last executing test programs: 3m42.570037965s ago: executing program 1 (id=48): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m42.377215134s ago: executing program 1 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close(r2) 3m42.31265575s ago: executing program 1 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 3m42.289805262s ago: executing program 1 (id=59): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") fdatasync(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) 3m41.627402078s ago: executing program 1 (id=70): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e8586dd"], 0x34}, {&(0x7f00000005c0)={0x10, 0x1f, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x10}], 0x2}, 0x0) 3m41.348692155s ago: executing program 1 (id=81): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 3m41.348589405s ago: executing program 32 (id=81): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 3m1.340718499s ago: executing program 5 (id=1583): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x1000004803}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 3m1.173663928s ago: executing program 5 (id=1591): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) 3m0.957032149s ago: executing program 5 (id=1594): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3m0.885753926s ago: executing program 5 (id=1595): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x2, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 3m0.4287531s ago: executing program 5 (id=1607): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 3m0.375861886s ago: executing program 5 (id=1609): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) 2m45.354689452s ago: executing program 33 (id=1609): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) 2m17.226669056s ago: executing program 6 (id=3441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 2m17.146944954s ago: executing program 6 (id=3445): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x69d7, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/21, 0x15}}], 0x1, 0x45833af92e4b39bd, 0x0) 2m17.058830573s ago: executing program 6 (id=3447): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 2m16.991927839s ago: executing program 6 (id=3449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) 2m16.932378245s ago: executing program 6 (id=3453): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m16.859331673s ago: executing program 6 (id=3457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x28, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x28}}, 0x0) 2m2.251698828s ago: executing program 34 (id=3457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x28, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x28}}, 0x0) 32.514742765s ago: executing program 4 (id=7234): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 32.471351609s ago: executing program 4 (id=7239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) 32.429067724s ago: executing program 4 (id=7243): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 32.324190094s ago: executing program 4 (id=7248): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 32.302371926s ago: executing program 4 (id=7252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) 32.146615271s ago: executing program 4 (id=7259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x49) write$selinux_access(r1, 0x0, 0x53) socket$nl_route(0x10, 0x3, 0x0) 32.096193816s ago: executing program 35 (id=7259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x49) write$selinux_access(r1, 0x0, 0x53) socket$nl_route(0x10, 0x3, 0x0) 18.239382028s ago: executing program 3 (id=7795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16", 0x7f}], 0x1}, 0x8044) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000e80360ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 18.146460227s ago: executing program 3 (id=7796): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 18.076555664s ago: executing program 3 (id=7800): rt_sigaction(0x22, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 17.843038117s ago: executing program 3 (id=7805): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 17.693956831s ago: executing program 3 (id=7809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 17.616467479s ago: executing program 3 (id=7810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 17.616257569s ago: executing program 36 (id=7810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 1.240604918s ago: executing program 8 (id=8510): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 716.709389ms ago: executing program 0 (id=8536): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 671.400024ms ago: executing program 7 (id=8540): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 627.988839ms ago: executing program 7 (id=8542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 551.697426ms ago: executing program 7 (id=8544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, 0x8) 544.275057ms ago: executing program 9 (id=8546): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0006}]}) 525.191599ms ago: executing program 0 (id=8547): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 511.36558ms ago: executing program 9 (id=8548): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2f}}, 0x10) 406.3129ms ago: executing program 7 (id=8549): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./cgroup.cpu/cgroup.procs\x00', 0x22000406, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nolazytime}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0xc506}}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$eJzs3MtvG0UYAPBvN4++m7SURx9QQ0FEFJImLdADh4JA6gUJCQ7lGNJQlaYtaoJEq4oGhMoR8RcARyQkTlw4gYQQcAJxhTtCqlAvLRxQ0Nq7ybqxU8d5GOrfT7IzszvrmW93xx7vZB1A16pkT0nE1oj4NSIGatn6ApXan5vXL0/8df3yRBJzcy//mVTL3bh+eaIoWmy3Jc8MpRHp+0nsbVDv9MVLZ8anpiYv5PmRmbNvjkxfvPTE6bPjpyZPTZ4bO3r0yOHRp58ae3JV4sziurHnnfP7dh9/9aMXJ+bitR8+z9q7NV9fjqNmcMV1VqISc7mFpf3V50dW/Or/LdtK6aS3gw1hWXoiIjtcfdX+PxA9sXDwBuKF9+Yz33aogcCayT6bdixa2pP/Tec/v4A7UaKPQ5cqPvGz77/FYz3HH5127dnsebIa/838UVvTG2n2XXaw9o29p8n2x1ZY/9aIODH798fZIxpehwAAWF1fZ+OfxxuN/9K4p1Ruez6HMhgRByNiZ0TcFRG7IuLuiGrZeyPivmXWX7klv3j88/OmtgJrUTb+eyaf26of/6V5iWQ+t60af1/y+umpyUP5PhmKvg1ZfnSJOr55/pcPm62rlMZ/2SOrvxgL5u34o3dD/TYnx2fGVxBynWvvRuzpbRR/Mj8TkO2B3RGxp43Xz/bZ6cc+25elt29ZvP728S9hFeaZ5j6NeLR2/GfjlvgLSa2mZvOTIxtjavLQSHFWLPbjT1dfKuf7Sum6+De2FtPGdoNtIDv+mxue/3n8RTco5munl1/H1d8+aPqdZvHxT+LEbLlE7fxPS0uy878/eaWa7s+XvT0+M3NhNKI/X1C3fGxh2yJflM/iHzrQuP/vjPjnk3y7vRGRncT3R8QDEbE/b/uDEfFQRBxYIv7vn3v4jaX3UJvn/yrI4j+51PGPGEzK8/VtJHrOfPdVs/pbe/87Uk0N5Utaef9rtYEr2XcAAADwf5FW56CTdLhIly5O7YrN6dT56ZmDlXjr3MnaXPVg9KXFla6B0vXQ0fzacJEfuyV/OCJ2VP/TaFM1PzxxfmpbJwMHqvfq1PX/SNPh4dq635v90wtw51jWPFr57sAvvlz9xgDryv2a0L30f+he+j90L/0fulej/n8l4mYHmgKsM5//0L30f+he+j90L/0futLiW+KLn1tp507/hcTO4yvafM0TcwNr8sqzy9+qZ40ijfKPdjRNJBHRXhWRLl2mv4XaO5ZIb1vmWJu7ZRmJ/XliQ0S0utWVddurnX1fAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWC3/BgAA//+NJdz0") 405.65363ms ago: executing program 2 (id=8550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x3, 0x9, @local, 0x5}, 0x1c) writev(r1, 0x0, 0x0) 357.502405ms ago: executing program 9 (id=8551): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, 0x0) 309.39169ms ago: executing program 2 (id=8552): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 309.152889ms ago: executing program 9 (id=8553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) getgroups(0x0, 0x0) 280.543262ms ago: executing program 2 (id=8554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000300), &(0x7f00000003c0)=@tcp6=r0, 0x1}, 0x20) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000000ac0)=""/4093, 0xffd}], 0x1}, 0x3}], 0x1, 0x40018020, 0x0) 270.124993ms ago: executing program 2 (id=8555): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 207.01386ms ago: executing program 8 (id=8556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 206.774719ms ago: executing program 7 (id=8557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 206.64426ms ago: executing program 9 (id=8558): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 206.39115ms ago: executing program 0 (id=8559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) 188.863272ms ago: executing program 0 (id=8560): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 174.209103ms ago: executing program 8 (id=8561): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x34020000) 121.012478ms ago: executing program 2 (id=8562): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 112.896459ms ago: executing program 8 (id=8563): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_h:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) 90.854051ms ago: executing program 7 (id=8564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x50}}, 0x20040054) 90.270921ms ago: executing program 8 (id=8565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 74.923733ms ago: executing program 0 (id=8566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdb0cf81c"], 0x2c}}, 0x0) 69.909783ms ago: executing program 2 (id=8567): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 29.286537ms ago: executing program 9 (id=8568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x6}, 0x1c) 683.31µs ago: executing program 8 (id=8569): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 0s ago: executing program 0 (id=8570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 0s ago: executing program 7 (id=8571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) kernel console output (not intermixed with test programs): [ 176.173514][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.183362][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.191151][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.219080][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.228486][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.236425][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.245358][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.255084][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.263299][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.271233][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.279197][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.291507][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.299449][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.307430][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.326262][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.351436][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.359189][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.367700][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.379838][T15111] __nla_validate_parse: 3 callbacks suppressed [ 176.379853][T15111] netlink: 1040 bytes leftover after parsing attributes in process `syz.7.5084'. [ 176.396743][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.411482][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.431104][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.440057][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.452530][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.460458][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.468736][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.480587][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.488549][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.505789][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.514134][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.528515][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.545818][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.565605][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.593413][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.607130][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.616218][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.624388][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.632500][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.640845][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.652118][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.660450][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.668099][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.675846][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.686309][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.694161][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.702018][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.710069][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.717797][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.726285][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.734504][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.742203][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.750272][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.757943][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.765611][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.773208][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.785020][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.793509][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.802530][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.819522][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.827550][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.835879][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.844377][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.855934][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.865565][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.881362][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.891405][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.899262][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 176.906856][T15086] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 177.186718][T15164] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5105'. [ 177.204445][T15166] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=15166 comm=syz.2.5106 [ 177.380383][T15193] hub 9-0:1.0: USB hub found [ 177.385306][T15193] hub 9-0:1.0: 8 ports detected [ 177.484064][T15211] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5128'. [ 177.501801][T15213] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5129'. [ 177.530985][T15215] xt_hashlimit: max too large, truncated to 1048576 [ 177.598681][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5136'. [ 177.634282][T15231] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5138'. [ 177.646321][T15235] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5141'. [ 177.846119][T15266] hub 6-0:1.0: USB hub found [ 177.854235][T15266] hub 6-0:1.0: 8 ports detected [ 177.914790][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5158'. [ 177.987925][T15279] x_tables: duplicate entry at hook 1 [ 178.057549][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5164'. [ 178.066748][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5164'. [ 179.228891][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 179.228906][ T29] audit: type=1400 audit(1761158890.370:11555): avc: denied { sys_module } for pid=15410 comm="syz.2.5226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 179.369075][T15428] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.387312][T15430] x_tables: duplicate entry at hook 1 [ 179.440211][ T29] audit: type=1400 audit(1761158890.590:11556): avc: denied { getopt } for pid=15435 comm="syz.0.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.610907][T15463] x_tables: duplicate entry at hook 1 [ 179.680581][ T29] audit: type=1326 audit(1761158890.842:11557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.3.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 179.704633][ T29] audit: type=1326 audit(1761158890.842:11558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.3.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 179.728927][ T29] audit: type=1326 audit(1761158890.842:11559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.3.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 179.752822][ T29] audit: type=1326 audit(1761158890.842:11560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.3.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 179.753800][T15473] sd 0:0:1:0: device reset [ 179.777265][ T29] audit: type=1326 audit(1761158890.842:11561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.3.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 179.806216][ T29] audit: type=1326 audit(1761158890.842:11562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.3.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 179.818049][T15477] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 179.830446][ T29] audit: type=1326 audit(1761158890.842:11563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.3.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 179.836878][T15477] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.836992][T15477] vhci_hcd vhci_hcd.0: Device attached [ 179.861438][ T29] audit: type=1326 audit(1761158890.842:11564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.3.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 179.912136][T15478] vhci_hcd: connection closed [ 179.912539][T11314] vhci_hcd: stop threads [ 179.922396][T11314] vhci_hcd: release socket [ 179.926927][T11314] vhci_hcd: disconnect device [ 180.112616][T15514] vlan2: entered allmulticast mode [ 180.136782][T15518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15518 comm=syz.2.5276 [ 180.149761][T15518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15518 comm=syz.2.5276 [ 180.301050][T15541] netem: change failed [ 180.429305][T15553] netlink: 'syz.4.5291': attribute type 8 has an invalid length. [ 180.474910][T15553] bond0: entered promiscuous mode [ 180.480733][T15553] veth1_to_bridge: entered promiscuous mode [ 180.492193][T15553] debugfs: 'hsr0' already exists in 'hsr' [ 180.497962][T15553] Cannot create hsr debugfs directory [ 180.503490][T15553] hsr0: entered promiscuous mode [ 180.539745][T15564] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.5296' sets config #1 [ 180.797490][T15592] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 180.804173][T15592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.812172][T15592] vhci_hcd vhci_hcd.0: Device attached [ 180.893819][T15593] vhci_hcd: connection closed [ 180.894058][ T4583] vhci_hcd: stop threads [ 180.904085][ T4583] vhci_hcd: release socket [ 180.908793][ T4583] vhci_hcd: disconnect device [ 181.689085][T15679] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.5346' sets config #1 [ 181.728818][T15681] atomic_op ffff888119817528 conn xmit_atomic 0000000000000000 [ 181.840892][T15691] Restarting kernel threads ... [ 181.851675][T15691] Done restarting kernel threads. [ 181.926587][ T4565] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 181.944831][ T4565] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 181.955528][ T4565] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 181.973294][T15699] vlan2: entered allmulticast mode [ 181.978682][T15699] bridge_slave_0: entered allmulticast mode [ 181.989556][ T4565] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 182.040985][T15705] __nla_validate_parse: 7 callbacks suppressed [ 182.041050][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5357'. [ 182.056290][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5357'. [ 182.080296][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5357'. [ 182.083186][T11311] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.089280][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5357'. [ 182.119640][T11311] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.128620][T11311] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.147210][T11311] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.167087][T15717] vlan0: entered allmulticast mode [ 182.172428][T15717] bridge_slave_0: entered allmulticast mode [ 182.373054][T15735] vhci_hcd: invalid port number 96 [ 182.378318][T15735] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 182.486481][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5377'. [ 182.495803][T15752] netlink: 'syz.4.5377': attribute type 1 has an invalid length. [ 182.503757][T15752] netlink: 'syz.4.5377': attribute type 2 has an invalid length. [ 182.511581][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5377'. [ 183.157474][T15796] tipc: Started in network mode [ 183.162611][T15796] tipc: Node identity 4, cluster identity 4711 [ 183.168913][T15796] tipc: Node number set to 4 [ 183.377918][T15806] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.5405'. [ 183.732725][T15842] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5423'. [ 183.739520][ T9695] Bluetooth: hci0: command 0x1003 tx timeout [ 183.742042][ T3631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.892267][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5432'. [ 184.016873][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 184.016890][ T29] audit: type=1326 audit(1761158895.398:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.047019][ T29] audit: type=1326 audit(1761158895.398:11766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.071022][ T29] audit: type=1326 audit(1761158895.398:11767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.097295][ T29] audit: type=1326 audit(1761158895.440:11768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.121578][ T29] audit: type=1326 audit(1761158895.440:11769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.146287][ T29] audit: type=1326 audit(1761158895.440:11770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.170747][ T29] audit: type=1326 audit(1761158895.440:11771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.194642][ T29] audit: type=1326 audit(1761158895.440:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.218890][ T29] audit: type=1326 audit(1761158895.451:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.7.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 184.391963][ T29] audit: type=1400 audit(1761158895.787:11774): avc: granted { setsecparam } for pid=15912 comm="syz.3.5453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 184.577806][ C0] ip6_tnl_xmit_ctl: 39 callbacks suppressed [ 184.577826][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 184.614271][T15943] 9p: Unknown access argument o: -22 [ 184.664272][T15953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15953 comm=syz.7.5472 [ 184.748819][T15967] netlink: 'syz.3.5478': attribute type 21 has an invalid length. [ 184.946285][T16000] netlink: 'syz.3.5495': attribute type 3 has an invalid length. [ 185.186533][T16047] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5514'. [ 185.398033][T16082] netlink: 'syz.4.5532': attribute type 9 has an invalid length. [ 185.497191][T16100] 9pnet_fd: Insufficient options for proto=fd [ 185.576693][T16114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16114 comm=syz.2.5544 [ 185.589741][T16111] netlink: 'syz.7.5541': attribute type 21 has an invalid length. [ 185.676908][T16128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16128 comm=syz.0.5551 [ 185.699543][T16128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16128 comm=syz.0.5551 [ 185.885661][T16154] netlink: 'syz.7.5561': attribute type 1 has an invalid length. [ 186.185217][T16182] sd 0:0:1:0: device reset [ 186.367535][T16211] Q6\bY4: renamed from lo [ 186.646889][T16251] program syz.2.5608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.824020][T16276] __nla_validate_parse: 8 callbacks suppressed [ 186.824035][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5620'. [ 186.839429][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5620'. [ 187.016771][T16293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16293 comm=syz.3.5626 [ 187.029415][T16293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16293 comm=syz.3.5626 [ 187.393739][T16345] netlink: 'syz.3.5649': attribute type 1 has an invalid length. [ 187.401845][T16345] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5649'. [ 187.734374][T16373] ref_ctr_offset mismatch. inode: 0x1841 offset: 0x0 ref_ctr_offset(old): 0x4000000 ref_ctr_offset(new): 0x0 [ 187.746504][T16374] netlink: 'syz.2.5661': attribute type 1 has an invalid length. [ 187.754453][T16374] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5661'. [ 187.802537][T16382] pim6reg: entered allmulticast mode [ 187.818558][T16382] pim6reg: left allmulticast mode [ 187.979604][T16403] netlink: 'syz.0.5675': attribute type 1 has an invalid length. [ 187.987438][T16403] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5675'. [ 188.040260][T16408] IPVS: Error connecting to the multicast addr [ 188.171834][T16432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.235648][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.405420][T16451] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 188.774017][T16489] netlink: 8 bytes leftover after parsing attributes in process `'. [ 188.792455][T16489] netlink: 8 bytes leftover after parsing attributes in process `'. [ 188.805491][T16489] netlink: 8 bytes leftover after parsing attributes in process `'. [ 188.814049][T16489] netlink: 8 bytes leftover after parsing attributes in process `'. [ 188.823124][T16489] netlink: 8 bytes leftover after parsing attributes in process `'. [ 188.835921][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 188.977934][T16508] netlink: 'syz.4.5726': attribute type 20 has an invalid length. [ 188.986596][T16508] netlink: 'syz.4.5726': attribute type 20 has an invalid length. [ 189.027123][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 189.027140][ T29] audit: type=1400 audit(1761158900.658:11965): avc: denied { bind } for pid=16511 comm="syz.4.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.053217][ T29] audit: type=1400 audit(1761158900.658:11966): avc: denied { name_bind } for pid=16511 comm="syz.4.5728" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 189.129517][ T29] audit: type=1400 audit(1761158900.658:11967): avc: denied { node_bind } for pid=16511 comm="syz.4.5728" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 189.150868][ T29] audit: type=1400 audit(1761158900.658:11968): avc: denied { read } for pid=16511 comm="syz.4.5728" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.258869][ T29] audit: type=1400 audit(1761158900.899:11969): avc: denied { read } for pid=16519 comm="syz.7.5731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.341764][T16523] SELinux: failed to load policy [ 189.437454][ T29] audit: type=1326 audit(1761158901.088:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 189.471959][ T29] audit: type=1326 audit(1761158901.120:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 189.496013][ T29] audit: type=1326 audit(1761158901.120:11972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 189.520075][ T29] audit: type=1326 audit(1761158901.120:11973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 189.547627][T16538] xt_hashlimit: max too large, truncated to 1048576 [ 189.594098][ T29] audit: type=1400 audit(1761158901.225:11974): avc: denied { execute } for pid=16540 comm="syz.0.5741" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.544368][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.567833][T16621] netlink: 'syz.0.5775': attribute type 20 has an invalid length. [ 190.588088][T16621] netlink: 'syz.0.5775': attribute type 20 has an invalid length. [ 191.110255][T16668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.120838][T16668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.156733][T16668] ip6gre1: left promiscuous mode [ 191.163266][T16668] bridge0: left promiscuous mode [ 191.169934][T11334] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.180745][T11334] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.198746][T11334] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.226999][T11334] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.284274][ T3691] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.463264][T16708] SELinux: failed to load policy [ 191.796579][T16761] tipc: Started in network mode [ 191.801740][T16761] tipc: Node identity ac14140f, cluster identity 4711 [ 191.808921][T16761] tipc: New replicast peer: 255.255.255.83 [ 191.814888][T16761] tipc: Enabled bearer , priority 10 [ 192.165129][T16788] xt_hashlimit: max too large, truncated to 1048576 [ 192.173112][T16788] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 192.535933][T16827] __nla_validate_parse: 14 callbacks suppressed [ 192.535996][T16827] netlink: 536 bytes leftover after parsing attributes in process `syz.0.5870'. [ 192.551991][T16827] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5870'. [ 192.769720][ T3374] tipc: Node number set to 2886997007 [ 192.782568][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5881'. [ 192.795525][T16856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5881'. [ 193.323367][T16913] xt_hashlimit: max too large, truncated to 1048576 [ 193.332330][T16913] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.476528][T16920] tipc: Enabling of bearer rejected, already enabled [ 193.822347][T16959] netlink: 'syz.4.5925': attribute type 13 has an invalid length. [ 193.830867][T16959] netlink: 'syz.4.5925': attribute type 17 has an invalid length. [ 193.838940][T16959] Q6\bY4: left promiscuous mode [ 193.844596][T16959] Q6\bY4: left allmulticast mode [ 193.852848][T16959] tunl0: left promiscuous mode [ 193.857756][T16959] tunl0: left allmulticast mode [ 193.865699][T16959] gre0: left promiscuous mode [ 193.870444][T16959] gre0: left allmulticast mode [ 193.881893][T16959] gretap0: left promiscuous mode [ 193.887056][T16959] gretap0: left allmulticast mode [ 193.894143][T16959] gretap0: refused to change device tx_queue_len [ 193.899770][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 193.899794][ T29] audit: type=1326 audit(1761158906.767:12111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 193.901063][T16959] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.930208][ T29] audit: type=1326 audit(1761158906.778:12112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 193.968876][ T29] audit: type=1326 audit(1761158906.778:12113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 194.003917][ T29] audit: type=1326 audit(1761158906.820:12114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 194.047382][ T29] audit: type=1400 audit(1761158906.925:12115): avc: granted { setsecparam } for pid=16966 comm="syz.4.5929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 194.070990][T16970] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5930'. [ 194.082987][T16972] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 194.135355][T16980] netlink: 'syz.2.5936': attribute type 1 has an invalid length. [ 194.143298][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5936'. [ 194.158718][T11334] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.158750][T16980] netlink: 'syz.2.5936': attribute type 1 has an invalid length. [ 194.158768][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5936'. [ 194.170275][T11334] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.194205][T11334] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.203453][T11334] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.324227][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5939'. [ 194.370202][ T29] audit: type=1326 audit(1761158907.271:12116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbf8efc9 code=0x7ffc0000 [ 194.412257][ T29] audit: type=1326 audit(1761158907.271:12117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08fbf8efc9 code=0x7ffc0000 [ 194.436319][ T29] audit: type=1326 audit(1761158907.271:12118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbf8efc9 code=0x7ffc0000 [ 194.460193][ T29] audit: type=1326 audit(1761158907.271:12119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f08fbf8efc9 code=0x7ffc0000 [ 194.484129][ T29] audit: type=1326 audit(1761158907.271:12120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbf8efc9 code=0x7ffc0000 [ 194.684194][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'. [ 194.704533][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'. [ 194.944161][T17075] netlink: 'syz.4.5979': attribute type 21 has an invalid length. [ 195.040013][T17089] netlink: 'syz.7.5985': attribute type 1 has an invalid length. [ 195.052230][ T292] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.061053][ T292] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.069730][ T292] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.074230][T17089] netlink: 'syz.7.5985': attribute type 1 has an invalid length. [ 195.087391][ T292] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.132878][T17091] SELinux: failed to load policy [ 195.318395][T17114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.603994][ T3691] hid_parser_main: 19 callbacks suppressed [ 195.604057][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.617597][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.625127][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.632729][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.640479][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.648141][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.655834][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.663444][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.671179][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.678660][ T3691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 195.687679][ T3691] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 195.811959][T17164] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 196.513406][T17180] random: crng reseeded on system resumption [ 196.624386][T17184] sd 0:0:1:0: device reset [ 197.269273][T17191] vlan2: entered allmulticast mode [ 197.496554][T17213] IPVS: Error connecting to the multicast addr [ 197.546879][T17176] syz.7.6032 (17176) used greatest stack depth: 7496 bytes left [ 197.740252][T17264] program syz.7.6066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.769339][T17266] __nla_validate_parse: 13 callbacks suppressed [ 197.769433][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6067'. [ 197.813137][T17276] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 197.823597][T17266] IPVS: Unknown mcast interface: ipvlan1 [ 197.905504][T17290] Falling back ldisc for ttyS3. [ 198.347805][ T3374] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.510949][T17369] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 198.526885][T17390] netlink: 'syz.0.6121': attribute type 39 has an invalid length. [ 198.657391][T17407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6130'. [ 198.666505][T17407] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6130'. [ 198.676231][T17407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6130'. [ 198.698922][T17407] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6130'. [ 198.708170][T17407] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6130'. [ 198.756521][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6136'. [ 198.765718][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6136'. [ 198.858780][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 198.858798][ T29] audit: type=1400 audit(1761158911.974:12257): avc: denied { write } for pid=17433 comm="syz.2.6144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.930240][ T29] audit: type=1326 audit(1761158912.006:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.0.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 198.936925][T17441] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 198.954067][ T29] audit: type=1326 audit(1761158912.006:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.0.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 198.987467][ T29] audit: type=1326 audit(1761158912.027:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.0.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 199.011423][ T29] audit: type=1326 audit(1761158912.027:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.0.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 199.035387][ T29] audit: type=1326 audit(1761158912.027:12262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.0.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 199.059230][ T29] audit: type=1326 audit(1761158912.027:12263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.0.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 199.083138][ T29] audit: type=1326 audit(1761158912.027:12264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.0.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 199.107028][ T29] audit: type=1326 audit(1761158912.027:12265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.0.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 199.130937][ T29] audit: type=1400 audit(1761158912.027:12266): avc: denied { mount } for pid=17438 comm="syz.4.6146" name="/" dev="autofs" ino=52766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 199.275652][T17468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6159'. [ 199.400132][ T4561] nci: nci_ntf_packet: unknown ntf opcode 0x903 [ 199.404952][T17487] netlink: 36 bytes leftover after parsing attributes in process `GPL'. [ 199.502214][T17505] netlink: 'syz.2.6172': attribute type 1 has an invalid length. [ 199.520151][T17505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.870294][T17548] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 200.474128][T17608] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 200.501369][T17608] SELinux: failed to load policy [ 200.534504][T17614] Cannot find set identified by id 0 to match [ 200.606003][T17625] 9pnet_fd: Insufficient options for proto=fd [ 200.700535][T17641] SELinux: failed to load policy [ 200.711461][T17643] netlink: 'syz.2.6236': attribute type 21 has an invalid length. [ 200.741975][T17643] netlink: 'syz.2.6236': attribute type 21 has an invalid length. [ 201.135361][T17707] vhci_hcd: default hub control req: 400c v5000 i0007 l0 [ 201.598214][T17751] serio: Serial port ptm0 [ 202.536970][T17830] __nla_validate_parse: 6 callbacks suppressed [ 202.536989][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6322'. [ 202.745524][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6342'. [ 202.879920][T17897] --map-set only usable from mangle table [ 202.914798][T17899] Falling back ldisc for ttyS3. [ 203.341927][T17940] netlink: 'syz.0.6374': attribute type 1 has an invalid length. [ 203.545818][T17962] pim6reg1: entered promiscuous mode [ 203.551297][T17962] pim6reg1: entered allmulticast mode [ 203.640297][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 203.640313][ T29] audit: type=1400 audit(1761158917.003:12480): avc: denied { validate_trans } for pid=17974 comm="syz.4.6391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 203.682659][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6390'. [ 203.691970][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6390'. [ 203.764439][ T29] audit: type=1400 audit(1761158917.129:12481): avc: denied { write } for pid=17988 comm="syz.3.6396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.859377][ T29] audit: type=1400 audit(1761158917.234:12482): avc: denied { append } for pid=17996 comm="syz.3.6400" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.906536][ T29] audit: type=1400 audit(1761158917.265:12483): avc: denied { create } for pid=18000 comm="syz.2.6401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 203.926415][ T29] audit: type=1400 audit(1761158917.265:12484): avc: denied { ioctl } for pid=18000 comm="syz.2.6401" path="socket:[54675]" dev="sockfs" ino=54675 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 203.951897][ T29] audit: type=1400 audit(1761158917.265:12485): avc: denied { bind } for pid=18000 comm="syz.2.6401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 204.103918][ T29] audit: type=1326 audit(1761158917.475:12486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.6408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 204.128413][ T29] audit: type=1326 audit(1761158917.475:12487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.6408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 204.152785][ T29] audit: type=1326 audit(1761158917.475:12488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.6408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 204.176893][ T29] audit: type=1326 audit(1761158917.475:12489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.6408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 204.727782][T18072] macvtap1: entered promiscuous mode [ 204.733138][T18072] macvtap1: entered allmulticast mode [ 204.828083][T18091] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 205.183033][T18131] netlink: 'syz.3.6457': attribute type 4 has an invalid length. [ 205.198081][T18131] netlink: 'syz.3.6457': attribute type 4 has an invalid length. [ 205.224531][T18135] netlink: 'syz.2.6469': attribute type 1 has an invalid length. [ 205.342762][T18147] netlink: 'syz.4.6460': attribute type 1 has an invalid length. [ 205.364785][T18147] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.385572][T18152] loop9: detected capacity change from 0 to 7 [ 205.387035][T18147] macvlan1: entered allmulticast mode [ 205.399166][T18147] veth1_vlan: entered allmulticast mode [ 205.400109][T18152] buffer_io_error: 4 callbacks suppressed [ 205.400125][T18152] Buffer I/O error on dev loop9, logical block 0, async page read [ 205.407091][T18147] bond7: (slave macvlan1): Enslaving as an active interface with a down link [ 205.418797][T18152] Buffer I/O error on dev loop9, logical block 0, async page read [ 205.435426][T18152] loop9: unable to read partition table [ 205.443612][T18152] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 205.443612][T18152] ) failed (rc=-5) [ 205.915173][T18215] block device autoloading is deprecated and will be removed. [ 206.339200][T18252] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.357798][T18252] vhci_hcd: invalid port number 96 [ 206.363438][T18252] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 206.424127][ T3374] hid_parser_main: 34 callbacks suppressed [ 206.424149][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.438167][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.446253][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.477852][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.485311][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.492838][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.500386][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.508036][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.515495][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.522941][ T3374] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 206.592392][ T3374] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 206.978019][T18284] netlink: 'syz.7.6529': attribute type 1 has an invalid length. [ 207.037104][T18284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.073131][T18284] macvlan1: entered allmulticast mode [ 207.118852][T18284] veth1_vlan: entered allmulticast mode [ 207.126983][T18284] bond1: (slave macvlan1): Enslaving as an active interface with a down link [ 207.964888][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6570'. [ 208.422134][T18396] block device autoloading is deprecated and will be removed. [ 208.519900][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 208.519917][ T29] audit: type=1400 audit(1761158922.115:13314): avc: denied { write } for pid=18399 comm="syz.3.6583" path="socket:[55275]" dev="sockfs" ino=55275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.583593][T18410] netlink: 'syz.2.6588': attribute type 1 has an invalid length. [ 208.601929][ T29] audit: type=1400 audit(1761158922.168:13315): avc: denied { write } for pid=18404 comm="syz.7.6585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 208.648626][T18405] infiniband syz!: set down [ 208.653262][T18405] infiniband syz!: added team_slave_0 [ 208.668438][T18405] RDS/IB: syz!: added [ 208.672535][T18405] smc: adding ib device syz! with port count 1 [ 208.679044][T18405] smc: ib device syz! port 1 has no pnetid [ 208.993748][ T29] audit: type=1400 audit(1761158922.598:13316): avc: denied { create } for pid=18429 comm="syz.2.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.014040][ T29] audit: type=1400 audit(1761158922.609:13317): avc: denied { setopt } for pid=18429 comm="syz.2.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.033737][ T29] audit: type=1400 audit(1761158922.609:13318): avc: denied { bind } for pid=18429 comm="syz.2.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.080297][T18443] netlink: 'syz.4.6604': attribute type 29 has an invalid length. [ 209.104792][T18443] netlink: 'syz.4.6604': attribute type 29 has an invalid length. [ 209.124494][T18443] netlink: 532 bytes leftover after parsing attributes in process `syz.4.6604'. [ 209.142448][ T29] audit: type=1404 audit(1761158922.766:13319): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 209.157670][ T29] audit: type=1404 audit(1761158922.766:13320): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 209.175389][ T29] audit: type=1400 audit(1761158922.777:13321): avc: denied { prog_load } for pid=18451 comm="syz.0.6607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.195201][ T29] audit: type=1400 audit(1761158922.777:13322): avc: denied { bpf } for pid=18451 comm="syz.0.6607" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.216623][ T29] audit: type=1400 audit(1761158922.777:13323): avc: denied { perfmon } for pid=18451 comm="syz.0.6607" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.273462][T18462] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 209.274063][T18458] hub 9-0:1.0: USB hub found [ 209.280224][T18462] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 209.280343][T18462] vhci_hcd vhci_hcd.0: Device attached [ 209.308475][T18458] hub 9-0:1.0: 8 ports detected [ 209.317299][T18464] vhci_hcd: connection closed [ 209.317568][ T292] vhci_hcd: stop threads [ 209.326621][ T292] vhci_hcd: release socket [ 209.331051][ T292] vhci_hcd: disconnect device [ 209.371326][T18467] loop0: detected capacity change from 0 to 1024 [ 209.390117][T18467] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.6613: Failed to acquire dquot type 0 [ 209.402248][T18467] EXT4-fs (loop0): 1 truncate cleaned up [ 209.408899][T18467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.423431][T18467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.492370][T18484] netlink: 'syz.7.6619': attribute type 4 has an invalid length. [ 209.500368][T18484] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.6619'. [ 209.572327][T18497] smc: net device bond0 applied user defined pnetid SYZ2 [ 209.580388][T18497] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6626'. [ 209.601884][T18497] smc: removing net device bond0 with user defined pnetid SYZ2 [ 209.610774][T18497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.611826][T18499] SELinux: failed to load policy [ 209.641682][T18497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.651132][T18497] bond0 (unregistering): Released all slaves [ 210.103928][T18534] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6640'. [ 210.325540][T18553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6649'. [ 210.335494][T18553] IPVS: Unknown mcast interface: ipvlan1 [ 210.392275][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6655'. [ 210.401767][T18566] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6655'. [ 210.594225][T18586] hub 1-0:1.0: USB hub found [ 210.598978][T18586] hub 1-0:1.0: 8 ports detected [ 210.707214][T18600] loop0: detected capacity change from 0 to 256 [ 210.715240][T18600] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.730860][T18600] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.151501][T18654] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.6693'. [ 211.272983][T18671] loop9: detected capacity change from 0 to 7 [ 211.280092][T18671] Buffer I/O error on dev loop9, logical block 0, async page read [ 211.288312][T18671] Buffer I/O error on dev loop9, logical block 0, async page read [ 211.296362][T18671] loop9: unable to read partition table [ 211.302737][T18671] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 211.302737][T18671] ) failed (rc=-5) [ 211.401822][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 211.412543][T18682] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 211.654820][T18697] hub 9-0:1.0: USB hub found [ 211.660797][T18697] hub 9-0:1.0: 8 ports detected [ 211.753081][T18705] SELinux: ebitmap: truncated map [ 211.759419][T18705] SELinux: failed to load policy [ 212.088507][T18719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6723'. [ 212.176882][ T292] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.204172][ T292] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.224912][ T292] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.254677][ T292] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.936137][T18764] ip6gre1: left promiscuous mode [ 212.941262][T18764] ip6gre1: left allmulticast mode [ 212.985775][T11311] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.994279][T11311] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 213.019649][T18772] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 213.027982][T11311] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.039463][T11311] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 213.100319][T11311] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.108984][T11311] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 213.143713][T11333] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.152551][T11333] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 213.288456][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 213.288474][ T29] audit: type=1326 audit(1761158927.134:13584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.0.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 213.362171][ T29] audit: type=1326 audit(1761158927.134:13585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="syz.0.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 213.386522][ T29] audit: type=1326 audit(1761158927.165:13586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.3.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 213.410696][ T29] audit: type=1326 audit(1761158927.165:13587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.3.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 213.434736][ T29] audit: type=1326 audit(1761158927.165:13588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5637771885 code=0x7ffc0000 [ 213.458682][ T29] audit: type=1326 audit(1761158927.186:13589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18799 comm="syz.3.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 213.482829][ T29] audit: type=1326 audit(1761158927.197:13590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.7.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 213.506693][ T29] audit: type=1326 audit(1761158927.197:13591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.7.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 213.530380][ T29] audit: type=1326 audit(1761158927.197:13592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.7.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 213.554657][ T29] audit: type=1326 audit(1761158927.197:13593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.7.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517206efc9 code=0x7ffc0000 [ 213.982499][T18856] __nla_validate_parse: 1 callbacks suppressed [ 213.982519][T18856] netlink: 31 bytes leftover after parsing attributes in process `syz.7.6785'. [ 214.000131][T18858] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 214.000131][T18858] program syz.4.6786 not setting count and/or reply_len properly [ 214.112592][T18848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.126212][T18866] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 18866 comm: syz.3.6790) [ 214.141629][T18868] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 214.155147][T18848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.204984][T18872] 9pnet_fd: p9_fd_create_tcp (18872): problem connecting socket to 127.0.0.1 [ 214.455878][T18882] program syz.3.6796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.597333][T18895] sd 0:0:1:0: device reset [ 214.741029][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6810'. [ 215.493270][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6855'. [ 215.653053][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6866'. [ 215.688868][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6866'. [ 215.751025][T19044] vlan0: entered allmulticast mode [ 215.757401][T19042] SELinux: policydb version 896 does not match my version range 15-35 [ 215.778517][T19042] SELinux: failed to load policy [ 215.798388][T19049] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 215.808093][T19052] netlink: 176 bytes leftover after parsing attributes in process `syz.7.6877'. [ 216.018959][T19079] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.089089][T19082] SELinux: failed to load policy [ 216.289401][T19104] x_tables: duplicate underflow at hook 4 [ 216.383215][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6906'. [ 216.396665][T19116] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 216.431506][T19120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19120 comm=syz.2.6908 [ 216.505498][T19131] netlink: '+}[@': attribute type 10 has an invalid length. [ 216.512952][T19131] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 216.614886][T19143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6917'. [ 216.706284][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 216.720885][T19154] vlan2: entered allmulticast mode [ 216.796263][T19158] loop0: detected capacity change from 0 to 128 [ 216.918869][T19171] netlink: '+}[@': attribute type 10 has an invalid length. [ 216.928074][T19171] batman_adv: batadv0: Adding interface: veth1_vlan [ 216.935139][T19171] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.962860][T19171] batman_adv: batadv0: Interface activated: veth1_vlan [ 217.154185][T19172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.167262][T19172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.259136][T19208] netlink: '+}[@': attribute type 10 has an invalid length. [ 217.266687][T19208] veth1_vlan: left promiscuous mode [ 217.272828][T19208] batman_adv: batadv0: Adding interface: veth1_vlan [ 217.279910][T19208] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 217.300633][T19208] batman_adv: batadv0: Interface activated: veth1_vlan [ 217.670315][ T9] hid_parser_main: 19 callbacks suppressed [ 217.670336][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 217.686477][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.142667][ T3374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 218.150792][ T3374] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.266214][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 218.266229][ T29] audit: type=1400 audit(1761158932.351:13934): avc: denied { read } for pid=19283 comm="syz.3.6986" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.296599][ T29] audit: type=1400 audit(1761158932.351:13935): avc: denied { open } for pid=19283 comm="syz.3.6986" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.358359][ T29] audit: type=1400 audit(1761158932.446:13936): avc: denied { mount } for pid=19287 comm="syz.3.6977" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 218.393855][ T29] audit: type=1400 audit(1761158932.477:13937): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 218.445502][T19293] Cannot find del_set index 4 as target [ 218.460642][ T29] audit: type=1326 audit(1761158932.550:13938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 218.484526][ T29] audit: type=1326 audit(1761158932.550:13939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 218.509300][ T29] audit: type=1326 audit(1761158932.550:13940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 218.533429][ T29] audit: type=1326 audit(1761158932.550:13941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 218.557810][ T29] audit: type=1326 audit(1761158932.550:13942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 218.582723][ T29] audit: type=1326 audit(1761158932.550:13943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 218.793844][ T3631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.793846][ T9695] Bluetooth: hci0: command 0x1003 tx timeout [ 218.959871][T19331] SELinux: failed to load policy [ 219.078467][T19337] SELinux: failed to load policy [ 219.107513][T19341] loop9: detected capacity change from 0 to 7 [ 219.114152][T19341] Buffer I/O error on dev loop9, logical block 0, async page read [ 219.122618][T19341] Buffer I/O error on dev loop9, logical block 0, async page read [ 219.130829][T19341] loop9: unable to read partition table [ 219.137013][T19341] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 219.137013][T19341] ) failed (rc=-5) [ 219.321241][T19356] __nla_validate_parse: 3 callbacks suppressed [ 219.321257][T19356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7009'. [ 219.828259][T19393] netlink: 'syz.7.7027': attribute type 12 has an invalid length. [ 219.836422][T19390] smc: net device bond0 applied user defined pnetid SYZ2 [ 219.852680][T19390] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7025'. [ 219.904334][T19401] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7039'. [ 220.236618][T19429] xt_hashlimit: max too large, truncated to 1048576 [ 220.245755][T19429] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.291300][T19433] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 221.324102][T19539] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 221.414190][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7099'. [ 221.436880][T19553] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7100'. [ 222.126989][T19601] 9pnet_fd: Insufficient options for proto=fd [ 222.287984][T19626] dvmrp1: entered allmulticast mode [ 222.319234][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7135'. [ 222.331666][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7145'. [ 222.342064][T19631] IPVS: Error connecting to the multicast addr [ 223.015842][T19652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.024647][T19652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.036098][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 223.036115][ T29] audit: type=1400 audit(1761158937.359:14401): avc: denied { create } for pid=19651 comm="syz.2.7143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.062241][ T29] audit: type=1400 audit(1761158937.359:14402): avc: denied { write } for pid=19651 comm="syz.2.7143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.082283][T19620] 9pnet_fd: p9_fd_create_tcp (19620): problem connecting socket to 127.0.0.1 [ 223.146923][ T29] audit: type=1400 audit(1761158937.474:14403): avc: denied { connect } for pid=19658 comm="syz.7.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.166931][ T29] audit: type=1400 audit(1761158937.474:14404): avc: denied { module_load } for pid=19657 comm="syz.4.7147" path="/sys/kernel/notes" dev="sysfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 223.190844][ T29] audit: type=1400 audit(1761158937.474:14405): avc: denied { write } for pid=19658 comm="syz.7.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.213394][ T29] audit: type=1400 audit(1761158937.537:14406): avc: denied { read } for pid=19658 comm="syz.7.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.241922][ T29] audit: type=1400 audit(1761158937.569:14407): avc: denied { write } for pid=19664 comm="syz.0.7149" name="config" dev="proc" ino=4026532988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 223.278097][ T29] audit: type=1326 audit(1761158937.611:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19662 comm="syz.4.7151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08fbf8efc9 code=0x0 [ 223.315068][T19670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.328706][T19670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.389087][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7155'. [ 223.398259][T19677] netlink: 'syz.0.7155': attribute type 30 has an invalid length. [ 223.436231][ T4569] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.445144][ T4569] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.461531][ T4569] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.479158][ T4569] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.623345][ T29] audit: type=1400 audit(1761158937.957:14409): avc: denied { write } for pid=19679 comm="syz.0.7167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.693394][ T29] audit: type=1400 audit(1761158938.051:14410): avc: denied { read write } for pid=19685 comm="syz.0.7159" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 224.557861][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 224.565745][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 224.573665][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 224.593436][ T23] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 224.611547][T19778] wireguard0: entered promiscuous mode [ 224.617418][T19778] wireguard0: entered allmulticast mode [ 224.716973][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7211'. [ 224.727205][T19795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7211'. [ 224.740947][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7210'. [ 224.771561][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7210'. [ 224.895144][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7218'. [ 224.906238][T19816] netem: incorrect gi model size [ 224.911365][T19816] netem: change failed [ 224.926805][T19818] netlink: 'syz.2.7220': attribute type 4 has an invalid length. [ 224.966445][T19818] netlink: 'syz.2.7220': attribute type 4 has an invalid length. [ 225.119775][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7230'. [ 225.138549][T19840] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7231'. [ 225.151214][T19838] vlan2: entered allmulticast mode [ 225.156503][T19838] dummy0: entered allmulticast mode [ 225.190234][T19844] netlink: 51 bytes leftover after parsing attributes in process `syz.4.7234'. [ 225.226012][T19852] syz_tun: entered allmulticast mode [ 225.236490][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7238'. [ 225.255709][T19850] syz_tun: left allmulticast mode [ 225.257446][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7238'. [ 225.904266][T11309] bond5 (unregistering): (slave bridge1): Releasing active interface [ 226.004938][T11309] team0: Port device bridge0 removed [ 226.085246][T11309] bond1 (unregistering): Released all slaves [ 226.119309][T11309] bond2 (unregistering): Released all slaves [ 226.140070][T11309] smc: removing net device bond0 with user defined pnetid SYZ2 [ 226.158781][T11309] bond0 (unregistering): left promiscuous mode [ 226.181553][T11309] bond0 (unregistering): Released all slaves [ 226.198894][T11309] bond3 (unregistering): (slave batadv1): Releasing active interface [ 226.215346][T11309] bond3 (unregistering): Released all slaves [ 226.225475][T11309] bond4 (unregistering): Released all slaves [ 226.234575][T11309] bond5 (unregistering): Released all slaves [ 226.255716][T11309] bond6 (unregistering): Released all slaves [ 226.275508][T11309] bond7 (unregistering): (slave macvlan1): Releasing active interface [ 226.285871][T11309] veth1_vlan: left allmulticast mode [ 226.301332][T11309] bond7 (unregistering): Released all slaves [ 226.367849][T11309] tipc: Left network mode [ 226.428315][T11309] veth1_to_bridge: left promiscuous mode [ 226.458845][T11309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.476364][T11309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.539521][T11309] team_slave_1 (unregistering): left promiscuous mode [ 226.546374][T11309] team_slave_1 (unregistering): left allmulticast mode [ 226.557876][T11309] team0 (unregistering): Port device team_slave_1 removed [ 226.570052][T11309] team_slave_0 (unregistering): left promiscuous mode [ 226.576898][T11309] team_slave_0 (unregistering): left allmulticast mode [ 226.589474][T11309] team0 (unregistering): Port device team_slave_0 removed [ 226.875612][T19910] chnl_net:caif_netlink_parms(): no params data found [ 226.990179][T19910] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.997458][T19910] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.005329][T19910] bridge_slave_0: entered allmulticast mode [ 227.029243][T19910] bridge_slave_0: entered promiscuous mode [ 227.040767][T20008] netlink: 'syz.2.7305': attribute type 6 has an invalid length. [ 227.041046][T19910] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.056042][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.078782][T19910] bridge_slave_1: entered allmulticast mode [ 227.088663][T19910] bridge_slave_1: entered promiscuous mode [ 227.095564][T20008] netlink: 'syz.2.7305': attribute type 6 has an invalid length. [ 227.108807][T20014] netem: change failed [ 227.122681][T19910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.135153][T19910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.156805][T20018] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 227.193351][T19910] team0: Port device team_slave_0 added [ 227.200256][T19910] team0: Port device team_slave_1 added [ 227.256681][T19910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.263861][T19910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.290242][T19910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.324380][T19910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.331682][T19910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.362068][T19910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.411850][T19910] hsr_slave_0: entered promiscuous mode [ 227.420427][T19910] hsr_slave_1: entered promiscuous mode [ 227.427115][T19910] debugfs: 'hsr0' already exists in 'hsr' [ 227.432875][T19910] Cannot create hsr debugfs directory [ 227.600630][T19910] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 227.710935][T19910] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 227.727234][T19910] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 227.748032][T19910] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 227.821246][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 227.821261][ T29] audit: type=1400 audit(1761158942.377:14727): avc: denied { read } for pid=20174 comm="syz.0.7328" dev="nsfs" ino=4026532779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.849262][ T29] audit: type=1400 audit(1761158942.377:14728): avc: denied { open } for pid=20174 comm="syz.0.7328" path="net:[4026532779]" dev="nsfs" ino=4026532779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.987251][ T29] audit: type=1400 audit(1761158942.440:14729): avc: denied { create } for pid=20174 comm="syz.0.7328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.007157][ T29] audit: type=1400 audit(1761158942.440:14730): avc: denied { bind } for pid=20174 comm="syz.0.7328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.026615][ T29] audit: type=1400 audit(1761158942.482:14731): avc: denied { execute } for pid=20176 comm="syz.0.7319" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=64046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 228.151071][ T29] audit: type=1400 audit(1761158942.734:14732): avc: denied { read } for pid=20189 comm="syz.0.7323" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.174819][ T29] audit: type=1400 audit(1761158942.734:14733): avc: denied { open } for pid=20189 comm="syz.0.7323" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.242459][ T29] audit: type=1400 audit(1761158942.776:14734): avc: denied { ioctl } for pid=20189 comm="syz.0.7323" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.268250][ T29] audit: type=1400 audit(1761158942.797:14735): avc: denied { create } for pid=20191 comm="syz.0.7325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.288460][ T29] audit: type=1400 audit(1761158942.797:14736): avc: denied { bind } for pid=20191 comm="syz.0.7325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.317133][T20196] SELinux: Context system_u:object is not valid (left unmapped). [ 228.656897][T19910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.710767][T19910] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.740062][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.747204][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.774051][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.781396][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.928186][T19910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.949513][T20245] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20245 comm=syz.0.7345 [ 229.173817][T19910] veth0_vlan: entered promiscuous mode [ 229.181435][T19910] veth1_vlan: entered promiscuous mode [ 229.210290][T19910] veth0_macvtap: entered promiscuous mode [ 229.227702][T19910] veth1_macvtap: entered promiscuous mode [ 229.250640][T20289] vlan2: entered allmulticast mode [ 229.291716][T19910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.316674][T19910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.351860][ T292] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.379812][ T292] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.395225][ T292] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.411477][ T292] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.607060][T20333] netlink: 'syz.7.7374': attribute type 1 has an invalid length. [ 229.626620][T20333] smc: adding net device bond0 with user defined pnetid SYZ2 [ 229.635047][T20333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.643688][T20331] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 229.701461][T20333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.735877][T20333] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 229.790520][T20333] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 230.085072][T20423] Falling back ldisc for ttyS3. [ 230.108687][T20437] __nla_validate_parse: 11 callbacks suppressed [ 230.108704][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7397'. [ 230.182186][T20444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7400'. [ 230.262924][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7405'. [ 230.282998][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7405'. [ 230.357232][T20462] program syz.7.7409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.416148][T20468] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7412'. [ 231.113353][T20507] netem: incorrect gi model size [ 231.213837][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7433'. [ 231.238488][T20517] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7434'. [ 231.473123][T20552] SELinux: policydb version 0 does not match my version range 15-35 [ 231.504990][T20552] SELinux: failed to load policy [ 231.527699][T20557] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 231.720211][T20578] netlink: 'syz.0.7458': attribute type 10 has an invalid length. [ 231.722902][T20577] netlink: 'syz.2.7459': attribute type 1 has an invalid length. [ 231.728099][T20578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7458'. [ 231.761892][T20578] vlan0: entered promiscuous mode [ 231.767709][T20578] vlan0: entered allmulticast mode [ 231.774054][T20578] veth0_vlan: entered allmulticast mode [ 231.780390][T20578] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 231.805225][T20577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.835654][T20583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20583 comm=syz.0.7462 [ 231.872049][T20620] xt_hashlimit: max too large, truncated to 1048576 [ 231.878903][T20616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.903987][T20616] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.915446][T20616] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 231.956194][T20637] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7467'. [ 232.099696][T20666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20666 comm=syz.7.7476 [ 232.151257][T20663] Falling back ldisc for ttyS3. [ 232.172431][T20643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.181116][T20679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.194298][T20643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.204377][T20679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.242513][T20693] sd 0:0:1:0: device reset [ 232.399200][T20716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.407441][T20716] bridge0: port 1(bond4) entered blocking state [ 232.413867][T20716] bridge0: port 1(bond4) entered disabled state [ 232.420605][T20716] bond4: entered allmulticast mode [ 232.427938][T20716] bond4: entered promiscuous mode [ 232.477637][T20754] netlink: 180 bytes leftover after parsing attributes in process `wޣ'. [ 232.682708][T20777] netlink: 'syz.3.7505': attribute type 1 has an invalid length. [ 232.698861][T20777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.719387][T20777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.726999][T20777] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 232.738258][T20777] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 232.749916][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 232.749934][ T29] audit: type=1326 audit(1761158947.563:15290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.8.7506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 232.798480][ T29] audit: type=1326 audit(1761158947.594:15291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.8.7506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 232.822224][ T29] audit: type=1326 audit(1761158947.594:15292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.8.7506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 232.846039][ T29] audit: type=1326 audit(1761158947.594:15293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.8.7506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 232.869881][ T29] audit: type=1326 audit(1761158947.594:15294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.8.7506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 232.894055][ T29] audit: type=1326 audit(1761158947.594:15295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.8.7506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 232.918318][ T29] audit: type=1326 audit(1761158947.594:15296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.8.7506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 232.942028][ T29] audit: type=1326 audit(1761158947.594:15297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.8.7506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 232.975519][ T29] audit: type=1400 audit(1761158947.657:15298): avc: denied { ioctl } for pid=20823 comm="syz.8.7507" path="socket:[65807]" dev="sockfs" ino=65807 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.058232][ T29] audit: type=1326 audit(1761158947.878:15299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20834 comm="syz.3.7511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563773efc9 code=0x7ffc0000 [ 233.260385][T20869] netlink: 'syz.2.7525': attribute type 1 has an invalid length. [ 233.268698][T20869] netlink: 'syz.2.7525': attribute type 1 has an invalid length. [ 233.463710][T20892] sd 0:0:1:0: device reset [ 233.620763][T20910] netlink: 'syz.2.7544': attribute type 1 has an invalid length. [ 233.746193][T20912] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.791880][T20910] bond5: entered promiscuous mode [ 233.800352][T20910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.818987][T20917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.827416][T20917] bond5: (slave bond6): making interface the new active one [ 233.834980][T20917] bond6: entered promiscuous mode [ 233.841103][T20917] bond5: (slave bond6): Enslaving as an active interface with an up link [ 233.852661][T20912] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.924064][T20912] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.019492][T20912] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.085961][T11309] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.103752][T11309] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.129340][T11309] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.157012][T11309] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.345024][T21061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.439633][T21061] bond1 (unregistering): Released all slaves [ 234.455581][T21109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21109 comm=syz.8.7575 [ 234.468453][T21109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21109 comm=syz.8.7575 [ 234.962106][ T9] IPVS: starting estimator thread 0... [ 234.962743][T21202] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 235.044484][T21206] IPVS: using max 2304 ests per chain, 115200 per kthread [ 235.091059][T21212] __nla_validate_parse: 7 callbacks suppressed [ 235.091075][T21212] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.7606'. [ 235.322751][T21247] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.660657][T21275] pim6reg: entered allmulticast mode [ 235.684857][T21275] pim6reg: left allmulticast mode [ 236.142434][T21317] netlink: 348 bytes leftover after parsing attributes in process `syz.8.7643'. [ 236.522173][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7644'. [ 236.531561][T21350] netlink: 'syz.3.7644': attribute type 1 has an invalid length. [ 236.539557][T21350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7644'. [ 236.739736][T21369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7668'. [ 236.749350][T21369] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7668'. [ 236.760379][T21352] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.7659'. [ 236.771107][T21352] netlink: zone id is out of range [ 236.776264][T21352] netlink: zone id is out of range [ 236.783010][T21352] netlink: zone id is out of range [ 236.788744][T21369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7668'. [ 236.800269][T21352] netlink: zone id is out of range [ 236.807034][T21352] netlink: zone id is out of range [ 236.813584][T21352] netlink: zone id is out of range [ 236.819775][T21352] netlink: zone id is out of range [ 236.825680][T21352] netlink: zone id is out of range [ 236.832442][T21352] netlink: zone id is out of range [ 236.837888][T21352] netlink: zone id is out of range [ 236.844196][T21369] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7668'. [ 236.853557][T21369] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7668'. [ 237.283783][T21445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.292959][T21445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.407162][T21473] netlink: 'syz.7.7706': attribute type 13 has an invalid length. [ 237.415341][T21473] netlink: 'syz.7.7706': attribute type 13 has an invalid length. [ 237.539552][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 237.539570][ T29] audit: type=1400 audit(1761158952.581:15853): avc: denied { load_policy } for pid=21488 comm="syz.8.7712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 237.567817][T21489] SELinux: failed to load policy [ 237.645232][ T29] audit: type=1400 audit(1761158952.696:15854): avc: denied { execmem } for pid=21494 comm="syz.7.7715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 237.674039][ T29] audit: type=1400 audit(1761158952.717:15855): avc: denied { mounton } for pid=21499 comm="syz.8.7717" path="/75/file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.704298][ T29] audit: type=1400 audit(1761158952.728:15856): avc: denied { mount } for pid=21499 comm="syz.8.7717" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 237.728635][ T29] audit: type=1400 audit(1761158952.759:15857): avc: denied { unmount } for pid=19910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 237.763160][ T29] audit: type=1400 audit(1761158952.822:15858): avc: denied { mounton } for pid=21503 comm="syz.8.7719" path="/76/file0" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 237.838562][ T29] audit: type=1400 audit(1761158952.896:15859): avc: denied { write } for pid=21515 comm="syz.0.7723" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.863040][ T29] audit: type=1400 audit(1761158952.896:15860): avc: denied { open } for pid=21515 comm="syz.0.7723" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.887880][T21516] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 237.887880][T21516] program syz.0.7723 not setting count and/or reply_len properly [ 237.923787][ T29] audit: type=1400 audit(1761158952.980:15861): avc: denied { read } for pid=21519 comm="syz.7.7725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 237.971172][ T29] audit: type=1326 audit(1761158953.011:15862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21517 comm="syz.8.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 238.216960][T21572] SELinux: failed to load policy [ 238.315599][T21583] SELinux: policydb version 0 does not match my version range 15-35 [ 238.353115][T21583] SELinux: failed to load policy [ 238.913269][T21672] xt_hashlimit: max too large, truncated to 1048576 [ 239.663113][T21743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.693823][T21743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.712937][T21743] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 239.720711][T21743] batman_adv: batadv0: Removing interface: veth1_vlan [ 240.154379][T21780] netlink: 'syz.0.7813': attribute type 21 has an invalid length. [ 240.482212][T21781] chnl_net:caif_netlink_parms(): no params data found [ 240.579324][T21781] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.586871][T21781] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.616342][T21970] __nla_validate_parse: 15 callbacks suppressed [ 240.616364][T21970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7827'. [ 240.634520][T21969] netlink: 'syz.0.7828': attribute type 3 has an invalid length. [ 240.642865][T21781] bridge_slave_0: entered allmulticast mode [ 240.649765][T21781] bridge_slave_0: entered promiscuous mode [ 240.666393][T21781] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.673691][T21781] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.685734][T21781] bridge_slave_1: entered allmulticast mode [ 240.692993][T21781] bridge_slave_1: entered promiscuous mode [ 240.745042][T21781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.756244][T21781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.806759][T21781] team0: Port device team_slave_0 added [ 240.814254][T21781] team0: Port device team_slave_1 added [ 240.825173][T22042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.835341][T22042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.852728][T21781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.859964][T21781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.886399][T21781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.900130][T21781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.907326][T21781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.934279][T21781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.972257][T21781] hsr_slave_0: entered promiscuous mode [ 240.979551][T21781] hsr_slave_1: entered promiscuous mode [ 240.985943][T21781] debugfs: 'hsr0' already exists in 'hsr' [ 240.991992][T21781] Cannot create hsr debugfs directory [ 241.096351][T21781] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 241.105837][T21781] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 241.115346][T21781] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 241.123768][T22200] netlink: 'syz.0.7838': attribute type 1 has an invalid length. [ 241.125122][T21781] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 241.151050][T22200] bond1: entered promiscuous mode [ 241.156324][T22200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.179844][T21781] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.187047][T21781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.194536][T21781] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.201900][T21781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.225119][T22200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.234017][T22200] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.244428][T22200] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 241.256126][T22200] bond1: (slave vxcan3): making interface the new active one [ 241.263579][T22200] vxcan3: entered promiscuous mode [ 241.270590][T22200] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 241.293657][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.313422][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.371832][T21781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.403004][T21781] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.420648][ T3400] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 241.428791][ T3400] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 241.437479][ T3400] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 241.446496][ T3400] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 241.458426][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.465653][T11309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.482561][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.489873][T11309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.531603][T21781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.629938][T21781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.647665][T22291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.661419][T22291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.789346][T21781] veth0_vlan: entered promiscuous mode [ 241.797885][T21781] veth1_vlan: entered promiscuous mode [ 241.814763][T21781] veth0_macvtap: entered promiscuous mode [ 241.823136][T21781] veth1_macvtap: entered promiscuous mode [ 241.834965][T21781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.846297][T21781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.858080][ T292] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.867581][ T292] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.877035][ T292] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.887693][ T292] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.013012][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7864'. [ 242.044024][T22355] binfmt_misc: register: failed to install interpreter file ./file2 [ 242.128159][T22365] netlink: 'syz.7.7870': attribute type 1 has an invalid length. [ 242.144268][T22365] bond2: entered promiscuous mode [ 242.149865][T22365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.183511][T22365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.192319][T22365] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 242.202704][T22365] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 242.214390][T22365] bond2: (slave vxcan3): making interface the new active one [ 242.221973][T22365] vxcan3: entered promiscuous mode [ 242.229111][T22365] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 242.243099][T22407] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.303732][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 242.303767][ T29] audit: type=1400 audit(1761158957.588:15983): avc: denied { connect } for pid=22416 comm="syz.9.7877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.335782][ T29] audit: type=1400 audit(1761158957.620:15984): avc: denied { ioctl } for pid=22420 comm="syz.7.7886" path="socket:[69323]" dev="sockfs" ino=69323 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.389058][ T29] audit: type=1400 audit(1761158957.672:15985): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.413728][ T29] audit: type=1400 audit(1761158957.672:15986): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.421712][T22428] loop0: detected capacity change from 0 to 1024 [ 242.437725][ T29] audit: type=1400 audit(1761158957.672:15987): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=695 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.500127][T22428] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 242.538781][ T29] audit: type=1400 audit(1761158957.819:15988): avc: denied { bind } for pid=22438 comm="syz.2.7893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 242.558768][ T29] audit: type=1400 audit(1761158957.819:15989): avc: denied { write } for pid=22438 comm="syz.2.7893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 242.635428][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7890'. [ 242.742516][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'. [ 242.784299][ T29] audit: type=1400 audit(1761158958.092:15990): avc: denied { read } for pid=22485 comm="syz.2.7901" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 242.808047][ T29] audit: type=1400 audit(1761158958.092:15991): avc: denied { open } for pid=22485 comm="syz.2.7901" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 242.832232][ T29] audit: type=1400 audit(1761158958.092:15992): avc: denied { ioctl } for pid=22485 comm="syz.2.7901" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 242.893243][T22492] geneve3: entered promiscuous mode [ 242.898616][T22492] geneve3: entered allmulticast mode [ 243.341542][T22539] loop0: detected capacity change from 0 to 128 [ 243.353056][T22539] bio_check_eod: 18 callbacks suppressed [ 243.353079][T22539] syz.0.7922: attempt to access beyond end of device [ 243.353079][T22539] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 243.374571][T22539] syz.0.7922: attempt to access beyond end of device [ 243.374571][T22539] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 243.388324][T22539] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 243.397616][T22539] syz.0.7922: attempt to access beyond end of device [ 243.397616][T22539] loop0: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 243.423985][T22539] syz.0.7922: attempt to access beyond end of device [ 243.423985][T22539] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 243.437697][T22539] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 243.468139][T22549] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7926'. [ 243.511531][T22537] syz.0.7922: attempt to access beyond end of device [ 243.511531][T22537] loop0: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 243.525262][T22537] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 243.534300][T22537] syz.0.7922: attempt to access beyond end of device [ 243.534300][T22537] loop0: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 243.548031][T22537] Buffer I/O error on dev loop0, logical block 78, lost async page write [ 243.570972][T22537] syz.0.7922: attempt to access beyond end of device [ 243.570972][T22537] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 243.584649][T22537] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 243.593465][T22537] syz.0.7922: attempt to access beyond end of device [ 243.593465][T22537] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 243.607135][T22537] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 244.518094][T22660] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.607303][T22668] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7962'. [ 244.992579][T22704] 9pnet_fd: Insufficient options for proto=fd [ 245.338336][T22735] dvmrp1: entered allmulticast mode [ 245.347775][T22735] dvmrp1: left allmulticast mode [ 245.507019][T22758] netlink: 'syz.7.7997': attribute type 1 has an invalid length. [ 245.514875][T22758] netlink: 'syz.7.7997': attribute type 2 has an invalid length. [ 245.525764][T22760] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 245.555615][T22764] sch_fq: defrate 4294967295 ignored. [ 245.598953][T22770] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.8004'. [ 245.674628][T22777] xt_CT: No such helper "pptp" [ 245.799339][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8017'. [ 245.888706][T22823] syzkaller1: entered promiscuous mode [ 245.894740][T22823] syzkaller1: entered allmulticast mode [ 246.200901][T22860] dummy0: entered promiscuous mode [ 246.208293][T22863] loop0: detected capacity change from 0 to 1024 [ 246.216389][T22860] bond_slave_0: entered promiscuous mode [ 246.222405][T22860] bond_slave_0: left promiscuous mode [ 246.225778][T22863] EXT4-fs: inline encryption not supported [ 246.234219][T22860] dummy0: left promiscuous mode [ 246.239864][T22861] vhci_hcd: invalid port number 96 [ 246.245014][T22861] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 246.266317][T22863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.341883][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.437698][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8054'. [ 246.508176][T22916] netlink: 'syz.7.8058': attribute type 1 has an invalid length. [ 246.575785][T22928] netlink: 'syz.0.8063': attribute type 20 has an invalid length. [ 246.583814][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8063'. [ 246.618435][T22928] netlink: 'syz.0.8063': attribute type 20 has an invalid length. [ 246.626658][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8063'. [ 246.666642][T22938] xt_hashlimit: max too large, truncated to 1048576 [ 246.699278][T22941] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8070'. [ 246.742392][T22943] ALSA: seq fatal error: cannot create timer (-19) [ 246.775399][T22950] sd 0:0:1:0: device reset [ 246.806394][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8078'. [ 246.819910][T22958] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 246.986952][T22981] netlink: 19 bytes leftover after parsing attributes in process `syz.9.8086'. [ 247.079431][T22996] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8093'. [ 247.133088][T23003] binfmt_misc: register: failed to install interpreter file ./file2 [ 247.151043][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 247.151058][ T29] audit: type=1400 audit(1761158962.669:16319): avc: denied { read } for pid=23006 comm="syz.2.8098" path="socket:[71190]" dev="sockfs" ino=71190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.198159][ T29] audit: type=1400 audit(1761158962.722:16320): avc: denied { read } for pid=23008 comm="syz.8.8099" path="socket:[71191]" dev="sockfs" ino=71191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.321935][T23039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8098'. [ 247.378114][ T29] audit: type=1400 audit(1761158962.911:16321): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 247.469439][ T29] audit: type=1400 audit(1761158963.005:16322): avc: denied { create } for pid=23047 comm="syz.0.8105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 247.519113][ T29] audit: type=1400 audit(1761158963.026:16323): avc: denied { write } for pid=23047 comm="syz.0.8105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 247.582125][ T29] audit: type=1400 audit(1761158963.131:16324): avc: denied { execute } for pid=23054 comm="syz.2.8107" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=71257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 247.628304][ T29] audit: type=1400 audit(1761158963.131:16325): avc: denied { write } for pid=23054 comm="syz.2.8107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.678288][ T29] audit: type=1326 audit(1761158963.226:16326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 247.726626][ T29] audit: type=1326 audit(1761158963.257:16327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 247.750699][ T29] audit: type=1326 audit(1761158963.257:16328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440c49efc9 code=0x7ffc0000 [ 247.782403][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x1 [ 247.790260][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.798000][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.805579][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.813168][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.820865][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.828594][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.836175][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.843730][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.851188][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.860876][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 247.909625][T23088] io-wq is not configured for unbound workers [ 248.439330][T23123] net_ratelimit: 39 callbacks suppressed [ 248.439357][T23123] TCP: tcp_parse_options: Illegal window scaling value 177 > 14 received [ 248.785567][T23168] IPVS: Unknown mcast interface: [ 249.096163][T23219] bond_slave_0: entered promiscuous mode [ 249.102521][T23219] bond_slave_1: entered promiscuous mode [ 249.109705][T23219] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 249.119053][T23219] bond_slave_0: left promiscuous mode [ 249.124514][T23219] bond_slave_1: left promiscuous mode [ 249.236232][T23247] sd 0:0:1:0: device reset [ 249.265407][T23250] lo speed is unknown, defaulting to 1000 [ 249.272139][T23250] lo speed is unknown, defaulting to 1000 [ 249.278704][T23250] lo speed is unknown, defaulting to 1000 [ 249.323322][T23250] infiniband syz2: set down [ 249.327950][T23250] infiniband syz2: added lo [ 249.333092][ T3374] lo speed is unknown, defaulting to 1000 [ 249.349549][T23250] RDS/IB: syz2: added [ 249.354024][T23250] smc: adding ib device syz2 with port count 1 [ 249.361075][T23250] smc: ib device syz2 port 1 has no pnetid [ 249.367414][ T3374] lo speed is unknown, defaulting to 1000 [ 249.373871][T23250] lo speed is unknown, defaulting to 1000 [ 249.412368][T23250] lo speed is unknown, defaulting to 1000 [ 249.450135][T23250] lo speed is unknown, defaulting to 1000 [ 249.460033][T23272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=23272 comm=syz.8.8185 [ 249.488142][T23250] lo speed is unknown, defaulting to 1000 [ 249.527469][T23250] lo speed is unknown, defaulting to 1000 [ 249.566267][T23250] lo speed is unknown, defaulting to 1000 [ 249.950425][T23342] random: crng reseeded on system resumption [ 249.968272][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 249.999025][ T3374] kernel read not supported for file /vcs (pid: 3374 comm: kworker/1:2) [ 250.107509][T23370] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 250.153246][T23375] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 250.739625][T23453] program syz.2.8255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.795455][T23464] __nla_validate_parse: 10 callbacks suppressed [ 250.795471][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8260'. [ 250.848001][T23464] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 251.033083][T23498] loop0: detected capacity change from 0 to 128 [ 251.052275][T23498] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.066937][T23498] ext4 filesystem being mounted at /1719/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.120216][T23498] EXT4-fs (loop0): shut down requested (0) [ 251.151449][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.341350][T23531] SELinux: failed to load policy [ 251.363438][T23535] random: crng reseeded on system resumption [ 251.454501][ T3374] kernel read not supported for file /vcs (pid: 3374 comm: kworker/1:2) [ 251.661545][T23558] 9pnet: Could not find request transport: f [ 251.756964][T23578] program syz.8.8300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.804481][T23582] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8310'. [ 251.817137][T23582] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 251.875323][T23566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.923159][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 251.923176][ T29] audit: type=1400 audit(1761158967.677:16485): avc: denied { write } for pid=23602 comm="syz.9.8306" path="socket:[71929]" dev="sockfs" ino=71929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.984319][ T29] audit: type=1400 audit(1761158967.740:16486): avc: denied { mount } for pid=23605 comm="syz.7.8308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 252.007083][ T29] audit: type=1400 audit(1761158967.740:16487): avc: denied { search } for pid=23605 comm="syz.7.8308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.029402][ T29] audit: type=1400 audit(1761158967.740:16488): avc: denied { search } for pid=23605 comm="syz.7.8308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.051604][ T29] audit: type=1400 audit(1761158967.740:16489): avc: denied { search } for pid=23605 comm="syz.7.8308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.074149][ T29] audit: type=1400 audit(1761158967.740:16490): avc: denied { search } for pid=23605 comm="syz.7.8308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.096164][ T29] audit: type=1400 audit(1761158967.740:16491): avc: denied { search } for pid=23605 comm="syz.7.8308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.102056][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8309'. [ 252.118642][ T29] audit: type=1400 audit(1761158967.740:16492): avc: denied { search } for pid=23605 comm="syz.7.8308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.149939][ T29] audit: type=1400 audit(1761158967.740:16493): avc: denied { search } for pid=23605 comm="syz.7.8308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.352494][T23647] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8321'. [ 252.428764][T23655] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=23655 comm=syz.8.8324 [ 252.471299][ T29] audit: type=1326 audit(1761158968.254:16494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23659 comm="syz.8.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d1b5efc9 code=0x7ffc0000 [ 252.602834][T23672] SELinux: failed to load policy [ 252.731829][T23686] IPv6: sit1: Disabled Multicast RS [ 252.738258][T23686] sit1: entered allmulticast mode [ 253.027641][T23735] loop0: detected capacity change from 0 to 1024 [ 253.034846][T23735] EXT4-fs: inline encryption not supported [ 253.041199][T23735] EXT4-fs: Ignoring removed nobh option [ 253.047195][T23735] EXT4-fs: Ignoring removed bh option [ 253.085683][T23735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.112398][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.422499][T23782] vhci_hcd: invalid port number 23 [ 253.427727][T23782] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 253.484709][T23787] program syz.7.8379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.554994][T23796] netlink: 'syz.7.8382': attribute type 19 has an invalid length. [ 253.563255][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8382'. [ 253.574301][T23796] netlink: 'syz.7.8382': attribute type 19 has an invalid length. [ 253.582621][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8382'. [ 253.684151][T23808] loop0: detected capacity change from 0 to 1024 [ 253.691688][T23808] EXT4-fs: Ignoring removed orlov option [ 253.718539][T23808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.761292][T23822] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 253.761292][T23822] program syz.9.8393 not setting count and/or reply_len properly [ 253.987676][T23844] bond3: entered promiscuous mode [ 253.993225][T23844] bond3: entered allmulticast mode [ 254.048835][T23844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.083888][T23844] bond3 (unregistering): Released all slaves [ 254.157659][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.233456][T23928] netlink: 'syz.0.8407': attribute type 83 has an invalid length. [ 254.251333][T23936] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8411'. [ 254.329102][T23946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8417'. [ 254.525999][T23965] lo speed is unknown, defaulting to 1000 [ 254.598945][T23996] program syz.8.8437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.687273][T24022] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 254.694050][T24022] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 254.701753][T24022] vhci_hcd vhci_hcd.0: Device attached [ 254.719481][T24025] vhci_hcd: connection closed [ 254.726024][ T4567] vhci_hcd: stop threads [ 254.735152][ T4567] vhci_hcd: release socket [ 254.739902][ T4567] vhci_hcd: disconnect device [ 254.752417][T24018] lo speed is unknown, defaulting to 1000 [ 255.045655][T24063] lo speed is unknown, defaulting to 1000 [ 255.484232][T24119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8462'. [ 255.558341][T24127] block device autoloading is deprecated and will be removed. [ 255.575732][T24125] vhci_hcd: invalid port number 96 [ 255.580924][T24125] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 255.678075][T24153] hub 6-0:1.0: USB hub found [ 255.682961][T24153] hub 6-0:1.0: 8 ports detected [ 255.697283][T24151] hub 2-0:1.0: USB hub found [ 255.703327][T24151] hub 2-0:1.0: 8 ports detected [ 255.810150][T24169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8481'. [ 256.110956][T24209] dummy0: entered allmulticast mode [ 256.123372][T24209] wireguard0: entered promiscuous mode [ 256.129319][T24209] wireguard0: entered allmulticast mode [ 256.160306][T24218] macvtap1: entered promiscuous mode [ 256.165931][T24218] macvtap1: entered allmulticast mode [ 256.243297][T24208] dummy0: left allmulticast mode [ 256.286252][T24232] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8502'. [ 256.339421][T24230] bond1: entered promiscuous mode [ 256.344863][T24230] bond1: entered allmulticast mode [ 256.357107][T24230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.369693][T24269] netlink: 7 bytes leftover after parsing attributes in process `'. [ 256.386381][T24230] bond1 (unregistering): Released all slaves [ 256.613227][T24323] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 256.633009][T24323] vhci_hcd: invalid port number 96 [ 256.638285][T24323] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 256.656983][T24331] loop0: detected capacity change from 0 to 512 [ 256.664298][T24331] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 256.688071][T24331] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.8520: invalid indirect mapped block 4294967295 (level 0) [ 256.717740][T24331] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.8520: invalid indirect mapped block 4294967295 (level 1) [ 256.735132][T24344] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8525'. [ 256.747525][T24331] EXT4-fs (loop0): 1 orphan inode deleted [ 256.753403][T24331] EXT4-fs (loop0): 1 truncate cleaned up [ 256.775328][T24331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.849380][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.906660][T24357] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8532'. [ 256.917294][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8533'. [ 256.966414][T24366] netlink: 'syz.9.8534': attribute type 3 has an invalid length. [ 256.987171][T24369] dummy0: entered allmulticast mode [ 257.021311][T24369] wireguard0: entered promiscuous mode [ 257.027361][T24369] wireguard0: entered allmulticast mode [ 257.062098][T24380] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8540'. [ 257.094314][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 257.094332][ T29] audit: type=1400 audit(1761158973.115:16696): avc: denied { validate_trans } for pid=24388 comm="syz.2.8537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 257.148244][T24368] dummy0: left allmulticast mode [ 257.179662][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8545'. [ 257.214009][ T29] audit: type=1326 audit(1761158973.241:16697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.237797][ T29] audit: type=1326 audit(1761158973.241:16698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.262337][ T29] audit: type=1326 audit(1761158973.241:16699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.286441][ T29] audit: type=1326 audit(1761158973.241:16700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.310811][ T29] audit: type=1326 audit(1761158973.241:16701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.335267][ T29] audit: type=1326 audit(1761158973.241:16702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.359735][ T29] audit: type=1326 audit(1761158973.241:16703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.383616][ T29] audit: type=1326 audit(1761158973.241:16704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.407874][ T29] audit: type=1326 audit(1761158973.241:16705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.0.8547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcecc4eefc9 code=0x7ffc0000 [ 257.476458][T24425] vlan2: entered allmulticast mode [ 257.481727][T24425] bridge_slave_0: entered allmulticast mode [ 257.491748][T24421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8555'. [ 257.504420][T24428] dummy0: entered allmulticast mode [ 257.515696][T24428] wireguard0: entered promiscuous mode [ 257.521337][T24428] wireguard0: entered allmulticast mode [ 257.540663][T24438] loop0: detected capacity change from 0 to 512 [ 257.548910][T24438] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 257.560494][T24438] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 257.574916][T24438] EXT4-fs (loop0): 1 truncate cleaned up [ 257.582511][T24438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.648558][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.669303][T24427] dummy0: left allmulticast mode [ 257.695945][T24467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8566'. [ 257.747834][T24478] ================================================================== [ 257.756080][T24478] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 257.762971][T24478] [ 257.765420][T24478] write to 0xffff8881270a8440 of 88 bytes by task 24477 on cpu 1: [ 257.773500][T24478] __bpf_get_stackid+0x761/0x800 [ 257.778500][T24478] bpf_get_stackid+0xe9/0x120 [ 257.783376][T24478] bpf_get_stackid_raw_tp+0xf6/0x120 [ 257.789083][T24478] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 257.794950][T24478] bpf_trace_run2+0x107/0x1c0 [ 257.799833][T24478] kfree+0x351/0x400 [ 257.803762][T24478] bpf_check+0xc215/0xd9d0 [ 257.808394][T24478] bpf_prog_load+0xf6e/0x1100 [ 257.813191][T24478] __sys_bpf+0x469/0x7c0 [ 257.817901][T24478] __x64_sys_bpf+0x41/0x50 [ 257.822369][T24478] x64_sys_call+0x2aee/0x3000 [ 257.827177][T24478] do_syscall_64+0xd2/0x200 [ 257.831783][T24478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.837894][T24478] [ 257.840247][T24478] read to 0xffff8881270a8478 of 8 bytes by task 24478 on cpu 0: [ 257.848250][T24478] bcmp+0x23/0x90 [ 257.852009][T24478] __bpf_get_stackid+0x371/0x800 [ 257.857090][T24478] bpf_get_stackid+0xe9/0x120 [ 257.861889][T24478] bpf_get_stackid_raw_tp+0xf6/0x120 [ 257.867560][T24478] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 257.873233][T24478] bpf_trace_run2+0x107/0x1c0 [ 257.877940][T24478] kfree+0x351/0x400 [ 257.881852][T24478] vfree+0x295/0x3a0 [ 257.885784][T24478] bpf_check+0xc1f3/0xd9d0 [ 257.890217][T24478] bpf_prog_load+0xf6e/0x1100 [ 257.894996][T24478] __sys_bpf+0x469/0x7c0 [ 257.899606][T24478] __x64_sys_bpf+0x41/0x50 [ 257.904049][T24478] x64_sys_call+0x2aee/0x3000 [ 257.908756][T24478] do_syscall_64+0xd2/0x200 [ 257.913267][T24478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.919264][T24478] [ 257.921678][T24478] value changed: 0xffffffff8161c359 -> 0xffffffff816196b1 [ 257.928999][T24478] [ 257.931456][T24478] Reported by Kernel Concurrency Sanitizer on: [ 257.937906][T24478] CPU: 0 UID: 0 PID: 24478 Comm: syz.7.8571 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.949513][T24478] Tainted: [W]=WARN [ 257.953327][T24478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.963480][T24478] ================================================================== [ 267.488700][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!