last executing test programs: 1m30.007109445s ago: executing program 3 (id=663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0xd62}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "000000000100", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", ' \x00', "066580001e00"}, 0x38) 1m29.906531916s ago: executing program 3 (id=671): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close(r0) 1m29.818573438s ago: executing program 3 (id=674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x1070bd27, 0x7ffa, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0x71022c39d5e9904c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 1m29.785229018s ago: executing program 3 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 1m29.734052728s ago: executing program 3 (id=680): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m29.596595621s ago: executing program 3 (id=690): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 1m29.579114061s ago: executing program 32 (id=690): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 43.679212675s ago: executing program 4 (id=1932): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="adf52f8b4710", 0x6) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r1) 43.657756435s ago: executing program 4 (id=1933): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 43.602307956s ago: executing program 4 (id=1934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f873918cf87310300", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r0) 43.602024096s ago: executing program 4 (id=1935): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20) 43.601586366s ago: executing program 4 (id=1936): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 43.444862638s ago: executing program 4 (id=1941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x1000000300) 43.443991428s ago: executing program 33 (id=1941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x1000000300) 2.123260322s ago: executing program 6 (id=3048): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @random="0b65c01cd7d3"}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.933187374s ago: executing program 0 (id=3052): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) 1.891063035s ago: executing program 0 (id=3054): memfd_create(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 1.660731478s ago: executing program 6 (id=3061): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) io_uring_setup(0x1783, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) 1.546446829s ago: executing program 6 (id=3075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4e, 0x0) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0'}, 0xb) 1.327048612s ago: executing program 0 (id=3071): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xcc884c1da9a4b356, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.287246112s ago: executing program 0 (id=3072): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 1.094249276s ago: executing program 1 (id=3088): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x749, &(0x7f00000003c0)={0x0, 0x6666, 0x400, 0x1000, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000, 0x0, 0x2000c081}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.076375476s ago: executing program 1 (id=3079): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4407}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffbb, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000009500000000000000f6fb017a5f8aa11b4ae890b1a1fb4e1880bb72e228fb94298ad7f89d5372a644c4"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x6, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.020757366s ago: executing program 1 (id=3080): socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 922.919398ms ago: executing program 1 (id=3082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x82000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(r3, 0x0, 0x40000000, 0x0) fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x2, r3}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 848.887288ms ago: executing program 1 (id=3084): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) dup3(r1, r0, 0x0) 717.11336ms ago: executing program 5 (id=3086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) 693.732211ms ago: executing program 5 (id=3087): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 636.979231ms ago: executing program 6 (id=3089): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 632.081811ms ago: executing program 6 (id=3090): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_io_uring_setup(0xbb4, &(0x7f00000000c0)={0x0, 0x8467, 0x40, 0x2, 0x380}, &(0x7f0000000000), &(0x7f0000000240)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000440)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8c21, 0x5, 0xd9, 0x80000001}, {0x7, 0x80, 0x8, 0x2}}}, &(0x7f0000000480), 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e8, &(0x7f0000000900)="$eJzs3c1vVFUbAPDnTj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd3pvmWnv9Iu2t3J/v2To+ZjLObfTp/fM6Tl3AqiswfSfWsT+iJhOIvqT+cW6zsgqBxee9+DPj86mjyTq9dd+TyLJyvLnJ9nXvuzgnoj48Yck9nUsb3dm7trF8ampyatZfnj20vTwzNy1wxcujZ+fPD95efSF0RPHjx0/MXJkQ+d1vaDs9M133+//ZOzNb776Kxn59pexJE7Gy9kTm89jswzGYON7kiyv6jux2Y2VpCP7OWl+iZPOomd2bV+nWLP89UtfnSfi1p486lP98fErpXYO2FL1JKIOVFQi/qGi8nFA/t5+6fvgWimjEmA73D+1MAGwPP47F+YGo6cxN7D7QRLN0zpJRGxsZq7Vnoi4e2fs5rk7Yzdji+bhgGLzNyLiyaL4TxrxPxA9MdCI/1pL/KfjgjPZ17T81Q22v3SqWPzD9lmI/54V4z/axP9bTfH/9gbbH3yYfKe3Jf57N3pKAAAAAAAAUFm3T0XE80V//68trv+JgvU/fRFxchPaH1ySX/73/9q9TWgGKHD/VMRLhet/a/nq34GOLPWfxnqAruTchanJIxHx34g4FF270vzICm0c/nTfl+3qBrP1f/kjbf9uthYw68e9zl2tx0yMz44/6nkDEfdvRDxVuP43Wbz+JwXX//T3wfQa29j37K0z7epWj39gq9S/jjj48Prf3Rz/uWTl+3MMN8YDw/moYLmnP/zsu3btbzT+C28xAaxLev3fXTj+X4z/gaT5fj0z62/j6FxnvV1dHv/9WX6t4//u5PXGLWe6s7IPxmdnr45EdCenO9LSlvLR9fcZHkd5POTxksb/oWdWnv8rGv/3RsT8kv87+aN1T3Hu/3/3/dquP8b/UJ40/ifWdf1ff2L01sD37dpf2/zfsca1/lBWYv4PFnyRh2l3a3lzFA4sJDoLqjYwmgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAahGxJ5La0GK6VhsaiuiLiP/F7o64MjP73Lkr712eSOsan/9fyz/pt38hn+Sf/z/QlB9dkj8aEXsj4vOO3kZ+6OyVqYmyTx4AAAAAAAAAAAAAAAAAAAB2iL42+/9Tv3WU3Ttgy3WW3QGgNAXx/1MZ/QC2n+s/VJf4h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/gEAAAAA4LGy98Dtn5OImH+xt/FIdWd1XaX2DNhqtbI7AJTGLX6guiz9geryHh9IVqnvaXvQakeuZPrsIxwMAAAAAAAAAAAAAJVzcL/9/1BV9v9Dddn/D9WV7/8/UHI/gO3nPT4Qq+zkL9z/v+pRAAAAAAAAAAAAAMBmmpm7dnF8amryqsQbO6Mb25mo1+vX05+CndKff3kiXwq/U/qzJJHv9VvbUeX9TgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr9EwAA///ByB+M") r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffefffffc, 0x10a002) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, 0x33, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 491.310103ms ago: executing program 5 (id=3091): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x867}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0) tkill(0x0, 0x7) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0x0, 0x0, 0x148, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0xffffffff, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "beae"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0x0, 0x0, 0x0, 0xff000000], 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 461.933284ms ago: executing program 5 (id=3092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xd, 0x10, 0x5}, 0x10, 0x499a, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r0, r0, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000700)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 447.761064ms ago: executing program 6 (id=3093): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x180, 0x3, 0x0, 'queue1\x00', 0x9}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0}) 412.940234ms ago: executing program 0 (id=3094): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x529, &(0x7f00000008c0)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) unlink(&(0x7f0000000080)='./file2\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) 348.262335ms ago: executing program 2 (id=3095): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 342.864925ms ago: executing program 5 (id=3096): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r3 = dup(r2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x0, 0x3, 0x4, 0x2}}, 0x2e) 319.413735ms ago: executing program 0 (id=3097): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020646500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000920000008500000006000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 317.423555ms ago: executing program 2 (id=3108): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 116.771028ms ago: executing program 5 (id=3099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="b24131fa5b15ca4a7e0c559aa5a01c7644f2a0e28a90ba8f1e4ec3ad", 0x1c}, {&(0x7f0000000640)="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", 0x7ea}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 115.819498ms ago: executing program 2 (id=3110): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) 97.614868ms ago: executing program 2 (id=3100): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x802, 0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 65.049569ms ago: executing program 2 (id=3101): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 925.52µs ago: executing program 1 (id=3102): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x62040200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x810, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008054}, 0xc014) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xae) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x38, 0x10, 0x437, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80) 0s ago: executing program 2 (id=3103): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): et [1, 0] type 2 family 0 port 6081 - 0 [ 54.952963][ T5248] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.025996][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 55.053650][ T5465] netlink: 'syz.2.738': attribute type 4 has an invalid length. [ 55.080570][ T5476] netlink: 96 bytes leftover after parsing attributes in process `syz.5.691'. [ 55.090026][ T5476] netlink: 'syz.5.691': attribute type 5 has an invalid length. [ 55.097687][ T5476] netlink: 44 bytes leftover after parsing attributes in process `syz.5.691'. [ 55.123754][ T5480] netlink: 'syz.2.738': attribute type 4 has an invalid length. [ 55.203417][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.210767][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.232112][ T5393] bridge_slave_0: entered allmulticast mode [ 55.239022][ T5393] bridge_slave_0: entered promiscuous mode [ 55.245929][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.253108][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.268655][ T5393] bridge_slave_1: entered allmulticast mode [ 55.276294][ T5393] bridge_slave_1: entered promiscuous mode [ 55.304507][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.316690][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.343062][ T5393] team0: Port device team_slave_0 added [ 55.359784][ T5393] team0: Port device team_slave_1 added [ 55.392666][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.400034][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.426285][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.437886][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.444895][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.470898][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.471356][ T5482] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 55.489239][ T5482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.737'. [ 55.512003][ T5393] hsr_slave_0: entered promiscuous mode [ 55.524211][ T5393] hsr_slave_1: entered promiscuous mode [ 55.571447][ T5514] vhci_hcd: invalid port number 96 [ 55.576725][ T5514] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 55.692014][ T5535] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.914373][ T5393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.938880][ T5393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.948736][ T5574] binfmt_misc: register: failed to install interpreter file ./file2 [ 55.956369][ T5393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.968250][ T5393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.028425][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.049487][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.087311][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.094583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.114065][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.121199][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.144132][ T5393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.154680][ T5393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.239875][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.315734][ T5626] netlink: 180 bytes leftover after parsing attributes in process `syz.5.771'. [ 56.329579][ T5629] pim6reg1: entered promiscuous mode [ 56.334973][ T5629] pim6reg1: entered allmulticast mode [ 56.404958][ T5393] veth0_vlan: entered promiscuous mode [ 56.441304][ T5393] veth1_vlan: entered promiscuous mode [ 56.470936][ T5393] veth0_macvtap: entered promiscuous mode [ 56.485339][ T5393] veth1_macvtap: entered promiscuous mode [ 56.499975][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.520660][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.539805][ T5393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.548689][ T5393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.557522][ T5393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.566275][ T5393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.818527][ T5667] wireguard1: entered promiscuous mode [ 57.051799][ T5691] mmap: syz.1.791 (5691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.091184][ T5696] program syz.0.792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.100549][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 57.100566][ T29] audit: type=1400 audit(1747794458.099:622): avc: denied { bind } for pid=5694 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.561415][ T29] audit: type=1400 audit(1747794458.559:623): avc: denied { remount } for pid=5721 comm="syz.2.804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.627867][ T5728] syzkaller1: entered promiscuous mode [ 57.633505][ T5728] syzkaller1: entered allmulticast mode [ 57.659397][ T29] audit: type=1326 audit(1747794458.659:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 57.682718][ T29] audit: type=1326 audit(1747794458.659:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 57.707202][ T29] audit: type=1326 audit(1747794458.659:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 57.730676][ T29] audit: type=1326 audit(1747794458.659:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 57.754122][ T29] audit: type=1326 audit(1747794458.659:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 57.777595][ T29] audit: type=1326 audit(1747794458.659:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 57.800986][ T29] audit: type=1326 audit(1747794458.659:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 57.824401][ T29] audit: type=1326 audit(1747794458.659:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 57.897726][ T5740] netlink: 9 bytes leftover after parsing attributes in process `syz.5.812'. [ 57.911261][ T5740] gretap0: entered promiscuous mode [ 57.926491][ T5740] netlink: 5 bytes leftover after parsing attributes in process `syz.5.812'. [ 57.948666][ T5740] 0ªX¹¦D: renamed from gretap0 [ 57.955537][ T5740] 0ªX¹¦D: left promiscuous mode [ 57.960579][ T5740] 0ªX¹¦D: entered allmulticast mode [ 57.968855][ T5740] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 58.028781][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 58.040650][ T5760] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 58.313490][ T5778] syz_tun: entered allmulticast mode [ 58.319612][ T5777] syz_tun: left allmulticast mode [ 58.941279][ T5801] IPv4: Oversized IP packet from 127.202.26.0 [ 59.487935][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 59.566203][ T5856] program syz.4.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.018559][ T5861] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 60.026649][ T5861] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 60.094972][ T5872] netlink: 24 bytes leftover after parsing attributes in process `syz.5.864'. [ 60.240020][ T5889] block device autoloading is deprecated and will be removed. [ 60.344186][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.877'. [ 61.101179][ T5935] veth1_to_bond: entered allmulticast mode [ 61.107230][ T5935] veth1_to_bond: entered promiscuous mode [ 61.113273][ T5935] veth1_to_bond: left promiscuous mode [ 61.119027][ T5935] veth1_to_bond: left allmulticast mode [ 61.248746][ T36] usb usb8-port2: attempt power cycle [ 61.413983][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 61.447195][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.454864][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.534415][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.541900][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.039241][ T5975] usb usb2: usbfs: interface 0 claimed by hub while 'syz.2.910' sets config #0 [ 62.138684][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 62.147735][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 62.164284][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 62.187392][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 62.192404][ T5980] dummy0: entered promiscuous mode [ 62.214631][ T5980] macsec1: entered promiscuous mode [ 62.224782][ T5980] macsec1: entered allmulticast mode [ 62.239101][ T5980] dummy0: entered allmulticast mode [ 62.262001][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 62.271062][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 62.610767][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 62.610869][ T29] audit: type=1400 audit(1747794463.599:690): avc: denied { write } for pid=6016 comm="syz.5.921" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.118870][ T36] usb usb8-port2: unable to enumerate USB device [ 63.283685][ T29] audit: type=1400 audit(1747794464.279:691): avc: denied { write } for pid=6035 comm="syz.0.930" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=44250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.545120][ T29] audit: type=1326 audit(1747794464.539:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 63.589754][ T29] audit: type=1326 audit(1747794464.569:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 63.612961][ T29] audit: type=1326 audit(1747794464.569:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 63.636302][ T29] audit: type=1326 audit(1747794464.569:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 63.659635][ T29] audit: type=1326 audit(1747794464.569:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 63.682906][ T29] audit: type=1326 audit(1747794464.569:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 63.706325][ T29] audit: type=1326 audit(1747794464.569:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 63.729644][ T29] audit: type=1326 audit(1747794464.569:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 63.784991][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 63.809729][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.113285][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.144599][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.171577][ T6111] syzkaller0: entered promiscuous mode [ 64.436134][ T6158] syz_tun: entered allmulticast mode [ 64.443040][ T6156] syz_tun: left allmulticast mode [ 64.485150][ T6162] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 64.494624][ T6162] SELinux: failed to load policy [ 64.942199][ T6195] vhci_hcd: invalid port number 94 [ 64.947454][ T6195] vhci_hcd: default hub control req: 0017 v007f i005e l0 [ 65.025450][ T6205] pim6reg1: entered promiscuous mode [ 65.030940][ T6205] pim6reg1: entered allmulticast mode [ 65.159320][ T6227] __nla_validate_parse: 5 callbacks suppressed [ 65.159333][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 65.195300][ T6231] IPv4: Oversized IP packet from 127.202.26.0 [ 65.382601][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 65.399911][ T6242] dummy0: entered promiscuous mode [ 65.409351][ T6248] netlink: 64 bytes leftover after parsing attributes in process `syz.5.981'. [ 65.412180][ T6242] macsec1: entered promiscuous mode [ 65.424291][ T6242] macsec1: entered allmulticast mode [ 65.429945][ T6242] dummy0: entered allmulticast mode [ 65.472026][ T6252] serio: Serial port ptm0 [ 65.515443][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'. [ 65.618114][ T3391] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 65.625672][ T3391] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 65.633232][ T3391] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 65.645270][ T3391] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 65.690791][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 65.692933][ T6286] fido_id[6286]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.699785][ T6296] netlink: 'syz.1.996': attribute type 30 has an invalid length. [ 65.727592][ T6296] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.736476][ T6296] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.745374][ T6296] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.754154][ T6296] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.765374][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 65.774450][ T6296] netlink: 'syz.1.996': attribute type 30 has an invalid length. [ 65.795358][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.812139][ T6306] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 65.825978][ T6306] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 65.940023][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1001'. [ 65.949114][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1001'. [ 65.958239][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1001'. [ 65.990215][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1001'. [ 66.268838][ T36] usb usb8-port2: attempt power cycle [ 66.352392][ T6423] syzkaller1: entered promiscuous mode [ 66.357923][ T6423] syzkaller1: entered allmulticast mode [ 66.818023][ T6479] IPv6: Can't replace route, no match found [ 67.349557][ T6532] ref_ctr_offset mismatch. inode: 0xb7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 67.523882][ T6552] serio: Serial port ptm0 [ 67.638880][ T6564] syzkaller0: entered promiscuous mode [ 67.644547][ T6564] syzkaller0: entered allmulticast mode [ 67.679424][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 67.679468][ T29] audit: type=1326 audit(1747794468.679:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.709196][ T29] audit: type=1326 audit(1747794468.679:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.765248][ T29] audit: type=1326 audit(1747794468.729:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.788723][ T29] audit: type=1326 audit(1747794468.729:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.812686][ T29] audit: type=1326 audit(1747794468.729:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.836149][ T29] audit: type=1326 audit(1747794468.729:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.859538][ T29] audit: type=1326 audit(1747794468.729:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.883510][ T29] audit: type=1326 audit(1747794468.729:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.907016][ T29] audit: type=1326 audit(1747794468.729:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.5.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 67.930469][ T29] audit: type=1400 audit(1747794468.729:1043): avc: denied { listen } for pid=6585 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.975778][ T6593] syz_tun: entered promiscuous mode [ 67.983183][ T6593] syz_tun: left promiscuous mode [ 68.022179][ T6619] serio: Serial port ptm0 [ 68.069874][ T6623] netlink: 'syz.5.1055': attribute type 7 has an invalid length. [ 68.138855][ T36] usb usb8-port2: unable to enumerate USB device [ 68.149289][ T6629] wireguard0: entered promiscuous mode [ 68.187265][ T6656] siw: device registration error -23 [ 68.300993][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.308576][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.316038][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.317191][ T6672] netlink: 'syz.4.1066': attribute type 2 has an invalid length. [ 68.325829][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.339035][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.346437][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.354019][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.361439][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.369005][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.376424][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.383941][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.391512][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.398958][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.408551][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.416073][ T3394] hid-generic 0006:0000:0000.0007: unknown main item tag 0x0 [ 68.425078][ T3394] hid-generic 0006:0000:0000.0007: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 68.449418][ T6692] fido_id[6692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.702738][ T6751] hub 4-0:1.0: USB hub found [ 68.710022][ T6751] hub 4-0:1.0: 8 ports detected [ 68.813231][ T6794] bridge: RTM_NEWNEIGH with invalid ether address [ 68.927682][ T6815] smc: net device bond0 applied user defined pnetid SYZ2 [ 68.971329][ T6846] smc: net device bond0 erased user defined pnetid SYZ2 [ 69.203561][ T6895] lo speed is unknown, defaulting to 1000 [ 69.219559][ T6895] lo speed is unknown, defaulting to 1000 [ 69.225555][ T6895] lo speed is unknown, defaulting to 1000 [ 69.233357][ T6895] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 69.254192][ T6895] lo speed is unknown, defaulting to 1000 [ 69.268786][ T6895] lo speed is unknown, defaulting to 1000 [ 69.279363][ T6895] lo speed is unknown, defaulting to 1000 [ 69.312384][ T6895] lo speed is unknown, defaulting to 1000 [ 69.350856][ T6895] lo speed is unknown, defaulting to 1000 [ 69.357674][ T6916] lo speed is unknown, defaulting to 1000 [ 69.444859][ T6940] lo speed is unknown, defaulting to 1000 [ 69.478893][ T6960] netlink: 'syz.4.1108': attribute type 16 has an invalid length. [ 69.486770][ T6960] netlink: 'syz.4.1108': attribute type 17 has an invalid length. [ 69.489510][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.506285][ T6962] smc: net device bond0 applied user defined pnetid SYZ2 [ 69.514412][ T6962] smc: net device bond0 erased user defined pnetid SYZ2 [ 69.521132][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.579579][ T6960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.624761][ T6984] syzkaller0: entered promiscuous mode [ 69.630496][ T6984] syzkaller0: entered allmulticast mode [ 69.692778][ T7004] lo speed is unknown, defaulting to 1000 [ 69.980754][ T7065] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 69.998815][ T10] usb usb8-port2: attempt power cycle [ 70.005725][ T7065] block device autoloading is deprecated and will be removed. [ 70.274369][ T7075] 9pnet_fd: p9_fd_create_unix (7075): problem connecting socket: ./file1: -2 [ 70.312784][ T7077] syzkaller0: entered promiscuous mode [ 70.318283][ T7077] syzkaller0: entered allmulticast mode [ 70.456181][ T7098] loop1: detected capacity change from 0 to 1024 [ 70.463525][ T7098] EXT4-fs: Ignoring removed orlov option [ 70.470396][ T7098] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 70.500199][ T7098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.517592][ T7098] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.541720][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.843592][ T7123] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 70.852356][ T7123] SELinux: failed to load policy [ 70.885491][ T7125] __nla_validate_parse: 10 callbacks suppressed [ 70.885527][ T7125] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1143'. [ 70.996848][ T7144] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 71.004749][ T7144] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1148'. [ 71.029873][ T7148] lo speed is unknown, defaulting to 1000 [ 71.077212][ T7156] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 71.085696][ T7156] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 71.150645][ T7178] SELinux: failed to load policy [ 71.255292][ T7182] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 71.295367][ T7198] capability: warning: `syz.5.1156' uses 32-bit capabilities (legacy support in use) [ 71.323509][ T7200] netlink: 472 bytes leftover after parsing attributes in process `syz.5.1157'. [ 71.345260][ T7201] wireguard1: entered promiscuous mode [ 71.416189][ T7212] pim6reg1: entered promiscuous mode [ 71.421617][ T7212] pim6reg1: entered allmulticast mode [ 71.790849][ T7239] sd 0:0:1:0: device reset [ 71.818685][ T10] usb usb8-port2: unable to enumerate USB device [ 71.867443][ T7245] $Hÿ: renamed from bond0 (while UP) [ 71.895785][ T7245] $Hÿ: entered promiscuous mode [ 71.901169][ T7245] bond_slave_0: entered promiscuous mode [ 71.907097][ T7245] bond_slave_1: entered promiscuous mode [ 71.947482][ T7261] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 72.097291][ T7277] lo speed is unknown, defaulting to 1000 [ 72.114902][ T7282] 9pnet_fd: p9_fd_create_unix (7282): problem connecting socket: ./file1: -2 [ 72.255108][ T7318] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 72.308062][ T7326] block device autoloading is deprecated and will be removed. [ 72.608253][ T7366] tipc: Started in network mode [ 72.613334][ T7366] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 72.623640][ T7366] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.632028][ T7366] tipc: Enabled bearer , priority 10 [ 72.933792][ T7377] lo speed is unknown, defaulting to 1000 [ 72.970970][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 72.970987][ T29] audit: type=1326 audit(1747794473.969:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 73.001767][ T29] audit: type=1326 audit(1747794473.969:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 73.025273][ T29] audit: type=1326 audit(1747794473.969:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 73.049131][ T29] audit: type=1326 audit(1747794473.969:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 73.072735][ T29] audit: type=1326 audit(1747794473.969:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 73.096407][ T29] audit: type=1326 audit(1747794473.969:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 73.119842][ T29] audit: type=1326 audit(1747794473.969:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 73.143578][ T29] audit: type=1326 audit(1747794473.969:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 73.167116][ T29] audit: type=1326 audit(1747794473.969:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.5.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 73.214943][ T7413] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.315180][ T7423] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1198'. [ 73.324430][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 73.466670][ T7440] only policy match revision 0 supported [ 73.466688][ T7440] unable to load match [ 73.487399][ T29] audit: type=1400 audit(1747794474.469:1135): avc: denied { map } for pid=7437 comm="syz.5.1207" path="socket:[15419]" dev="sockfs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.518666][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1210'. [ 73.603426][ T7465] veth0_vlan: entered allmulticast mode [ 73.615684][ T7464] lo speed is unknown, defaulting to 1000 [ 73.659072][ T36] tipc: Node number set to 1 [ 73.752270][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 73.777931][ T7499] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 73.884387][ T7515] lo speed is unknown, defaulting to 1000 [ 73.941740][ T7515] netlink: 'syz.0.1224': attribute type 16 has an invalid length. [ 73.949671][ T7515] netlink: 'syz.0.1224': attribute type 17 has an invalid length. [ 73.962306][ T7515] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 73.981513][ T7540] IPv4: Oversized IP packet from 127.202.26.0 [ 74.011366][ T7546] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 74.023040][ T7546] batman_adv: batadv0: Adding interface: team0 [ 74.029342][ T7546] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.054606][ T7546] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 74.223406][ T7554] pim6reg1: entered promiscuous mode [ 74.228817][ T7554] pim6reg1: entered allmulticast mode [ 74.251662][ T7558] wireguard0: entered promiscuous mode [ 74.305366][ T7578] netlink: 'syz.1.1236': attribute type 13 has an invalid length. [ 74.361889][ T7593] Illegal XDP return value 1339006175 on prog (id 947) dev syz_tun, expect packet loss! [ 74.370788][ T7595] lo speed is unknown, defaulting to 1000 [ 74.456894][ T7595] netlink: 'syz.5.1239': attribute type 16 has an invalid length. [ 74.464833][ T7595] netlink: 'syz.5.1239': attribute type 17 has an invalid length. [ 74.486450][ T7595] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.606534][ T7640] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 74.615564][ T7640] ref_ctr increment failed for inode: 0x287 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811a7aa100 [ 74.709847][ T7646] wireguard2: entered promiscuous mode [ 74.807957][ T7662] pim6reg1: entered promiscuous mode [ 74.813604][ T7662] pim6reg1: entered allmulticast mode [ 74.913358][ T7667] lo speed is unknown, defaulting to 1000 [ 74.989840][ T7701] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1262'. [ 75.051518][ T7710] netlink: 'syz.1.1264': attribute type 10 has an invalid length. [ 75.069411][ T7713] macvtap0: entered promiscuous mode [ 75.075424][ T7713] macvtap0: left promiscuous mode [ 75.085515][ T7710] bridge0: port 3(team0) entered disabled state [ 75.095597][ T7710] team0: left allmulticast mode [ 75.100653][ T7710] team_slave_0: left allmulticast mode [ 75.105838][ T7711] SELinux: ebitmap: truncated map [ 75.106217][ T7710] team_slave_1: left allmulticast mode [ 75.114271][ T7711] SELinux: failed to load policy [ 75.116729][ T7710] team0: left promiscuous mode [ 75.126602][ T7710] team_slave_0: left promiscuous mode [ 75.132120][ T7710] team_slave_1: left promiscuous mode [ 75.137649][ T7710] bridge0: port 3(team0) entered disabled state [ 75.363012][ T7740] netlink: 'syz.2.1273': attribute type 4 has an invalid length. [ 75.403851][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.413000][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.511540][ T7756] lo speed is unknown, defaulting to 1000 [ 76.102174][ T7826] IPv6: Can't replace route, no match found [ 76.111734][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.120982][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.123768][ T7817] pim6reg1: entered promiscuous mode [ 76.134322][ T7817] pim6reg1: entered allmulticast mode [ 76.151513][ T7818] wireguard0: entered promiscuous mode [ 76.177041][ T7845] ip6gre1: entered allmulticast mode [ 76.200483][ T7849] bridge_slave_1: left allmulticast mode [ 76.206238][ T7849] bridge_slave_1: left promiscuous mode [ 76.212145][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.220196][ T7849] bridge_slave_0: left allmulticast mode [ 76.225876][ T7849] bridge_slave_0: left promiscuous mode [ 76.231640][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.586891][ T7892] __nla_validate_parse: 2 callbacks suppressed [ 76.586910][ T7892] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1311'. [ 76.888099][ T7913] netlink: 'syz.4.1319': attribute type 12 has an invalid length. [ 77.156158][ T7906] Set syz1 is full, maxelem 65536 reached [ 77.260390][ T7935] team0: No ports can be present during mode change [ 77.325401][ T7944] $Hÿ: renamed from bond0 (while UP) [ 77.333540][ T7944] $Hÿ: entered promiscuous mode [ 77.338665][ T7944] bond_slave_0: entered promiscuous mode [ 77.344394][ T7944] bond_slave_1: entered promiscuous mode [ 77.573395][ T7950] bridge0: entered promiscuous mode [ 77.588147][ T7950] macvlan2: entered promiscuous mode [ 77.595026][ T7950] bridge0: port 3(macvlan2) entered blocking state [ 77.601716][ T7950] bridge0: port 3(macvlan2) entered disabled state [ 77.608771][ T7950] macvlan2: entered allmulticast mode [ 77.614181][ T7950] bridge0: entered allmulticast mode [ 77.633723][ T7950] macvlan2: left allmulticast mode [ 77.638980][ T7950] bridge0: left allmulticast mode [ 77.644827][ T7950] bridge0: left promiscuous mode [ 77.676396][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.685647][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.694673][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.717612][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.726708][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.735971][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.785086][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.794247][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.803280][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 77.873342][ T7989] wireguard0: entered promiscuous mode [ 77.895238][ T7998] sd 0:0:1:0: device reset [ 77.958039][ T8014] macvlan1: entered promiscuous mode [ 77.965309][ T8014] ipvlan0: entered promiscuous mode [ 77.973723][ T8014] ipvlan0: left promiscuous mode [ 77.979662][ T8014] macvlan1: left promiscuous mode [ 78.082277][ T8034] syzkaller0: entered promiscuous mode [ 78.087912][ T8034] syzkaller0: entered allmulticast mode [ 78.106730][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 78.106748][ T29] audit: type=1400 audit(1747794479.099:1317): avc: denied { execute } for pid=8040 comm="syz.4.1357" name="file0" dev="ramfs" ino=16024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 78.138023][ T29] audit: type=1400 audit(1747794479.139:1318): avc: denied { execute_no_trans } for pid=8040 comm="syz.4.1357" path="/file0" dev="ramfs" ino=16024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 78.165228][ T29] audit: type=1400 audit(1747794479.159:1319): avc: denied { mounton } for pid=8041 comm="syz.0.1356" path="/92/file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 78.202630][ T8049] IPv4: Oversized IP packet from 127.202.26.0 [ 78.339988][ T29] audit: type=1326 audit(1747794479.339:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 78.363509][ T29] audit: type=1326 audit(1747794479.339:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 78.391826][ T29] audit: type=1326 audit(1747794479.389:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 78.415380][ T29] audit: type=1326 audit(1747794479.389:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.1364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x0 [ 78.438308][ T29] audit: type=1326 audit(1747794479.389:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.1364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x0 [ 78.851821][ T29] audit: type=1400 audit(1747794479.849:1325): avc: denied { read write } for pid=8119 comm="syz.0.1379" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.926072][ T29] audit: type=1400 audit(1747794479.889:1326): avc: denied { open } for pid=8119 comm="syz.0.1379" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 79.029098][ T8138] pim6reg1: entered promiscuous mode [ 79.034467][ T8138] pim6reg1: entered allmulticast mode [ 79.058087][ T8139] lo speed is unknown, defaulting to 1000 [ 79.204319][ T8178] pim6reg1: entered promiscuous mode [ 79.209803][ T8178] pim6reg1: entered allmulticast mode [ 79.231145][ T8127] openvswitch: netlink: Message has 6 unknown bytes. [ 79.480231][ T8198] lo speed is unknown, defaulting to 1000 [ 79.490148][ T8202] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 79.508140][ T8202] SELinux: failed to load policy [ 79.640448][ T8233] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 79.648916][ T8233] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 80.100498][ T8265] lo speed is unknown, defaulting to 1000 [ 80.553330][ T8296] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 80.635770][ T8298] hub 9-0:1.0: USB hub found [ 80.656875][ T8298] hub 9-0:1.0: 8 ports detected [ 80.828958][ T8319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.857075][ T8323] serio: Serial port pts0 [ 80.925091][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 80.932947][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 80.942064][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 80.949781][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 80.957636][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 80.965417][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 80.973191][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 80.980932][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 80.988627][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 80.996310][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 81.004007][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 81.008697][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.011829][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 81.026503][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.027688][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 81.043233][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 81.050988][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 81.058709][ T1040] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 81.067005][ T8328] wireguard1: entered promiscuous mode [ 81.067629][ T1040] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 81.086454][ T8328] wireguard1: entered allmulticast mode [ 81.218190][ T8366] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 81.640784][ T8414] pim6reg1: entered promiscuous mode [ 81.646344][ T8414] pim6reg1: entered allmulticast mode [ 81.732315][ T8431] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 81.732315][ T8431] program syz.1.1454 not setting count and/or reply_len properly [ 81.756583][ T8437] sch_fq: defrate 0 ignored. [ 82.107638][ T8439] Set syz1 is full, maxelem 65536 reached [ 82.541871][ T8464] Falling back ldisc for ttyS3. [ 82.988337][ T8504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.183099][ T8485] lo speed is unknown, defaulting to 1000 [ 83.759835][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 83.759852][ T29] audit: type=1326 audit(1747794484.759:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 83.790172][ T29] audit: type=1326 audit(1747794484.759:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 83.813751][ T29] audit: type=1326 audit(1747794484.769:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 83.837092][ T29] audit: type=1326 audit(1747794484.769:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 83.860542][ T29] audit: type=1326 audit(1747794484.769:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 83.908896][ T29] audit: type=1326 audit(1747794484.789:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 83.932412][ T29] audit: type=1326 audit(1747794484.789:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 83.955857][ T29] audit: type=1326 audit(1747794484.789:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 83.979769][ T29] audit: type=1326 audit(1747794484.879:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 84.003242][ T29] audit: type=1326 audit(1747794484.879:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 84.120324][ T8568] tipc: Started in network mode [ 84.125343][ T8568] tipc: Node identity ac14140f, cluster identity 4711 [ 84.160972][ T8568] tipc: New replicast peer: 255.255.255.83 [ 84.166951][ T8568] tipc: Enabled bearer , priority 10 [ 84.289396][ T8547] Set syz1 is full, maxelem 65536 reached [ 84.297239][ T8573] lo speed is unknown, defaulting to 1000 [ 84.420380][ T8605] lo speed is unknown, defaulting to 1000 [ 84.461421][ T8633] __nla_validate_parse: 2 callbacks suppressed [ 84.461440][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1498'. [ 84.607237][ T8644] ip6t_rpfilter: unknown options [ 84.659887][ T8650] netlink: zone id is out of range [ 84.665070][ T8650] netlink: zone id is out of range [ 84.670325][ T8650] netlink: zone id is out of range [ 84.675460][ T8650] netlink: zone id is out of range [ 84.680621][ T8650] netlink: zone id is out of range [ 84.685763][ T8650] netlink: zone id is out of range [ 84.690943][ T8650] netlink: zone id is out of range [ 84.696060][ T8650] netlink: zone id is out of range [ 84.701211][ T8650] netlink: zone id is out of range [ 84.833341][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1510'. [ 85.005019][ T8683] ip6t_rpfilter: unknown options [ 85.034181][ T8686] ref_ctr_offset mismatch. inode: 0x570 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 85.176421][ T8699] block device autoloading is deprecated and will be removed. [ 85.289005][ T3390] tipc: Node number set to 2886997007 [ 85.323297][ T8713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1519'. [ 85.380623][ T8713] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.389420][ T8713] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.398168][ T8713] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.407017][ T8713] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.466666][ T8713] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.475699][ T8713] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.484632][ T8713] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.493971][ T8713] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.581013][ T8732] loop5: detected capacity change from 0 to 128 [ 85.587746][ T8732] /dev/loop5: Can't open blockdev [ 85.611542][ T8732] loop5: detected capacity change from 0 to 1024 [ 85.680982][ T8732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.746331][ T5248] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.782589][ T8753] SELinux: failed to load policy [ 85.968039][ T8761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 85.974609][ T8761] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.982291][ T8761] vhci_hcd vhci_hcd.0: Device attached [ 86.168794][ T3390] vhci_hcd: vhci_device speed not set [ 86.202737][ T8809] SELinux: failed to load policy [ 86.220627][ T8785] vhci_hcd: connection closed [ 86.222943][ T4407] vhci_hcd: stop threads [ 86.231985][ T3390] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 86.232002][ T4407] vhci_hcd: release socket [ 86.232021][ T4407] vhci_hcd: disconnect device [ 86.400205][ T8840] veth1_to_bond: entered allmulticast mode [ 86.419215][ T8840] veth1_to_bond: entered promiscuous mode [ 86.432175][ T8840] veth1_to_bond: left promiscuous mode [ 86.437780][ T8840] veth1_to_bond: left allmulticast mode [ 86.484388][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 87.123445][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 87.131192][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 87.151852][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.159715][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.167536][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.175269][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.182958][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.190674][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.198559][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.206468][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.214193][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.221897][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.229598][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.237286][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.245269][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.253034][ T3394] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 87.264747][ T3394] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 88.043088][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'. [ 88.380749][ T9037] block device autoloading is deprecated and will be removed. [ 88.689674][ T9068] tipc: New replicast peer: 255.255.255.255 [ 88.695839][ T9068] tipc: Enabled bearer , priority 10 [ 88.787799][ T9086] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.805265][ T9090] tipc: New replicast peer: 255.255.255.255 [ 88.811463][ T9090] tipc: Enabled bearer , priority 10 [ 88.852860][ T9086] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.907274][ T9108] netlink: 'syz.4.1622': attribute type 4 has an invalid length. [ 88.931783][ T9086] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.089808][ T9086] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.125627][ T9127] lo speed is unknown, defaulting to 1000 [ 89.148383][ T9144] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1628'. [ 89.161573][ T9144] netlink: 'syz.4.1628': attribute type 5 has an invalid length. [ 89.169560][ T9144] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1628'. [ 89.196403][ T9086] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.209252][ T9086] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.222256][ T9086] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.256741][ T9086] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.273955][ T9169] netlink: 'syz.4.1632': attribute type 13 has an invalid length. [ 89.375765][ T9186] SELinux: syz.1.1635 (9186) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 89.519769][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.552549][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.601368][ T9169] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.610329][ T9169] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.619606][ T9169] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.628653][ T9169] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.648310][ T9169] dummy0: left allmulticast mode [ 89.741681][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 89.766998][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 89.767015][ T29] audit: type=1326 audit(1747794490.759:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 89.801253][ T9206] team0 (unregistering): Port device team_slave_0 removed [ 89.827314][ T29] audit: type=1326 audit(1747794490.789:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 89.850963][ T29] audit: type=1326 audit(1747794490.789:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 89.874493][ T29] audit: type=1326 audit(1747794490.789:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 89.898186][ T29] audit: type=1326 audit(1747794490.789:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 89.921710][ T29] audit: type=1326 audit(1747794490.789:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 89.945417][ T29] audit: type=1326 audit(1747794490.789:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 89.969079][ T29] audit: type=1326 audit(1747794490.789:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 89.992731][ T29] audit: type=1326 audit(1747794490.789:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 90.016666][ T29] audit: type=1326 audit(1747794490.799:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 90.041572][ T9206] team0 (unregistering): Port device team_slave_1 removed [ 90.317822][ T9287] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 90.364678][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'. [ 90.383499][ T9299] team0 (unregistering): Port device team_slave_0 removed [ 90.402192][ T9299] team0 (unregistering): Port device team_slave_1 removed [ 90.536457][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.582866][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 90.609087][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.038850][ T9398] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1684'. [ 91.048165][ T9398] 0ªX¹¦D: renamed from gretap0 (while UP) [ 91.056273][ T9398] 0ªX¹¦D: entered allmulticast mode [ 91.073737][ T9398] net_ratelimit: 20 callbacks suppressed [ 91.073825][ T9398] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 91.132643][ T9403] netem: change failed [ 91.248926][ T3390] usb 5-1: enqueue for inactive port 0 [ 91.266027][ T3390] usb 5-1: enqueue for inactive port 0 [ 91.356568][ T3390] vhci_hcd: vhci_device speed not set [ 91.372109][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 91.399126][ T9434] team0 (unregistering): Port device team_slave_0 removed [ 91.407231][ T9434] team0 (unregistering): Port device team_slave_1 removed [ 91.531982][ T9483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 91.802132][ T9518] $Hÿ: renamed from bond0 (while UP) [ 91.809640][ T9518] $Hÿ: entered promiscuous mode [ 91.814700][ T9518] bond_slave_0: entered promiscuous mode [ 91.820679][ T9518] bond_slave_1: entered promiscuous mode [ 91.853082][ T9523] GPL: port 1(erspan0) entered blocking state [ 91.859298][ T9523] GPL: port 1(erspan0) entered disabled state [ 91.866425][ T9523] erspan0: entered allmulticast mode [ 91.873272][ T9523] erspan0: entered promiscuous mode [ 92.030231][ T9534] lo speed is unknown, defaulting to 1000 [ 92.153316][ T9558] openvswitch: netlink: Message has 6 unknown bytes. [ 92.244079][ T9569] $Hÿ: renamed from bond0 [ 92.250470][ T9569] $Hÿ: entered promiscuous mode [ 92.255584][ T9569] bond_slave_0: entered promiscuous mode [ 92.261513][ T9569] bond_slave_1: entered promiscuous mode [ 92.294233][ T9572] serio: Serial port ptm0 [ 92.572993][ T9591] wireguard1: entered promiscuous mode [ 92.622013][ T9601] siw: device registration error -23 [ 93.104708][ T9641] wireguard1: entered promiscuous mode [ 93.151533][ T9646] siw: device registration error -23 [ 93.901775][ T9715] lo speed is unknown, defaulting to 1000 [ 93.977195][ T9740] pim6reg1: entered promiscuous mode [ 93.982882][ T9740] pim6reg1: entered allmulticast mode [ 94.170928][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1785'. [ 94.219253][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'. [ 94.397337][ T9777] pim6reg1: entered promiscuous mode [ 94.402851][ T9777] pim6reg1: entered allmulticast mode [ 94.460847][ T9786] lo speed is unknown, defaulting to 1000 [ 94.540224][ T9813] sit0: entered promiscuous mode [ 94.555250][ T9813] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 94.563095][ T9813] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1797'. [ 94.635180][ T9821] wireguard1: entered promiscuous mode [ 94.666434][ T9843] siw: device registration error -23 [ 95.101280][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 95.101299][ T29] audit: type=1400 audit(1747794496.099:1815): avc: denied { write } for pid=9895 comm="syz.4.1822" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.150836][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'. [ 95.182507][ T29] audit: type=1326 audit(1747794496.179:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.5.1825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x0 [ 95.217084][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1826'. [ 95.256588][ T9918] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1827'. [ 95.297596][ T9923] netlink: 'syz.1.1829': attribute type 1 has an invalid length. [ 95.417056][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 95.440135][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.448096][ T9974] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1834'. [ 95.457831][ T9974] netlink: zone id is out of range [ 95.463348][ T9974] netlink: zone id is out of range [ 95.468647][ T9974] netlink: zone id is out of range [ 95.473834][ T9974] netlink: zone id is out of range [ 95.479157][ T9974] netlink: zone id is out of range [ 95.484370][ T9974] netlink: zone id is out of range [ 95.490051][ T9974] netlink: zone id is out of range [ 95.495253][ T9974] netlink: del zone limit has 8 unknown bytes [ 95.586244][ T9981] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1837'. [ 95.593756][ T9985] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1839'. [ 95.595392][ T9981] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1837'. [ 95.613819][ T9981] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1837'. [ 95.681553][ T29] audit: type=1400 audit(1747794496.679:1817): avc: denied { write } for pid=9991 comm="syz.0.1842" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.839795][ T29] audit: type=1400 audit(1747794496.839:1818): avc: denied { read } for pid=10005 comm="syz.1.1849" name="/" dev="configfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.861976][ T29] audit: type=1400 audit(1747794496.839:1819): avc: denied { open } for pid=10005 comm="syz.1.1849" path="/" dev="configfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.887195][T10008] netlink: 'syz.0.1848': attribute type 7 has an invalid length. [ 95.895120][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 95.983413][T10021] pim6reg1: entered promiscuous mode [ 95.989124][T10021] pim6reg1: entered allmulticast mode [ 95.999101][ T29] audit: type=1326 audit(1747794496.989:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10024 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 96.022883][ T29] audit: type=1326 audit(1747794496.999:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10024 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 96.064616][ T29] audit: type=1326 audit(1747794496.999:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10024 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 96.088198][ T29] audit: type=1326 audit(1747794496.999:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10024 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 96.111829][ T29] audit: type=1326 audit(1747794496.999:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10024 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 96.510449][T10081] syzkaller0: refused to change device tx_queue_len [ 96.709563][T10120] netlink: 'syz.0.1884': attribute type 13 has an invalid length. [ 96.741474][T10129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.819362][T10129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.850225][T10140] netlink: zone id is out of range [ 96.855418][T10140] netlink: zone id is out of range [ 96.860723][T10140] netlink: zone id is out of range [ 96.865851][T10140] netlink: zone id is out of range [ 96.871118][T10140] netlink: zone id is out of range [ 96.876242][T10140] netlink: zone id is out of range [ 96.881437][T10140] netlink: zone id is out of range [ 96.886617][T10140] netlink: zone id is out of range [ 96.891782][T10140] netlink: zone id is out of range [ 96.896973][T10140] netlink: zone id is out of range [ 96.954345][T10151] pim6reg1: entered promiscuous mode [ 96.959887][T10151] pim6reg1: entered allmulticast mode [ 96.969765][T10129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.048235][T10129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.100030][T10176] netlink: 'syz.2.1899': attribute type 3 has an invalid length. [ 97.137538][T10129] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.167563][T10129] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.183921][T10129] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.198344][T10129] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.660570][T10232] pim6reg1: entered promiscuous mode [ 97.665936][T10232] pim6reg1: entered allmulticast mode [ 97.755222][T10244] pim6reg1: entered promiscuous mode [ 97.760641][T10244] pim6reg1: entered allmulticast mode [ 98.115500][T10277] pim6reg1: entered promiscuous mode [ 98.120909][T10277] pim6reg1: entered allmulticast mode [ 98.441987][T10321] netlink: 'syz.5.1948': attribute type 12 has an invalid length. [ 98.496336][T10309] lo speed is unknown, defaulting to 1000 [ 98.637142][T10309] chnl_net:caif_netlink_parms(): no params data found [ 98.689747][ T9180] IPVS: starting estimator thread 0... [ 98.719774][T10309] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.726946][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.736268][T10309] bridge_slave_0: entered allmulticast mode [ 98.742981][T10309] bridge_slave_0: entered promiscuous mode [ 98.750079][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.757222][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.764401][T10309] bridge_slave_1: entered allmulticast mode [ 98.771124][T10309] bridge_slave_1: entered promiscuous mode [ 98.790583][T10309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.799859][T10466] IPVS: using max 2880 ests per chain, 144000 per kthread [ 98.801817][T10309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.829855][T10309] team0: Port device team_slave_0 added [ 98.836885][T10309] team0: Port device team_slave_1 added [ 98.857335][T10309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.864424][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.890466][T10309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.902243][T10309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.909499][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.935752][T10309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.963372][T10582] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 98.973039][T10582] SELinux: failed to load policy [ 98.993024][T10309] hsr_slave_0: entered promiscuous mode [ 99.006792][T10309] hsr_slave_1: entered promiscuous mode [ 99.016925][T10309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.024611][T10309] Cannot create hsr debugfs directory [ 99.133729][T10309] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.143506][T10309] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.153981][T10309] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.164584][T10309] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.191539][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.198816][T10309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.206207][T10309] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.213322][T10309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.249271][T10309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.264433][T10309] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.285801][T10693] netlink: 'syz.2.1968': attribute type 3 has an invalid length. [ 99.362751][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.461918][T10717] pim6reg1: entered promiscuous mode [ 99.467300][T10717] pim6reg1: entered allmulticast mode [ 99.487376][T10309] veth0_vlan: entered promiscuous mode [ 99.495331][T10309] veth1_vlan: entered promiscuous mode [ 99.512790][T10309] veth0_macvtap: entered promiscuous mode [ 99.520903][T10309] veth1_macvtap: entered promiscuous mode [ 99.533285][T10309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.545015][T10309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.556318][T10309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.565088][T10309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.574238][T10309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.583162][T10309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.594767][T10729] vhci_hcd: invalid port number 224 [ 99.698895][T10737] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 99.705468][T10737] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.713072][T10737] vhci_hcd vhci_hcd.0: Device attached [ 99.773490][T10738] vhci_hcd: connection closed [ 99.773919][ T8947] vhci_hcd: stop threads [ 99.783108][ T8947] vhci_hcd: release socket [ 99.787605][ T8947] vhci_hcd: disconnect device [ 100.153682][T10746] SELinux: Context @ is not valid (left unmapped). [ 100.160768][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 100.160785][ T29] audit: type=1400 audit(1747794501.159:1857): avc: denied { relabelto } for pid=10745 comm="syz.1.1980" name="cgroup.controllers" dev="tmpfs" ino=2317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 100.192126][ T29] audit: type=1400 audit(1747794501.159:1858): avc: denied { associate } for pid=10745 comm="syz.1.1980" name="cgroup.controllers" dev="tmpfs" ino=2317 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 100.221222][ T29] audit: type=1400 audit(1747794501.219:1859): avc: denied { unlink } for pid=3320 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=2317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 100.337969][T10752] __nla_validate_parse: 4 callbacks suppressed [ 100.338029][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 100.556256][ T29] audit: type=1326 audit(1747794501.549:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.6.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 100.582302][ T29] audit: type=1326 audit(1747794501.579:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.6.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 100.606081][ T29] audit: type=1326 audit(1747794501.579:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.6.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 100.630356][ T29] audit: type=1326 audit(1747794501.579:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.6.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 100.653911][ T29] audit: type=1326 audit(1747794501.579:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.6.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 100.677749][ T29] audit: type=1326 audit(1747794501.579:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.6.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 100.701315][ T29] audit: type=1326 audit(1747794501.579:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.6.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 100.820415][T10783] pim6reg1: entered promiscuous mode [ 100.825798][T10783] pim6reg1: entered allmulticast mode [ 101.303461][T10839] veth0_vlan: entered allmulticast mode [ 101.326879][T10839] veth0_vlan: left promiscuous mode [ 101.332238][T10839] veth0_vlan: entered promiscuous mode [ 101.491692][T10856] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2005'. [ 101.598152][ T3392] Process accounting resumed [ 102.060105][T10900] net_ratelimit: 332 callbacks suppressed [ 102.060123][T10900] netlink: zone id is out of range [ 102.071258][T10900] netlink: zone id is out of range [ 102.076399][T10900] netlink: zone id is out of range [ 102.081592][T10900] netlink: zone id is out of range [ 102.086721][T10900] netlink: zone id is out of range [ 102.092100][T10900] netlink: zone id is out of range [ 102.097297][T10900] netlink: zone id is out of range [ 102.102480][T10900] netlink: zone id is out of range [ 102.107649][T10900] netlink: zone id is out of range [ 102.112797][T10900] netlink: zone id is out of range [ 103.247413][T10978] unsupported nla_type 52263 [ 103.565253][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 103.623633][T11014] netlink: 'syz.0.2080': attribute type 5 has an invalid length. [ 103.631520][T11014] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2080'. [ 103.644496][T11014] : renamed from bond0 (while UP) [ 103.658022][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2083'. [ 103.918705][T11060] syzkaller0: entered promiscuous mode [ 103.924248][T11060] syzkaller0: entered allmulticast mode [ 104.038504][T11080] netlink: 'syz.0.2100': attribute type 11 has an invalid length. [ 104.077576][T11085] ref_ctr_offset mismatch. inode: 0x451 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 104.125082][T11091] vhci_hcd: invalid port number 15 [ 104.130988][T11091] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 104.248531][T11106] pim6reg1: entered promiscuous mode [ 104.253887][T11106] pim6reg1: entered allmulticast mode [ 104.813447][T11172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.823829][T11172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.912475][T11172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.923440][T11172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.986957][T11172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.997397][T11172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.051299][T11172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.061962][T11172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.126231][T11172] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.135155][T11172] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.148257][T11172] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.156721][T11172] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.171941][T11172] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.180244][T11172] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.194729][T11172] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.203067][T11172] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.238914][T11214] lo speed is unknown, defaulting to 1000 [ 105.439608][T11243] pim6reg1: entered promiscuous mode [ 105.444976][T11243] pim6reg1: entered allmulticast mode [ 105.493560][T11253] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.503448][T11253] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.523116][T11259] netlink: 'syz.0.2147': attribute type 1 has an invalid length. [ 105.588252][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 105.611163][T11253] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.621058][T11253] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.636581][T11272] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2151'. [ 105.674629][T11280] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2153'. [ 105.683840][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2153'. [ 105.711094][T11253] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.721188][T11253] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.748851][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 105.748896][ T29] audit: type=1326 audit(1747794506.739:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 105.778749][ T29] audit: type=1326 audit(1747794506.739:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 105.802367][ T29] audit: type=1326 audit(1747794506.739:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 105.826101][ T29] audit: type=1326 audit(1747794506.739:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 105.849672][ T29] audit: type=1326 audit(1747794506.739:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 105.873288][ T29] audit: type=1326 audit(1747794506.739:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 105.906815][ T29] audit: type=1400 audit(1747794506.899:2133): avc: denied { bind } for pid=11291 comm="syz.0.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.939539][T11253] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.950084][T11253] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.140501][ T29] audit: type=1400 audit(1747794507.139:2134): avc: denied { unmount } for pid=11310 comm="syz.5.2167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.163086][ T29] audit: type=1400 audit(1747794507.159:2135): avc: denied { mount } for pid=11315 comm="syz.0.2169" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.249397][ T29] audit: type=1400 audit(1747794507.239:2136): avc: denied { bind } for pid=11326 comm="syz.2.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.349271][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 106.796585][T11365] pim6reg1: entered promiscuous mode [ 106.801975][T11365] pim6reg1: entered allmulticast mode [ 107.433697][T11446] SELinux: ebitmap: truncated map [ 107.449643][T11446] SELinux: failed to load policy [ 107.520602][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'. [ 107.547239][T11460] ip6gre1: entered allmulticast mode [ 107.596147][T11470] net_ratelimit: 208 callbacks suppressed [ 107.596163][T11470] dccp_xmit_packet: Payload too large (65475) for featneg. [ 107.613644][T11468] infiniband syz2: set down [ 107.618210][T11468] infiniband syz2: added ipvlan1 [ 107.629164][T11468] RDS/IB: syz2: added [ 107.633294][T11468] smc: adding ib device syz2 with port count 1 [ 107.639765][T11468] smc: ib device syz2 port 1 has pnetid [ 107.756977][T11476] ip6gre2: entered allmulticast mode [ 108.182055][T11500] lo speed is unknown, defaulting to 1000 [ 108.225212][T11508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11508 comm=syz.0.2232 [ 108.238483][T11508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11508 comm=syz.0.2232 [ 108.446879][T11554] wg2: entered promiscuous mode [ 108.452162][T11554] wg2: entered allmulticast mode [ 108.676854][T11253] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.685868][T11253] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.700760][T11253] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.709624][T11253] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.723460][T11253] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.731820][T11253] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.746961][T11253] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.755273][T11253] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.032265][T11633] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 109.063519][T11640] netlink: 664 bytes leftover after parsing attributes in process `syz.5.2271'. [ 109.117166][T11647] lo speed is unknown, defaulting to 1000 [ 109.285926][T11694] wg2: entered promiscuous mode [ 109.290965][T11694] wg2: entered allmulticast mode [ 109.320085][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11696 comm=syz.6.2280 [ 109.332868][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11696 comm=syz.6.2280 [ 109.346240][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11696 comm=syz.6.2280 [ 109.360536][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11696 comm=syz.6.2280 [ 109.373588][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11696 comm=syz.6.2280 [ 109.386192][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11696 comm=syz.6.2280 [ 109.414836][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11696 comm=syz.6.2280 [ 109.431676][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11696 comm=syz.6.2280 [ 109.453633][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2282'. [ 109.462824][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2282'. [ 109.474503][T11706] x_tables: duplicate underflow at hook 1 [ 109.571950][T11722] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 110.396605][T11874] 9pnet: p9_errstr2errno: server reported unknown error [ 110.490361][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2311'. [ 110.500689][T11889] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.572572][T11889] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.661494][T11889] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.713856][T11889] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.805123][T11889] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.816389][T11889] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.828246][T11889] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.840661][T11889] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.922379][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2320'. [ 111.366869][T11958] pim6reg1: entered promiscuous mode [ 111.372506][T11958] pim6reg1: entered allmulticast mode [ 111.442270][T11966] netlink: 'syz.0.2331': attribute type 1 has an invalid length. [ 111.454372][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 111.454389][ T29] audit: type=1326 audit(1747794512.449:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 111.484758][ T29] audit: type=1326 audit(1747794512.459:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 111.508492][ T29] audit: type=1326 audit(1747794512.459:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 111.532892][ T29] audit: type=1326 audit(1747794512.459:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11963 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a808e969 code=0x7ffc0000 [ 111.598513][ T29] audit: type=1400 audit(1747794512.589:2314): avc: denied { create } for pid=11971 comm="syz.5.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 111.631878][ T29] audit: type=1400 audit(1747794512.619:2315): avc: denied { accept } for pid=11971 comm="syz.5.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 111.651590][ T29] audit: type=1400 audit(1747794512.619:2316): avc: denied { ioctl } for pid=11971 comm="syz.5.2334" path="socket:[27583]" dev="sockfs" ino=27583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 111.676426][ T29] audit: type=1400 audit(1747794512.629:2317): avc: denied { associate } for pid=11971 comm="syz.5.2334" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 111.792464][ T29] audit: type=1400 audit(1747794512.789:2318): avc: denied { create } for pid=11988 comm="syz.5.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.812730][ T29] audit: type=1400 audit(1747794512.789:2319): avc: denied { connect } for pid=11988 comm="syz.5.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.863078][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 112.134679][T12007] netlink: 'syz.0.2349': attribute type 10 has an invalid length. [ 112.165156][T12009] 9pnet: p9_errstr2errno: server reported unknown error [ 112.302230][T12017] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 112.355714][T12021] pim6reg1: entered promiscuous mode [ 112.361507][T12021] pim6reg1: entered allmulticast mode [ 112.395149][ T36] IPVS: starting estimator thread 0... [ 112.489240][T12030] IPVS: using max 2544 ests per chain, 127200 per kthread [ 112.618297][T12046] bond_slave_1: mtu less than device minimum [ 112.924101][T12075] netlink: zone id is out of range [ 112.929330][T12075] netlink: zone id is out of range [ 112.934493][T12075] netlink: zone id is out of range [ 112.939718][T12075] netlink: zone id is out of range [ 112.944983][T12075] netlink: zone id is out of range [ 112.950133][T12075] netlink: zone id is out of range [ 112.955326][T12075] netlink: zone id is out of range [ 112.960649][T12075] netlink: zone id is out of range [ 112.965778][T12075] netlink: zone id is out of range [ 113.003500][T12080] @: renamed from vlan0 (while UP) [ 113.147330][T12090] syzkaller1: entered promiscuous mode [ 113.152973][T12090] syzkaller1: entered allmulticast mode [ 113.389756][T12118] random: crng reseeded on system resumption [ 113.586114][T12129] ref_ctr_offset mismatch. inode: 0x602 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 113.691715][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'. [ 113.872082][T12157] lo speed is unknown, defaulting to 1000 [ 113.954425][T12164] syzkaller0: entered promiscuous mode [ 113.959987][T12164] syzkaller0: entered allmulticast mode [ 113.966723][T12163] tipc: Enabled bearer , priority 0 [ 113.990361][T12162] tipc: Resetting bearer [ 114.016065][T12162] tipc: Disabling bearer [ 114.223304][T12231] bridge: RTM_NEWNEIGH with invalid ether address [ 114.546420][T12266] netlink: 'syz.0.2432': attribute type 12 has an invalid length. [ 114.570680][T12268] veth1_to_bond: entered allmulticast mode [ 114.576701][T12268] veth1_to_bond: entered promiscuous mode [ 114.584685][T12268] veth1_to_bond: left promiscuous mode [ 114.590806][T12268] veth1_to_bond: left allmulticast mode [ 114.639214][T12271] block device autoloading is deprecated and will be removed. [ 114.731493][T12286] dummy0: entered promiscuous mode [ 114.736833][T12286] macsec0: entered promiscuous mode [ 114.743273][T12286] macsec0: entered allmulticast mode [ 114.748726][T12286] dummy0: entered allmulticast mode [ 114.755775][T12286] dummy0: left allmulticast mode [ 114.761566][T12286] dummy0: left promiscuous mode [ 114.867074][T12303] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.920572][T12303] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.984632][T12303] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.050843][T12303] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.070460][T12328] serio: Serial port pts0 [ 115.087983][T12303] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.099656][T12303] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.110811][T12303] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.123766][T12303] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.291702][T12368] syz_tun: entered allmulticast mode [ 115.305592][T12367] syz_tun: left allmulticast mode [ 115.348809][T12377] dummy0: entered promiscuous mode [ 115.349806][T12381] SELinux: failed to load policy [ 115.354326][T12377] macsec1: entered allmulticast mode [ 115.365009][T12377] dummy0: entered allmulticast mode [ 115.372119][T12377] dummy0: left allmulticast mode [ 115.377161][T12377] dummy0: left promiscuous mode [ 115.427456][T12393] lo speed is unknown, defaulting to 1000 [ 115.587571][T12420] lo speed is unknown, defaulting to 1000 [ 115.652597][ T9193] lo speed is unknown, defaulting to 1000 [ 115.786988][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2479'. [ 115.796025][T12444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2479'. [ 116.021713][T12492] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 116.126980][T12506] syzkaller0: entered promiscuous mode [ 116.132995][T12506] syzkaller0: entered allmulticast mode [ 116.143310][T12510] program syz.6.2495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.168884][T12510] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.291383][T12518] syzkaller0: entered promiscuous mode [ 116.296906][T12518] syzkaller0: entered allmulticast mode [ 116.441317][T12533] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2502'. [ 116.486612][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 116.486708][ T29] audit: type=1400 audit(1747794517.479:2574): avc: denied { ioctl } for pid=12536 comm="syz.6.2504" path="socket:[31247]" dev="sockfs" ino=31247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.590840][T12547] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 116.647305][ T29] audit: type=1326 audit(1747794517.639:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 116.670948][ T29] audit: type=1326 audit(1747794517.639:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 116.694571][ T29] audit: type=1326 audit(1747794517.639:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 116.718087][ T29] audit: type=1326 audit(1747794517.639:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 116.741605][ T29] audit: type=1326 audit(1747794517.639:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 116.765143][ T29] audit: type=1326 audit(1747794517.639:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 116.788831][ T29] audit: type=1326 audit(1747794517.639:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 116.812443][ T29] audit: type=1326 audit(1747794517.639:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 116.836072][ T29] audit: type=1326 audit(1747794517.639:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.6.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f353abde969 code=0x7ffc0000 [ 117.164389][T12564] tipc: Bearer : already 2 bearers with priority 10 [ 117.172049][T12564] tipc: Bearer : trying with adjusted priority [ 117.199375][T12564] tipc: New replicast peer: 10.1.1.2 [ 117.204832][T12564] tipc: Enabled bearer , priority 9 [ 117.549051][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2523'. [ 117.675668][T12598] netlink: 'syz.2.2528': attribute type 1 has an invalid length. [ 117.683514][T12598] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2528'. [ 117.978017][T12614] net_ratelimit: 333 callbacks suppressed [ 117.978036][T12614] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 118.355023][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2547'. [ 118.390709][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2547'. [ 118.517987][T12664] block device autoloading is deprecated and will be removed. [ 118.536330][T12670] syz_tun: entered allmulticast mode [ 118.573284][T12670] dvmrp1: entered allmulticast mode [ 118.637742][T12669] syz_tun: left allmulticast mode [ 118.972487][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.982588][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.076367][T12687] netlink: 'syz.1.2559': attribute type 3 has an invalid length. [ 119.408661][ T9180] page_pool_release_retry() stalled pool shutdown: id 38, 1 inflight 60 sec [ 119.491119][T12715] lo speed is unknown, defaulting to 1000 [ 119.748524][T12737] lo speed is unknown, defaulting to 1000 [ 119.851123][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 119.976447][T12809] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 120.014764][T12803] netlink: 'syz.6.2581': attribute type 32 has an invalid length. [ 120.049375][T12820] ªªªªªª: renamed from vlan0 (while UP) [ 120.236078][T12837] pim6reg1: entered promiscuous mode [ 120.241478][T12837] pim6reg1: entered allmulticast mode [ 120.280429][T12844] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 120.539683][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2602'. [ 120.611397][T12879] dummy0: entered promiscuous mode [ 120.621376][T12879] macsec1: entered allmulticast mode [ 120.631470][T12879] dummy0: entered allmulticast mode [ 120.645576][T12879] dummy0: left allmulticast mode [ 120.650698][T12879] dummy0: left promiscuous mode [ 121.066683][T12908] smc: net device bond0 applied user defined pnetid SYZ2 [ 121.076629][T12908] smc: net device bond0 erased user defined pnetid SYZ2 [ 121.113754][T12911] lo speed is unknown, defaulting to 1000 [ 121.236216][T12941] pim6reg1: entered promiscuous mode [ 121.242288][T12941] pim6reg1: entered allmulticast mode [ 121.524892][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 121.524913][ T29] audit: type=1400 audit(1747794522.519:2848): avc: denied { write } for pid=12961 comm="syz.0.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.628569][ T29] audit: type=1400 audit(1747794522.619:2849): avc: denied { getopt } for pid=12968 comm="syz.0.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.667529][ T29] audit: type=1400 audit(1747794522.649:2850): avc: denied { ioctl } for pid=12968 comm="syz.0.2621" path="socket:[31626]" dev="sockfs" ino=31626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.712080][T12971] pim6reg1: entered promiscuous mode [ 121.749668][T12971] pim6reg1: entered allmulticast mode [ 121.879106][T12983] wg2: left promiscuous mode [ 121.883764][T12983] wg2: left allmulticast mode [ 121.917649][T12985] selinux_netlink_send: 71 callbacks suppressed [ 121.917729][T12985] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12985 comm=syz.1.2627 [ 121.947387][ T29] audit: type=1107 audit(1747794522.939:2851): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 121.971381][T12983] wg2: entered promiscuous mode [ 121.976397][T12983] wg2: entered allmulticast mode [ 122.098131][T13001] lo speed is unknown, defaulting to 1000 [ 122.162733][T13014] pim6reg1: entered promiscuous mode [ 122.168083][T13014] pim6reg1: entered allmulticast mode [ 122.320284][T13050] block device autoloading is deprecated and will be removed. [ 122.453922][T13058] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.804475][T13067] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2641'. [ 122.851626][ T29] audit: type=1400 audit(1747794523.849:2852): avc: denied { read } for pid=13072 comm="syz.0.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 122.903030][ T29] audit: type=1400 audit(1747794523.889:2853): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.926575][ T29] audit: type=1400 audit(1747794523.889:2854): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.950636][ T29] audit: type=1400 audit(1747794523.889:2855): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.036510][ T29] audit: type=1400 audit(1747794524.019:2856): avc: denied { mounton } for pid=13084 comm="syz.2.2647" path="/473/file0" dev="tmpfs" ino=2461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 123.097334][T13075] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.109784][T13075] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 123.224065][T13112] 9pnet_fd: Insufficient options for proto=fd [ 123.330614][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2662'. [ 123.388015][ T29] audit: type=1400 audit(1747794524.379:2857): avc: denied { firmware_load } for pid=13136 comm="syz.6.2665" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 123.887634][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 123.897525][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 124.031816][T13178] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2679'. [ 124.135409][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2680'. [ 124.640372][T13207] dummy0: entered promiscuous mode [ 124.640385][T13212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2690'. [ 124.656651][T13207] macsec1: entered allmulticast mode [ 124.662132][T13207] dummy0: entered allmulticast mode [ 124.678532][T13207] dummy0: left allmulticast mode [ 124.683528][T13207] dummy0: left promiscuous mode [ 124.733104][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2694'. [ 124.742730][T13220] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2694'. [ 124.844800][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2700'. [ 125.057506][T13276] netem: change failed [ 125.093489][T13279] syzkaller0: entered promiscuous mode [ 125.099135][T13279] syzkaller0: entered allmulticast mode [ 126.361482][T13360] loop2: detected capacity change from 0 to 128 [ 126.639140][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 126.639155][ T29] audit: type=1400 audit(1747794527.639:2867): avc: denied { write } for pid=5248 comm="syz-executor" name="427" dev="tmpfs" ino=2229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.673920][ T29] audit: type=1400 audit(1747794527.639:2868): avc: denied { remove_name } for pid=5248 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.701705][ T29] audit: type=1400 audit(1747794527.639:2869): avc: denied { rmdir } for pid=5248 comm="syz-executor" name="427" dev="tmpfs" ino=2229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.795038][T13407] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 127.167859][T13422] netlink: 'syz.6.2759': attribute type 27 has an invalid length. [ 127.240825][ T29] audit: type=1326 audit(1747794528.239:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 127.264426][ T29] audit: type=1326 audit(1747794528.239:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 127.288875][T13422] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.296089][T13422] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.355803][T13422] wg2: left promiscuous mode [ 127.360693][T13422] wg2: left allmulticast mode [ 127.367424][ T29] audit: type=1326 audit(1747794528.239:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 127.391710][ T29] audit: type=1326 audit(1747794528.299:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 127.397804][T13422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.415455][ T29] audit: type=1326 audit(1747794528.299:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 127.447091][ T29] audit: type=1326 audit(1747794528.299:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 127.471632][ T29] audit: type=1326 audit(1747794528.299:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.0.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 127.497919][T13422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.549355][T13422] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.557869][T13422] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.567007][T13422] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.575447][T13422] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.595292][T13422] ip6gre1: left allmulticast mode [ 127.617228][T13422] ip6gre2: left allmulticast mode [ 127.629308][T13427] batman_adv: batadv0: Removing interface: team0 [ 127.636616][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.644178][T13427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.679621][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.687180][T13427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.735625][T13447] netlink: 'syz.6.2766': attribute type 27 has an invalid length. [ 127.745495][T13447] lo: entered allmulticast mode [ 127.765006][T13447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.776651][T13447] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.787067][T13447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.823665][T13444] lo: left allmulticast mode [ 127.969416][T13474] netlink: 'syz.2.2775': attribute type 12 has an invalid length. [ 128.029993][T13477] __nla_validate_parse: 11 callbacks suppressed [ 128.030014][T13477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2774'. [ 128.088032][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'. [ 128.102423][T13480] pim6reg1: entered promiscuous mode [ 128.107834][T13480] pim6reg1: entered allmulticast mode [ 128.113419][T13481] netlink: 145 bytes leftover after parsing attributes in process `syz.1.2778'. [ 128.474352][T13503] netlink: 'syz.2.2786': attribute type 1 has an invalid length. [ 128.482870][T13503] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2786'. [ 128.500544][T13505] bridge: RTM_NEWNEIGH with invalid ether address [ 128.685437][T13528] netlink: 'syz.2.2794': attribute type 11 has an invalid length. [ 129.423185][T13563] pim6reg1: entered promiscuous mode [ 129.428597][T13563] pim6reg1: entered allmulticast mode [ 130.321340][T13585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2809'. [ 130.333480][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2813'. [ 130.419931][T13598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13598 comm=syz.1.2818 [ 130.524539][T13605] xt_hashlimit: max too large, truncated to 1048576 [ 130.595095][T13609] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13609 comm=syz.5.2823 [ 130.709453][T13617] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2827'. [ 130.728740][T13617] netlink: zone id is out of range [ 130.734274][T13617] netlink: zone id is out of range [ 130.740405][T13617] netlink: get zone limit has 8 unknown bytes [ 130.880307][ T9198] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 130.907652][ T9198] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.679468][T13689] netlink: 'syz.5.2845': attribute type 12 has an invalid length. [ 131.727381][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 131.727400][ T29] audit: type=1400 audit(1747794532.719:2980): avc: denied { write } for pid=13690 comm="syz.5.2846" name="ipv6_route" dev="proc" ino=4026533441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 131.797309][ T29] audit: type=1400 audit(1747794532.789:2981): avc: denied { create } for pid=13692 comm="syz.6.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.928107][T13702] bridge: RTM_NEWNEIGH with invalid ether address [ 131.998460][ T29] audit: type=1400 audit(1747794532.979:2982): avc: denied { getopt } for pid=13707 comm=ACED lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.003455][T13706] SELinux: failed to load policy [ 132.043882][T13710] syzkaller0: refused to change device tx_queue_len [ 132.222751][ T29] audit: type=1400 audit(1747794533.219:2983): avc: denied { append } for pid=13728 comm="syz.5.2860" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.346379][ T29] audit: type=1400 audit(1747794533.339:2984): avc: denied { read } for pid=13704 comm="syz.6.2853" path="socket:[34255]" dev="sockfs" ino=34255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.403734][T13740] pim6reg1: entered promiscuous mode [ 132.409144][T13740] pim6reg1: entered allmulticast mode [ 132.627674][T13761] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.637625][T13761] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.680333][T13761] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.690263][T13761] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.720628][T13768] syzkaller0: entered promiscuous mode [ 132.726131][T13768] syzkaller0: entered allmulticast mode [ 132.794388][T13776] SELinux: failed to load policy [ 132.802746][T13761] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.812843][T13761] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.841313][ T29] audit: type=1400 audit(1747794533.839:2985): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 132.869614][T13783] netlink: 'syz.2.2875': attribute type 1 has an invalid length. [ 132.901497][T13761] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.911945][T13761] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.014449][T13761] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.022923][T13761] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.057240][T13761] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.066188][T13761] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.101026][T13761] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.109458][T13761] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.132678][T13761] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.141058][T13761] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.177490][T13821] netlink: 'syz.6.2882': attribute type 3 has an invalid length. [ 133.185949][T13821] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2882'. [ 133.254945][ T29] audit: type=1326 audit(1747794534.249:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.1.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 133.254985][T13823] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2884'. [ 133.287692][ T29] audit: type=1326 audit(1747794534.249:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.1.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 133.331474][ T29] audit: type=1326 audit(1747794534.279:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.1.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 133.355064][ T29] audit: type=1326 audit(1747794534.279:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.1.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90d18e969 code=0x7ffc0000 [ 133.561109][T13851] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2894'. [ 133.656372][T13861] SELinux: ebitmap: truncated map [ 133.667806][T13861] SELinux: failed to load policy [ 134.334277][T13956] syzkaller0: entered allmulticast mode [ 134.342047][T13956] syzkaller0: entered promiscuous mode [ 134.352629][T13956] syzkaller0 (unregistering): left promiscuous mode [ 134.359314][T13956] syzkaller0 (unregistering): left allmulticast mode [ 134.389647][T13961] netlink: 664 bytes leftover after parsing attributes in process `syz.2.2925'. [ 134.686989][T14010] netlink: 'syz.5.2944': attribute type 39 has an invalid length. [ 135.039308][T14032] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.046550][T14032] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.059017][T14032] bridge0: entered allmulticast mode [ 135.071510][T14032] bridge_slave_1: left allmulticast mode [ 135.077231][T14032] bridge_slave_1: left promiscuous mode [ 135.083076][T14032] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.095041][T14032] bridge_slave_0: left allmulticast mode [ 135.100942][T14032] bridge_slave_0: left promiscuous mode [ 135.106811][T14032] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.163732][T14042] ref_ctr_offset mismatch. inode: 0x9bd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 135.719314][T14101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2970'. [ 136.209933][T14158] lo speed is unknown, defaulting to 1000 [ 136.369256][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 136.880296][T14229] lo speed is unknown, defaulting to 1000 [ 137.142023][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 137.142068][ T29] audit: type=1400 audit(1747794538.119:3081): avc: denied { read } for pid=14233 comm="syz.2.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.153382][T14236] loop2: detected capacity change from 0 to 164 [ 137.176768][T14236] Unable to read rock-ridge attributes [ 137.184481][T14236] Unable to read rock-ridge attributes [ 137.190433][ T29] audit: type=1400 audit(1747794538.179:3082): avc: denied { mount } for pid=14235 comm="syz.2.3013" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 137.213887][T14236] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.233147][ T29] audit: type=1400 audit(1747794538.229:3083): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 137.287392][T14245] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 137.587340][T14260] ref_ctr_offset mismatch. inode: 0xb3b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 138.251125][T14266] Set syz1 is full, maxelem 65536 reached [ 138.359804][ T29] audit: type=1326 audit(1747794539.349:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 138.383412][ T29] audit: type=1326 audit(1747794539.349:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 138.418277][ T29] audit: type=1326 audit(1747794539.379:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 138.442767][ T29] audit: type=1326 audit(1747794539.379:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.0.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841542e969 code=0x7ffc0000 [ 139.285413][ T29] audit: type=1400 audit(1747794540.279:3088): avc: denied { setopt } for pid=14357 comm="syz.1.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.532443][T14365] tipc: Started in network mode [ 139.537396][T14365] tipc: Node identity ac14140f, cluster identity 4711 [ 139.552769][T14365] tipc: New replicast peer: 255.255.255.255 [ 139.559589][T14365] tipc: Enabled bearer , priority 10 [ 139.650799][T14328] Set syz1 is full, maxelem 65536 reached [ 139.695309][T14372] loop2: detected capacity change from 0 to 128 [ 139.819612][T14370] syzkaller0: entered allmulticast mode [ 139.825454][T14370] syzkaller0: entered promiscuous mode [ 139.890215][T14370] syzkaller0 (unregistering): left promiscuous mode [ 139.896886][T14370] syzkaller0 (unregistering): left allmulticast mode [ 139.941518][T14391] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.985667][T14401] loop2: detected capacity change from 0 to 512 [ 139.993793][T14401] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 140.011258][T14401] EXT4-fs: error: could not find journal device path [ 140.056234][T14404] netlink: 'syz.1.3055': attribute type 12 has an invalid length. [ 140.099968][T14391] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.148689][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'. [ 140.170620][T14391] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.270156][T14391] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.360620][T14391] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.374981][T14391] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.388065][T14391] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.402953][T14391] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.436498][T14463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3070'. [ 140.445618][T14463] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3070'. [ 140.454677][T14463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3070'. [ 140.474400][T14463] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3070'. [ 140.505850][T14469] IPv4: Oversized IP packet from 127.202.26.0 [ 140.535220][ T29] audit: type=1326 audit(1747794541.529:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14474 comm="syz.5.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 140.539919][T14475] macvlan1: entered promiscuous mode [ 140.559249][ T29] audit: type=1326 audit(1747794541.529:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14474 comm="syz.5.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bcb1e969 code=0x7ffc0000 [ 140.591759][T14475] ipvlan0: entered promiscuous mode [ 140.597767][T14475] ipvlan0: left promiscuous mode [ 140.603250][T14475] macvlan1: left promiscuous mode [ 140.678918][ T3390] tipc: Node number set to 2886997007 [ 140.807863][T14484] Set syz1 is full, maxelem 65536 reached [ 141.168271][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 141.178699][ T36] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.391449][T14534] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3094'. [ 141.412222][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 141.724235][T14569] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 141.755509][T14574] netlink: 'syz.2.3103': attribute type 27 has an invalid length. [ 141.760202][T14571] lo speed is unknown, defaulting to 1000 [ 141.791813][T14574] $Hÿ: left promiscuous mode [ 141.796635][T14574] bond_slave_0: left promiscuous mode [ 141.802221][T14574] bond_slave_1: left promiscuous mode [ 141.816505][T14577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14577 comm=syz.1.3102 [ 141.860420][T14574] veth0_vlan: left allmulticast mode [ 141.873765][T14574] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.882737][T14574] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.892400][T14574] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.901425][T14574] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.915014][T14574] wireguard0: left promiscuous mode [ 141.921329][T14574] bond1: left promiscuous mode [ 141.926133][T14574] bond1: left allmulticast mode [ 141.932203][T14574] wireguard1: left promiscuous mode [ 141.989204][ T8986] ================================================================== [ 141.997321][ T8986] BUG: KCSAN: data-race in alloc_pid / copy_process [ 142.003927][ T8986] [ 142.006256][ T8986] read-write to 0xffffffff8685f2b0 of 4 bytes by task 8969 on cpu 0: [ 142.014323][ T8986] alloc_pid+0x539/0x720 [ 142.018574][ T8986] copy_process+0xe0e/0x1f90 [ 142.023174][ T8986] kernel_clone+0x16c/0x5b0 [ 142.027692][ T8986] user_mode_thread+0x7d/0xb0 [ 142.032385][ T8986] call_usermodehelper_exec_work+0x41/0x160 [ 142.038298][ T8986] process_scheduled_works+0x4cb/0x9d0 [ 142.043788][ T8986] worker_thread+0x582/0x770 [ 142.048396][ T8986] kthread+0x486/0x510 [ 142.052474][ T8986] ret_from_fork+0x4b/0x60 [ 142.056898][ T8986] ret_from_fork_asm+0x1a/0x30 [ 142.061671][ T8986] [ 142.063999][ T8986] read to 0xffffffff8685f2b0 of 4 bytes by task 8986 on cpu 1: [ 142.071546][ T8986] copy_process+0x1790/0x1f90 [ 142.076232][ T8986] kernel_clone+0x16c/0x5b0 [ 142.080746][ T8986] user_mode_thread+0x7d/0xb0 [ 142.085438][ T8986] call_usermodehelper_exec_work+0x41/0x160 [ 142.091350][ T8986] process_scheduled_works+0x4cb/0x9d0 [ 142.096820][ T8986] worker_thread+0x582/0x770 [ 142.101428][ T8986] kthread+0x486/0x510 [ 142.105503][ T8986] ret_from_fork+0x4b/0x60 [ 142.109920][ T8986] ret_from_fork_asm+0x1a/0x30 [ 142.114690][ T8986] [ 142.117016][ T8986] value changed: 0x80000139 -> 0x8000013a [ 142.122731][ T8986] [ 142.125052][ T8986] Reported by Kernel Concurrency Sanitizer on: [ 142.131212][ T8986] CPU: 1 UID: 0 PID: 8986 Comm: kworker/u8:58 Tainted: G W 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 142.145546][ T8986] Tainted: [W]=WARN [ 142.149367][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.159428][ T8986] Workqueue: events_unbound call_usermodehelper_exec_work [ 142.166559][ T8986] ================================================================== [ 142.189818][T14577] ipip0: entered promiscuous mode [ 142.210633][ T36] syz1: Port: 1 Link DOWN