last executing test programs: 4m34.06526304s ago: executing program 32 (id=4190): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xfff3}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe29, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x34db67fedfa68c99, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m26.493229613s ago: executing program 33 (id=4527): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000"], 0x28}}, 0x0) 3m49.475538581s ago: executing program 34 (id=6173): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) 3m47.822138505s ago: executing program 35 (id=6197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000031900850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) timer_getoverrun(0x0) io_cancel(0x0, 0x0, 0x0) 3m25.569363782s ago: executing program 36 (id=6486): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 3m15.7501288s ago: executing program 37 (id=7325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x0, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 3m8.493567665s ago: executing program 5 (id=7593): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m6.067250038s ago: executing program 38 (id=7645): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) close(0x3) 2m53.424447483s ago: executing program 39 (id=7593): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m37.848854846s ago: executing program 40 (id=8736): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003fc0)=[{&(0x7f0000000100)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1, 0x0, 0x0, 0x20000004}], 0x1, 0x20000000) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x24000000) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x10000}, 0x8) 2m31.098208356s ago: executing program 41 (id=8378): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 2m29.095033511s ago: executing program 3 (id=9122): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m28.88199829s ago: executing program 3 (id=9132): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2060, 0x0, {0x3, r3}}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 2m28.656033779s ago: executing program 3 (id=9140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.614338923s ago: executing program 3 (id=9143): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x137) 2m28.586633715s ago: executing program 3 (id=9146): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa31e6ae9ad066219, 0x31, 0xffffffffffffffff, 0x0) exit(0x0) 2m27.745912359s ago: executing program 3 (id=9168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x122}}, 0x8010) 2m27.745780139s ago: executing program 42 (id=9168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x122}}, 0x8010) 1m55.905676774s ago: executing program 8 (id=10947): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m55.835102611s ago: executing program 8 (id=10957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x400c4}, 0x8808) 1m55.796464194s ago: executing program 8 (id=10960): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) readahead(0xffffffffffffffff, 0x40, 0xfffffffffffffffd) 1m55.754243077s ago: executing program 8 (id=10964): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x210009, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00') 1m55.693043963s ago: executing program 8 (id=10966): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m55.258910331s ago: executing program 8 (id=10987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) 1m55.258794331s ago: executing program 43 (id=10987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) 1m47.317513125s ago: executing program 2 (id=11334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20) 1m47.315487016s ago: executing program 2 (id=11335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xe, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1m47.303570697s ago: executing program 2 (id=11336): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x90000, 0xffffffffffffffff, 0x20, {0x4, 0x1}, 0x6}, 0x1) 1m47.241987502s ago: executing program 2 (id=11338): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x2, 0x3}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write(r0, &(0x7f0000000380)="3ace", 0x2) 1m47.241822012s ago: executing program 2 (id=11339): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) 1m47.239150992s ago: executing program 2 (id=11340): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xffffff71}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4629}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 1m31.929745161s ago: executing program 44 (id=11340): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xffffff71}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4629}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 1m29.576394237s ago: executing program 5 (id=11742): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 1m29.453722368s ago: executing program 5 (id=11851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 1m29.365503096s ago: executing program 5 (id=11853): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 1m29.349896757s ago: executing program 5 (id=11854): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000c80)={'syztnl1\x00', r3, 0x40, 0x7800, 0x8, 0xb, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x2065, 0x1, 0x0, 0x4, 0x0, @loopback, @loopback}}}}) 1m27.861882377s ago: executing program 5 (id=11937): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 1m27.859874487s ago: executing program 45 (id=11937): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 24.769739001s ago: executing program 1 (id=14444): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 24.697946778s ago: executing program 1 (id=14448): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) 24.620210095s ago: executing program 1 (id=14458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='timer_start\x00', r0, 0x0, 0x1075}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}}, 0x8000) 24.584550858s ago: executing program 1 (id=14461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) 24.509849335s ago: executing program 1 (id=14470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 24.468635659s ago: executing program 1 (id=14475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 9.318781345s ago: executing program 46 (id=14475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 1.388599838s ago: executing program 4 (id=15208): r0 = getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) r2 = syz_pidfd_open(r0, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) 1.36909654s ago: executing program 4 (id=15210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@cswp={0x58, 0x114, 0x7, {{0xb, 0xd0a}, &(0x7f0000000280)=0x8, 0x0, 0x0, 0x56ab, 0x0, 0x4, 0x20, 0x694}}], 0x58, 0x20040000}, 0x0) 1.313177465s ago: executing program 4 (id=15224): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4) 1.278100238s ago: executing program 4 (id=15214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) 1.175709757s ago: executing program 0 (id=15216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 1.106934023s ago: executing program 0 (id=15234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r2 = syz_io_uring_setup(0x6021, &(0x7f0000000040)={0x0, 0x7344, 0x10000, 0x4, 0x74}, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000380), 0x0) 1.076629466s ago: executing program 9 (id=15225): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000000)='./file0\x00', 0x23f) 1.064596847s ago: executing program 0 (id=15228): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.063954007s ago: executing program 9 (id=15229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = io_uring_setup(0x2d08, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/121, 0x79}], &(0x7f00000003c0)=[0xfffffffffffffff7]}, 0x20) 1.040154469s ago: executing program 9 (id=15230): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r0, 0x0, 0x3a) 1.038401359s ago: executing program 7 (id=15241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) unshare(0x26000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x38) 973.969645ms ago: executing program 0 (id=15231): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x475c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 973.574625ms ago: executing program 9 (id=15232): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 973.278025ms ago: executing program 7 (id=15233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 952.071416ms ago: executing program 7 (id=15236): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="985e44", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="cb85931e7744", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d41062402504dd1b76635819bf2ef9eea38ce7363278208863eeb5", 0x1b}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 863.135014ms ago: executing program 7 (id=15238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@noinit_itable}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_always}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x66], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x38, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 815.366218ms ago: executing program 7 (id=15240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x8010, &(0x7f0000000040), 0x1, 0x540, &(0x7f0000000b40)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 815.102879ms ago: executing program 6 (id=15242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000680)="d9", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 737.941116ms ago: executing program 6 (id=15243): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) lremovexattr(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) 723.348587ms ago: executing program 0 (id=15244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0x4, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)="ff", 0x1}]) 709.743407ms ago: executing program 6 (id=15245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) 633.862044ms ago: executing program 6 (id=15246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 416.704184ms ago: executing program 4 (id=15247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x10}], 0x1, 0x2100, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 416.466544ms ago: executing program 6 (id=15248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 414.894024ms ago: executing program 0 (id=15257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xe9, 0x400) syz_usb_disconnect(r2) 385.169937ms ago: executing program 6 (id=15249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 270.899066ms ago: executing program 4 (id=15250): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x3e, 0x4, 0x10, 0x409, 0x63, 0x834b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x0, 0xed, 0x43, 0x60}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x40c0) 694.82µs ago: executing program 7 (id=15251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 431.65µs ago: executing program 9 (id=15252): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000080)={0xa, 0x4e20, 0x80004, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="180000000000000029000016360000002b000000000000004000000000000000290000003b000000850400000000000005020000000100c2044e5d6dda0001000502080fc910fc000000000000000000000000000001000014"], 0x70}, 0x20000850) 0s ago: executing program 9 (id=15253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x41, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) kernel console output (not intermixed with test programs): 00 vfffa i0060 l0 [ 308.568569][ T1293] 9p: Bad value for 'rfdno' [ 308.617888][ T1303] smc: net device bond0 applied user defined pnetid SYZ0 [ 308.625352][ T1303] smc: net device bond0 erased user defined pnetid SYZ0 [ 308.632475][ T1303] smc: ib device syz2 ibport 1 erased user defined pnetid S [ 308.831296][ T1331] block device autoloading is deprecated and will be removed. [ 308.895897][ T1352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.911078][ T1352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.098643][ T1397] loop6: detected capacity change from 0 to 1024 [ 309.114009][ T1397] EXT4-fs: inline encryption not supported [ 309.119830][ T1397] EXT4-fs: Ignoring removed orlov option [ 309.130928][ T1397] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 309.153862][ T1397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 309.162253][ T1397] System zones: 0-1, 3-12 [ 309.167196][ T1397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.209817][ T1414] loop1: detected capacity change from 0 to 128 [ 309.228086][ T1416] syzkaller1: entered promiscuous mode [ 309.228730][ T1414] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.233735][ T1416] syzkaller1: entered allmulticast mode [ 309.290048][T24604] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.306777][ T1426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11910'. [ 309.318825][ T1426] netlink: 'syz.1.11910': attribute type 1 has an invalid length. [ 309.326691][ T1426] netlink: 'syz.1.11910': attribute type 2 has an invalid length. [ 309.334580][ T1426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11910'. [ 309.372730][T23103] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.413520][ T1431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11912'. [ 309.422595][ T1431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11912'. [ 309.432935][ T1431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11912'. [ 309.461188][ T1446] loop6: detected capacity change from 0 to 512 [ 309.468057][ T1446] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 309.469155][ T1448] tipc: Started in network mode [ 309.484761][ T1448] tipc: Node identity ac14140f, cluster identity 4711 [ 309.492685][ T1448] tipc: New replicast peer: 255.255.255.255 [ 309.498735][ T1448] tipc: Enabled bearer , priority 10 [ 309.556288][ T1455] netlink: 'syz.0.11920': attribute type 7 has an invalid length. [ 309.605938][ T1469] loop9: detected capacity change from 0 to 164 [ 309.621745][ T1469] Unable to read rock-ridge attributes [ 309.631241][ T1470] SELinux: Context system_u: is not valid (left unmapped). [ 309.638481][ T1469] Unable to read rock-ridge attributes [ 310.207386][ T1561] pim6reg: entered allmulticast mode [ 310.223031][ T1571] pim6reg: left allmulticast mode [ 310.259113][ T5717] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.366999][ T1605] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 310.503237][ T1036] tipc: Node number set to 2886997007 [ 310.564439][ T1535] chnl_net:caif_netlink_parms(): no params data found [ 310.653140][ T1535] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.660232][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.682968][ T1535] bridge_slave_0: entered allmulticast mode [ 310.702182][ T1535] bridge_slave_0: entered promiscuous mode [ 310.711937][ T1535] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.719011][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.726368][ T1535] bridge_slave_1: entered allmulticast mode [ 310.733237][ T1535] bridge_slave_1: entered promiscuous mode [ 310.780853][ T1535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.801144][ T1535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.814452][ T1852] dvmrp1: entered allmulticast mode [ 310.828669][ T1852] dvmrp1: left allmulticast mode [ 310.838955][ T1868] loop9: detected capacity change from 0 to 764 [ 310.846374][ T1868] rock: directory entry would overflow storage [ 310.852587][ T1868] rock: sig=0x4654, size=5, remaining=4 [ 310.865475][ T1868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 310.878871][ T1535] team0: Port device team_slave_0 added [ 310.887408][ T1535] team0: Port device team_slave_1 added [ 310.922832][ T1535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.929862][ T1535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.955900][ T1535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.967347][ T1535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.969757][ T1923] loop1: detected capacity change from 0 to 512 [ 310.974352][ T1535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.974379][ T1535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.024450][ T1923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.042296][ T1923] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.11979: corrupted inode contents [ 311.055295][ T1923] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.11979: mark_inode_dirty error [ 311.056251][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 311.056321][ T29] audit: type=1326 audit(311.037:15254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.066792][ T1927] pim6reg1: entered promiscuous mode [ 311.095906][ T29] audit: type=1326 audit(311.057:15255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.101258][ T1927] pim6reg1: entered allmulticast mode [ 311.124105][ T29] audit: type=1326 audit(311.057:15256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.124134][ T29] audit: type=1326 audit(311.057:15257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.124232][ T29] audit: type=1326 audit(311.057:15258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.131327][ T1923] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.11979: corrupted inode contents [ 311.152563][ T29] audit: type=1326 audit(311.057:15259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.152638][ T29] audit: type=1326 audit(311.057:15260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.178654][ T1535] hsr_slave_0: entered promiscuous mode [ 311.198472][ T29] audit: type=1326 audit(311.057:15261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.210860][ T1535] hsr_slave_1: entered promiscuous mode [ 311.233198][ T29] audit: type=1326 audit(311.057:15262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.256636][ T1535] debugfs: 'hsr0' already exists in 'hsr' [ 311.261689][ T29] audit: type=1326 audit(311.057:15263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1960 comm="syz.0.11981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 311.284633][ T1535] Cannot create hsr debugfs directory [ 311.347639][ T1923] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.11979: mark_inode_dirty error [ 311.403750][T24604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.532153][ T2059] IPv6: Can't replace route, no match found [ 311.586673][ T2072] __nla_validate_parse: 9 callbacks suppressed [ 311.586687][ T2072] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11999'. [ 311.605197][ T2076] loop9: detected capacity change from 0 to 512 [ 311.621166][ T2076] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 311.649070][ T2076] EXT4-fs (loop9): 1 truncate cleaned up [ 311.655973][ T2076] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.671059][ T5717] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.731008][ T1535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.739898][ T1535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.749275][ T1535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.758476][ T1535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.789005][T30406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.821061][ T1535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.835130][ T2123] netlink: 96 bytes leftover after parsing attributes in process `ÿ'. [ 311.846221][ T1535] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.867186][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.874273][ T5734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.880217][ T2130] loop9: detected capacity change from 0 to 1024 [ 311.903811][ T2130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.912313][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.919353][ T5720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.953096][ T2130] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.984412][T30406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.989341][ T1535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.013704][ T5717] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.061201][ T2155] netlink: 92 bytes leftover after parsing attributes in process `syz.6.12014'. [ 312.074004][ T5717] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.125398][ T2165] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12016'. [ 312.148466][ T2165] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 312.157397][ T5717] bridge_slave_1: left allmulticast mode [ 312.163192][ T5717] bridge_slave_1: left promiscuous mode [ 312.168873][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.185049][ T5717] bridge_slave_0: left allmulticast mode [ 312.190850][ T5717] bridge_slave_0: left promiscuous mode [ 312.196497][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.285462][ T2192] loop6: detected capacity change from 0 to 256 [ 312.354978][ T5717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.365415][ T5717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.375251][ T5717] bond0 (unregistering): Released all slaves [ 312.437623][ T1535] veth0_vlan: entered promiscuous mode [ 312.462764][ T5717] hsr_slave_0: left promiscuous mode [ 312.470046][ T5717] hsr_slave_1: left promiscuous mode [ 312.476385][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.483847][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.501331][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.508738][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.531046][ T5717] veth1_macvtap: left promiscuous mode [ 312.536539][ T5717] veth0_macvtap: left promiscuous mode [ 312.552745][ T5717] veth1_vlan: left promiscuous mode [ 312.560947][ T5717] veth0_vlan: left promiscuous mode [ 312.615282][ T2235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12039'. [ 312.641914][ T5717] team0 (unregistering): Port device team_slave_1 removed [ 312.651811][ T5717] team0 (unregistering): Port device team_slave_0 removed [ 312.691245][ T1535] veth1_vlan: entered promiscuous mode [ 312.713850][ T2240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12041'. [ 312.727912][ T1535] veth0_macvtap: entered promiscuous mode [ 312.736693][ T2248] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 312.746701][ T1535] veth1_macvtap: entered promiscuous mode [ 312.773299][ T1535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.791956][ T1535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.809074][ T5745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.833258][ T5745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.852943][ T5745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.862276][ T5745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.886409][ T2266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12051'. [ 313.025244][ T2288] pim6reg1: entered promiscuous mode [ 313.030554][ T2288] pim6reg1: entered allmulticast mode [ 313.228744][ T2321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12068'. [ 313.528761][ T2359] hub 9-0:1.0: USB hub found [ 313.533616][ T2359] hub 9-0:1.0: 8 ports detected [ 313.563251][ T2363] serio: Serial port ptm0 [ 313.717965][ T2363] serio: Serial port ptm0 [ 313.746669][ T3414] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 313.755118][ T3414] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.800260][ T2411] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 313.902762][ T2417] batadv_slave_0: entered promiscuous mode [ 313.909319][ T2416] batadv_slave_0: left promiscuous mode [ 313.967840][ T2438] hub 9-0:1.0: USB hub found [ 313.979228][ T2438] hub 9-0:1.0: 8 ports detected [ 314.091194][ T2473] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12127'. [ 314.100242][ T2473] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12127'. [ 314.254801][ T2494] smc: net device bond0 applied user defined pnetid SYZ0 [ 314.269039][ T2494] smc: net device bond0 erased user defined pnetid SYZ0 [ 314.309886][ T2521] hub 9-0:1.0: USB hub found [ 314.314732][ T2521] hub 9-0:1.0: 8 ports detected [ 314.356865][ T2533] xt_hashlimit: max too large, truncated to 1048576 [ 314.372457][ T2533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.420015][ T2546] serio: Serial port ptm0 [ 314.573876][ T2546] serio: Serial port ptm0 [ 314.690076][ T3512] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.703296][ T3512] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.950297][ T2624] netlink: 'syz.6.12161': attribute type 3 has an invalid length. [ 314.996793][ T2630] SELinux: failed to load policy [ 315.374875][ T2685] serio: Serial port ptm1 [ 315.534433][ T2685] serio: Serial port ptm1 [ 315.737627][ T2744] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 316.688175][ T2872] SELinux: failed to load policy [ 316.771916][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 316.771930][ T29] audit: type=1400 audit(316.757:15437): avc: denied { write } for pid=2873 comm="syz.4.12237" path="socket:[105561]" dev="sockfs" ino=105561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.831711][ T29] audit: type=1400 audit(316.817:15438): avc: denied { read } for pid=2873 comm="syz.4.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.894319][ T29] audit: type=1400 audit(316.857:15439): avc: denied { mount } for pid=2880 comm="syz.6.12248" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 316.916136][ T29] audit: type=1400 audit(316.857:15440): avc: denied { unmount } for pid=2880 comm="syz.6.12248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 316.990771][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 317.001145][ T2891] SELinux: failed to load policy [ 317.051352][ T2896] __nla_validate_parse: 2 callbacks suppressed [ 317.051367][ T2896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12244'. [ 317.051459][ T2896] syz_tun: refused to change device tx_queue_len [ 317.353681][ T6564] Process accounting resumed [ 317.410961][ T2932] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.12259'. [ 317.911248][ T29] audit: type=1326 audit(317.897:15441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2957 comm="syz.6.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 317.999664][ T29] audit: type=1326 audit(317.897:15442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2957 comm="syz.6.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 317.999771][ T29] audit: type=1326 audit(317.927:15443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2957 comm="syz.6.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 317.999803][ T29] audit: type=1326 audit(317.927:15444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2957 comm="syz.6.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 317.999834][ T29] audit: type=1326 audit(317.927:15445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2957 comm="syz.6.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 317.999896][ T29] audit: type=1326 audit(317.927:15446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2957 comm="syz.6.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 318.216120][ T4724] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 318.216823][ T4724] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.244338][ T2999] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12280'. [ 318.484213][ T3017] loop9: detected capacity change from 0 to 128 [ 318.493789][ T3017] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.527930][T30406] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.901411][ T3041] syz_tun: left promiscuous mode [ 318.928368][ T3041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.948449][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12298'. [ 319.237995][ T3108] random: crng reseeded on system resumption [ 319.238489][ T3106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12320'. [ 319.572977][ T3176] netlink: 'syz.4.12344': attribute type 4 has an invalid length. [ 319.614885][ T3180] netlink: 'syz.6.12346': attribute type 3 has an invalid length. [ 319.634772][ T3180] netlink: 'syz.6.12346': attribute type 3 has an invalid length. [ 319.634972][ T3182] loop9: detected capacity change from 0 to 1024 [ 319.659515][ T3182] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.666356][ T3182] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.692161][ T3182] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.12347: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 319.733858][ T3182] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.12347: couldn't read orphan inode 11 (err -117) [ 319.746654][ T3182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.788262][ T3182] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.12347: Invalid block bitmap block 0 in block_group 0 [ 319.817842][ T3182] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.12347: Failed to acquire dquot type 0 [ 319.836058][ T3182] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.12347: Invalid inode bitmap blk 137438953472 in block_group 0 [ 319.880510][ T3214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12358'. [ 319.889537][ T3214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12358'. [ 319.914156][ T5715] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm kworker/u8:25: Invalid inode table block 8589934593 in block_group 0 [ 319.964555][ T3214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12358'. [ 319.981585][T30406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.331367][ T3241] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12368'. [ 320.340454][ T3241] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12368'. [ 320.614887][ T3294] netlink: 'syz.6.12387': attribute type 21 has an invalid length. [ 320.631831][ T3294] netlink: 'syz.6.12387': attribute type 1 has an invalid length. [ 320.673433][ T3299] netlink: 'syz.1.12392': attribute type 7 has an invalid length. [ 320.771162][ T3414] Process accounting resumed [ 321.229654][ T3340] random: crng reseeded on system resumption [ 321.461009][ T3512] Process accounting resumed [ 321.520826][ T3367] netlink: 'syz.6.12415': attribute type 14 has an invalid length. [ 321.550209][ T5715] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.560731][ T3367] netlink: 'syz.6.12415': attribute type 14 has an invalid length. [ 321.580347][ T5715] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.622964][ T5715] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.660666][ T5715] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.773804][ T3382] random: crng reseeded on system resumption [ 322.062003][ T3411] __nla_validate_parse: 7 callbacks suppressed [ 322.062021][ T3411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12429'. [ 322.170109][ T3422] loop9: detected capacity change from 0 to 512 [ 322.188511][ T3422] EXT4-fs: Ignoring removed i_version option [ 322.211029][ T3422] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.280874][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 322.280891][ T29] audit: type=1400 audit(322.267:15597): avc: denied { ioctl } for pid=3429 comm="syz.6.12435" path="socket:[105291]" dev="sockfs" ino=105291 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 322.551273][ T3443] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 322.575739][ T3443] SELinux: failed to load policy [ 322.635392][ T29] audit: type=1400 audit(322.617:15598): avc: denied { relabelto } for pid=3445 comm="syz.0.12442" name="cgroup.controllers" dev="tmpfs" ino=3989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 322.659943][ T29] audit: type=1400 audit(322.617:15599): avc: denied { associate } for pid=3445 comm="syz.0.12442" name="cgroup.controllers" dev="tmpfs" ino=3989 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 322.764605][ T29] audit: type=1400 audit(322.677:15600): avc: denied { unlink } for pid=25618 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=3989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 322.820509][ T29] audit: type=1400 audit(322.777:15601): avc: denied { setattr } for pid=3452 comm="syz.0.12444" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 322.977233][ T29] audit: type=1400 audit(322.957:15602): avc: denied { setopt } for pid=3458 comm="syz.6.12446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 323.107221][T30406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.241721][ T29] audit: type=1326 audit(323.227:15603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.12452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 323.314030][ T29] audit: type=1326 audit(323.247:15604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.12452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 323.336957][ T29] audit: type=1326 audit(323.247:15605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.12452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 323.359888][ T29] audit: type=1326 audit(323.247:15606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.12452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 323.531255][ T3487] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 323.550747][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 323.612914][ T3491] netlink: 'syz.6.12456': attribute type 1 has an invalid length. [ 323.860959][ T5785] Bluetooth: hci0: Frame reassembly failed (-84) [ 323.922771][ T3517] smc: net device hsr0 applied user defined pnetid SYZ2 [ 323.937685][ T3517] smc: net device hsr0 erased user defined pnetid SYZ2 [ 324.026458][ T3522] ALSA: seq fatal error: cannot create timer (-19) [ 324.339643][ T3552] Falling back ldisc for ptm1. [ 324.373590][ T3565] netlink: 'syz.4.12487': attribute type 29 has an invalid length. [ 324.842741][ T3617] atomic_op ffff88812e862928 conn xmit_atomic 0000000000000000 [ 325.870709][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 325.872643][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 326.291428][ T5717] Bluetooth: hci0: Frame reassembly failed (-84) [ 326.347108][ T3741] SELinux: policydb version 0 does not match my version range 15-35 [ 326.356488][ T3741] SELinux: failed to load policy [ 326.416650][ T3751] loop9: detected capacity change from 0 to 512 [ 326.433513][ T3751] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 326.441749][ T3751] EXT4-fs (loop9): orphan cleanup on readonly fs [ 326.449751][ T3751] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.12555: corrupted inode contents [ 326.463022][ T3751] EXT4-fs (loop9): Remounting filesystem read-only [ 326.469628][ T3751] EXT4-fs (loop9): 1 truncate cleaned up [ 326.475933][ T5755] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 326.486472][ T5755] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 326.497012][ T5755] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 326.507733][ T3751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.547823][T30406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.489309][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 327.489323][ T29] audit: type=1326 audit(327.467:15793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.498011][ T3794] loop9: detected capacity change from 0 to 1024 [ 327.518519][ T29] audit: type=1326 audit(327.467:15794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.518546][ T29] audit: type=1326 audit(327.467:15795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.520732][ T29] audit: type=1326 audit(327.507:15796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.593997][ T29] audit: type=1326 audit(327.507:15797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.617018][ T29] audit: type=1326 audit(327.507:15798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.639985][ T29] audit: type=1326 audit(327.507:15799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.663020][ T29] audit: type=1326 audit(327.507:15800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.686051][ T29] audit: type=1326 audit(327.507:15801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.709043][ T29] audit: type=1326 audit(327.507:15802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.1.12570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9afb29f749 code=0x7ffc0000 [ 327.751594][ T3794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.798812][ T3794] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.12568: Freeing blocks not in datazone - block = 0, count = 16 [ 327.823406][T30406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.984711][ T3842] loop9: detected capacity change from 0 to 512 [ 327.991490][ T3842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.998305][ T3842] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 328.009377][ T3842] EXT4-fs (loop9): 1 truncate cleaned up [ 328.016056][ T3842] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.154593][T30406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.208847][ T3857] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12591'. [ 328.350634][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 328.350694][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 328.441735][ T5715] Bluetooth: hci0: Frame reassembly failed (-84) [ 328.476726][ T3891] SELinux: Context › is not valid (left unmapped). [ 328.789481][ T3947] xt_hashlimit: max too large, truncated to 1048576 [ 328.813512][ T3947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.991659][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12641'. [ 329.024685][ T3994] xt_hashlimit: max too large, truncated to 1048576 [ 329.038665][ T3994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.072600][ T4000] netlink: 268 bytes leftover after parsing attributes in process `syz.1.12646'. [ 329.127771][ T4014] loop9: detected capacity change from 0 to 128 [ 329.258346][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.258346][ T5717] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 329.273106][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.273106][ T5717] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 329.287681][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.287681][ T5717] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 329.302104][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.302104][ T5717] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 329.315848][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.315848][ T5717] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 329.329580][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.329580][ T5717] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 329.348754][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.348754][ T5717] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 329.364683][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.364683][ T5717] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 329.378650][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.378650][ T5717] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 329.394639][ T5717] kworker/u8:27: attempt to access beyond end of device [ 329.394639][ T5717] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 329.703079][ T4085] vlan2: entered allmulticast mode [ 329.757929][ T4097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4097 comm=syz.6.12691 [ 329.813295][ T4099] SELinux: ebitmap: truncated map [ 329.819185][ T4099] SELinux: failed to load policy [ 330.501716][ T4149] lo speed is unknown, defaulting to 1000 [ 330.508782][ T4149] lo speed is unknown, defaulting to 1000 [ 330.514654][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 330.520677][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 330.522845][ T4149] lo speed is unknown, defaulting to 1000 [ 330.580353][ T4149] infiniband syz1: set active [ 330.585195][ T4149] infiniband syz1: added lo [ 330.590539][ T3414] lo speed is unknown, defaulting to 1000 [ 330.597265][ T4160] loop9: detected capacity change from 0 to 2048 [ 330.612919][ T4149] RDS/IB: syz1: added [ 330.626781][ T4149] smc: adding ib device syz1 with port count 1 [ 330.640643][ T4149] smc: ib device syz1 port 1 has no pnetid [ 330.646765][ T3414] lo speed is unknown, defaulting to 1000 [ 330.656407][ T4160] loop9: p3 p4 < > [ 330.669424][ T4160] loop9: p3 size 861184 extends beyond EOD, truncated [ 330.682266][ T4149] lo speed is unknown, defaulting to 1000 [ 330.704165][ T4172] atomic_op ffff888166fea928 conn xmit_atomic 0000000000000000 [ 330.818467][ T4149] lo speed is unknown, defaulting to 1000 [ 330.865956][ T4149] lo speed is unknown, defaulting to 1000 [ 330.927473][ T4149] lo speed is unknown, defaulting to 1000 [ 331.027980][ T4149] lo speed is unknown, defaulting to 1000 [ 331.088433][ T4221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12725'. [ 331.104043][ T4149] lo speed is unknown, defaulting to 1000 [ 331.281801][ T4248] SELinux: failed to load policy [ 331.415411][ T4281] netlink: 272 bytes leftover after parsing attributes in process `syz.0.12748'. [ 331.448131][ T4287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12749'. [ 331.457251][ T4287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12749'. [ 331.466306][ T4287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12749'. [ 331.518322][ T4287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12749'. [ 331.913513][ T4323] IPv6: Can't replace route, no match found [ 331.985247][ T4338] netlink: 168 bytes leftover after parsing attributes in process `syz.9.12773'. [ 332.095432][ T4360] netlink: 'syz.1.12783': attribute type 1 has an invalid length. [ 332.161134][ T4372] atomic_op ffff888131145928 conn xmit_atomic 0000000000000000 [ 332.508369][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 332.508383][ T29] audit: type=1326 audit(332.487:15914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.12809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 332.539590][ T29] audit: type=1326 audit(332.517:15915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.12809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 332.562722][ T29] audit: type=1326 audit(332.517:15916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.12809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 332.572305][ T4425] lo speed is unknown, defaulting to 1000 [ 332.585761][ T29] audit: type=1326 audit(332.517:15917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.12809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 332.681452][ T29] audit: type=1400 audit(332.667:15918): avc: denied { read } for pid=4446 comm="syz.9.12816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.747460][ T4449] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 332.814081][ T29] audit: type=1326 audit(332.797:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.12822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 332.837111][ T29] audit: type=1326 audit(332.797:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.12822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 332.860026][ T29] audit: type=1326 audit(332.797:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.12822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 332.909953][ T29] audit: type=1326 audit(332.887:15922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.9.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 332.933061][ T29] audit: type=1326 audit(332.887:15923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.9.12824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 333.051888][ T4525] netem: change failed [ 333.525164][ T4556] Set syz1 is full, maxelem 65536 reached [ 333.576117][ T4578] ip6gre1: entered promiscuous mode [ 333.581459][ T4578] ip6gre1: entered allmulticast mode [ 333.582298][ T4576] xt_hashlimit: size too large, truncated to 1048576 [ 333.591329][ T4578] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.861015][ T5717] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.868570][ T5717] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.898967][ T3519] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.090703][ T3519] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.673941][ T3519] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.835593][ T4716] macvtap0: refused to change device tx_queue_len [ 335.214206][ T4745] __nla_validate_parse: 2 callbacks suppressed [ 335.214225][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12927'. [ 335.262640][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12927'. [ 335.282911][ T4747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12928'. [ 335.297622][ T4747] netlink: 312 bytes leftover after parsing attributes in process `syz.6.12928'. [ 335.306793][ T4747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12928'. [ 335.315841][ T6564] page_pool_release_retry() stalled pool shutdown: id 157, 1 inflight 60 sec [ 335.583199][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12937'. [ 335.593508][ T4766] syz_tun: entered promiscuous mode [ 335.601227][ T4766] syz_tun: refused to change device tx_queue_len [ 336.809069][ T4832] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 336.820157][ T4829] IPVS: stopping master sync thread 4832 ... [ 337.233361][ T4905] autofs4:pid:4905:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 337.250042][ T4910] tipc: Started in network mode [ 337.255044][ T4910] tipc: Node identity f2a41dd74b75, cluster identity 4711 [ 337.262285][ T4910] tipc: Enabled bearer , priority 0 [ 337.280662][ T4910] tipc: Disabling bearer [ 337.341407][ T4917] xt_hashlimit: size too large, truncated to 1048576 [ 337.710646][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 338.382024][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13025'. [ 338.410064][ T4995] syz_tun: refused to change device tx_queue_len [ 338.539375][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 338.539391][ T29] audit: type=1326 audit(338.517:16080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.9.13035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 338.574171][ T29] audit: type=1326 audit(338.517:16081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.9.13035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 338.597176][ T29] audit: type=1326 audit(338.517:16082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.9.13035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 338.620167][ T29] audit: type=1326 audit(338.517:16083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.9.13035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 338.643149][ T29] audit: type=1326 audit(338.517:16084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.9.13035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 338.666252][ T29] audit: type=1326 audit(338.517:16085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.9.13035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 338.689209][ T29] audit: type=1326 audit(338.517:16086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.9.13035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 338.733159][ T5029] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13037'. [ 338.744263][ T5031] netlink: 272 bytes leftover after parsing attributes in process `syz.1.13038'. [ 338.753819][ T3414] page_pool_release_retry() stalled pool shutdown: id 160, 1 inflight 60 sec [ 338.764376][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13039'. [ 338.776286][ T5030] syz_tun: entered promiscuous mode [ 338.783681][ T5030] syz_tun: refused to change device tx_queue_len [ 338.906333][ T5076] rdma_rxe: rxe_newlink: failed to add lo [ 338.988108][ T29] audit: type=1400 audit(338.967:16087): avc: denied { setopt } for pid=5089 comm="syz.6.13057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 339.119091][ T5113] gretap2: entered promiscuous mode [ 339.193279][ T5129] xt_l2tp: v2 tid > 0xffff: 37482740 [ 339.198160][ T5131] netlink: 'syz.9.13071': attribute type 4 has an invalid length. [ 339.223155][ T1036] lo speed is unknown, defaulting to 1000 [ 339.223904][ T5133] netlink: 'syz.1.13074': attribute type 4 has an invalid length. [ 339.229051][ T1036] syz1: Port: 1 Link DOWN [ 339.248261][ T5131] netlink: 'syz.9.13071': attribute type 4 has an invalid length. [ 339.282691][ T5133] netlink: 'syz.1.13074': attribute type 4 has an invalid length. [ 339.292096][ T3519] lo speed is unknown, defaulting to 1000 [ 339.297846][ T6564] lo speed is unknown, defaulting to 1000 [ 339.303692][ T6564] syz1: Port: 1 Link ACTIVE [ 339.913077][ T5147] lo speed is unknown, defaulting to 1000 [ 339.920234][ T29] audit: type=1326 audit(339.897:16088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.13083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 339.997390][ T29] audit: type=1326 audit(339.897:16089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.13083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 340.499009][ T5218] __nla_validate_parse: 3 callbacks suppressed [ 340.499027][ T5218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13103'. [ 340.593952][ T5232] xt_hashlimit: size too large, truncated to 1048576 [ 340.700499][ T5225] delete_channel: no stack [ 340.757066][ T5236] netlink: 'syz.0.13108': attribute type 1 has an invalid length. [ 340.924656][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13118'. [ 341.171406][ T5302] block device autoloading is deprecated and will be removed. [ 341.201326][ T5308] IPv6: Can't replace route, no match found [ 341.210213][ T5300] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 341.409523][ T5344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13156'. [ 341.438458][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.455273][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.084519][ T5396] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.13178'. [ 342.248851][ T5415] netlink: 444 bytes leftover after parsing attributes in process `syz.6.13187'. [ 342.266023][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13187'. [ 342.340866][ T5426] netlink: 'syz.4.13193': attribute type 21 has an invalid length. [ 342.360549][ T5432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5432 comm=syz.1.13194 [ 342.374667][ T5426] netlink: 'syz.4.13193': attribute type 1 has an invalid length. [ 342.382660][ T5426] netlink: 144 bytes leftover after parsing attributes in process `syz.4.13193'. [ 342.552067][ T5453] loop1: detected capacity change from 0 to 164 [ 343.294688][ T3519] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 343.302385][ T3519] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 343.324404][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13228'. [ 343.332406][ T3519] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 343.383429][ T3519] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 343.396744][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13228'. [ 343.440082][ T5531] netlink: 52 bytes leftover after parsing attributes in process `syz.9.13236'. [ 343.491994][ T5533] loop1: detected capacity change from 0 to 2048 [ 343.511516][ T5533] loop1: p1 < > p4 [ 343.516141][ T5533] loop1: p4 size 8388608 extends beyond EOD, truncated [ 343.561099][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 343.561114][ T29] audit: type=1400 audit(343.547:16315): avc: denied { ioctl } for pid=5538 comm="syz.6.13241" path="socket:[112281]" dev="sockfs" ino=112281 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 343.623634][ T29] audit: type=1400 audit(343.577:16316): avc: denied { append } for pid=5532 comm="syz.1.13237" name="loop1p4" dev="devtmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.705636][ T29] audit: type=1400 audit(343.627:16317): avc: denied { create } for pid=5564 comm="syz.4.13244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.725832][ T29] audit: type=1400 audit(343.667:16318): avc: denied { execmem } for pid=5568 comm="syz.0.13247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 343.753556][ T29] audit: type=1400 audit(343.687:16319): avc: denied { execute } for pid=5564 comm="syz.4.13244" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 343.780201][ T29] audit: type=1400 audit(343.687:16320): avc: denied { getopt } for pid=5564 comm="syz.4.13244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.811096][ T29] audit: type=1400 audit(343.797:16321): avc: denied { watch } for pid=5570 comm="syz.1.13248" path="/861/file0" dev="tmpfs" ino=4435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 343.857427][ T29] audit: type=1400 audit(343.797:16322): avc: denied { execute_no_trans } for pid=5570 comm="syz.1.13248" path="/861/file0" dev="tmpfs" ino=4435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 343.999584][ T29] audit: type=1400 audit(343.977:16323): avc: denied { create } for pid=5588 comm="syz.6.13254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 344.041469][ T29] audit: type=1400 audit(344.007:16324): avc: denied { setopt } for pid=5588 comm="syz.6.13254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 344.107350][ T5593] netlink: 'syz.6.13257': attribute type 33 has an invalid length. [ 344.139724][ T5593] bond0: (slave dummy0): Releasing backup interface [ 344.327316][ T5604] lo speed is unknown, defaulting to 1000 [ 344.536723][ T5653] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 344.715916][ T5683] xfrm1: entered promiscuous mode [ 344.721219][ T5683] xfrm1: entered allmulticast mode [ 345.095923][ T5761] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 345.465715][ T5883] bridge_slave_0: left allmulticast mode [ 345.471511][ T5883] bridge_slave_0: left promiscuous mode [ 345.477195][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.487396][ T5883] bridge_slave_1: left allmulticast mode [ 345.493194][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.512831][ T5883] bond0: (slave bond_slave_0): Releasing backup interface [ 345.523198][ T5883] bond0: (slave bond_slave_1): Releasing backup interface [ 345.535495][ T5883] team0: Port device team_slave_0 removed [ 345.544824][ T5883] team0: Port device team_slave_1 removed [ 345.553315][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.560740][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.570094][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.577635][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.587404][ T5883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.651240][ T5907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.733686][ T5956] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 345.856609][ T5974] __nla_validate_parse: 10 callbacks suppressed [ 345.856627][ T5974] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13355'. [ 345.880645][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.975260][ T3414] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 345.983041][ T3414] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 345.991159][ T3414] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 345.999388][ T3414] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 346.152863][ T6030] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 346.202042][ T6034] macvtap0: refused to change device tx_queue_len [ 346.748660][ T6131] loop1: detected capacity change from 0 to 128 [ 346.913944][ T6150] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.13428'. [ 346.930945][ T6154] netlink: 75 bytes leftover after parsing attributes in process `syz.4.13430'. [ 347.018401][ T6166] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 347.143048][ T6199] xt_l2tp: v2 tid > 0xffff: 37482740 [ 347.193321][ T6212] loop1: detected capacity change from 0 to 512 [ 347.212521][ T6212] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 347.245404][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.267447][ T6229] macvtap0: refused to change device tx_queue_len [ 347.338281][T24604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.672475][ T6306] netlink: 75 bytes leftover after parsing attributes in process `syz.9.13489'. [ 347.687362][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13490'. [ 347.916073][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13500'. [ 347.934351][ T6346] xt_hashlimit: size too large, truncated to 1048576 [ 347.967107][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13503'. [ 348.056647][ T6355] netlink: 75 bytes leftover after parsing attributes in process `syz.6.13517'. [ 348.096579][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13520'. [ 348.204954][ T6377] netlink: 'syz.0.13513': attribute type 4 has an invalid length. [ 348.229201][ T6377] netlink: 'syz.0.13513': attribute type 4 has an invalid length. [ 348.230807][ T6378] netlink: 'syz.4.13510': attribute type 1 has an invalid length. [ 348.343082][ T6386] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 348.365496][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13519'. [ 348.608528][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 348.608543][ T29] audit: type=1400 audit(348.587:16651): avc: denied { create } for pid=6418 comm="syz.0.13534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 348.655102][ T29] audit: type=1400 audit(348.597:16652): avc: denied { write } for pid=6418 comm="syz.0.13534" path="socket:[113372]" dev="sockfs" ino=113372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 348.669326][ T6418] delete_channel: no stack [ 348.747696][ T6433] option changes via remount are deprecated (pid=6432 comm=syz.1.13541) [ 348.758150][ T29] audit: type=1400 audit(348.737:16653): avc: denied { bind } for pid=6434 comm="syz.9.13542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 348.785200][ T6428] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 348.847415][ T29] audit: type=1400 audit(348.827:16654): avc: denied { append } for pid=6448 comm="syz.9.13548" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 348.878340][ T6452] IPv6: Can't replace route, no match found [ 348.957678][ T6458] lo speed is unknown, defaulting to 1000 [ 348.969246][ T6467] netlink: 'syz.1.13565': attribute type 39 has an invalid length. [ 349.136987][ T29] audit: type=1400 audit(349.117:16655): avc: denied { ioctl } for pid=6508 comm="syz.0.13564" path="socket:[114414]" dev="sockfs" ino=114414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.188073][ T29] audit: type=1326 audit(349.167:16656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 349.211329][ T29] audit: type=1326 audit(349.167:16657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 349.266041][ T29] audit: type=1326 audit(349.217:16658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 349.289067][ T29] audit: type=1326 audit(349.217:16659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 349.312278][ T29] audit: type=1326 audit(349.217:16660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 349.556212][ T6564] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 349.564779][ T6564] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.094417][ T6575] program syz.6.13587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.103944][ T6575] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 350.145068][ T6589] netlink: 'syz.6.13594': attribute type 12 has an invalid length. [ 350.153014][ T6589] netlink: 'syz.6.13594': attribute type 29 has an invalid length. [ 350.160984][ T6589] netlink: 'syz.6.13594': attribute type 1 has an invalid length. [ 350.168848][ T6589] netlink: 'syz.6.13594': attribute type 2 has an invalid length. [ 350.194909][ T6591] vlan2: entered allmulticast mode [ 350.416763][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.423951][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.435093][ T6617] bridge0: entered allmulticast mode [ 350.454596][ T6621] netlink: 'syz.1.13609': attribute type 2 has an invalid length. [ 350.531379][ T6631] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 350.914235][ T6659] netlink: 'syz.6.13622': attribute type 39 has an invalid length. [ 351.011942][ T6670] xt_hashlimit: max too large, truncated to 1048576 [ 351.083777][ T6677] loop1: detected capacity change from 0 to 512 [ 351.120956][ T6677] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 351.159335][ T3519] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 351.167030][ T6677] EXT4-fs (loop1): mount failed [ 351.169399][ T3519] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.387501][ T6727] loop1: detected capacity change from 0 to 1024 [ 351.403282][ T6727] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 351.414238][ T6727] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 351.461534][ T6727] JBD2: no valid journal superblock found [ 351.467339][ T6727] EXT4-fs (loop1): Could not load journal inode [ 351.480432][ T3512] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 351.488173][ T3512] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 351.506769][ T6727] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 351.528600][ T3512] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x3 [ 351.557513][ T3512] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 351.817279][ T6782] __nla_validate_parse: 5 callbacks suppressed [ 351.817294][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13665'. [ 351.844940][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13665'. [ 351.943937][ T6797] vlan2: entered allmulticast mode [ 351.963760][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.971042][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.978496][ T6805] bridge0: entered allmulticast mode [ 352.130070][ T6831] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 352.329055][ T6839] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 352.377609][ T6845] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 352.456653][ T6855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13693'. [ 352.484466][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13693'. [ 352.627351][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13700'. [ 352.638198][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13700'. [ 352.709027][ T3519] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 352.716743][ T3519] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 352.728159][ T3519] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x3 [ 352.737533][ T3519] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 352.879223][ T6910] can0: slcan on ttyS3. [ 352.933005][ T6910] can0 (unregistered): slcan off ttyS3. [ 353.043805][ T3519] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 353.051660][ T3519] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 353.062411][ T3519] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 353.301063][ T6966] netlink: 96 bytes leftover after parsing attributes in process `syz.9.13730'. [ 353.376174][ T6971] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 353.440285][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.449249][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.458381][ T6948] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 353.470412][ T5715] Bluetooth: hci0: Frame reassembly failed (-84) [ 353.559932][ T7016] ip6gre1: entered promiscuous mode [ 353.565217][ T7016] ip6gre1: entered allmulticast mode [ 353.580784][ T5702] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.583639][ T7016] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.588324][ T5702] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.610688][ T4724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.650980][ T7028] validate_nla: 2 callbacks suppressed [ 353.650994][ T7028] netlink: 'syz.9.13752': attribute type 3 has an invalid length. [ 353.672950][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 353.672967][ T29] audit: type=1400 audit(353.657:16866): avc: denied { write } for pid=7031 comm="syz.0.13753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.711482][ T4724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.727931][ T29] audit: type=1400 audit(353.707:16867): avc: denied { read append } for pid=7038 comm="syz.4.13755" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 353.751278][ T29] audit: type=1400 audit(353.707:16868): avc: denied { open } for pid=7038 comm="syz.4.13755" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 353.794448][ T29] audit: type=1400 audit(353.777:16869): avc: denied { create } for pid=7041 comm="syz.1.13757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 353.814942][ T29] audit: type=1400 audit(353.797:16870): avc: denied { read } for pid=7041 comm="syz.1.13757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 353.866684][ T29] audit: type=1400 audit(353.847:16871): avc: denied { write } for pid=7041 comm="syz.1.13757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 353.918478][ T7045] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 353.958397][ T7034] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 353.983159][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.009289][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.042602][ T7055] syzkaller1: entered promiscuous mode [ 354.048110][ T7055] syzkaller1: entered allmulticast mode [ 354.084604][ T7063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.186761][ T7108] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 354.520698][ T4724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.858905][ T7133] bridge_slave_0: left promiscuous mode [ 354.864611][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.912659][ T7133] bridge_slave_1: left allmulticast mode [ 354.918316][ T7133] bridge_slave_1: left promiscuous mode [ 354.924016][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.953527][ T7133] bond0: (slave bond_slave_0): Releasing backup interface [ 354.963825][ T7133] bond0: (slave bond_slave_1): Releasing backup interface [ 354.981974][ T7133] team0: Port device team_slave_0 removed [ 354.997706][ T7133] team0: Port device team_slave_1 removed [ 355.012861][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.020336][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.029426][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.036967][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.049614][ T7133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.181261][ T29] audit: type=1400 audit(355.167:16872): avc: denied { setcheckreqprot } for pid=7149 comm="syz.0.13783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 355.244673][ T7154] 9p: Bad value for 'source' [ 355.434798][ T29] audit: type=1400 audit(355.417:16873): avc: denied { read write } for pid=7164 comm="syz.4.13797" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 355.458122][ T29] audit: type=1400 audit(355.417:16874): avc: denied { open } for pid=7164 comm="syz.4.13797" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 355.486682][ T29] audit: type=1400 audit(355.467:16875): avc: denied { ioctl } for pid=7164 comm="syz.4.13797" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 355.511682][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 355.554459][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13788'. [ 355.609603][ T7174] bond2: entered promiscuous mode [ 355.632099][ T7174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.679875][ T7215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.696822][ T7215] bond3: entered promiscuous mode [ 355.711413][ T7215] bond2: (slave bond3): Enslaving as an active interface with an up link [ 356.071441][ T7294] bond0: (slave dummy0): Releasing backup interface [ 356.099758][ T7294] bridge_slave_0: left allmulticast mode [ 356.105465][ T7294] bridge_slave_0: left promiscuous mode [ 356.111293][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.143602][ T7294] bridge_slave_1: left allmulticast mode [ 356.149394][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.186450][ T7294] bond0: (slave bond_slave_0): Releasing backup interface [ 356.214503][ T7294] bond0: (slave bond_slave_1): Releasing backup interface [ 356.247146][ T7294] team0: Port device team_slave_0 removed [ 356.268350][ T7294] team0: Port device team_slave_1 removed [ 356.284882][ T7294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.308347][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13813'. [ 356.379692][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13815'. [ 356.471174][ T7347] netlink: 'syz.6.13824': attribute type 1 has an invalid length. [ 357.135762][ T7415] netlink: 'syz.0.13844': attribute type 1 has an invalid length. [ 357.568130][ T7447] SELinux: ebitmap: truncated map [ 357.574797][ T7447] SELinux: failed to load policy [ 357.644916][ T7466] loop1: detected capacity change from 0 to 1024 [ 357.664172][ T7466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.708911][T24604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.718025][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.757454][ T7483] __nla_validate_parse: 3 callbacks suppressed [ 357.757500][ T7483] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 357.874749][ T7498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7498 comm=syz.1.13873 [ 357.887354][ T7498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7498 comm=syz.1.13873 [ 358.197770][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13884'. [ 358.229228][ T7525] netlink: 'syz.4.13885': attribute type 1 has an invalid length. [ 358.238894][ T7526] netlink: 'syz.0.13886': attribute type 3 has an invalid length. [ 358.246763][ T7526] netlink: 'syz.0.13886': attribute type 1 has an invalid length. [ 358.254742][ T7526] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.13886'. [ 358.259840][ T7522] SELinux: ebitmap: truncated map [ 358.274623][ T7522] SELinux: failed to load policy [ 358.450496][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13899'. [ 358.459839][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.487111][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.689733][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 358.689747][ T29] audit: type=1400 audit(358.667:17007): avc: denied { create } for pid=7581 comm="syz.0.13911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 358.743075][ T29] audit: type=1400 audit(358.697:17008): avc: denied { write } for pid=7581 comm="syz.0.13911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 358.762357][ T29] audit: type=1400 audit(358.697:17009): avc: denied { read } for pid=7581 comm="syz.0.13911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 358.820619][ T29] audit: type=1400 audit(358.747:17010): avc: denied { ioctl } for pid=7581 comm="syz.0.13911" path="socket:[116865]" dev="sockfs" ino=116865 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 358.887424][ T29] audit: type=1400 audit(358.827:17011): avc: denied { create } for pid=7587 comm="syz.6.13912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 358.906700][ T29] audit: type=1400 audit(358.827:17012): avc: denied { connect } for pid=7587 comm="syz.6.13912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 358.926095][ T29] audit: type=1400 audit(358.827:17013): avc: denied { create } for pid=7590 comm="syz.0.13913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 358.945049][ T29] audit: type=1400 audit(358.827:17014): avc: denied { ioctl } for pid=7587 comm="syz.6.13912" path="socket:[117855]" dev="sockfs" ino=117855 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 358.969659][ T29] audit: type=1400 audit(358.837:17015): avc: denied { setopt } for pid=7590 comm="syz.0.13913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 358.988665][ T29] audit: type=1400 audit(358.837:17016): avc: denied { bind } for pid=7590 comm="syz.0.13913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 359.089794][ T7607] netlink: 'syz.0.13921': attribute type 1 has an invalid length. [ 359.121867][ T7609] netlink: 'syz.6.13922': attribute type 3 has an invalid length. [ 359.129776][ T7609] netlink: 'syz.6.13922': attribute type 1 has an invalid length. [ 359.137622][ T7609] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.13922'. [ 359.268017][ T5717] Bluetooth: hci0: Frame reassembly failed (-84) [ 359.669408][ T5785] nci: nci_ntf_packet: unknown ntf opcode 0x124 [ 360.746562][ T7740] netlink: 'syz.6.13972': attribute type 4 has an invalid length. [ 360.777232][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13973'. [ 360.801436][ T7745] netlink: 'syz.6.13972': attribute type 4 has an invalid length. [ 360.936161][ T7761] 9p: Bad value for 'rfdno' [ 361.052064][ T7775] netlink: 'syz.4.13987': attribute type 4 has an invalid length. [ 361.060465][ T7775] netlink: 'syz.4.13987': attribute type 4 has an invalid length. [ 361.072178][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13989'. [ 361.150292][ T7791] serio: Serial port ttyS3 [ 361.297925][ T7828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7828 comm=syz.1.14011 [ 361.310686][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 361.310737][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 361.447338][ T7850] netlink: 64 bytes leftover after parsing attributes in process `syz.6.14017'. [ 361.657893][ T7871] SELinux: ebitmap: truncated map [ 361.687814][ T7871] SELinux: failed to load policy [ 361.844399][ T7873] sd 0:0:1:0: device reset [ 361.871112][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.046678][ T7890] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 362.115747][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14038'. [ 362.124841][ T7892] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14038'. [ 362.543088][ T7841] Set syz1 is full, maxelem 65536 reached [ 362.969487][ T7984] loop1: detected capacity change from 0 to 512 [ 362.982282][ T7984] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.14080: ea_inode with extended attributes [ 363.008620][ T7984] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.14080: error while reading EA inode 11 err=-117 [ 363.021462][ T7984] EXT4-fs (loop1): 1 orphan inode deleted [ 363.027541][ T7984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.077992][T24604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.402992][ T8046] atomic_op ffff888140578128 conn xmit_atomic 0000000000000000 [ 363.465805][ T8057] loop1: detected capacity change from 0 to 764 [ 363.483190][ T8057] rock: directory entry would overflow storage [ 363.489473][ T8057] rock: sig=0x4f50, size=4, remaining=3 [ 363.495256][ T8057] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 363.536468][ T8070] program syz.1.14116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.597581][ T8082] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 363.671920][ T8093] __nla_validate_parse: 4 callbacks suppressed [ 363.671933][ T8093] netlink: 240 bytes leftover after parsing attributes in process `syz.1.14120'. [ 363.754727][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 363.754741][ T29] audit: type=1326 audit(619.736:17247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.0.14132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 363.810633][ T29] audit: type=1326 audit(619.776:17248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.0.14132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 363.833505][ T29] audit: type=1326 audit(619.776:17249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.0.14132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 363.856475][ T29] audit: type=1326 audit(619.776:17250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.0.14132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 363.879470][ T29] audit: type=1326 audit(619.776:17251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.0.14132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 363.902438][ T29] audit: type=1326 audit(619.776:17252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.0.14132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 363.964082][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14137'. [ 363.988889][ T29] audit: type=1400 audit(619.966:17253): avc: denied { ioctl } for pid=8110 comm="syz.9.14135" path="socket:[118556]" dev="sockfs" ino=118556 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.028618][ T8117] netlink: 'syz.9.14138': attribute type 21 has an invalid length. [ 364.036613][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14138'. [ 364.057366][ T5746] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.067535][ T5746] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.084989][ T8117] netlink: 'syz.9.14138': attribute type 21 has an invalid length. [ 364.093026][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14138'. [ 364.102856][ T5746] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.112315][ T5746] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.141270][ T29] audit: type=1326 audit(620.126:17254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.6.14142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 364.173790][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14144'. [ 364.190731][ T29] audit: type=1326 audit(620.156:17255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.6.14142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 364.204265][ T8133] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 364.213789][ T29] audit: type=1326 audit(620.156:17256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.6.14142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 364.358316][ T8154] SELinux: failed to load policy [ 364.448295][ T8171] netlink: 380 bytes leftover after parsing attributes in process `syz.1.14161'. [ 364.458532][ T8171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14161'. [ 364.791369][ T8225] netem: change failed [ 365.057774][ T8254] netlink: 'syz.4.14196': attribute type 1 has an invalid length. [ 365.108323][ T8254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.147480][ T8290] bond2: (slave geneve2): making interface the new active one [ 365.170833][ T8290] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 365.241287][ T8300] xt_CT: No such helper "pptp" [ 365.255875][ T8305] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 365.479334][ T8334] hub 1-0:1.0: USB hub found [ 365.485484][ T8334] hub 1-0:1.0: 8 ports detected [ 365.568725][ T8343] netlink: 19 bytes leftover after parsing attributes in process `syz.4.14226'. [ 365.604981][ T8347] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 365.770878][ T8365] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.160084][ T8407] bridge0: port 1(batadv1) entered blocking state [ 366.166622][ T8407] bridge0: port 1(batadv1) entered disabled state [ 366.200123][ T8407] batadv1: entered allmulticast mode [ 366.217388][ T8407] batadv1: entered promiscuous mode [ 366.350690][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.650652][ T5720] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 366.659899][ T5720] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 366.869173][ T8463] SELinux: failed to load policy [ 367.311020][ T8491] netlink: 'syz.6.14283': attribute type 1 has an invalid length. [ 367.357293][ T8491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.388260][ T8526] bond1: (slave geneve2): making interface the new active one [ 367.428137][ T8526] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 367.762432][ T8550] xt_CT: No such helper "pptp" [ 368.347522][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14326'. [ 368.583370][ T8666] bridge0: port 4(batadv2) entered blocking state [ 368.589841][ T8666] bridge0: port 4(batadv2) entered disabled state [ 368.610330][ T8666] batadv2: entered allmulticast mode [ 368.616787][ T8666] batadv2: entered promiscuous mode [ 368.658334][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14342'. [ 368.670481][ T8690] gretap0: entered promiscuous mode [ 368.781822][ T8697] smc: net device hsr0 applied user defined pnetid SYZ0 [ 368.791014][ T8697] smc: net device hsr0 erased user defined pnetid SYZ0 [ 368.861870][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 368.861915][ T29] audit: type=1400 audit(1136.841:17444): avc: denied { mac_admin } for pid=8685 comm="syz.9.14343" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 368.932702][ T8705] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 368.972534][ T8708] program syz.6.14351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.989111][ T29] audit: type=1400 audit(1136.841:17445): avc: denied { ioctl } for pid=8702 comm="syz.4.14349" path="socket:[119675]" dev="sockfs" ino=119675 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.013847][ T29] audit: type=1326 audit(1136.871:17446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.6.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 369.036943][ T29] audit: type=1326 audit(1136.871:17447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.6.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 369.060014][ T29] audit: type=1326 audit(1136.871:17448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.6.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 369.083252][ T29] audit: type=1326 audit(1136.871:17449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.6.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 369.106275][ T29] audit: type=1326 audit(1136.871:17450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.6.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 369.129291][ T29] audit: type=1326 audit(1136.871:17451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.6.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 369.152491][ T29] audit: type=1326 audit(1136.871:17452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.6.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 369.161177][ T5731] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 369.175626][ T29] audit: type=1326 audit(1136.871:17453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.6.14350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fe43f86f749 code=0x7ffc0000 [ 369.207865][ T5731] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 369.253029][ T5712] Bluetooth: hci0: Frame reassembly failed (-84) [ 369.777089][ T8761] serio: Serial port ttyS3 [ 369.895550][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14377'. [ 369.910226][ T8778] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 369.927231][ T8780] netlink: 'syz.4.14379': attribute type 1 has an invalid length. [ 369.965178][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14380'. [ 370.142018][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.170748][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.310759][ T8827] sd 0:0:1:0: device reset [ 370.580494][ T8850] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 370.696596][ T5723] nci: nci_ntf_packet: unknown ntf opcode 0x124 [ 371.175812][ T8891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14418'. [ 371.184943][ T8891] netlink: 108 bytes leftover after parsing attributes in process `syz.4.14418'. [ 371.194350][ T8891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14418'. [ 371.203651][ T8891] netlink: 108 bytes leftover after parsing attributes in process `syz.4.14418'. [ 371.212841][ T8891] netlink: 84 bytes leftover after parsing attributes in process `syz.4.14418'. [ 371.311109][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.344258][ T8898] hub 1-0:1.0: USB hub found [ 371.352673][ T8898] hub 1-0:1.0: 8 ports detected [ 371.655902][ T8952] hub 1-0:1.0: USB hub found [ 371.660731][ T8952] hub 1-0:1.0: 8 ports detected [ 373.063391][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14451'. [ 373.082523][ T8968] xt_hashlimit: max too large, truncated to 1048576 [ 373.091645][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14442'. [ 373.395155][ T9031] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14474'. [ 373.425652][ T9035] netlink: 'syz.0.14476': attribute type 1 has an invalid length. [ 373.700788][ T23] hid_parser_main: 1 callbacks suppressed [ 373.700806][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.714085][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.721525][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.728919][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.736387][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.743917][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.751335][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.758756][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.766161][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.773575][ T23] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 373.798103][ T23] hid-generic 00A0:0006:0003.001B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 373.919482][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 373.919498][ T29] audit: type=1400 audit(1141.891:17652): avc: denied { create } for pid=9116 comm="syz.4.14507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 373.998703][ T29] audit: type=1400 audit(1141.931:17653): avc: denied { bind } for pid=9116 comm="syz.4.14507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.084860][ T29] audit: type=1400 audit(1141.991:17654): avc: denied { write } for pid=9116 comm="syz.4.14507" path="socket:[121230]" dev="sockfs" ino=121230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.108077][ T29] audit: type=1400 audit(1141.991:17655): avc: denied { connect } for pid=9119 comm="syz.6.14508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.127518][ T29] audit: type=1400 audit(1142.031:17656): avc: denied { read } for pid=9116 comm="syz.4.14507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.264729][ T9131] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 374.272965][ T9131] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 374.402658][ T29] audit: type=1400 audit(1142.381:17657): avc: denied { map } for pid=9134 comm="syz.0.14514" path="socket:[121234]" dev="sockfs" ino=121234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 374.489848][ T29] audit: type=1400 audit(1142.461:17658): avc: denied { shutdown } for pid=9142 comm="syz.9.14518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.543401][ T29] audit: type=1400 audit(1142.461:17659): avc: denied { read } for pid=9142 comm="syz.9.14518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.701675][ T29] audit: type=1400 audit(1142.681:17660): avc: denied { ioctl } for pid=9164 comm="syz.9.14526" path="socket:[121258]" dev="sockfs" ino=121258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.767599][ T29] audit: type=1400 audit(1142.701:17661): avc: denied { connect } for pid=9164 comm="syz.9.14526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.787136][ T9169] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 374.999995][ T9175] lo speed is unknown, defaulting to 1000 [ 375.124922][ T9185] lo speed is unknown, defaulting to 1000 [ 375.288782][ T9250] netlink: 'syz.6.14551': attribute type 29 has an invalid length. [ 375.415612][ T9285] binfmt_misc: register: failed to install interpreter file ./file2 [ 375.772606][ T9329] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14579'. [ 375.804909][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14580'. [ 375.814104][ T9331] netlink: 32 bytes leftover after parsing attributes in process `syz.9.14580'. [ 375.823172][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14580'. [ 375.841703][ T9331] netlink: 32 bytes leftover after parsing attributes in process `syz.9.14580'. [ 375.916147][ T9344] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 376.077834][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14593'. [ 376.086849][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14593'. [ 376.115387][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14593'. [ 376.124461][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14593'. [ 376.209266][ T9396] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 376.845525][ T9453] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14621'. [ 376.891301][ T9457] netlink: 'syz.9.14623': attribute type 1 has an invalid length. [ 376.944142][ T9462] rdma_op ffff88811338f180 conn xmit_rdma 0000000000000000 [ 377.036642][ T9468] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 377.036642][ T9468] program syz.4.14628 not setting count and/or reply_len properly [ 377.171317][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.205400][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.315247][ T9493] vhci_hcd vhci_hcd.3: default hub control req: 003f v0017 i0001 l0 [ 377.483431][ T9500] SELinux: unknown common socke [ 377.488707][ T9500] SELinux: failed to load policy [ 377.646097][ T9504] netlink: 'syz.0.14642': attribute type 1 has an invalid length. [ 377.766376][ T9519] netlink: 'syz.6.14649': attribute type 13 has an invalid length. [ 377.968064][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.975306][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.368026][ T9530] Falling back ldisc for ttyS3. [ 378.418799][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.457218][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.966236][ T5710] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.975279][ T5710] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.024947][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 379.024963][ T29] audit: type=1400 audit(1147.001:17812): avc: denied { create } for pid=9552 comm="syz.4.14663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 379.036268][ T5710] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.060355][ T5710] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.077667][ T29] audit: type=1400 audit(1147.031:17813): avc: denied { bind } for pid=9552 comm="+}[K" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 379.130115][ T5710] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.139073][ T5710] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.148075][ T29] audit: type=1400 audit(1147.081:17814): avc: denied { append } for pid=9555 comm="syz.0.14664" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 379.171233][ T29] audit: type=1326 audit(1147.091:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.4.14665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781886f749 code=0x7ffc0000 [ 379.185824][ T5710] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.194431][ T29] audit: type=1326 audit(1147.091:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.4.14665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781886f749 code=0x7ffc0000 [ 379.203137][ T5710] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.226202][ T29] audit: type=1326 audit(1147.091:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.4.14665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781886f749 code=0x7ffc0000 [ 379.258159][ T29] audit: type=1326 audit(1147.091:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.4.14665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781886f749 code=0x7ffc0000 [ 379.281205][ T29] audit: type=1326 audit(1147.091:17819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.4.14665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781886f749 code=0x7ffc0000 [ 379.304330][ T29] audit: type=1326 audit(1147.091:17820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.4.14665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781886f749 code=0x7ffc0000 [ 379.313992][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.327422][ T29] audit: type=1326 audit(1147.091:17821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.4.14665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781886f749 code=0x7ffc0000 [ 379.333530][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 379.500391][ T9585] netlink: 'syz.0.14674': attribute type 13 has an invalid length. [ 379.541078][ T9585] netlink: 'syz.0.14674': attribute type 13 has an invalid length. [ 379.720881][ T9600] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 379.728938][ T9600] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 380.008414][ T9650] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 380.034204][ T9656] netlink: 'syz.4.14700': attribute type 3 has an invalid length. [ 380.517074][ T9718] block device autoloading is deprecated and will be removed. [ 380.547644][ T9724] netlink: 'syz.4.14731': attribute type 27 has an invalid length. [ 380.583862][ T9724] syz_tun: left promiscuous mode [ 380.591379][ T9724] bridge0: left allmulticast mode [ 380.714507][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.732177][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.747746][ T9728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.774549][ T2024] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.789237][ T2024] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.808378][ T2024] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.830893][ T2024] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.848318][ T9738] loop9: detected capacity change from 0 to 128 [ 380.855763][ T9738] EXT4-fs: inline encryption not supported [ 380.864518][ T9738] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 380.902525][T30406] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.980963][ T9757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9757 comm=syz.9.14743 [ 381.341492][ T9795] __nla_validate_parse: 5 callbacks suppressed [ 381.341537][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14759'. [ 381.408484][ T9802] usb usb8: usbfs: process 9802 (syz.6.14762) did not claim interface 0 before use [ 381.418170][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14759'. [ 381.582052][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.611351][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.758577][ T9822] SELinux: failed to load policy [ 381.804690][ T9825] sd 0:0:1:0: device reset [ 382.213906][ T9857] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 382.213906][ T9857] program syz.9.14783 not setting count and/or reply_len properly [ 382.767930][ T9912] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 382.886331][ T9920] netlink: 'syz.9.14807': attribute type 29 has an invalid length. [ 382.990691][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.085034][ T9922] lo speed is unknown, defaulting to 1000 [ 383.148932][ T9933] netlink: 'syz.4.14812': attribute type 12 has an invalid length. [ 383.382120][ T2024] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 383.493729][ T9975] atomic_op ffff8881391e7d28 conn xmit_atomic 0000000000000000 [ 383.665977][ T9991] syz_tun: left promiscuous mode [ 383.675635][ T9991] bridge0: left allmulticast mode [ 383.764702][ T9991] veth2: left promiscuous mode [ 383.769555][ T9991] veth2: left allmulticast mode [ 383.811359][ T5730] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.842922][ T5730] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.853697][ T5730] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.865709][ T5730] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.213650][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 384.213666][ T29] audit: type=1326 audit(384.195:18032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.279223][ T29] audit: type=1326 audit(640.224:18033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.302432][ T29] audit: type=1326 audit(640.224:18034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.325566][ T29] audit: type=1326 audit(640.224:18035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.348642][ T29] audit: type=1326 audit(640.224:18036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.371716][ T29] audit: type=1326 audit(640.224:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.394842][ T29] audit: type=1326 audit(640.224:18038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.417946][ T29] audit: type=1326 audit(640.224:18039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.441044][ T29] audit: type=1326 audit(640.224:18040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.464065][ T29] audit: type=1326 audit(640.224:18041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10042 comm="syz.0.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924dd5f749 code=0x7ffc0000 [ 384.560955][ T5746] Bluetooth: hci0: Frame reassembly failed (-84) [ 384.872844][T10095] netlink: 'syz.6.14874': attribute type 1 has an invalid length. [ 385.125412][T10128] xt_hashlimit: max too large, truncated to 1048576 [ 385.125961][T10127] netlink: 536 bytes leftover after parsing attributes in process `syz.4.14879'. [ 385.145273][T10128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14880'. [ 385.939589][T10119] gretap2: left promiscuous mode [ 385.966215][T10119] ip6gre1: left promiscuous mode [ 385.971233][T10119] ip6gre1: left allmulticast mode [ 385.985764][T10119] bond2: left promiscuous mode [ 385.990633][T10119] bond3: left promiscuous mode [ 386.033864][ T3414] lo speed is unknown, defaulting to 1000 [ 386.034082][T10127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14879'. [ 386.039616][ T3414] syz1: Port: 1 Link DOWN [ 386.064513][ T5711] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.073471][ T5711] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.129441][ T5711] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.138451][ T5711] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.184567][ T5711] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.193738][ T5711] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.236488][ T9489] lo speed is unknown, defaulting to 1000 [ 386.258738][ T5711] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.267708][ T5711] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.279319][ T5711] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.288365][ T5711] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.300338][ T5711] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.309067][ T5711] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.377153][T10158] xt_hashlimit: max too large, truncated to 1048576 [ 386.398204][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14892'. [ 386.410774][ T5711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.434535][ T5711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.467299][ T5711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.501370][ T5711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.577444][T10173] lo speed is unknown, defaulting to 1000 [ 386.590671][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 386.596729][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 386.727432][T10212] sit0: left promiscuous mode [ 386.778586][ T5711] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.797367][ T5711] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.820882][ T5711] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.836423][ T5711] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.072534][T10246] lo speed is unknown, defaulting to 1000 [ 387.165281][T10250] lo speed is unknown, defaulting to 1000 [ 387.492969][T10315] loop9: detected capacity change from 0 to 512 [ 387.514035][T10315] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.526692][T10322] rdma_op ffff88816d82c980 conn xmit_rdma 0000000000000000 [ 387.567727][T30406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.712628][T10356] rdma_op ffff88816d82c980 conn xmit_rdma 0000000000000000 [ 387.818374][T10380] netlink: 'syz.4.14950': attribute type 29 has an invalid length. [ 387.843293][T10354] lo speed is unknown, defaulting to 1000 [ 388.011935][T10368] lo speed is unknown, defaulting to 1000 [ 388.699503][T10437] lo speed is unknown, defaulting to 1000 [ 388.770596][T10437] chnl_net:caif_netlink_parms(): no params data found [ 388.806452][T10437] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.813672][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.820878][T10437] bridge_slave_0: entered allmulticast mode [ 388.827168][T10437] bridge_slave_0: entered promiscuous mode [ 388.834156][T10437] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.841308][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.848489][T10437] bridge_slave_1: entered allmulticast mode [ 388.854843][T10437] bridge_slave_1: entered promiscuous mode [ 388.871415][T10437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.881761][T10437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.902241][T10437] team0: Port device team_slave_0 added [ 388.908883][T10437] team0: Port device team_slave_1 added [ 388.923981][T10437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.930935][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.956813][T10437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.968382][T10437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.975353][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.001253][T10437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.027172][T10437] hsr_slave_0: entered promiscuous mode [ 389.033250][T10437] hsr_slave_1: entered promiscuous mode [ 389.039035][T10437] debugfs: 'hsr0' already exists in 'hsr' [ 389.044850][T10437] Cannot create hsr debugfs directory [ 389.294259][T10437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 389.302658][T10437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 389.311092][T10437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 389.319701][T10437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 389.351908][T10437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.363997][T10437] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.373458][ T2024] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.380636][ T2024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.391654][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.398752][ T5730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.453273][T10437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.537004][T10437] veth0_vlan: entered promiscuous mode [ 389.544643][T10437] veth1_vlan: entered promiscuous mode [ 389.559133][T10437] veth0_macvtap: entered promiscuous mode [ 389.566679][T10437] veth1_macvtap: entered promiscuous mode [ 389.576970][T10437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.587885][T10437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.598182][T12617] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.607229][T12617] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.617640][T12617] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.626926][T12617] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.643206][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 389.643219][ T29] audit: type=1400 audit(645.624:18199): avc: denied { mounton } for pid=10437 comm="syz-executor" path="/root/syzkaller.aUMcfI/syz-tmp" dev="sda1" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 389.673514][ T29] audit: type=1400 audit(645.624:18200): avc: denied { mount } for pid=10437 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 389.695510][ T29] audit: type=1400 audit(645.624:18201): avc: denied { mount } for pid=10437 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 389.717101][ T29] audit: type=1400 audit(645.624:18202): avc: denied { mounton } for pid=10437 comm="syz-executor" path="/root/syzkaller.aUMcfI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 389.743417][ T29] audit: type=1400 audit(645.624:18203): avc: denied { mounton } for pid=10437 comm="syz-executor" path="/root/syzkaller.aUMcfI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=125371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 389.773498][ T29] audit: type=1400 audit(645.654:18204): avc: denied { mounton } for pid=10437 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 389.795992][ T29] audit: type=1400 audit(645.654:18205): avc: denied { mount } for pid=10437 comm="syz-executor" name="/" dev="gadgetfs" ino=4492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 389.818003][ T29] audit: type=1400 audit(645.654:18206): avc: denied { add_name } for pid=10437 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 389.842319][ T29] audit: type=1400 audit(645.654:18207): avc: denied { create } for pid=10437 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 389.862142][ T29] audit: type=1400 audit(645.654:18208): avc: denied { associate } for pid=10437 comm="syz-executor" name="syz7" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 389.864205][T10827] netlink: 'syz.6.14974': attribute type 4 has an invalid length. [ 389.897032][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 389.979078][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.986275][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.048971][T10844] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 390.098414][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.108011][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.137166][ T5730] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.157460][ T5730] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.166598][ T5730] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.175536][ T5730] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.238562][T10847] lo speed is unknown, defaulting to 1000 [ 390.299126][T10856] lo speed is unknown, defaulting to 1000 [ 390.569599][T10904] program syz.6.14986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.570954][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14987'. [ 390.600385][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.640217][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.714370][T10929] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 390.726592][T10931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14997'. [ 391.046410][T10955] vhci_hcd vhci_hcd.3: default hub control req: 003f v0017 i0001 l0 [ 391.235843][T10977] netlink: 'syz.7.15010': attribute type 1 has an invalid length. [ 391.255503][T10979] program syz.7.15011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.950756][T10921] Bluetooth: hci0: command 0x1003 tx timeout [ 391.950770][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 392.670607][ T3671] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 393.171602][T11068] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 393.238520][T11079] sd 0:0:1:0: device reset [ 393.325950][T11093] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 393.345735][T11097] netlink: 'syz.0.15057': attribute type 3 has an invalid length. [ 393.492043][T11127] sd 0:0:1:0: device reset [ 393.534021][T11138] block device autoloading is deprecated and will be removed. [ 393.714080][T11171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15088'. [ 393.870670][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.096028][ T3414] hid_parser_main: 5 callbacks suppressed [ 394.096045][ T3414] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 394.136909][ T3414] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.173162][T11217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11217 comm=syz.4.15107 [ 394.402455][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15113'. [ 394.436989][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15116'. [ 394.447180][ T5758] Bluetooth: hci0: Frame reassembly failed (-84) [ 394.668857][ T3395] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 394.678065][ T3395] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.678393][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 394.678406][ T29] audit: type=1326 audit(650.664:18448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717010][ T29] audit: type=1326 audit(650.664:18449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717305][ T29] audit: type=1326 audit(650.664:18450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717330][ T29] audit: type=1326 audit(650.684:18451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717410][ T29] audit: type=1326 audit(650.684:18452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717506][ T29] audit: type=1326 audit(650.684:18453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717530][ T29] audit: type=1326 audit(650.684:18454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717608][ T29] audit: type=1326 audit(650.684:18455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717702][ T29] audit: type=1326 audit(650.684:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.717793][ T29] audit: type=1326 audit(650.684:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.9.15136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aaf2f749 code=0x7ffc0000 [ 394.978936][T11317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11317 comm=syz.6.15143 [ 395.152452][T11328] loop9: detected capacity change from 0 to 764 [ 395.232698][T11342] sd 0:0:1:0: device reset [ 395.257169][T11344] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 395.310542][T11355] netlink: 'syz.9.15160': attribute type 27 has an invalid length. [ 395.339290][T11355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.347612][T11355] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.361018][T11355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.376615][ T9489] lo speed is unknown, defaulting to 1000 [ 395.382439][ T9489] syz1: Port: 1 Link ACTIVE [ 395.393946][ T9489] lo speed is unknown, defaulting to 1000 [ 395.488380][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15171'. [ 395.512366][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15172'. [ 395.542405][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15174'. [ 395.586674][ T9489] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 395.595885][ T9489] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.623758][T11412] netlink: 'syz.0.15190': attribute type 27 has an invalid length. [ 395.645764][T11412] gretap0: left promiscuous mode [ 395.665885][T11412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.674041][T11412] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.682514][T11412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.754118][T11425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11425 comm=syz.9.15183 [ 395.766833][T11425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11425 comm=syz.9.15183 [ 395.890501][ T3414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 395.898561][ T3414] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.924224][T11448] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 395.924224][T11448] program syz.4.15193 not setting count and/or reply_len properly [ 395.960229][T11452] netlink: 'syz.9.15195': attribute type 12 has an invalid length. [ 396.003128][T11456] SELinux: failed to load policy [ 396.192684][T11481] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 396.487768][T11500] atomic_op ffff888120fc0d28 conn xmit_atomic 0000000000000000 [ 396.510681][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 396.516766][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 396.702332][T11522] netlink: 'syz.0.15216': attribute type 29 has an invalid length. [ 396.785587][T11542] usb usb8: usbfs: process 11542 (syz.7.15227) did not claim interface 0 before use [ 396.920764][T11559] netlink: 'syz.6.15235': attribute type 29 has an invalid length. [ 397.152013][T11579] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 397.174720][T11582] netlink: 23 bytes leftover after parsing attributes in process `syz.6.15246'. [ 397.590736][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.609248][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.860650][ C1] ================================================================== [ 397.868763][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 397.875994][ C1] [ 397.878306][ C1] read-write to 0xffff888100a13ab8 of 8 bytes by interrupt on cpu 0: [ 397.886368][ C1] wq_worker_tick+0x60/0x230 [ 397.890974][ C1] sched_tick+0xd7/0x220 [ 397.895230][ C1] update_process_times+0x15f/0x190 [ 397.900442][ C1] tick_nohz_handler+0x276/0x3d0 [ 397.905382][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 397.910580][ C1] hrtimer_interrupt+0x21a/0x460 [ 397.915516][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 397.921402][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 397.927039][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.933024][ C1] _raw_spin_unlock_irq+0x2f/0x50 [ 397.938050][ C1] process_scheduled_works+0x486/0x9d0 [ 397.943515][ C1] worker_thread+0x582/0x770 [ 397.948104][ C1] kthread+0x489/0x510 [ 397.952174][ C1] ret_from_fork+0x149/0x290 [ 397.956774][ C1] ret_from_fork_asm+0x1a/0x30 [ 397.961540][ C1] [ 397.963853][ C1] read-write to 0xffff888100a13ab8 of 8 bytes by interrupt on cpu 1: [ 397.971913][ C1] wq_worker_tick+0x60/0x230 [ 397.976509][ C1] sched_tick+0xd7/0x220 [ 397.980766][ C1] update_process_times+0x15f/0x190 [ 397.986001][ C1] tick_nohz_handler+0x276/0x3d0 [ 397.990949][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 397.996145][ C1] hrtimer_interrupt+0x21a/0x460 [ 398.001077][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 398.006965][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 398.012606][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.018588][ C1] _raw_spin_unlock_irq+0x2f/0x50 [ 398.023615][ C1] process_scheduled_works+0x486/0x9d0 [ 398.029066][ C1] worker_thread+0x582/0x770 [ 398.033656][ C1] kthread+0x489/0x510 [ 398.037728][ C1] ret_from_fork+0x149/0x290 [ 398.042317][ C1] ret_from_fork_asm+0x1a/0x30 [ 398.047088][ C1] [ 398.049402][ C1] value changed: 0x00000000001842f0 -> 0x0000000000186a00 [ 398.056498][ C1] [ 398.058812][ C1] Reported by Kernel Concurrency Sanitizer on: [ 398.064949][ C1] CPU: 1 UID: 0 PID: 5741 Comm: kworker/u8:49 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 398.076503][ C1] Tainted: [W]=WARN [ 398.080298][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.090348][ C1] Workqueue: iou_exit io_ring_exit_work [ 398.095913][ C1] ==================================================================