last executing test programs: 1m7.240481821s ago: executing program 2 (id=3720): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8804, 0x0, 0x43a1bd76, 0x5, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000}) 1m7.161747054s ago: executing program 2 (id=3721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1m7.068922148s ago: executing program 2 (id=3722): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/58, 0x3a}, {0x0, 0xbf}], 0x2) 1m7.009195951s ago: executing program 2 (id=3724): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 1m6.971160112s ago: executing program 2 (id=3725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x200000ffc000) 1m6.55609196s ago: executing program 2 (id=3728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 1m6.510917763s ago: executing program 32 (id=3728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 1m2.296377625s ago: executing program 3 (id=3870): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 1m2.266554696s ago: executing program 3 (id=3875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1m2.193483219s ago: executing program 3 (id=3878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000b80)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x2313, @loopback, 0x100000a}, 0x1c) 1m2.133933201s ago: executing program 3 (id=3882): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 1m1.805669586s ago: executing program 3 (id=3885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m1.183934093s ago: executing program 3 (id=3898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) close(r2) 1m1.167475384s ago: executing program 33 (id=3898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) close(r2) 2.058448791s ago: executing program 0 (id=5448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x311, &(0x7f0000000500)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000090}, 0x4000) 1.84852549s ago: executing program 0 (id=5452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.781720333s ago: executing program 0 (id=5453): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @nfc={0x27, r5, 0x1, 0x4}, @qipcrtr={0x2a, 0x4}, @sco, 0xb5ae, 0x0, 0x0, 0x0, 0xfc00, &(0x7f0000000040)='netdevsim0\x00', 0x6864, 0xa164, 0x7}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) close_range(r0, 0xffffffffffffffff, 0x0) 1.275861945s ago: executing program 1 (id=5463): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4e402, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) close(r4) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.253562356s ago: executing program 1 (id=5464): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000002000000f989c37dff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c0002800800020001000000140003007866726d3000"/55], 0x50}}, 0x0) 967.073329ms ago: executing program 1 (id=5468): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 902.778511ms ago: executing program 0 (id=5469): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4b4, &(0x7f00000014c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 847.513864ms ago: executing program 5 (id=5471): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465f, 0x8, 0x3, 0x389}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x349b, 0x96a, 0xffff000000000000, 0x0, 0x0) dup3(r4, r2, 0x80000) 740.953508ms ago: executing program 4 (id=5472): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x40000000015, 0x5, 0x0) r2 = semget$private(0x0, 0x4000000009, 0x208) semop(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) 564.528096ms ago: executing program 4 (id=5475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 541.744927ms ago: executing program 1 (id=5476): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) 525.822228ms ago: executing program 0 (id=5477): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2, 0x0, 0x800}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 508.077618ms ago: executing program 5 (id=5478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x71b5, &(0x7f0000000040)={0x0, 0x9272, 0xc000, 0x1, 0xae}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8054}, 0x4af584f715520309) io_uring_enter(r4, 0xf00, 0x2, 0x17, 0x0, 0x0) 432.560232ms ago: executing program 0 (id=5479): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0xb5c4f23a2d064472, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket(0x23, 0x5, 0x0) listen(r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) 365.103614ms ago: executing program 6 (id=5481): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x3, 0x0, r1, 0x0}]) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) pipe2(&(0x7f0000001180), 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 334.076606ms ago: executing program 1 (id=5482): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) move_mount(r1, 0x0, r2, 0x0, 0x46) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x1f0, 0x1f0, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 333.671396ms ago: executing program 5 (id=5483): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x10d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) creat(&(0x7f0000000140)='./file0\x00', 0x106) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000a00)={0xa, 0x4e20, 0x6, @empty, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) 318.776747ms ago: executing program 4 (id=5484): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) 246.130749ms ago: executing program 1 (id=5485): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xd75b, 0x19, "6d28a144f13d04ff"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 245.907639ms ago: executing program 5 (id=5486): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010104}, 0x10, 0x0}}], 0x1, 0xd0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r5, 0x0, 0x20}, 0xc) 245.53153ms ago: executing program 4 (id=5487): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'none\x00', 0x38, 0x2, 0x25}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0xfffffffb, {0x6, 0x0, 0x8100, r2, {0x1, 0x10}, {0x12}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7b, 0x8604, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x80228, 0xff, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000740)={[{@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffe}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}], [{@seclabel}, {@seclabel}, {@measure}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'quota'}}, {@smackfsdef={'smackfsdef', 0x3d, 'defcontext'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x420400, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000400)={@l2tp={0x2, 0x0, @remote, 0x4}, {&(0x7f0000000340)=""/81, 0x51}, &(0x7f00000003c0), 0x78}, 0xa0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 245.26548ms ago: executing program 6 (id=5488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 196.393612ms ago: executing program 5 (id=5489): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0xcf1f038a0dc030d3, 0xfffffffffffffffe) socket(0x1, 0x4, 0xffffffe1) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r2, &(0x7f00000001c0)=""/260, 0xfffffd3c) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 157.418773ms ago: executing program 6 (id=5490): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204858, &(0x7f00000003c0)=ANY=[], 0x1, 0x54a, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fdatasync(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1e, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000004000000972a010004000000185100000a00000000000000000000069500"/47], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @sk_lookup=0x24, r1, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x2, 0xe, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000b40)=[r1, r1], &(0x7f0000000b80)=[{0x5, 0x5, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x5}, {0x1, 0x4, 0x1, 0x7}, {0x4, 0x2, 0xe, 0xa}, {0x0, 0x1, 0x5, 0x9}, {0x3, 0x1, 0x0, 0x2}, {0x5, 0x4, 0xf, 0x9}, {0x4, 0x5, 0x1}, {0x0, 0x2, 0xa, 0x2}, {0x0, 0x1, 0x4, 0xf}], 0x10, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r3, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 135.551504ms ago: executing program 6 (id=5491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 95.181166ms ago: executing program 5 (id=5492): r0 = socket$inet(0x2, 0x801, 0x0) close(0x3) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@ipmr_getroute={0x1c, 0x1a, 0x35e7b4d0b2de5b1b, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x80, 0x4, 0xfe, 0x3, 0xfe, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r4, 0x0, 0x7ffff000, 0x0) 92.967536ms ago: executing program 6 (id=5493): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000040030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x66) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 467.57µs ago: executing program 6 (id=5494): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 0s ago: executing program 4 (id=5495): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200000, 0x80029ad, 0x2, 0xf}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet(r0, &(0x7f0000002800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) kernel console output (not intermixed with test programs): : 199836 bytes leftover after parsing attributes in process `syz.2.3586'. [ 220.608355][T13063] SELinux: failed to load policy [ 220.621187][T13055] lo speed is unknown, defaulting to 1000 [ 220.731484][T13055] wg1 speed is unknown, defaulting to 1000 [ 220.762556][T13055] lo speed is unknown, defaulting to 1000 [ 221.261399][T13095] SELinux: failed to load policy [ 221.382547][T13093] lo speed is unknown, defaulting to 1000 [ 221.538961][T13093] lo speed is unknown, defaulting to 1000 [ 221.597755][T13104] lo speed is unknown, defaulting to 1000 [ 221.687389][T13093] wg1 speed is unknown, defaulting to 1000 [ 221.708932][T13093] lo speed is unknown, defaulting to 1000 [ 221.804779][T13104] lo speed is unknown, defaulting to 1000 [ 221.955356][T13104] wg1 speed is unknown, defaulting to 1000 [ 222.016199][T13104] lo speed is unknown, defaulting to 1000 [ 222.289132][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 222.289150][ T29] audit: type=1400 audit(2000000083.879:9272): avc: denied { create } for pid=13129 comm="syz.0.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 222.328413][T13130] delete_channel: no stack [ 222.416199][ T29] audit: type=1326 audit(2000000083.909:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.439808][ T29] audit: type=1326 audit(2000000083.909:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.463433][ T29] audit: type=1326 audit(2000000083.919:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.487052][ T29] audit: type=1326 audit(2000000083.919:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.510711][ T29] audit: type=1326 audit(2000000083.919:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.534242][ T29] audit: type=1326 audit(2000000083.919:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.557828][ T29] audit: type=1326 audit(2000000083.919:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.581527][ T29] audit: type=1326 audit(2000000083.919:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.605141][ T29] audit: type=1326 audit(2000000083.919:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 222.719763][T13139] SELinux: failed to load policy [ 223.050569][T13145] lo speed is unknown, defaulting to 1000 [ 223.216741][T13155] lo speed is unknown, defaulting to 1000 [ 223.235872][T13185] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 223.256500][T13145] lo speed is unknown, defaulting to 1000 [ 223.264831][T13187] validate_nla: 4 callbacks suppressed [ 223.264849][T13187] netlink: 'syz.0.3638': attribute type 16 has an invalid length. [ 223.278245][T13187] netlink: 'syz.0.3638': attribute type 17 has an invalid length. [ 223.278562][T13188] smc: net device bond0 erased user defined pnetid SYZ0 [ 223.348336][T13188] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 223.370386][T13185] netlink: 'syz.0.3638': attribute type 1 has an invalid length. [ 223.378220][T13185] __nla_validate_parse: 1 callbacks suppressed [ 223.378237][T13185] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3638'. [ 223.432196][T13145] wg1 speed is unknown, defaulting to 1000 [ 223.438398][T13145] lo speed is unknown, defaulting to 1000 [ 223.444524][T13155] lo speed is unknown, defaulting to 1000 [ 223.611493][T13155] wg1 speed is unknown, defaulting to 1000 [ 223.645117][T13155] lo speed is unknown, defaulting to 1000 [ 223.888797][T13161] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 223.908266][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3650'. [ 223.992171][T13216] program syz.0.3653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.080859][T13229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13229 comm=syz.0.3660 [ 224.093669][T13229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13229 comm=syz.0.3660 [ 224.397075][T13260] all: renamed from team_slave_0 [ 224.503306][T13277] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 224.571130][T13252] lo speed is unknown, defaulting to 1000 [ 224.600941][T13268] netlink: 'syz.2.3675': attribute type 16 has an invalid length. [ 224.608871][T13268] netlink: 'syz.2.3675': attribute type 17 has an invalid length. [ 224.669631][T13277] netlink: 'syz.2.3675': attribute type 1 has an invalid length. [ 224.677511][T13277] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3675'. [ 224.690266][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 224.762322][T13252] lo speed is unknown, defaulting to 1000 [ 224.872293][T13300] all: renamed from team_slave_0 [ 224.935923][T13252] wg1 speed is unknown, defaulting to 1000 [ 224.965112][T13252] lo speed is unknown, defaulting to 1000 [ 224.979011][T13310] bridge: RTM_NEWNEIGH with invalid ether address [ 225.169427][T13329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 225.203250][T13333] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 225.275042][T13325] netlink: 'syz.4.3699': attribute type 16 has an invalid length. [ 225.283116][T13325] netlink: 'syz.4.3699': attribute type 17 has an invalid length. [ 225.294779][T13262] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 225.363880][T13333] netlink: 'syz.4.3699': attribute type 1 has an invalid length. [ 225.371908][T13333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3699'. [ 226.230506][T13363] lo speed is unknown, defaulting to 1000 [ 226.443995][T13363] lo speed is unknown, defaulting to 1000 [ 226.453531][T13366] lo speed is unknown, defaulting to 1000 [ 226.514906][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 226.599165][T13369] lo speed is unknown, defaulting to 1000 [ 226.615605][T13366] lo speed is unknown, defaulting to 1000 [ 226.621678][T13363] wg1 speed is unknown, defaulting to 1000 [ 226.639552][T13363] lo speed is unknown, defaulting to 1000 [ 226.713724][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 226.733529][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 226.743317][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 226.758594][T13369] lo speed is unknown, defaulting to 1000 [ 226.764482][T13366] wg1 speed is unknown, defaulting to 1000 [ 226.784919][T13366] lo speed is unknown, defaulting to 1000 [ 226.871225][T13369] wg1 speed is unknown, defaulting to 1000 [ 226.911972][T13369] lo speed is unknown, defaulting to 1000 [ 227.101423][T13374] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 227.264474][T13403] ip6tnl1: entered promiscuous mode [ 227.269753][T13403] ip6tnl1: entered allmulticast mode [ 227.354940][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 227.354956][ T29] audit: type=1326 audit(227.329:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07893f749 code=0x7ffc0000 [ 227.397751][ T29] audit: type=1326 audit(227.359:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc07893f749 code=0x7ffc0000 [ 227.420886][ T29] audit: type=1326 audit(227.359:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07893f749 code=0x7ffc0000 [ 227.443890][ T29] audit: type=1326 audit(227.359:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc07893f749 code=0x7ffc0000 [ 227.466859][ T29] audit: type=1326 audit(227.373:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07893f749 code=0x7ffc0000 [ 227.489874][ T29] audit: type=1326 audit(227.373:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07893f749 code=0x7ffc0000 [ 227.512832][ T29] audit: type=1400 audit(227.373:9424): avc: denied { mounton } for pid=13415 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 227.684963][ T29] audit: type=1326 audit(227.663:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 227.750874][ T29] audit: type=1326 audit(227.693:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 227.773201][T13415] lo speed is unknown, defaulting to 1000 [ 227.773972][ T29] audit: type=1326 audit(227.693:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 227.819022][T13415] lo speed is unknown, defaulting to 1000 [ 227.875667][T13415] wg1 speed is unknown, defaulting to 1000 [ 227.882261][T13415] lo speed is unknown, defaulting to 1000 [ 227.945336][T13436] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 228.076276][T13415] chnl_net:caif_netlink_parms(): no params data found [ 228.121526][T13415] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.128809][T13415] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.136062][T13415] bridge_slave_0: entered allmulticast mode [ 228.142832][T13415] bridge_slave_0: entered promiscuous mode [ 228.182496][T13415] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.189604][T13415] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.207425][T13470] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 228.232018][T13415] bridge_slave_1: entered allmulticast mode [ 228.232341][T13475] netlink: 'syz.0.3750': attribute type 16 has an invalid length. [ 228.238810][T13415] bridge_slave_1: entered promiscuous mode [ 228.305599][T13479] syz0: rxe_newlink: already configured on bond_slave_0 [ 228.321743][T13470] validate_nla: 1 callbacks suppressed [ 228.321758][T13470] netlink: 'syz.0.3750': attribute type 1 has an invalid length. [ 228.376501][T13485] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 228.387926][T13485] netlink: 'syz.3.3757': attribute type 16 has an invalid length. [ 228.395857][T13485] netlink: 'syz.3.3757': attribute type 17 has an invalid length. [ 228.416192][T13415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.434575][T13415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.458012][T13485] netlink: 'syz.3.3757': attribute type 1 has an invalid length. [ 228.465817][T13485] __nla_validate_parse: 8 callbacks suppressed [ 228.465830][T13485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3757'. [ 228.512082][T13415] team0: Port device team_slave_0 added [ 228.531323][T13415] team0: Port device team_slave_1 added [ 228.573015][T13415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.580026][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.606003][T13415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.679753][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3765'. [ 228.681236][T13415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.689000][T13501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3765'. [ 228.695892][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.730798][T13415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.747338][T13504] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 228.796561][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3767'. [ 228.884181][T13415] hsr_slave_0: entered promiscuous mode [ 228.908109][T13415] hsr_slave_1: entered promiscuous mode [ 228.925511][T13415] debugfs: 'hsr0' already exists in 'hsr' [ 228.931279][T13415] Cannot create hsr debugfs directory [ 228.954354][ T3414] Process accounting resumed [ 229.009517][T13528] vhci_hcd: invalid port number 9 [ 229.014667][T13528] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 229.139117][T13543] rdma_op ffff8881046a9580 conn xmit_rdma 0000000000000000 [ 229.185428][T13415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.216390][T13415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.240467][T13415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.260513][T13415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.333055][T13564] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 229.347285][T13415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.380609][T13415] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.389519][T13569] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 229.401613][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.408800][T11948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.417643][T13569] netlink: 'syz.4.3794': attribute type 16 has an invalid length. [ 229.425554][T13569] netlink: 'syz.4.3794': attribute type 17 has an invalid length. [ 229.440917][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.448027][T11948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.474671][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3791'. [ 229.483700][T13574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3791'. [ 229.504165][T13576] netlink: 'syz.4.3794': attribute type 1 has an invalid length. [ 229.512003][T13576] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3794'. [ 229.718821][T13415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.892774][T13415] veth0_vlan: entered promiscuous mode [ 229.901201][T13415] veth1_vlan: entered promiscuous mode [ 229.918054][T13415] veth0_macvtap: entered promiscuous mode [ 229.925799][T13415] veth1_macvtap: entered promiscuous mode [ 229.937749][T13415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.950288][T13415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.962460][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.984627][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.998857][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.004305][T13611] block device autoloading is deprecated and will be removed. [ 230.015441][T11948] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.116152][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3805'. [ 230.125249][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3805'. [ 230.316105][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3818'. [ 230.358595][T13654] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 230.463013][T13664] block device autoloading is deprecated and will be removed. [ 230.471426][T13666] syzkaller1: entered promiscuous mode [ 230.477013][T13666] syzkaller1: entered allmulticast mode [ 230.497088][T13668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.504455][T13668] IPv6: NLM_F_CREATE should be set when creating new route [ 230.511678][T13668] IPv6: NLM_F_CREATE should be set when creating new route [ 230.518920][T13668] IPv6: NLM_F_CREATE should be set when creating new route [ 230.664979][T13692] block device autoloading is deprecated and will be removed. [ 230.832822][T13711] atomic_op ffff88811d390d28 conn xmit_atomic 0000000000000000 [ 230.928140][T13725] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 230.937878][T13725] netlink: 'syz.3.3852': attribute type 16 has an invalid length. [ 230.945914][T13725] netlink: 'syz.3.3852': attribute type 17 has an invalid length. [ 231.004442][T13725] netlink: 'syz.3.3852': attribute type 1 has an invalid length. [ 231.110698][T13737] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 231.146569][T13739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.154050][T13739] IPv6: NLM_F_CREATE should be set when creating new route [ 231.161368][T13739] IPv6: NLM_F_CREATE should be set when creating new route [ 231.168674][T13739] IPv6: NLM_F_CREATE should be set when creating new route [ 231.177577][T13737] loop0: detected capacity change from 0 to 512 [ 231.187364][T13737] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 231.242814][T13750] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 231.516202][T13767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.516275][T13768] syz0: rxe_newlink: already configured on bond_slave_0 [ 231.523477][T13767] IPv6: NLM_F_CREATE should be set when creating new route [ 231.523514][T13767] IPv6: NLM_F_CREATE should be set when creating new route [ 231.523526][T13767] IPv6: NLM_F_CREATE should be set when creating new route [ 231.604300][T13776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.623230][T13776] bond1: entered allmulticast mode [ 231.709003][T13797] macvtap0: entered promiscuous mode [ 231.722399][T13797] macvtap0: left promiscuous mode [ 232.373571][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 232.373588][ T29] audit: type=1326 audit(232.353:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13806 comm="syz.1.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07893f749 code=0x7ffc0000 [ 232.433258][ T29] audit: type=1326 audit(232.383:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13806 comm="syz.1.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07893f749 code=0x7ffc0000 [ 232.482198][T13810] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 232.617300][ T3807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.656019][T13835] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 232.667695][ T3807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.710528][T13845] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 232.726264][ T3807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.747641][T13835] loop0: detected capacity change from 0 to 512 [ 232.760981][T13835] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 232.810878][ T3807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.924855][ T3807] bridge_slave_1: left allmulticast mode [ 232.930654][ T3807] bridge_slave_1: left promiscuous mode [ 232.936436][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.969964][ T3807] bridge_slave_0: left allmulticast mode [ 232.975852][ T3807] bridge_slave_0: left promiscuous mode [ 232.981648][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.082308][ T29] audit: type=1400 audit(233.063:9603): avc: denied { relabelfrom } for pid=13894 comm="syz.0.3907" name="" dev="pipefs" ino=42837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 233.104597][T13897] SELinux: Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped). [ 233.116647][ T29] audit: type=1400 audit(233.093:9604): avc: denied { relabelto } for pid=13894 comm="syz.0.3907" name="" dev="pipefs" ino=42837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 233.145197][ T3807] team0: Port device bridge1 removed [ 233.180221][T13906] loop0: detected capacity change from 0 to 512 [ 233.189806][ T3807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.200934][T13906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.201064][ T3807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.219564][ T29] audit: type=1400 audit(233.193:9605): avc: denied { mount } for pid=13904 comm="syz.0.3909" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 233.246673][ T3807] bond0 (unregistering): Released all slaves [ 233.257263][ T3807] bond1 (unregistering): Released all slaves [ 233.267514][T13851] lo speed is unknown, defaulting to 1000 [ 233.286468][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.300385][ T29] audit: type=1400 audit(233.243:9606): avc: denied { watch watch_reads } for pid=13904 comm="syz.0.3909" path="/797/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.380129][T13851] lo speed is unknown, defaulting to 1000 [ 233.482649][T13851] wg1 speed is unknown, defaulting to 1000 [ 233.509105][T13851] lo speed is unknown, defaulting to 1000 [ 233.592999][ T29] audit: type=1326 audit(233.573:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 233.616262][ T29] audit: type=1326 audit(233.573:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 233.720181][ T29] audit: type=1326 audit(233.573:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 233.743302][ T29] audit: type=1326 audit(233.573:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.0.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 233.777702][ T3807] hsr_slave_0: left promiscuous mode [ 233.783773][ T3807] hsr_slave_1: left promiscuous mode [ 233.791342][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.798995][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.814267][ T3807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.821715][ T3807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.832985][ T3807] veth1_macvtap: left promiscuous mode [ 233.838657][ T3807] veth0_macvtap: left promiscuous mode [ 233.844587][ T3807] veth1_vlan: left promiscuous mode [ 233.867185][ T3807] veth0_vlan: left promiscuous mode [ 234.030886][ T3807] team0 (unregistering): Port device team_slave_1 removed [ 234.042009][ T3807] team0 (unregistering): Port device team_slave_0 removed [ 234.101233][T13954] vlan0: entered allmulticast mode [ 234.148199][T13984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.232186][T13851] chnl_net:caif_netlink_parms(): no params data found [ 234.290532][T14006] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 234.301309][T14006] validate_nla: 14 callbacks suppressed [ 234.301324][T14006] netlink: 'syz.5.3922': attribute type 16 has an invalid length. [ 234.314872][T14006] netlink: 'syz.5.3922': attribute type 17 has an invalid length. [ 234.325067][ T3428] IPVS: starting estimator thread 0... [ 234.363935][T14012] netlink: 'syz.5.3922': attribute type 1 has an invalid length. [ 234.371729][T14012] __nla_validate_parse: 10 callbacks suppressed [ 234.371749][T14012] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3922'. [ 234.394359][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.401464][T13851] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.412067][T14008] IPVS: using max 2160 ests per chain, 108000 per kthread [ 234.419753][T13851] bridge_slave_0: entered allmulticast mode [ 234.426474][T13851] bridge_slave_0: entered promiscuous mode [ 234.436090][ T3807] IPVS: stop unused estimator thread 0... [ 234.443172][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.450371][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.457850][T13851] bridge_slave_1: entered allmulticast mode [ 234.472773][T13851] bridge_slave_1: entered promiscuous mode [ 234.545135][T13851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.575870][T13851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.629870][T13851] team0: Port device team_slave_0 added [ 234.643767][T13851] team0: Port device team_slave_1 added [ 234.700531][T14032] lo speed is unknown, defaulting to 1000 [ 234.702035][T13851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.713435][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.739503][T13851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.756053][T13851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.763244][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.789310][T13851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.832954][T13851] hsr_slave_0: entered promiscuous mode [ 234.845914][T13851] hsr_slave_1: entered promiscuous mode [ 234.857347][T13851] debugfs: 'hsr0' already exists in 'hsr' [ 234.863216][T13851] Cannot create hsr debugfs directory [ 234.865574][T14054] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 234.881215][T14052] vlan0: entered allmulticast mode [ 234.886419][T14052] bridge_slave_0: entered allmulticast mode [ 234.897225][T14054] netlink: 'syz.1.3933': attribute type 16 has an invalid length. [ 234.905217][T14054] netlink: 'syz.1.3933': attribute type 17 has an invalid length. [ 234.917295][T14032] lo speed is unknown, defaulting to 1000 [ 234.973940][T14032] wg1 speed is unknown, defaulting to 1000 [ 234.985466][T14054] netlink: 'syz.1.3933': attribute type 1 has an invalid length. [ 234.992313][T14032] lo speed is unknown, defaulting to 1000 [ 234.993687][T14054] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3933'. [ 235.059090][T13851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.072633][T13851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.086643][T13851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.102128][T13851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.163405][T14067] pim6reg1: entered promiscuous mode [ 235.168857][T14067] pim6reg1: entered allmulticast mode [ 235.203619][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.210809][T13851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.311349][T13851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.343816][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.383865][T13851] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.395423][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.402564][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.409869][T14088] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 235.419120][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3946'. [ 235.430533][T14092] netlink: 'syz.1.3945': attribute type 16 has an invalid length. [ 235.438449][T14092] netlink: 'syz.1.3945': attribute type 17 has an invalid length. [ 235.445650][T14091] vlan0: entered allmulticast mode [ 235.451655][T14091] dummy0: entered allmulticast mode [ 235.501340][T14088] netlink: 'syz.1.3945': attribute type 1 has an invalid length. [ 235.509284][T14088] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3945'. [ 235.560433][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.567555][ T3807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.752117][T14122] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3957'. [ 235.753016][T13851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.834408][T14135] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 235.856722][T14135] netlink: 'syz.5.3962': attribute type 16 has an invalid length. [ 235.898325][T14135] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3962'. [ 235.931763][T14146] atomic_op ffff88811d6bc528 conn xmit_atomic 0000000000000000 [ 235.963468][T14151] vhci_hcd: invalid port number 96 [ 235.968707][T14151] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 236.042533][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3972'. [ 236.082331][T14168] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3973'. [ 236.118356][T13851] veth0_vlan: entered promiscuous mode [ 236.148782][T13851] veth1_vlan: entered promiscuous mode [ 236.168851][T13851] veth0_macvtap: entered promiscuous mode [ 236.177776][T13851] veth1_macvtap: entered promiscuous mode [ 236.195230][T13851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.212433][T14179] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 236.213181][T13851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.235470][ T3807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.262206][T11945] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.346721][T14179] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3979'. [ 236.402308][T11945] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.447899][T11945] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.659753][T14210] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 236.679773][ T3428] IPVS: starting estimator thread 0... [ 236.746759][T14213] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3989'. [ 236.802443][T14212] IPVS: using max 1920 ests per chain, 96000 per kthread [ 237.417587][T14249] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 237.455360][T14249] loop0: detected capacity change from 0 to 512 [ 237.474839][T14255] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 237.484207][T14249] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 237.492156][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 237.492178][ T29] audit: type=1400 audit(237.463:9671): avc: denied { execute } for pid=14251 comm="syz.6.4009" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 237.624178][T14264] vlan2: entered promiscuous mode [ 237.629363][T14264] gretap0: entered promiscuous mode [ 237.788652][T14279] loop0: detected capacity change from 0 to 1024 [ 237.808266][ T29] audit: type=1400 audit(237.783:9672): avc: denied { create } for pid=14260 comm="syz.6.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.828478][T14279] EXT4-fs: Ignoring removed orlov option [ 237.838340][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.848932][T14193] syz.1.3982 (14193) used greatest stack depth: 6120 bytes left [ 237.858314][ T29] audit: type=1400 audit(237.813:9673): avc: denied { setopt } for pid=14260 comm="syz.6.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.858730][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.877355][ T29] audit: type=1400 audit(237.813:9674): avc: denied { connect } for pid=14260 comm="syz.6.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.913669][T14279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.943930][ T29] audit: type=1400 audit(237.923:9675): avc: denied { setattr } for pid=14278 comm="syz.0.4020" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 237.979236][ T29] audit: type=1400 audit(237.943:9676): avc: denied { remove_name } for pid=14278 comm="syz.0.4020" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.980535][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.001459][ T29] audit: type=1400 audit(237.943:9677): avc: denied { rename } for pid=14278 comm="syz.0.4020" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.001495][ T29] audit: type=1400 audit(237.943:9678): avc: denied { add_name } for pid=14278 comm="syz.0.4020" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.001525][ T29] audit: type=1400 audit(237.943:9679): avc: denied { unlink } for pid=14278 comm="syz.0.4020" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.097414][T14300] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 238.113088][T14300] loop0: detected capacity change from 0 to 512 [ 238.120300][T14300] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 238.373435][T14327] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 238.380100][T14327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 238.387569][T14327] vhci_hcd vhci_hcd.0: Device attached [ 238.394642][T14329] vhci_hcd: cannot find the pending unlink 1023 [ 238.403093][T14329] vhci_hcd: connection closed [ 238.403237][ T1711] vhci_hcd: stop threads [ 238.412305][ T1711] vhci_hcd: release socket [ 238.416731][ T1711] vhci_hcd: disconnect device [ 238.565748][ T29] audit: type=1326 audit(238.543:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6389a3f749 code=0x7ffc0000 [ 238.618026][T14347] xt_hashlimit: max too large, truncated to 1048576 [ 238.663417][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.672165][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.997777][T14370] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 239.312826][T14407] 9pnet_fd: p9_fd_create_tcp (14407): problem connecting socket to 127.0.0.1 [ 239.342001][T14411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14411 comm=syz.5.4068 [ 239.450507][T14421] __nla_validate_parse: 11 callbacks suppressed [ 239.450526][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4073'. [ 239.507549][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.515038][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.522592][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.530222][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.537785][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.545476][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.553062][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.560641][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.568360][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.576059][ T3428] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 239.616351][T14437] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 2, id = 0 [ 239.626664][T14436] IPVS: stopping master sync thread 14437 ... [ 239.631548][T14423] lo speed is unknown, defaulting to 1000 [ 239.668554][ T3428] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 239.683024][T14423] lo speed is unknown, defaulting to 1000 [ 239.708526][T14444] syzkaller1: entered promiscuous mode [ 239.714198][T14444] syzkaller1: entered allmulticast mode [ 239.727855][T14423] wg1 speed is unknown, defaulting to 1000 [ 239.734343][T14423] lo speed is unknown, defaulting to 1000 [ 240.875843][T14528] ALSA: seq fatal error: cannot create timer (-22) [ 240.943599][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4124'. [ 241.105229][T14564] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 241.126889][T14564] validate_nla: 17 callbacks suppressed [ 241.126909][T14564] netlink: 'syz.1.4134': attribute type 16 has an invalid length. [ 241.140873][T14564] netlink: 'syz.1.4134': attribute type 17 has an invalid length. [ 241.149714][T14571] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4137'. [ 241.173277][T14564] netlink: 'syz.1.4134': attribute type 1 has an invalid length. [ 241.181087][T14564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4134'. [ 241.250617][T14583] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 241.297497][T14590] block device autoloading is deprecated and will be removed. [ 241.963566][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'. [ 242.247308][T14650] SELinux: failed to load policy [ 242.272980][T14649] lo speed is unknown, defaulting to 1000 [ 242.304752][T14655] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.312232][T14655] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.354247][T14655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.364821][T14655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.408518][ T3813] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.425860][ T3813] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.436632][ T3813] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.445977][ T3813] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.476790][T14649] lo speed is unknown, defaulting to 1000 [ 242.528228][T14649] wg1 speed is unknown, defaulting to 1000 [ 242.534682][T14649] lo speed is unknown, defaulting to 1000 [ 242.734382][T14671] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 242.744924][T14671] netlink: 'syz.0.4177': attribute type 16 has an invalid length. [ 242.752821][T14671] netlink: 'syz.0.4177': attribute type 17 has an invalid length. [ 242.800159][T14673] loop0: detected capacity change from 0 to 512 [ 242.818762][T14673] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 242.897000][T14679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14679 comm=syz.0.4181 [ 242.941918][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4184'. [ 242.986895][T14688] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 243.005527][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 243.005622][ T29] audit: type=1400 audit(242.983:9888): avc: denied { setattr } for pid=14689 comm="syz.6.4187" name="TIPC" dev="sockfs" ino=45812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.034722][T14646] 9pnet_fd: p9_fd_create_tcp (14646): problem connecting socket to 127.0.0.1 [ 243.053351][T14688] netlink: 'syz.0.4186': attribute type 16 has an invalid length. [ 243.061233][T14688] netlink: 'syz.0.4186': attribute type 17 has an invalid length. [ 243.112481][T14691] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.128046][ T29] audit: type=1400 audit(243.033:9889): avc: denied { create } for pid=14692 comm="syz.5.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.147140][ T29] audit: type=1400 audit(243.043:9890): avc: denied { connect } for pid=14692 comm="syz.5.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.166256][ T29] audit: type=1400 audit(243.053:9891): avc: denied { bind } for pid=14692 comm="syz.5.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.185259][ T29] audit: type=1400 audit(243.053:9892): avc: denied { write } for pid=14692 comm="syz.5.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.204180][ T29] audit: type=1400 audit(243.063:9893): avc: denied { write } for pid=14694 comm="GPL" path="socket:[45825]" dev="sockfs" ino=45825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 243.240007][T14699] loop0: detected capacity change from 0 to 512 [ 243.241155][ T29] audit: type=1400 audit(243.103:9894): avc: denied { setopt } for pid=14700 comm="syz.5.4191" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.266382][ T29] audit: type=1400 audit(243.103:9895): avc: denied { read } for pid=14700 comm="syz.5.4191" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.277072][T14699] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 243.287399][ T29] audit: type=1400 audit(243.253:9896): avc: denied { ioctl } for pid=14697 comm="syz.4.4190" path="socket:[46484]" dev="sockfs" ino=46484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.339354][T14688] netlink: 'syz.0.4186': attribute type 1 has an invalid length. [ 243.347232][T14688] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4186'. [ 243.373051][ T29] audit: type=1400 audit(243.353:9897): avc: denied { block_suspend } for pid=14704 comm="syz.4.4193" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.440681][T14712] bridge0: entered promiscuous mode [ 243.447003][T14712] bridge0: left promiscuous mode [ 243.709097][T14730] siw: device registration error -23 [ 243.716793][T14730] xt_NFQUEUE: number of total queues is 0 [ 244.243856][T14772] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 244.405911][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4222'. [ 244.433643][T14783] netlink: 'syz.0.4223': attribute type 2 has an invalid length. [ 244.497433][T14784] loop0: detected capacity change from 0 to 256 [ 244.513415][T14784] FAT-fs (loop0): IO charset macgaelic not found [ 244.568509][T14790] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4227'. [ 244.656985][T14801] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 244.666624][T14801] netlink: 'syz.5.4232': attribute type 16 has an invalid length. [ 244.680627][T14801] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4232'. [ 244.970366][T14823] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4241'. [ 245.018393][T14829] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 245.034734][T14829] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4244'. [ 245.577440][T14897] loop0: detected capacity change from 0 to 512 [ 245.584235][T14897] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 245.595135][T14897] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4274'. [ 245.849687][T14922] loop0: detected capacity change from 0 to 4096 [ 245.888657][T14922] loop0: detected capacity change from 0 to 2048 [ 245.895883][T14922] /dev/loop0: Can't open blockdev [ 245.962295][T14941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14941 comm=syz.4.4283 [ 246.452020][T15008] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4292'. [ 246.672523][T15036] validate_nla: 8 callbacks suppressed [ 246.672540][T15036] netlink: 'syz.1.4301': attribute type 2 has an invalid length. [ 246.694984][T15034] hub 2-0:1.0: USB hub found [ 246.699710][T15034] hub 2-0:1.0: 8 ports detected [ 246.784342][T15054] loop0: detected capacity change from 0 to 128 [ 246.866798][T15062] bio_check_eod: 23 callbacks suppressed [ 246.866822][T15062] syz.0.4308: attempt to access beyond end of device [ 246.866822][T15062] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 246.890706][T15062] syz.0.4308: attempt to access beyond end of device [ 246.890706][T15062] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 246.904652][T15062] syz.0.4308: attempt to access beyond end of device [ 246.904652][T15062] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 246.918502][T15062] syz.0.4308: attempt to access beyond end of device [ 246.918502][T15062] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 246.932202][T15062] syz.0.4308: attempt to access beyond end of device [ 246.932202][T15062] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 246.948693][T15062] syz.0.4308: attempt to access beyond end of device [ 246.948693][T15062] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 246.962844][T15062] syz.0.4308: attempt to access beyond end of device [ 246.962844][T15062] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 246.981711][T15062] syz.0.4308: attempt to access beyond end of device [ 246.981711][T15062] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 246.995708][T15062] syz.0.4308: attempt to access beyond end of device [ 246.995708][T15062] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 247.015242][T15066] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4313'. [ 247.019920][T15062] syz.0.4308: attempt to access beyond end of device [ 247.019920][T15062] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 247.131061][T15082] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 247.190064][T15093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4326'. [ 247.302779][T15112] pimreg: entered allmulticast mode [ 247.308791][T15112] pimreg: left allmulticast mode [ 247.387094][T15117] macvlan2: entered promiscuous mode [ 247.392505][T15117] bridge0: entered promiscuous mode [ 247.651569][T15137] netlink: 'syz.1.4346': attribute type 16 has an invalid length. [ 247.659511][T15137] netlink: 'syz.1.4346': attribute type 17 has an invalid length. [ 247.693404][T15141] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 247.703164][T15141] netlink: 'syz.5.4348': attribute type 16 has an invalid length. [ 247.711177][T15141] netlink: 'syz.5.4348': attribute type 17 has an invalid length. [ 247.720260][T15137] netlink: 'syz.1.4346': attribute type 1 has an invalid length. [ 247.728218][T15137] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4346'. [ 247.746367][T15143] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 247.779187][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4351'. [ 247.875847][T15161] loop0: detected capacity change from 0 to 1024 [ 247.905966][T15161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.124864][ T29] kauditd_printk_skb: 891 callbacks suppressed [ 248.124898][ T29] audit: type=1400 audit(248.103:10789): avc: denied { write } for pid=15187 comm="syz.5.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 248.271388][ T29] audit: type=1400 audit(248.243:10790): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 248.291627][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.334175][ T29] audit: type=1326 audit(248.283:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.6.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8f7bf749 code=0x7ffc0000 [ 248.357309][ T29] audit: type=1326 audit(248.283:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.6.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f5f8f7bf749 code=0x7ffc0000 [ 248.380343][ T29] audit: type=1326 audit(248.283:10793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.6.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8f7bf749 code=0x7ffc0000 [ 248.403336][ T29] audit: type=1400 audit(248.293:10794): avc: denied { watch watch_reads } for pid=15195 comm="syz.5.4373" path="/129/file0" dev="tmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.428433][ T29] audit: type=1400 audit(248.333:10795): avc: denied { bind } for pid=15206 comm="syz.6.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.447583][ T29] audit: type=1400 audit(248.333:10796): avc: denied { connect } for pid=15206 comm="syz.6.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.466958][ T29] audit: type=1400 audit(248.333:10797): avc: denied { accept } for pid=15206 comm="syz.6.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.486220][ T29] audit: type=1400 audit(248.393:10798): avc: denied { read } for pid=15206 comm="syz.6.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.794610][T15242] netlink: 'syz.4.4389': attribute type 16 has an invalid length. [ 248.802588][T15242] netlink: 'syz.4.4389': attribute type 17 has an invalid length. [ 248.874713][T15254] netlink: 'syz.4.4389': attribute type 1 has an invalid length. [ 249.026213][T15264] hub 1-0:1.0: USB hub found [ 249.032450][T15264] hub 1-0:1.0: 8 ports detected [ 249.080226][T15271] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 249.721250][T15303] lo speed is unknown, defaulting to 1000 [ 249.877951][T15303] lo speed is unknown, defaulting to 1000 [ 250.009814][T15303] wg1 speed is unknown, defaulting to 1000 [ 250.019019][T15303] lo speed is unknown, defaulting to 1000 [ 250.336929][T15303] chnl_net:caif_netlink_parms(): no params data found [ 250.414712][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.422012][T15303] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.431123][T15303] bridge_slave_0: entered allmulticast mode [ 250.438236][T15303] bridge_slave_0: entered promiscuous mode [ 250.452847][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.459974][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.467372][T15303] bridge_slave_1: entered allmulticast mode [ 250.474104][T15303] bridge_slave_1: entered promiscuous mode [ 250.497334][T15303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.508360][T15303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.534982][T15303] team0: Port device team_slave_0 added [ 250.549339][T15303] team0: Port device team_slave_1 added [ 250.585255][T15303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.592326][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.618434][T15303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.630280][T15303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.637314][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.663419][T15303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.708198][T15303] hsr_slave_0: entered promiscuous mode [ 250.714722][T15303] hsr_slave_1: entered promiscuous mode [ 250.720872][T15303] debugfs: 'hsr0' already exists in 'hsr' [ 250.726689][T15303] Cannot create hsr debugfs directory [ 250.801181][T15303] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.858712][T15303] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.879980][T15454] __nla_validate_parse: 7 callbacks suppressed [ 250.880000][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'. [ 250.896023][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'. [ 250.914670][T15303] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.953907][T15303] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.022406][T15303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.031542][T15303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.040758][T15303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.050306][T15303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.094523][T15303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.107082][T15303] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.119643][ T3813] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.126794][ T3813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.139891][ T3813] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.147147][ T3813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.194644][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 251.206496][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 251.246333][T15504] netlink: 'syz.1.4436': attribute type 16 has an invalid length. [ 251.264614][T15504] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4436'. [ 251.271401][T15303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.354963][T15303] veth0_vlan: entered promiscuous mode [ 251.373522][T15303] veth1_vlan: entered promiscuous mode [ 251.404468][T15303] veth0_macvtap: entered promiscuous mode [ 251.411653][T15303] veth1_macvtap: entered promiscuous mode [ 251.422929][T15303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.436026][T15303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.447784][ T3807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.475384][ T3807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.489179][ T3807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.509493][ T3807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.547293][ T3813] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.552149][T15523] SELinux: failed to load policy [ 251.559174][T15525] Bluetooth: hci0: Frame reassembly failed (-90) [ 251.635129][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4444'. [ 251.783089][T15552] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 251.792916][T15552] validate_nla: 2 callbacks suppressed [ 251.792931][T15552] netlink: 'syz.6.4453': attribute type 16 has an invalid length. [ 251.806410][T15552] netlink: 'syz.6.4453': attribute type 17 has an invalid length. [ 252.962399][ T3486] hid_parser_main: 8 callbacks suppressed [ 252.962427][ T3486] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 252.976109][ T3486] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 252.984415][ T3486] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 252.992834][ T3486] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 253.621834][ T3573] Bluetooth: hci0: command 0x1003 tx timeout [ 253.623207][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.673288][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 253.673306][ T29] audit: type=1400 audit(253.653:10875): avc: denied { read } for pid=15606 comm="syz.0.4475" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 253.782099][ T29] audit: type=1400 audit(253.743:10876): avc: denied { cpu } for pid=15608 comm="syz.4.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.821424][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4478'. [ 253.902445][ T29] audit: type=1326 audit(253.883:10877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 253.929151][ T29] audit: type=1326 audit(253.903:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 253.952264][ T29] audit: type=1326 audit(253.903:10879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 253.975337][ T29] audit: type=1326 audit(253.903:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 253.998512][ T29] audit: type=1326 audit(253.903:10881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 254.021623][ T29] audit: type=1326 audit(253.903:10882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 254.045182][ T29] audit: type=1326 audit(253.903:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 254.068281][ T29] audit: type=1326 audit(253.903:10884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 254.128410][T15633] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4486'. [ 254.814554][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4512'. [ 255.223045][T15731] wg2: entered promiscuous mode [ 255.227980][T15731] wg2: entered allmulticast mode [ 255.335680][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4539'. [ 256.360509][T15819] __nla_validate_parse: 2 callbacks suppressed [ 256.360587][T15819] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4566'. [ 256.376225][T15819] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4566'. [ 256.423416][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4570'. [ 256.443803][T15829] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 256.456284][T15829] netlink: 'syz.1.4571': attribute type 16 has an invalid length. [ 256.464373][T15829] netlink: 'syz.1.4571': attribute type 17 has an invalid length. [ 256.575088][T15839] loop0: detected capacity change from 0 to 1024 [ 256.591075][T15839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.615545][T15839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.650654][T15847] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4577'. [ 256.682219][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.730566][T15852] loop0: detected capacity change from 0 to 128 [ 256.745421][T15852] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.778461][T15303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.835664][T15864] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 256.845633][T15864] netlink: 'syz.6.4585': attribute type 16 has an invalid length. [ 256.853546][T15864] netlink: 'syz.6.4585': attribute type 17 has an invalid length. [ 257.019449][T15885] ip6erspan0: entered promiscuous mode [ 257.050044][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4594'. [ 257.110153][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4594'. [ 257.131386][T15895] syzkaller1: entered promiscuous mode [ 257.137135][T15895] syzkaller1: entered allmulticast mode [ 257.632509][T15906] netlink: 'syz.1.4601': attribute type 1 has an invalid length. [ 257.640312][T15906] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4601'. [ 257.845313][T15931] syz_tun: entered allmulticast mode [ 257.856682][T15931] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 257.865265][T15931] mroute: pending queue full, dropping entries [ 257.884242][T15929] syz_tun: left allmulticast mode [ 257.894242][ T4124] kernel write not supported for file bpf-map (pid: 4124 comm: kworker/0:8) [ 257.980115][T15937] loop0: detected capacity change from 0 to 2048 [ 258.015923][T15937] Alternate GPT is invalid, using primary GPT. [ 258.022447][T15937] loop0: p2 p3 p7 [ 258.046531][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4620'. [ 258.059981][T15943] netlink: 'syz.4.4616': attribute type 1 has an invalid length. [ 258.067789][T15943] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4616'. [ 258.111768][T15959] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4622'. [ 258.624150][T16033] random: crng reseeded on system resumption [ 258.682213][T16035] syz_tun: entered allmulticast mode [ 258.688523][T16035] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 258.697091][T16035] mroute: pending queue full, dropping entries [ 258.711184][T16034] syz_tun: left allmulticast mode [ 258.910428][T16059] ip6erspan0: entered promiscuous mode [ 258.956756][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 258.956773][ T29] audit: type=1326 audit(258.933:10989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.4.4667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9be22af749 code=0x0 [ 259.026246][ T4124] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 259.035554][ T4124] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.124346][T16078] netlink: 'syz.1.4673': attribute type 1 has an invalid length. [ 259.212356][ T29] audit: type=1326 audit(259.193:10990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.237456][ T29] audit: type=1326 audit(259.193:10991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.268605][ T29] audit: type=1326 audit(259.213:10992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.291904][ T29] audit: type=1326 audit(259.213:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.315027][ T29] audit: type=1326 audit(259.213:10994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.338204][ T29] audit: type=1326 audit(259.243:10995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.361358][ T29] audit: type=1326 audit(259.243:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.384459][ T29] audit: type=1326 audit(259.243:10997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.407538][ T29] audit: type=1326 audit(259.243:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16087 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 259.461078][T16092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 259.467683][T16092] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 259.475956][T16092] vhci_hcd vhci_hcd.0: Device attached [ 259.762024][ T3427] usb 4-1: SetAddress Request (2) to port 0 [ 259.768197][ T3427] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 259.934558][T16119] netlink: 'syz.5.4691': attribute type 1 has an invalid length. [ 259.959389][T16119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.981135][T16119] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 259.990371][T16119] bond1: (slave batadv1): making interface the new active one [ 259.999469][T16119] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 260.057602][T16128] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 260.074575][T16128] netlink: 'syz.6.4695': attribute type 16 has an invalid length. [ 260.082501][T16128] netlink: 'syz.6.4695': attribute type 17 has an invalid length. [ 260.270260][T16095] vhci_hcd: connection reset by peer [ 260.308597][ T3769] vhci_hcd: stop threads [ 260.313019][ T3769] vhci_hcd: release socket [ 260.317496][ T3769] vhci_hcd: disconnect device [ 260.369190][T16124] Set syz1 is full, maxelem 65536 reached [ 260.416785][T16145] netlink: 'syz.6.4702': attribute type 1 has an invalid length. [ 261.165515][T16217] loop0: detected capacity change from 0 to 2048 [ 261.195869][T16219] SELinux: failed to load policy [ 261.203866][T16217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.233707][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.326086][T16232] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 261.347040][T16232] netlink: 'syz.6.4740': attribute type 16 has an invalid length. [ 261.446957][T16246] syzkaller0: entered promiscuous mode [ 261.452603][T16246] syzkaller0: entered allmulticast mode [ 261.550204][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 261.731212][T16272] __nla_validate_parse: 14 callbacks suppressed [ 261.731357][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4758'. [ 261.752537][T16272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.764567][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4758'. [ 261.776889][T16272] bond1 (unregistering): Released all slaves [ 261.863551][T16275] bridge: RTM_NEWNEIGH with invalid ether address [ 261.887009][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4760'. [ 262.002385][T16283] ALSA: seq fatal error: cannot create timer (-16) [ 262.015810][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4764'. [ 262.027485][T16287] validate_nla: 2 callbacks suppressed [ 262.027504][T16287] netlink: 'syz.6.4765': attribute type 1 has an invalid length. [ 262.049718][T16287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.074065][T16287] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 262.083257][T16287] bond1: (slave batadv1): making interface the new active one [ 262.093216][T16287] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 263.041528][T16318] Set syz1 is full, maxelem 65536 reached [ 263.340622][T16348] loop0: detected capacity change from 0 to 1024 [ 263.347365][T16348] EXT4-fs: Ignoring removed orlov option [ 263.355506][T16348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.611917][ T3573] Bluetooth: hci0: command 0x1003 tx timeout [ 263.618060][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 263.626467][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.656619][T16364] loop0: detected capacity change from 0 to 2048 [ 263.664537][T16364] EXT4-fs: Ignoring removed i_version option [ 263.673496][T16364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.721860][T16364] support for cryptoloop has been removed. Use dm-crypt instead. [ 263.875592][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.920988][T16370] pim6reg1: entered promiscuous mode [ 263.926496][T16370] pim6reg1: entered allmulticast mode [ 264.051111][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 264.051130][ T29] audit: type=1400 audit(264.023:11118): avc: denied { read } for pid=16378 comm="syz.0.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 264.195627][ T29] audit: type=1326 audit(264.173:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 264.257333][ T29] audit: type=1326 audit(264.173:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 264.280612][ T29] audit: type=1326 audit(264.203:11121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 264.303834][ T29] audit: type=1326 audit(264.203:11122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 264.327107][ T29] audit: type=1326 audit(264.203:11123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6aa474e3aa code=0x7ffc0000 [ 264.350296][ T29] audit: type=1326 audit(264.203:11124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6aa4782005 code=0x7ffc0000 [ 264.436696][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4812'. [ 264.445858][ T29] audit: type=1326 audit(264.413:11125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 264.468937][ T29] audit: type=1326 audit(264.413:11126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 264.492137][ T29] audit: type=1326 audit(264.413:11127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.5.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 264.822914][ T3427] usb 4-1: device descriptor read/8, error -110 [ 264.931875][ T3427] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 264.966636][ T3427] usb 4-1: enqueue for inactive port 0 [ 264.978811][ T3427] usb 4-1: enqueue for inactive port 0 [ 265.001084][ T3427] usb 4-1: enqueue for inactive port 0 [ 265.023004][T16394] Set syz1 is full, maxelem 65536 reached [ 265.262607][T16425] tipc: Started in network mode [ 265.267595][T16425] tipc: Node identity 7a252dead5e1, cluster identity 4711 [ 265.272704][T16424] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.274850][T16425] tipc: Enabled bearer , priority 0 [ 265.315398][T16425] tipc: Disabling bearer [ 265.356584][T16429] loop0: detected capacity change from 0 to 128 [ 265.425198][T16435] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 265.436669][T16429] bio_check_eod: 57 callbacks suppressed [ 265.436748][T16429] syz.0.4826: attempt to access beyond end of device [ 265.436748][T16429] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 265.457151][T16433] SELinux: failed to load policy [ 265.457571][T16435] netlink: 'syz.6.4829': attribute type 16 has an invalid length. [ 265.470137][T16435] netlink: 'syz.6.4829': attribute type 17 has an invalid length. [ 265.534461][T16441] syz.0.4826: attempt to access beyond end of device [ 265.534461][T16441] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 265.592694][T16441] syz.0.4826: attempt to access beyond end of device [ 265.592694][T16441] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 265.643717][T16441] syz.0.4826: attempt to access beyond end of device [ 265.643717][T16441] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 265.651961][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.678646][ T3769] kworker/u8:17: attempt to access beyond end of device [ 265.678646][ T3769] loop0: rw=1, sector=166, nr_sectors = 1 limit=128 [ 265.692294][ T3769] Buffer I/O error on dev loop0, logical block 166, lost async page write [ 265.710012][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.814031][T16450] SELinux: failed to load policy [ 265.951860][T16464] netlink: 360 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 266.037298][T16468] loop0: detected capacity change from 0 to 128 [ 266.082159][ T3427] usb usb4-port1: attempt power cycle [ 266.226256][T16484] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4850'. [ 266.407412][T16505] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4860'. [ 266.439118][T16507] netlink: 'syz.0.4861': attribute type 16 has an invalid length. [ 266.447042][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4861'. [ 266.456141][ T36] IPVS: starting estimator thread 0... [ 266.476379][T16507] loop0: detected capacity change from 0 to 512 [ 266.483477][T16507] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 266.494678][T16507] netlink: 'syz.0.4861': attribute type 1 has an invalid length. [ 266.502531][T16507] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4861'. [ 266.519128][T16510] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 266.528884][T16510] netlink: 'syz.6.4862': attribute type 16 has an invalid length. [ 266.537099][T16510] netlink: 'syz.6.4862': attribute type 17 has an invalid length. [ 266.545380][T16508] IPVS: using max 1968 ests per chain, 98400 per kthread [ 266.728095][T16521] syzkaller1: entered promiscuous mode [ 266.733814][T16521] syzkaller1: entered allmulticast mode [ 266.981401][T16539] netlink: 'syz.0.4874': attribute type 16 has an invalid length. [ 266.989358][T16539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4874'. [ 267.030156][T16539] loop0: detected capacity change from 0 to 512 [ 267.050158][T16539] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 267.072059][T16539] netlink: 'syz.0.4874': attribute type 1 has an invalid length. [ 267.079846][T16539] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4874'. [ 267.253900][T16551] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 267.274948][T16551] netlink: 'syz.0.4877': attribute type 16 has an invalid length. [ 267.283006][T16551] netlink: 'syz.0.4877': attribute type 17 has an invalid length. [ 267.346579][T16556] loop0: detected capacity change from 0 to 512 [ 267.363164][T16556] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 267.738435][T16571] random: crng reseeded on system resumption [ 267.823035][T16573] netlink: 'syz.6.4887': attribute type 16 has an invalid length. [ 267.830993][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4887'. [ 267.867428][T16573] netlink: 'syz.6.4887': attribute type 1 has an invalid length. [ 267.875316][T16573] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4887'. [ 267.922173][ T3427] usb usb4-port1: unable to enumerate USB device [ 268.073225][T16595] pim6reg1: entered promiscuous mode [ 268.078593][T16595] pim6reg1: entered allmulticast mode [ 268.111058][T16596] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 268.261156][T16606] netlink: 'syz.4.4903': attribute type 16 has an invalid length. [ 268.269438][T16606] netlink: 'syz.4.4903': attribute type 17 has an invalid length. [ 268.343635][T16606] netlink: 'syz.4.4903': attribute type 1 has an invalid length. [ 268.351423][T16606] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4903'. [ 268.546305][T16632] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 268.566668][T16632] netlink: 'syz.5.4913': attribute type 16 has an invalid length. [ 268.574717][T16632] netlink: 'syz.5.4913': attribute type 17 has an invalid length. [ 268.707251][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4916'. [ 268.894542][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4926'. [ 268.913192][T16651] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4921'. [ 268.928582][T16666] bond2: entered promiscuous mode [ 268.936196][T16666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.960664][T16666] bridge2: entered promiscuous mode [ 269.068807][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 269.068834][ T29] audit: type=1326 audit(269.043:11260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.155356][ T29] audit: type=1326 audit(269.073:11261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.178454][ T29] audit: type=1326 audit(269.073:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.201560][ T29] audit: type=1326 audit(269.073:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.224627][ T29] audit: type=1326 audit(269.073:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.247602][ T29] audit: type=1326 audit(269.073:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.270678][ T29] audit: type=1326 audit(269.073:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.293770][ T29] audit: type=1326 audit(269.083:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.316906][ T29] audit: type=1326 audit(269.083:11268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.340014][ T29] audit: type=1326 audit(269.083:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 269.472646][T16699] wg2: left promiscuous mode [ 269.477398][T16699] wg2: left allmulticast mode [ 269.491929][T16699] bridge0: left promiscuous mode [ 269.502249][T16699] macvlan2: left promiscuous mode [ 269.701595][T16710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.805657][T16710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.913002][T16710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.994893][T16710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.007728][T16712] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4943'. [ 270.103545][ T3769] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.146136][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4953'. [ 270.163864][ T3769] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.177864][T16742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=16742 comm=syz.1.4954 [ 270.199660][ T3769] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.210053][ T3769] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.440888][T16768] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 271.190644][T16788] lo: entered allmulticast mode [ 271.196307][T16788] lo: left allmulticast mode [ 271.275476][T16794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16794 comm=syz.4.4976 [ 271.573010][T16812] bond0: entered promiscuous mode [ 271.595196][T16812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.614848][T16822] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 271.690298][T16822] loop0: detected capacity change from 0 to 512 [ 271.698632][T16822] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 271.699163][T16812] bridge1: entered promiscuous mode [ 271.788607][T16834] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 271.795188][T16834] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 271.802893][T16834] vhci_hcd vhci_hcd.0: Device attached [ 271.827645][T16837] vhci_hcd: connection closed [ 271.827732][T11927] vhci_hcd: stop threads [ 271.836782][T11927] vhci_hcd: release socket [ 271.841304][T11927] vhci_hcd: disconnect device [ 272.005976][T16855] loop0: detected capacity change from 0 to 8192 [ 272.013166][T16855] msdos: Unknown parameter 'nÿ' [ 272.036185][T16855] loop0: detected capacity change from 0 to 512 [ 272.077412][T16855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.140662][T16869] __nla_validate_parse: 2 callbacks suppressed [ 272.140680][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5005'. [ 272.174069][T16869] team0 (unregistering): Port device dummy0 removed [ 272.385437][T16878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5010'. [ 272.395748][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.432077][T16881] loop0: detected capacity change from 0 to 128 [ 272.443753][T16878] bond2: entered promiscuous mode [ 272.457001][T16878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.476184][T16881] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.532236][T16878] bridge1: entered promiscuous mode [ 272.542745][T15303] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 272.579933][T15303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.636779][T16891] veth2: entered promiscuous mode [ 272.641985][T16891] veth2: entered allmulticast mode [ 272.669029][T16843] lo speed is unknown, defaulting to 1000 [ 272.702727][T16894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5016'. [ 272.783060][T16843] lo speed is unknown, defaulting to 1000 [ 272.818406][T16843] wg1 speed is unknown, defaulting to 1000 [ 272.825680][T16843] lo speed is unknown, defaulting to 1000 [ 273.053580][T16915] validate_nla: 7 callbacks suppressed [ 273.053595][T16915] netlink: 'syz.6.5025': attribute type 16 has an invalid length. [ 273.067097][T16915] netlink: 'syz.6.5025': attribute type 17 has an invalid length. [ 273.104333][T16915] netlink: 'syz.6.5025': attribute type 1 has an invalid length. [ 273.112225][T16915] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5025'. [ 273.589056][T16942] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5036'. [ 273.701163][T16952] syzkaller0: entered allmulticast mode [ 273.728846][T16957] nfs4: Bad value for 'source' [ 273.773450][T16963] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 273.780026][T16963] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 273.788268][T16963] vhci_hcd vhci_hcd.0: Device attached [ 273.803619][T16969] loop0: detected capacity change from 0 to 1024 [ 273.810539][T16969] EXT4-fs: inline encryption not supported [ 273.816471][T16969] EXT4-fs: Ignoring removed orlov option [ 273.823103][T16969] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 273.843878][T16969] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 273.856067][T16973] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.865657][T16969] System zones: 0-1, 3-12 [ 273.872932][T16969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.917663][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.008551][T16992] nfs4: Bad value for 'source' [ 274.051824][ T3428] usb 12-1: SetAddress Request (2) to port 0 [ 274.062211][ T3428] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 274.072922][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 274.072958][ T29] audit: type=1326 audit(274.053:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5659a65e7 code=0x7ffc0000 [ 274.102426][ T29] audit: type=1326 audit(274.053:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe56594b829 code=0x7ffc0000 [ 274.125499][ T29] audit: type=1326 audit(274.053:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 274.148531][ T29] audit: type=1326 audit(274.083:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5659a65e7 code=0x7ffc0000 [ 274.171436][ T29] audit: type=1326 audit(274.083:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe56594b829 code=0x7ffc0000 [ 274.194435][ T29] audit: type=1326 audit(274.083:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 274.218125][ T29] audit: type=1326 audit(274.103:11438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5659a65e7 code=0x7ffc0000 [ 274.241257][ T29] audit: type=1326 audit(274.103:11439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe56594b829 code=0x7ffc0000 [ 274.264398][ T29] audit: type=1326 audit(274.103:11440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe5659af749 code=0x7ffc0000 [ 274.287583][ T29] audit: type=1326 audit(274.103:11441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5659a65e7 code=0x7ffc0000 [ 274.601015][T16964] vhci_hcd: connection reset by peer [ 274.607380][ T3769] vhci_hcd: stop threads [ 274.611664][ T3769] vhci_hcd: release socket [ 274.616227][ T3769] vhci_hcd: disconnect device [ 274.630327][T17030] netlink: 'syz.4.5071': attribute type 4 has an invalid length. [ 274.642524][ T36] lo speed is unknown, defaulting to 1000 [ 274.648381][ T36] syz1: Port: 1 Link DOWN [ 274.661183][ T3414] lo speed is unknown, defaulting to 1000 [ 274.780793][T17043] 9pnet: Could not find request transport: fd0x0000000000000003 [ 274.849287][T17053] pim6reg1: entered promiscuous mode [ 274.854813][T17053] pim6reg1: entered allmulticast mode [ 275.220605][T17106] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 275.220605][T17106] program syz.0.5092 not setting count and/or reply_len properly [ 276.214111][ T3486] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 276.248377][ T3486] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.644640][T17233] serio: Serial port ptm0 [ 276.718748][T17237] loop0: detected capacity change from 0 to 2048 [ 276.733914][T17237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.759142][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.937464][T17254] bridge_slave_0: left allmulticast mode [ 276.943232][T17254] bridge_slave_0: left promiscuous mode [ 276.949308][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.960237][T17254] bridge_slave_1: left allmulticast mode [ 276.965986][T17254] bridge_slave_1: left promiscuous mode [ 276.971944][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.006006][T17265] loop0: detected capacity change from 0 to 512 [ 277.006377][T17254] bond0: (slave bond_slave_0): Releasing backup interface [ 277.013468][T17265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 277.036235][T17254] bond0: (slave bond_slave_1): Releasing backup interface [ 277.044914][T17265] EXT4-fs (loop0): 1 truncate cleaned up [ 277.052392][T17265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.071883][T17254] team0: Port device team_slave_0 removed [ 277.087504][T17254] team0: Port device team_slave_1 removed [ 277.095929][T17254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.103500][T17254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.113052][T17254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.120471][T17254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.130964][T17254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.178049][T17267] tipc: Started in network mode [ 277.183061][T17267] tipc: Node identity 92b93389325d, cluster identity 4711 [ 277.190236][T17267] tipc: Enabled bearer , priority 0 [ 277.223275][T17265] tipc: Disabling bearer [ 277.285715][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.390546][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5140'. [ 277.470514][T17297] tipc: Cannot configure node identity twice [ 277.544794][T17305] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 277.589495][T17308] loop0: detected capacity change from 0 to 512 [ 277.598717][T17308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 277.613856][T17308] EXT4-fs (loop0): 1 truncate cleaned up [ 277.630238][T17308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.676760][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.754445][T17320] syzkaller0: entered promiscuous mode [ 277.760038][T17320] syzkaller0: entered allmulticast mode [ 277.818361][T17312] lo speed is unknown, defaulting to 1000 [ 277.889075][T17312] lo speed is unknown, defaulting to 1000 [ 277.939222][T17312] wg1 speed is unknown, defaulting to 1000 [ 277.945790][T17312] lo speed is unknown, defaulting to 1000 [ 278.256367][T17360] bridge: RTM_NEWNEIGH with invalid ether address [ 279.132477][ T3428] usb 12-1: device descriptor read/8, error -110 [ 279.160627][T17411] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 279.197851][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.205417][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.213047][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.220582][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.228194][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.235756][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.242385][ T3428] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 279.243440][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.258297][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.262543][ T3428] usb 12-1: enqueue for inactive port 0 [ 279.265821][ T3427] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 279.271992][ T3428] usb 12-1: enqueue for inactive port 0 [ 279.294991][ T3427] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 279.297783][ T3428] usb 12-1: enqueue for inactive port 0 [ 279.360650][T17420] tipc: Enabled bearer , priority 0 [ 279.390762][T17420] tipc: Disabling bearer [ 279.403318][T17423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5193'. [ 279.422610][T17423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5193'. [ 279.558865][T17427] loop0: detected capacity change from 0 to 1024 [ 279.570389][T17427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.595830][T17427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.630610][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 279.630670][ T29] audit: type=1400 audit(279.603:11811): avc: denied { setattr } for pid=17426 comm="syz.0.5195" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.700141][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.824366][T17439] veth2: entered promiscuous mode [ 279.829468][T17439] veth2: entered allmulticast mode [ 279.836774][ T3834] Bluetooth: hci0: Frame reassembly failed (-84) [ 279.907687][T17447] syzkaller0: entered promiscuous mode [ 279.913301][T17447] syzkaller0: entered allmulticast mode [ 280.058035][ T29] audit: type=1326 audit(280.003:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.4.5207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x0 [ 280.253141][T17468] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5214'. [ 280.266931][T17462] vlan2: entered allmulticast mode [ 280.272155][T17462] bridge_slave_0: entered allmulticast mode [ 280.332494][ T3428] usb usb12-port1: attempt power cycle [ 281.154110][T17493] veth4: entered promiscuous mode [ 281.159262][T17493] veth4: entered allmulticast mode [ 281.207968][ T29] audit: type=1326 audit(281.183:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.5.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 281.239876][ T29] audit: type=1326 audit(281.183:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.5.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 281.263145][ T29] audit: type=1326 audit(281.213:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.5.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 281.286198][ T29] audit: type=1326 audit(281.213:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.5.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 281.309480][ T29] audit: type=1326 audit(281.213:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.5.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 281.332722][ T29] audit: type=1326 audit(281.213:11818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.5.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 281.355883][ T29] audit: type=1326 audit(281.213:11819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.5.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 281.378956][ T29] audit: type=1326 audit(281.213:11820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.5.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa474f749 code=0x7ffc0000 [ 281.444913][T17497] netlink: 'syz.1.5227': attribute type 16 has an invalid length. [ 281.452842][T17497] netlink: 'syz.1.5227': attribute type 17 has an invalid length. [ 281.477644][T17497] netlink: 'syz.1.5227': attribute type 1 has an invalid length. [ 281.485524][T17497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5227'. [ 281.567585][T17505] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 281.671690][T17505] lo speed is unknown, defaulting to 1000 [ 281.767744][T17505] lo speed is unknown, defaulting to 1000 [ 281.851973][ T3573] Bluetooth: hci0: command 0x1003 tx timeout [ 281.858232][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 281.873406][T17505] wg1 speed is unknown, defaulting to 1000 [ 281.879887][T17505] lo speed is unknown, defaulting to 1000 [ 282.072641][T17517] syzkaller0: entered promiscuous mode [ 282.078181][T17517] syzkaller0: entered allmulticast mode [ 282.155360][ T3428] usb usb12-port1: unable to enumerate USB device [ 282.253968][T17528] bridge: RTM_NEWNEIGH with invalid ether address [ 282.288817][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5241'. [ 282.436837][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5246'. [ 282.541327][T17538] lo speed is unknown, defaulting to 1000 [ 282.600407][T17543] netlink: 'syz.5.5247': attribute type 1 has an invalid length. [ 282.641147][T17543] bond3: entered promiscuous mode [ 282.646527][T17543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.654875][T17538] lo speed is unknown, defaulting to 1000 [ 282.681261][T17547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.702684][T17547] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 282.712790][T17547] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 282.760794][T17547] bond3: (slave gre2): making interface the new active one [ 282.768145][T17547] gre2: entered promiscuous mode [ 282.790970][T17547] bond3: (slave gre2): Enslaving as an active interface with an up link [ 282.802829][T17538] wg1 speed is unknown, defaulting to 1000 [ 282.810220][T17538] lo speed is unknown, defaulting to 1000 [ 283.025848][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5253'. [ 283.032258][T17564] syzkaller0: entered promiscuous mode [ 283.040366][T17564] syzkaller0: entered allmulticast mode [ 283.047615][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5253'. [ 283.361469][T17588] loop0: detected capacity change from 0 to 256 [ 283.405217][T17588] FAT-fs (loop0): Directory bread(block 64) failed [ 283.421243][T17588] FAT-fs (loop0): Directory bread(block 65) failed [ 283.439363][T17588] FAT-fs (loop0): Directory bread(block 66) failed [ 283.448719][T17594] bridge0: port 1(gretap0) entered blocking state [ 283.455449][T17594] bridge0: port 1(gretap0) entered disabled state [ 283.472047][T17588] FAT-fs (loop0): Directory bread(block 67) failed [ 283.482161][T17588] FAT-fs (loop0): Directory bread(block 68) failed [ 283.488707][T17588] FAT-fs (loop0): Directory bread(block 69) failed [ 283.495671][T17594] gretap0: entered allmulticast mode [ 283.506237][T17594] gretap0: entered promiscuous mode [ 283.513122][T17588] FAT-fs (loop0): Directory bread(block 70) failed [ 283.529886][T17588] FAT-fs (loop0): Directory bread(block 71) failed [ 283.538668][T17588] FAT-fs (loop0): Directory bread(block 72) failed [ 283.545433][T17588] FAT-fs (loop0): Directory bread(block 73) failed [ 283.599616][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5271'. [ 283.661956][T17588] Invalid logical block size (32768) [ 283.719637][T17617] team_slave_0: entered promiscuous mode [ 283.725795][T17617] team_slave_1: entered promiscuous mode [ 283.732860][T17617] netlink: 'syz.0.5277': attribute type 10 has an invalid length. [ 283.740878][T17617] team_slave_0: left promiscuous mode [ 283.746426][T17617] team_slave_1: left promiscuous mode [ 283.778921][T17617] team_slave_0: entered promiscuous mode [ 283.784643][T17617] team_slave_1: entered promiscuous mode [ 283.801727][T17617] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.811657][T17617] bond0: (slave team0): Enslaving as an active interface with an up link [ 283.824736][T17616] team_slave_0: left promiscuous mode [ 283.830193][T17616] team_slave_1: left promiscuous mode [ 283.840972][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5281'. [ 283.850003][T17621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5281'. [ 283.913378][T17632] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.5286'. [ 283.923237][T17634] netlink: 'syz.4.5287': attribute type 12 has an invalid length. [ 283.942447][T17632] netlink: zone id is out of range [ 283.947697][T17632] netlink: zone id is out of range [ 283.972789][T17640] syzkaller0: entered promiscuous mode [ 283.978343][T17640] syzkaller0: entered allmulticast mode [ 283.984671][T17632] netlink: zone id is out of range [ 283.989816][T17632] netlink: zone id is out of range [ 283.997155][T17632] netlink: zone id is out of range [ 284.003222][T17632] netlink: zone id is out of range [ 284.008688][T17632] netlink: zone id is out of range [ 284.029849][T17632] netlink: del zone limit has 8 unknown bytes [ 284.281939][T17659] netlink: 'syz.6.5297': attribute type 12 has an invalid length. [ 284.387185][T17661] lo speed is unknown, defaulting to 1000 [ 284.452739][T17661] lo speed is unknown, defaulting to 1000 [ 284.475554][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5304'. [ 284.519846][T17661] wg1 speed is unknown, defaulting to 1000 [ 284.526283][T17661] lo speed is unknown, defaulting to 1000 [ 284.732016][T17695] Invalid logical block size (32768) [ 284.799406][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 284.799425][ T29] audit: type=1400 audit(284.773:11875): avc: denied { create } for pid=17704 comm="syz.4.5315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 284.823416][T17703] SELinux: failed to load policy [ 284.855598][T17708] pimreg: entered allmulticast mode [ 284.866926][T17708] pimreg: left allmulticast mode [ 285.066307][T17721] gretap0: left allmulticast mode [ 285.071442][T17721] gretap0: left promiscuous mode [ 285.076820][T17721] bridge0: port 1(gretap0) entered disabled state [ 285.086750][ T29] audit: type=1400 audit(285.053:11876): avc: denied { create } for pid=17722 comm="syz.4.5321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 285.098558][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5321'. [ 285.105829][ T29] audit: type=1400 audit(285.053:11877): avc: denied { write } for pid=17722 comm="syz.4.5321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 285.163149][T17721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.175874][ T29] audit: type=1326 audit(285.143:11878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8f7bf749 code=0x7ffc0000 [ 285.202269][ T29] audit: type=1326 audit(285.143:11879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8f7bf749 code=0x7ffc0000 [ 285.225418][ T29] audit: type=1326 audit(285.143:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f5f8f7bf749 code=0x7ffc0000 [ 285.248470][ T29] audit: type=1326 audit(285.143:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8f7bf749 code=0x7ffc0000 [ 285.271521][ T29] audit: type=1326 audit(285.143:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8f7bf749 code=0x7ffc0000 [ 285.368408][T17746] ip6gre1: entered promiscuous mode [ 285.373794][T17746] ip6gre1: entered allmulticast mode [ 285.379849][ T3825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.383153][T17746] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.387564][ T3825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.396983][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5324'. [ 285.402508][ T3414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.492438][ T3414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.009761][ T29] audit: type=1326 audit(285.983:11883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17766 comm="syz.0.5334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5659af749 code=0x0 [ 286.032784][ T3414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.211749][T17770] netlink: 'syz.6.5335': attribute type 4 has an invalid length. [ 286.223061][T17770] .`: renamed from bond0 (while UP) [ 286.383795][T17779] syzkaller0: entered promiscuous mode [ 286.389307][T17779] syzkaller0: entered allmulticast mode [ 286.473004][T17783] syzkaller0: entered promiscuous mode [ 286.478546][T17783] syzkaller0: entered allmulticast mode [ 286.562465][T17750] syz.4.5328 (17750) used greatest stack depth: 6008 bytes left [ 286.593760][T17789] netlink: 'syz.4.5344': attribute type 10 has an invalid length. [ 286.786406][T17801] lo speed is unknown, defaulting to 1000 [ 286.820353][T17801] lo speed is unknown, defaulting to 1000 [ 286.857910][T17801] wg1 speed is unknown, defaulting to 1000 [ 286.864266][T17801] lo speed is unknown, defaulting to 1000 [ 286.987971][ T29] audit: type=1326 audit(286.963:11884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.4.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be22af749 code=0x7ffc0000 [ 287.149536][T17818] syzkaller0: entered promiscuous mode [ 287.155134][T17818] syzkaller0: entered allmulticast mode [ 287.213154][T17824] syzkaller0: entered promiscuous mode [ 287.218729][T17824] syzkaller0: entered allmulticast mode [ 287.449700][T17852] syzkaller0: entered promiscuous mode [ 287.455337][T17852] syzkaller0: entered allmulticast mode [ 287.513596][T17854] netlink: 'syz.6.5369': attribute type 16 has an invalid length. [ 287.521521][T17854] netlink: 'syz.6.5369': attribute type 17 has an invalid length. [ 287.537449][T17862] loop0: detected capacity change from 0 to 128 [ 287.583748][T17865] netlink: 'syz.6.5369': attribute type 1 has an invalid length. [ 287.591545][T17865] __nla_validate_parse: 3 callbacks suppressed [ 287.591560][T17865] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5369'. [ 287.668142][T17867] syzkaller0: entered promiscuous mode [ 287.673927][T17867] syzkaller0: entered allmulticast mode [ 287.784986][T17876] Falling back ldisc for ptm0. [ 287.813744][T17878] syzkaller0: entered promiscuous mode [ 287.819273][T17878] syzkaller0: entered allmulticast mode [ 287.827002][T17880] syzkaller0: entered promiscuous mode [ 287.832606][T17880] syzkaller0: entered allmulticast mode [ 287.847283][ T873] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.854058][T17882] Bluetooth: hci0: Frame reassembly failed (-90) [ 287.966091][T17888] netlink: 'syz.6.5383': attribute type 10 has an invalid length. [ 288.080103][T17891] SELinux: failed to load policy [ 288.319129][T17913] syzkaller0: entered promiscuous mode [ 288.324703][T17913] syzkaller0: entered allmulticast mode [ 289.135836][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5399'. [ 289.173384][T17925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.301863][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.345762][T17929] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5401'. [ 289.931860][ T3573] Bluetooth: hci0: command 0x1003 tx timeout [ 289.938136][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 289.991293][T17950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5411'. [ 290.002941][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 290.002975][ T29] audit: type=1400 audit(289.983:11958): avc: denied { mac_admin } for pid=17951 comm="syz.0.5412" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 290.029861][T17952] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 290.042346][T17952] netlink: 'syz.0.5412': attribute type 4 has an invalid length. [ 290.061856][T17954] geneve2: entered promiscuous mode [ 290.067206][T17954] geneve2: entered allmulticast mode [ 290.073387][ T29] audit: type=1400 audit(290.013:11959): avc: denied { relabelto } for pid=17951 comm="syz.0.5412" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 290.100841][ T29] audit: type=1400 audit(290.013:11960): avc: denied { associate } for pid=17951 comm="syz.0.5412" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sendmail_exec_t:s0" [ 290.179342][T17958] syzkaller0: entered promiscuous mode [ 290.185002][T17958] syzkaller0: entered allmulticast mode [ 290.201602][T17963] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5416'. [ 290.210708][T17963] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5416'. [ 290.246830][T17968] hub 9-0:1.0: USB hub found [ 290.251560][T17968] hub 9-0:1.0: 8 ports detected [ 290.282425][T17964] syzkaller0: entered promiscuous mode [ 290.288274][T17964] syzkaller0: entered allmulticast mode [ 290.300393][T17971] netlink: 'GP—L': attribute type 12 has an invalid length. [ 290.333055][ T3825] syzkaller0: tun_net_xmit 76 [ 290.337890][ T3825] syzkaller0: tun_net_xmit 48 [ 290.350017][T17974] syzkaller0: create flow: hash 6141874 index 1 [ 290.362287][T17974] syzkaller0: delete flow: hash 6141874 index 1 [ 290.377598][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5422'. [ 290.420326][T17979] netlink: 'syz.5.5423': attribute type 1 has an invalid length. [ 290.429294][T17979] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5423'. [ 290.447999][T17981] loop0: detected capacity change from 0 to 512 [ 290.463108][T17981] FAT-fs (loop0): Directory bread(block 199916) failed [ 290.471138][T17981] FAT-fs (loop0): Directory bread(block 199917) failed [ 290.478428][T17981] FAT-fs (loop0): Directory bread(block 199918) failed [ 290.485709][T17981] FAT-fs (loop0): Directory bread(block 199919) failed [ 290.496346][T17981] FAT-fs (loop0): Directory bread(block 199920) failed [ 290.503489][T17981] FAT-fs (loop0): Directory bread(block 199921) failed [ 290.511372][T17981] FAT-fs (loop0): Directory bread(block 199922) failed [ 290.522699][T17985] tipc: Started in network mode [ 290.527644][T17985] tipc: Node identity 1a2582fe56c2, cluster identity 4711 [ 290.530852][T17981] FAT-fs (loop0): Directory bread(block 199923) failed [ 290.534861][T17985] tipc: Enabled bearer , priority 0 [ 290.552687][T17984] tipc: Resetting bearer [ 290.570169][T17981] FAT-fs (loop0): Directory bread(block 199916) failed [ 290.577874][T17984] tipc: Disabling bearer [ 290.584215][T17981] FAT-fs (loop0): Directory bread(block 199917) failed [ 290.651586][T17991] netlink: 'syz.5.5428': attribute type 16 has an invalid length. [ 290.659704][T17991] netlink: 'syz.5.5428': attribute type 17 has an invalid length. [ 290.712063][T17994] loop0: detected capacity change from 0 to 1024 [ 290.718540][T17991] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5428'. [ 290.725585][T17994] EXT4-fs: inline encryption not supported [ 290.733642][T17994] EXT4-fs: Ignoring removed i_version option [ 290.741141][T17996] syzkaller0: entered promiscuous mode [ 290.746826][T17996] syzkaller0: entered allmulticast mode [ 290.759243][T17994] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.781289][T17994] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 2: comm syz.0.5430: lblock 2 mapped to illegal pblock 2 (length 1) [ 290.795767][T17994] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 290.804157][T17994] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 48: comm syz.0.5430: lblock 0 mapped to illegal pblock 48 (length 1) [ 290.818978][T17994] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 290.827959][T17994] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5430: Failed to acquire dquot type 0 [ 290.839710][T17994] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 290.849971][T17994] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.5430: mark_inode_dirty error [ 290.862457][T17994] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 290.881872][T17994] EXT4-fs (loop0): 1 orphan inode deleted [ 290.891260][ T29] audit: type=1400 audit(290.863:11961): avc: denied { read } for pid=18001 comm="syz.5.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.893191][T17994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.924287][T18002] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5433'. [ 290.933796][ T3825] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 290.948504][ T3825] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 290.956993][ T3825] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:34: Failed to release dquot type 0 [ 291.131675][ T29] audit: type=1400 audit(291.103:11962): avc: denied { remount } for pid=17993 comm="syz.0.5430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 291.132828][T17994] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 291.166416][ T29] audit: type=1400 audit(291.143:11963): avc: denied { create } for pid=17993 comm="syz.0.5430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.185535][ T29] audit: type=1400 audit(291.143:11964): avc: denied { setopt } for pid=17993 comm="syz.0.5430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.205190][T17994] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 291.214961][T17994] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 48: comm syz.0.5430: lblock 0 mapped to illegal pblock 48 (length 1) [ 291.229692][T17994] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 291.304896][ T3834] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.327418][ T3834] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.337265][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.348441][ T3834] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.359797][ T3834] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.393618][T18024] syzkaller0: entered allmulticast mode [ 291.406782][T18024] syzkaller0: entered promiscuous mode [ 291.430666][T18024] syzkaller0 (unregistering): left allmulticast mode [ 291.437591][T18024] syzkaller0 (unregistering): left promiscuous mode [ 291.514322][T18041] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 291.523645][T18041] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 291.540446][T18033] rdma_rxe: rxe_newlink: failed to add bond0 [ 291.598374][T18053] syzkaller0: entered promiscuous mode [ 291.604035][T18053] syzkaller0: entered allmulticast mode [ 291.644387][T18056] syzkaller0: entered promiscuous mode [ 291.649944][T18056] syzkaller0: entered allmulticast mode [ 291.808003][T18067] loop0: detected capacity change from 0 to 128 [ 291.822468][T18067] FAT-fs (loop0): bogus sectors per cluster 0 [ 291.828703][T18067] FAT-fs (loop0): Can't find a valid FAT filesystem [ 291.974505][T18079] validate_nla: 3 callbacks suppressed [ 291.974525][T18079] netlink: 'syz.0.5452': attribute type 4 has an invalid length. [ 292.011064][T18079] netlink: 'syz.0.5452': attribute type 4 has an invalid length. [ 292.311732][T18099] netlink: 'syz.5.5459': attribute type 1 has an invalid length. [ 292.409148][T18101] syzkaller0: entered promiscuous mode [ 292.414802][T18101] syzkaller0: entered allmulticast mode [ 292.957839][T18123] loop0: detected capacity change from 0 to 512 [ 292.987488][T18123] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 292.999194][T18123] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 293.009442][T18123] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.5469: Corrupt directory, running e2fsck is recommended [ 293.100737][T18123] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 293.119499][T18123] EXT4-fs error (device loop0): ext4_iget_extra_inode:5071: inode #15: comm syz.0.5469: corrupted in-inode xattr: invalid ea_ino [ 293.142094][T18123] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5469: couldn't read orphan inode 15 (err -117) [ 293.176188][T18132] bond_slave_1: mtu less than device minimum [ 293.185095][T18123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.209938][T18119] __nla_validate_parse: 2 callbacks suppressed [ 293.209957][T18119] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5468'. [ 293.254296][T18135] bond0: option miimon: invalid value (18446744073709551615) [ 293.261742][T18135] bond0: option miimon: allowed values 0 - 2147483647 [ 293.289268][T18142] netlink: 'syz.6.5474': attribute type 10 has an invalid length. [ 293.307318][T15303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.318779][T18135] bond0 (unregistering): Released all slaves [ 293.551503][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5481'. [ 293.654763][T18170] netlink: 'syz.4.5487': attribute type 16 has an invalid length. [ 293.662698][T18170] netlink: 'syz.4.5487': attribute type 17 has an invalid length. [ 293.828971][T18194] bridge0: port 1(gretap0) entered blocking state [ 293.835569][T18194] bridge0: port 1(gretap0) entered disabled state [ 293.849660][T18173] ================================================================== [ 293.857818][T18173] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 293.861331][T18194] gretap0: entered allmulticast mode [ 293.865763][T18173] [ 293.865772][T18173] write to 0xffff888136aebb60 of 8 bytes by task 18195 on cpu 0: [ 293.865792][T18173] cpu_map_kthread_run+0x529/0x1560 [ 293.884348][T18194] gretap0: entered promiscuous mode [ 293.886356][T18173] kthread+0x489/0x510 [ 293.895754][T18173] ret_from_fork+0x149/0x290 [ 293.900383][T18173] ret_from_fork_asm+0x1a/0x30 [ 293.905181][T18173] [ 293.907519][T18173] read to 0xffff888136aebb60 of 8 bytes by task 18173 on cpu 1: [ 293.915168][T18173] bq_flush_to_queue+0x124/0x350 [ 293.920150][T18173] cpu_map_enqueue+0x1a6/0x1c0 [ 293.924940][T18173] xdp_do_redirect_frame+0x27c/0x560 [ 293.930258][T18173] bpf_test_run_xdp_live+0x98c/0x11d0 [ 293.935647][T18173] bpf_prog_test_run_xdp+0x525/0x970 [ 293.940962][T18173] bpf_prog_test_run+0x22a/0x390 [ 293.945909][T18173] __sys_bpf+0x4c0/0x7c0 [ 293.950178][T18173] __x64_sys_bpf+0x41/0x50 [ 293.954615][T18173] x64_sys_call+0x28e1/0x3000 [ 293.959341][T18173] do_syscall_64+0xd8/0x2a0 [ 293.963858][T18173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.969764][T18173] [ 293.972091][T18173] value changed: 0xffff888111a25070 -> 0x0000000000000000 [ 293.979201][T18173] [ 293.981537][T18173] Reported by Kernel Concurrency Sanitizer on: [ 293.987733][T18173] CPU: 1 UID: 0 PID: 18173 Comm: syz.1.5485 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.999217][T18173] Tainted: [W]=WARN [ 294.003032][T18173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.013104][T18173] ================================================================== [ 297.291929][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!