251.894527][ T7449] bridge_slave_1: left promiscuous mode [ 251.900366][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.911874][ T7449] bridge_slave_0: left allmulticast mode [ 251.917565][ T7449] bridge_slave_0: left promiscuous mode [ 251.923462][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.310374][ T7449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.330041][ T7449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.349215][ T7449] bond0 (unregistering): Released all slaves [ 252.369431][T22654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.428864][ T7449] IPVS: stopping master sync thread 18222 ... [ 252.435082][ T7449] IPVS: stopping master sync thread 18221 ... [ 252.442770][ T7449] IPVS: stopping master sync thread 18220 ... [ 252.453221][T22654] team0: Port device team_slave_0 added [ 252.459129][ T7449] IPVS: stopping master sync thread 18219 ... [ 252.465741][ T7449] IPVS: stopping backup sync thread 21152 ... [ 252.474551][T22654] team0: Port device team_slave_1 added [ 252.481354][ T7449] IPVS: stopping backup sync thread 21149 ... [ 252.492847][ T7449] IPVS: stopping backup sync thread 21148 ... [ 252.500835][ T7449] IPVS: stopping backup sync thread 21147 ... [ 252.524259][T22654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.531322][T22654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.558352][T22654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.599075][T22654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.606084][T22654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.632396][T22654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.660028][ T7449] hsr_slave_0: left promiscuous mode [ 252.665846][ T7449] hsr_slave_1: left promiscuous mode [ 252.688811][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.696327][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.715209][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.722792][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.748785][ T7449] veth1_macvtap: left promiscuous mode [ 252.761039][ T7449] veth0_macvtap: left promiscuous mode [ 252.776559][ T7449] veth1_vlan: left promiscuous mode [ 252.782161][ T7449] veth0_vlan: left promiscuous mode [ 252.941676][T22765] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 252.946877][ T7449] team0 (unregistering): Port device team_slave_1 removed [ 252.971551][ T7449] team0 (unregistering): Port device team_slave_0 removed [ 253.026160][ T7449] team0 (unregistering): Port device dummy0 removed [ 253.163219][T22654] hsr_slave_0: entered promiscuous mode [ 253.193024][T22654] hsr_slave_1: entered promiscuous mode [ 253.218346][T22654] debugfs: 'hsr0' already exists in 'hsr' [ 253.224110][T22654] Cannot create hsr debugfs directory [ 253.329563][ T7449] IPVS: stop unused estimator thread 0... [ 253.351841][ T3424] IPVS: starting estimator thread 0... [ 253.376897][T22790] block device autoloading is deprecated and will be removed. [ 253.429677][T22734] chnl_net:caif_netlink_parms(): no params data found [ 253.474002][T22795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8357'. [ 253.483064][T22795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8357'. [ 253.488722][T22788] IPVS: using max 2160 ests per chain, 108000 per kthread [ 253.524943][ T7449] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.534850][ T7449] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.618127][T22808] loop5: detected capacity change from 0 to 512 [ 253.641762][ T7449] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.651934][ T7449] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.664579][T22808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.678652][T22654] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 253.696800][T22808] ext4 filesystem being mounted at /1629/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.738085][T22654] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 253.752151][ T7449] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.762113][ T7449] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.780480][ T4767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.793642][T22734] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.800847][T22734] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.818001][T22734] bridge_slave_0: entered allmulticast mode [ 253.824465][T22734] bridge_slave_0: entered promiscuous mode [ 253.835239][T22734] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.842532][T22734] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.860143][T22734] bridge_slave_1: entered allmulticast mode [ 253.868587][T22734] bridge_slave_1: entered promiscuous mode [ 253.874848][T22654] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 253.896933][T22654] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 253.915056][ T7449] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.925057][ T7449] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.960124][T22734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.972915][T22734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.982722][T22752] chnl_net:caif_netlink_parms(): no params data found [ 254.037791][T22734] team0: Port device team_slave_0 added [ 254.057089][T22734] team0: Port device team_slave_1 added [ 254.091479][T22734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.098665][T22734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.124627][T22734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.153662][T22734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.160859][T22734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.186943][T22734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.276469][T22752] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.283701][T22752] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.291187][T22752] bridge_slave_0: entered allmulticast mode [ 254.297932][T22752] bridge_slave_0: entered promiscuous mode [ 254.314164][T22734] hsr_slave_0: entered promiscuous mode [ 254.321014][T22734] hsr_slave_1: entered promiscuous mode [ 254.327343][T22734] debugfs: 'hsr0' already exists in 'hsr' [ 254.333139][T22734] Cannot create hsr debugfs directory [ 254.352013][T22752] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.359230][T22752] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.366733][T22752] bridge_slave_1: entered allmulticast mode [ 254.373502][T22752] bridge_slave_1: entered promiscuous mode [ 254.395268][T22752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.415258][T22752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.439168][ T7449] bridge_slave_1: left allmulticast mode [ 254.444904][ T7449] bridge_slave_1: left promiscuous mode [ 254.450749][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.463382][T22865] loop5: detected capacity change from 0 to 512 [ 254.470922][T22865] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 254.472886][ T7449] bridge_slave_0: left allmulticast mode [ 254.486679][ T7449] bridge_slave_0: left promiscuous mode [ 254.492432][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.494086][T22865] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.8382: invalid indirect mapped block 4294967295 (level 0) [ 254.514136][T22865] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.8382: invalid indirect mapped block 4294967295 (level 1) [ 254.528795][T22865] EXT4-fs (loop5): 1 orphan inode deleted [ 254.534555][T22865] EXT4-fs (loop5): 1 truncate cleaned up [ 254.540845][T22865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.598858][T22865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.699481][ T7471] smc: removing ib device syz2 [ 254.704688][ T7449] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.714009][ T7449] bond_slave_0: left promiscuous mode [ 254.721539][ T7449] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.730658][ T7449] bond_slave_1: left promiscuous mode [ 254.737012][ T7449] .` (unregistering): Released all slaves [ 254.745898][ T7449] bond0 (unregistering): Released all slaves [ 254.769672][T22752] team0: Port device team_slave_0 added [ 254.807207][T22752] team0: Port device team_slave_1 added [ 254.888373][T22752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.895449][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.921686][T22752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.964856][T22752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.972010][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.998692][T22752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.044112][T22654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.076793][T22654] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.106767][T22752] hsr_slave_0: entered promiscuous mode [ 255.113175][T22752] hsr_slave_1: entered promiscuous mode [ 255.119480][T22752] debugfs: 'hsr0' already exists in 'hsr' [ 255.125340][T22752] Cannot create hsr debugfs directory [ 255.148831][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.156002][ T7463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.165972][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.173125][ T7463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.215829][ T7449] hsr_slave_0: left promiscuous mode [ 255.222174][ T7449] hsr_slave_1: left promiscuous mode [ 255.227958][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.235496][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.249037][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.256477][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.286363][ T7449] team_slave_0: left promiscuous mode [ 255.291852][ T7449] team_slave_1: left promiscuous mode [ 255.297627][ T7449] veth1_macvtap: left promiscuous mode [ 255.303512][ T7449] veth0_macvtap: left promiscuous mode [ 255.397218][ T7449] team0 (unregistering): Port device team_slave_1 removed [ 255.407606][ T7449] team0 (unregistering): Port device team_slave_0 removed [ 255.438407][ T7449] team0 (unregistering): Port device dummy0 removed [ 255.454816][T22734] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 255.481052][T22734] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 255.503004][T22734] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 255.516969][T22654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.527435][T22654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.553231][T22734] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 255.618094][T22654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.660581][T22734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.672154][T22734] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.684124][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.691350][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.722031][T22734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.732627][T22734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.754842][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.762076][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.861711][T22734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.888608][T22654] veth0_vlan: entered promiscuous mode [ 255.896883][T22654] veth1_vlan: entered promiscuous mode [ 255.956432][T22752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.976710][T22654] veth0_macvtap: entered promiscuous mode [ 255.984089][T22752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.993120][T22752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.009941][T22654] veth1_macvtap: entered promiscuous mode [ 256.019360][T22752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.049173][T22654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.068314][T22654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.091386][ T7471] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.110898][ T7471] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.125925][ T7471] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.137492][T22752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.145339][ T7471] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.191412][T22734] veth0_vlan: entered promiscuous mode [ 256.207060][T22752] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.218789][T22734] veth1_vlan: entered promiscuous mode [ 256.229092][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.236409][ T7467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.265723][T23011] loop5: detected capacity change from 0 to 256 [ 256.275225][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.282425][ T7449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.325686][T22734] veth0_macvtap: entered promiscuous mode [ 256.336934][T22734] veth1_macvtap: entered promiscuous mode [ 256.365535][T22734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.379869][T22734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.420058][T23025] team0: Port device dummy0 removed [ 256.448409][T23025] .`: (slave batadv0): Releasing backup interface [ 256.465572][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 256.465590][ T29] audit: type=1326 audit(1763635088.950:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.8.8436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.471796][T23025] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.478333][ T29] audit: type=1326 audit(1763635088.950:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.8.8436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.540412][T23025] bridge_slave_1: left allmulticast mode [ 256.542020][ T29] audit: type=1326 audit(1763635088.990:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.8.8436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.546103][T23025] bridge_slave_1: left promiscuous mode [ 256.569944][ T29] audit: type=1326 audit(1763635088.990:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.569982][ T29] audit: type=1326 audit(1763635088.990:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.570045][ T29] audit: type=1326 audit(1763635088.990:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.575790][T23025] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.599336][ T29] audit: type=1326 audit(1763635088.990:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.680776][ T29] audit: type=1326 audit(1763635088.990:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.704849][ T29] audit: type=1326 audit(1763635088.990:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.728602][ T29] audit: type=1326 audit(1763635089.010:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1dbef749 code=0x7ffc0000 [ 256.754825][T23025] .`: (slave bond_slave_0): Releasing backup interface [ 256.772143][T23025] .`: (slave bond_slave_1): Releasing backup interface [ 256.800073][T23025] team0: Port device C removed [ 256.814129][T23025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.821669][T23025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.830662][T23025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.838228][T23025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.849360][T23025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.876096][ T7498] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.919759][ T7498] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.929534][ T7498] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.938914][ T7498] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.986091][T23052] bridge1: entered promiscuous mode [ 256.991707][T23052] bridge1: entered allmulticast mode [ 257.022664][T22752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.158828][T23081] syzkaller1: entered promiscuous mode [ 257.164380][T23081] syzkaller1: entered allmulticast mode [ 257.216377][T22752] veth0_vlan: entered promiscuous mode [ 257.239423][T22752] veth1_vlan: entered promiscuous mode [ 257.276614][T22752] veth0_macvtap: entered promiscuous mode [ 257.284186][T23091] netlink: 'syz.5.8461': attribute type 1 has an invalid length. [ 257.292126][T23091] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8461'. [ 257.292735][T22752] veth1_macvtap: entered promiscuous mode [ 257.320881][T22752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.334728][T22752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.355115][ T7498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.377506][ T7498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.411600][ T7498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.435331][ T7498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.493188][T23118] loop5: detected capacity change from 0 to 512 [ 257.499801][T23117] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.507133][T23117] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.529508][T23118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.547631][T23118] ext4 filesystem being mounted at /1667/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.564734][T23118] netlink: 'syz.5.8470': attribute type 2 has an invalid length. [ 257.572700][T23118] netlink: 23 bytes leftover after parsing attributes in process `syz.5.8470'. [ 257.589566][ T3408] IPVS: starting estimator thread 0... [ 257.614029][ T4767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.688469][T23131] IPVS: using max 2352 ests per chain, 117600 per kthread [ 257.711931][T23149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8484'. [ 257.719797][T23151] loop3: detected capacity change from 0 to 128 [ 257.737824][T23149] Process accounting resumed [ 257.751056][T23151] syz.3.8485: attempt to access beyond end of device [ 257.751056][T23151] loop3: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 257.764584][T23151] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 257.773756][T23151] syz.3.8485: attempt to access beyond end of device [ 257.773756][T23151] loop3: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 257.775167][T23155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8487'. [ 257.787382][T23151] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 257.805329][T23151] syz.3.8485: attempt to access beyond end of device [ 257.805329][T23151] loop3: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 257.818875][T23151] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 257.846994][T23151] syz.3.8485: attempt to access beyond end of device [ 257.846994][T23151] loop3: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 257.860641][T23151] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 257.885866][T23151] syz.3.8485: attempt to access beyond end of device [ 257.885866][T23151] loop3: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 257.899412][T23151] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 258.426422][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8533'. [ 258.671083][T23293] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 258.694602][T23293] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.702087][T23293] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.711315][T23293] bridge0: entered allmulticast mode [ 258.717452][T23299] x_tables: unsorted underflow at hook 2 [ 258.735339][T23299] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 259.108305][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8579'. [ 259.258400][T23363] tipc: Started in network mode [ 259.263433][T23363] tipc: Node identity fffffff8, cluster identity 6 [ 259.270118][T23363] tipc: Node number set to 4294967288 [ 259.280255][T23363] tipc: Cannot configure node identity twice [ 259.365567][T23373] netlink: 'syz.5.8591': attribute type 1 has an invalid length. [ 259.463012][T23389] SELinux: policydb table sizes (4376,4) do not match mine (8,7) [ 259.487620][T23389] SELinux: failed to load policy [ 259.566307][T23406] netlink: 'syz.9.8607': attribute type 1 has an invalid length. [ 259.574198][T23406] netlink: 'syz.9.8607': attribute type 2 has an invalid length. [ 259.578934][T23409] netlink: 536 bytes leftover after parsing attributes in process `syz.8.8609'. [ 259.592645][T23407] netlink: 'syz.5.8608': attribute type 3 has an invalid length. [ 259.601661][T23409] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8609'. [ 259.622832][T23411] rdma_op ffff88810face980 conn xmit_rdma 0000000000000000 [ 259.805910][T23437] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 259.990212][T23462] 9pnet: Could not find request transport: r [ 260.153175][T23480] 9pnet: Could not find request transport: f [ 260.269768][T23499] netlink: 'syz.9.8652': attribute type 3 has an invalid length. [ 260.382553][T23513] Invalid ELF header magic: != ELF [ 260.419438][T23525] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 260.508646][ T7520] Bluetooth: hci1: Frame reassembly failed (-84) [ 260.549858][T23543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8673'. [ 260.559214][T23543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8673'. [ 260.581784][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8675'. [ 260.593598][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8675'. [ 260.646811][T23555] sg_write: data in/out 705/908 bytes for SCSI command 0x9a-- guessing data in; [ 260.646811][T23555] program syz.9.8679 not setting count and/or reply_len properly [ 261.477538][T23641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8718'. [ 261.486631][T23641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8718'. [ 261.529961][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 261.529980][ T29] audit: type=1400 audit(1763635094.020:8921): avc: denied { map } for pid=23643 comm="syz.3.8719" path="socket:[77789]" dev="sockfs" ino=77789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.563084][T23647] netlink: 'syz.9.8721': attribute type 6 has an invalid length. [ 261.578062][ T29] audit: type=1400 audit(1763635094.020:8922): avc: denied { read } for pid=23643 comm="syz.3.8719" path="socket:[77789]" dev="sockfs" ino=77789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.619880][ T29] audit: type=1400 audit(1763635094.110:8923): avc: denied { setopt } for pid=23650 comm="syz.9.8723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.649331][ T29] audit: type=1400 audit(1763635094.130:8924): avc: denied { bind } for pid=23650 comm="syz.9.8723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.676513][ T29] audit: type=1400 audit(1763635094.160:8925): avc: denied { connect } for pid=23654 comm="syz.9.8726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.713520][ T29] audit: type=1326 audit(1763635094.200:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz.3.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c995f749 code=0x7ffc0000 [ 261.737251][ T29] audit: type=1326 audit(1763635094.200:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz.3.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c995f749 code=0x7ffc0000 [ 261.763115][ T29] audit: type=1326 audit(1763635094.200:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz.3.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50c995f749 code=0x7ffc0000 [ 261.786841][ T29] audit: type=1326 audit(1763635094.200:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz.3.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c995f749 code=0x7ffc0000 [ 261.810922][ T29] audit: type=1326 audit(1763635094.200:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz.3.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c995f749 code=0x7ffc0000 [ 261.922324][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8735'. [ 261.931460][T23679] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 262.038895][T23691] binfmt_misc: register: failed to install interpreter file ./file0 [ 262.116665][T23698] IPv6: Can't replace route, no match found [ 262.468022][T13742] Bluetooth: hci0: command 0x1003 tx timeout [ 262.468907][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.548220][ T3568] Bluetooth: hci1: command 0x1003 tx timeout [ 262.550517][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 262.592550][T23744] syzkaller1: entered promiscuous mode [ 262.598378][T23744] syzkaller1: entered allmulticast mode [ 262.723126][ T7467] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.949642][T23785] netlink: 'syz.3.8787': attribute type 3 has an invalid length. [ 264.479520][T23915] atomic_op ffff8881185d6928 conn xmit_atomic 0000000000000000 [ 264.599604][T23937] SELinux: failed to load policy [ 264.700232][T23955] block device autoloading is deprecated and will be removed. [ 264.783290][T23963] __nla_validate_parse: 3 callbacks suppressed [ 264.783306][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8864'. [ 264.788936][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.790071][T23963] netlink: 'syz.8.8864': attribute type 11 has an invalid length. [ 264.812609][T23963] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8864'. [ 264.936925][ T7449] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.025665][T23998] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 265.290376][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8891'. [ 265.299493][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8891'. [ 265.328071][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8891'. [ 265.522240][T24036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.571823][T24044] syz.5.8899 (24044): /proc/24042/oom_adj is deprecated, please use /proc/24042/oom_score_adj instead. [ 265.775997][T24068] netlink: 'syz.9.8912': attribute type 12 has an invalid length. [ 266.060355][T24079] SELinux: policydb version 0 does not match my version range 15-35 [ 266.069365][T24079] SELinux: failed to load policy [ 266.201366][T24006] syz.2.8884 (24006) used greatest stack depth: 6184 bytes left [ 266.277488][T24092] tipc: Started in network mode [ 266.282489][T24092] tipc: Node identity ac14140f, cluster identity 4711 [ 266.301331][T24092] tipc: New replicast peer: 255.255.255.83 [ 266.307242][T24092] tipc: Enabled bearer , priority 10 [ 266.392845][T24100] SELinux: ebitmap start bit (7340416) is beyond the end of the bitmap (1472) [ 266.402392][T24100] SELinux: failed to load policy [ 266.583531][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 266.583546][ T29] audit: type=1400 audit(1763635099.070:9281): avc: denied { read } for pid=24122 comm="syz.5.8935" lport=47169 faddr=fc02::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 266.591096][T24130] syzkaller1: entered promiscuous mode [ 266.613101][ T29] audit: type=1400 audit(1763635099.080:9282): avc: denied { ioctl } for pid=24129 comm="syz.2.8939" path="socket:[79590]" dev="sockfs" ino=79590 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 266.618267][T24130] syzkaller1: entered allmulticast mode [ 266.850746][ T29] audit: type=1400 audit(1763635099.340:9283): avc: denied { create } for pid=24139 comm="syz.2.8942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.871055][ T29] audit: type=1400 audit(1763635099.340:9284): avc: denied { bind } for pid=24139 comm="syz.2.8942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.894011][T24144] openvswitch: netlink: Missing key (keys=40, expected=80) [ 266.923642][ T29] audit: type=1326 audit(1763635099.410:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24148 comm="syz.2.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 266.948653][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 266.954817][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 266.981301][ T29] audit: type=1326 audit(1763635099.430:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24148 comm="syz.2.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5e76bef749 code=0x7ffc0000 [ 267.004876][ T29] audit: type=1326 audit(1763635099.430:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24148 comm="syz.2.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e76bef783 code=0x7ffc0000 [ 267.028446][ T29] audit: type=1326 audit(1763635099.440:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24148 comm="syz.2.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e76bee1ff code=0x7ffc0000 [ 267.051839][ T29] audit: type=1326 audit(1763635099.440:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24148 comm="syz.2.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5e76bef7d7 code=0x7ffc0000 [ 267.075317][ T29] audit: type=1326 audit(1763635099.440:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24148 comm="syz.2.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e76bedf90 code=0x7ffc0000 [ 267.317988][ T10] tipc: Node number set to 2886997007 [ 267.440588][T24196] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8969'. [ 267.678192][T24213] 8021q: adding VLAN 0 to HW filter on device .` [ 267.714862][T24213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.828145][ T3408] ================================================================== [ 267.836261][ T3408] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 267.843289][ T3408] [ 267.845653][ T3408] read-write to 0xffff888237d29de4 of 4 bytes by task 3424 on cpu 1: [ 267.853708][ T3408] wq_worker_running+0x95/0x120 [ 267.858557][ T3408] schedule_timeout+0xb7/0x170 [ 267.863333][ T3408] msleep+0x50/0x90 [ 267.867149][ T3408] nsim_fib_event_work+0x42e6/0x4790 [ 267.872438][ T3408] process_scheduled_works+0x4ce/0x9d0 [ 267.877910][ T3408] worker_thread+0x582/0x770 [ 267.882497][ T3408] kthread+0x489/0x510 [ 267.886571][ T3408] ret_from_fork+0x122/0x1b0 [ 267.891162][ T3408] ret_from_fork_asm+0x1a/0x30 [ 267.895930][ T3408] [ 267.898337][ T3408] read to 0xffff888237d29de4 of 4 bytes by task 3408 on cpu 0: [ 267.905909][ T3408] kick_pool+0x49/0x2d0 [ 267.910071][ T3408] __queue_work+0x8cb/0xb50 [ 267.914577][ T3408] queue_work_on+0xd1/0x160 [ 267.919084][ T3408] wg_packet_encrypt_worker+0xc0a/0xe10 [ 267.924634][ T3408] process_scheduled_works+0x4ce/0x9d0 [ 267.930113][ T3408] worker_thread+0x582/0x770 [ 267.934712][ T3408] kthread+0x489/0x510 [ 267.938811][ T3408] ret_from_fork+0x122/0x1b0 [ 267.943412][ T3408] ret_from_fork_asm+0x1a/0x30 [ 267.948185][ T3408] [ 267.950511][ T3408] value changed: 0x00000000 -> 0x00000001 [ 267.956222][ T3408] [ 267.958539][ T3408] Reported by Kernel Concurrency Sanitizer on: [ 267.964689][ T3408] CPU: 0 UID: 0 PID: 3408 Comm: kworker/0:5 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 267.976058][ T3408] Tainted: [W]=WARN [ 267.979856][ T3408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.989912][ T3408] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 267.996443][ T3408] ================================================================== [ 276.181682][ T7467] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.240787][ T7467] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.280722][ T7467] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.350392][ T7467] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.402275][ T7467] bridge_slave_1: left allmulticast mode [ 276.407963][ T7467] bridge_slave_1: left promiscuous mode [ 276.413703][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.421593][ T7467] bridge_slave_0: left allmulticast mode [ 276.427292][ T7467] bridge_slave_0: left promiscuous mode [ 276.433026][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.510536][ T7467] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.519998][ T7467] .` (unregistering): Released all slaves [ 276.528465][ T7467] bond1 (unregistering): Released all slaves [ 276.559872][ T7467] tipc: Disabling bearer [ 276.564888][ T7467] tipc: Left network mode [ 276.573590][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.581105][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.588809][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.596236][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.606566][ T7467] veth1_macvtap: left promiscuous mode [ 276.612182][ T7467] veth0_macvtap: left promiscuous mode [ 276.617695][ T7467] veth1_vlan: left promiscuous mode [ 276.623016][ T7467] veth0_vlan: left promiscuous mode [ 276.683670][ T7467] team0 (unregistering): Port device team_slave_1 removed [ 276.901325][ T7467] IPVS: stop unused estimator thread 0...