last executing test programs: 2m46.860724361s ago: executing program 1 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe72, &(0x7f0000000200)={&(0x7f0000000640)={0x24, r3, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m46.774608732s ago: executing program 1 (id=40): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) 2m46.687596384s ago: executing program 1 (id=47): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="24758023b4e1158805", 0x9) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 2m46.619561216s ago: executing program 1 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240), 0x64, 0x537, &(0x7f0000000f80)="$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") 2m46.353055291s ago: executing program 1 (id=61): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0/file0'}, 0x11) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m45.90049386s ago: executing program 1 (id=70): socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) 2m45.87107363s ago: executing program 32 (id=70): socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) 1m20.595178321s ago: executing program 3 (id=2489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 1m20.558767612s ago: executing program 3 (id=2491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 1m19.909624845s ago: executing program 3 (id=2493): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) 1m19.890284955s ago: executing program 3 (id=2495): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m19.817642807s ago: executing program 3 (id=2500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_int(r3, 0x0, 0x2) 1m19.741673678s ago: executing program 3 (id=2506): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) close(r3) close(r2) 1m19.741391858s ago: executing program 33 (id=2506): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) close(r3) close(r2) 29.556131403s ago: executing program 0 (id=4189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 29.407015836s ago: executing program 0 (id=4193): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) 29.312058798s ago: executing program 0 (id=4199): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000002340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 29.20468042s ago: executing program 0 (id=4207): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x11080, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') 29.169017001s ago: executing program 0 (id=4210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) 28.921174056s ago: executing program 0 (id=4220): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000b80), 0x3, 0x4d5, &(0x7f0000001300)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff) 28.920952836s ago: executing program 34 (id=4220): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000b80), 0x3, 0x4d5, &(0x7f0000001300)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff) 11.333651374s ago: executing program 6 (id=4871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x8}, {0xfff3}}}, 0x24}}, 0x40080) 11.05747503s ago: executing program 6 (id=4877): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.948892342s ago: executing program 6 (id=4879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.847352084s ago: executing program 6 (id=4882): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10.785419436s ago: executing program 6 (id=4884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 10.53767516s ago: executing program 6 (id=4894): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 10.452121462s ago: executing program 35 (id=4894): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 2.091105718s ago: executing program 2 (id=5115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x0, 0x0, 0x8f, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.050284128s ago: executing program 2 (id=5116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x3d) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) 1.99511144s ago: executing program 2 (id=5118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f0000000b00)=""/4107, 0x100b}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000380)=""/163, 0xa3}], 0x8}, 0x1}], 0x400010d, 0x0, 0x0) 1.907356062s ago: executing program 2 (id=5124): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10909d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x21800, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 1.744629085s ago: executing program 2 (id=5127): syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) 1.584837578s ago: executing program 7 (id=5129): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.544625369s ago: executing program 7 (id=5132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) 1.49621165s ago: executing program 7 (id=5134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.49576485s ago: executing program 4 (id=5135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) close_range(r3, 0xffffffffffffffff, 0x0) 1.397472172s ago: executing program 4 (id=5136): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x8000000, 0x0, 0x0, 0x83f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x400, 0x40) 1.327357203s ago: executing program 2 (id=5137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 1.327170183s ago: executing program 36 (id=5137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 921.111081ms ago: executing program 7 (id=5144): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/198, 0xc6}], 0x1}, 0x300) 575.382408ms ago: executing program 4 (id=5154): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 573.479498ms ago: executing program 5 (id=5163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) 517.234659ms ago: executing program 5 (id=5155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x7, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 472.07502ms ago: executing program 5 (id=5156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 343.541912ms ago: executing program 8 (id=5157): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 340.194303ms ago: executing program 4 (id=5158): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) 300.047173ms ago: executing program 5 (id=5159): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 252.682234ms ago: executing program 8 (id=5160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 249.002874ms ago: executing program 5 (id=5161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 218.200105ms ago: executing program 8 (id=5162): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 193.491875ms ago: executing program 8 (id=5164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 178.107216ms ago: executing program 5 (id=5165): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x400000107ffff000, 0x0) 158.503976ms ago: executing program 4 (id=5166): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x12, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r1}}, 0x18) 141.978697ms ago: executing program 8 (id=5167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 90.351937ms ago: executing program 8 (id=5168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x94173000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 73.497238ms ago: executing program 7 (id=5169): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 65.095418ms ago: executing program 4 (id=5170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000340), &(0x7f00000004c0)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) 0s ago: executing program 7 (id=5171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): - 0 [ 168.405826][ T9878] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 168.413850][ T9878] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2606'. [ 168.422922][ T9878] NCSI netlink: No device for ifindex 540032357 [ 168.465713][ T9886] sd 0:0:1:0: device reset [ 168.519269][ T9892] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2612'. [ 168.562534][ T9900] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.570220][ T9900] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.667766][ T9913] netlink: 'syz.2.2621': attribute type 1 has an invalid length. [ 168.675871][ T9913] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2621'. [ 168.684963][ T9913] NCSI netlink: No device for ifindex 540032357 [ 168.841674][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.851945][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.870927][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 168.905020][ T9937] vlan0: entered allmulticast mode [ 168.910220][ T9937] bridge_slave_0: entered allmulticast mode [ 169.062619][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'. [ 169.108611][ T9945] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.116396][ T9945] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.618643][T10007] vlan0: entered allmulticast mode [ 169.624169][T10007] bridge_slave_0: entered allmulticast mode [ 169.971889][T10034] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2674'. [ 169.994217][T10029] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2674'. [ 170.315032][T10059] block device autoloading is deprecated and will be removed. [ 170.685654][T10104] block device autoloading is deprecated and will be removed. [ 170.929427][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 170.938430][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 171.042063][T10145] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2721'. [ 171.052243][T10143] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2721'. [ 171.174176][T10158] ipip0: entered promiscuous mode [ 171.217265][T10163] xt_hashlimit: max too large, truncated to 1048576 [ 171.737525][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 171.737543][ T29] audit: type=1400 audit(1749542895.719:2675): avc: denied { read } for pid=10172 comm="syz.0.2746" dev="nsfs" ino=4026532765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 171.765776][ T29] audit: type=1400 audit(1749542895.719:2676): avc: denied { open } for pid=10172 comm="syz.0.2746" path="net:[4026532765]" dev="nsfs" ino=4026532765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 171.832957][ T29] audit: type=1400 audit(1749542895.769:2677): avc: denied { create } for pid=10172 comm="syz.0.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.854356][ T29] audit: type=1400 audit(1749542895.779:2678): avc: denied { create } for pid=10170 comm="syz.4.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.874850][ T29] audit: type=1400 audit(1749542895.779:2679): avc: denied { bind } for pid=10170 comm="syz.4.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.895171][ T29] audit: type=1400 audit(1749542895.789:2680): avc: denied { module_request } for pid=10175 comm="syz.5.2747" kmod="iptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 171.917691][ T29] audit: type=1326 audit(1749542895.879:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.5.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 171.947048][ T29] audit: type=1326 audit(1749542895.879:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.5.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 171.971299][ T29] audit: type=1326 audit(1749542895.879:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.5.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 171.995167][ T29] audit: type=1326 audit(1749542895.879:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.5.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 172.117254][T10199] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.132488][T10199] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 172.414446][T10237] ALSA: seq fatal error: cannot create timer (-22) [ 172.441014][T10245] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 172.448693][T10245] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.808049][T10295] netlink: 'syz.5.2794': attribute type 1 has an invalid length. [ 172.916217][T10314] loop5: detected capacity change from 0 to 164 [ 172.945621][T10314] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 172.961657][T10314] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 172.973025][T10314] Symlink component flag not implemented [ 172.978954][T10314] Symlink component flag not implemented [ 173.004929][T10314] Symlink component flag not implemented (7) [ 173.011353][T10314] Symlink component flag not implemented (116) [ 173.070458][T10334] block device autoloading is deprecated and will be removed. [ 173.498980][T10378] netlink: 'syz.6.2832': attribute type 1 has an invalid length. [ 173.940716][T10412] netlink: 'syz.2.2846': attribute type 1 has an invalid length. [ 173.948804][T10412] __nla_validate_parse: 2 callbacks suppressed [ 173.948820][T10412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2846'. [ 174.036634][T10421] SELinux: failed to load policy [ 174.180350][T10447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2873'. [ 174.441197][T10471] bond0: entered promiscuous mode [ 174.446458][T10471] bond_slave_0: entered promiscuous mode [ 174.452337][T10471] bond_slave_1: entered promiscuous mode [ 174.460187][T10471] batadv0: entered promiscuous mode [ 174.466568][T10471] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 174.475744][T10471] bond0: left promiscuous mode [ 174.480698][T10471] bond_slave_0: left promiscuous mode [ 174.486464][T10471] bond_slave_1: left promiscuous mode [ 174.495472][T10471] batadv0: left promiscuous mode [ 174.501341][T10474] SELinux: failed to load policy [ 174.531174][T10480] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 174.539375][T10480] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2872'. [ 174.620145][T10493] loop5: detected capacity change from 0 to 1024 [ 174.634303][T10493] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 175.634883][T10510] SELinux: failed to load policy [ 175.675371][T10521] lo: entered promiscuous mode [ 175.680581][T10521] batadv_slave_1: entered promiscuous mode [ 175.688489][T10519] batadv_slave_1: left promiscuous mode [ 175.694245][T10519] lo: left promiscuous mode [ 175.705172][T10522] netlink: 'syz.5.2891': attribute type 1 has an invalid length. [ 175.713348][T10522] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2891'. [ 175.737675][T10525] bond0: entered promiscuous mode [ 175.770386][T10525] batadv0: entered promiscuous mode [ 175.783597][T10525] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 175.796748][T10525] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 175.806095][T10525] bond0: left promiscuous mode [ 175.811541][T10525] batadv0: left promiscuous mode [ 176.046064][T10559] xt_hashlimit: max too large, truncated to 1048576 [ 176.498117][T10627] syzkaller0: entered promiscuous mode [ 176.503901][T10627] syzkaller0: entered allmulticast mode [ 176.643256][T10618] loop5: detected capacity change from 0 to 32768 [ 176.684268][T10618] loop5: p1 p2 p3 < p5 p6 > [ 176.689111][T10618] loop5: p1 size 242222080 extends beyond EOD, truncated [ 176.696990][T10618] loop5: p2 start 4294967295 is beyond EOD, truncated [ 176.830402][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 176.830417][ T29] audit: type=1400 audit(1749542900.809:2893): avc: denied { read write } for pid=10638 comm="syz.4.2946" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.831950][ T3415] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 176.836814][ T29] audit: type=1400 audit(1749542900.809:2894): avc: denied { open } for pid=10638 comm="syz.4.2946" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.860413][ T3415] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 176.900194][ T3415] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 176.914326][ T29] audit: type=1400 audit(1749542900.889:2895): avc: denied { mount } for pid=10639 comm="syz.2.2945" name="/" dev="ramfs" ino=29465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 176.957474][ T3415] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 176.973768][ T29] audit: type=1326 audit(1749542900.949:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 177.031114][ T29] audit: type=1326 audit(1749542900.979:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 177.054926][ T29] audit: type=1326 audit(1749542900.979:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 177.078768][ T29] audit: type=1326 audit(1749542900.979:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 177.102845][ T29] audit: type=1326 audit(1749542900.979:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 177.126835][ T29] audit: type=1326 audit(1749542900.979:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 177.154048][ T29] audit: type=1400 audit(1749542901.009:2902): avc: denied { create } for pid=10648 comm="syz.2.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.187346][T10652] vhci_hcd: invalid port number 96 [ 177.192555][T10652] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 177.522231][T10698] loop9: detected capacity change from 0 to 7 [ 177.532140][T10698] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.547278][T10698] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.555461][T10698] loop9: unable to read partition table [ 177.570672][T10700] vlan2: entered allmulticast mode [ 177.575963][T10700] bond0: entered allmulticast mode [ 177.581149][T10700] bond_slave_0: entered allmulticast mode [ 177.586980][T10700] bond_slave_1: entered allmulticast mode [ 177.587523][T10698] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 177.587523][T10698] U) failed (rc=-5) [ 177.697842][T10719] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2981'. [ 177.713853][T10717] SELinux: ebitmap: truncated map [ 177.719775][T10717] SELinux: failed to load policy [ 177.791506][T10730] netem: change failed [ 178.097653][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 178.147898][T10776] loop9: detected capacity change from 0 to 7 [ 178.157282][T10780] loop5: detected capacity change from 0 to 1024 [ 178.164157][T10776] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.178713][T10776] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.186923][T10776] loop9: unable to read partition table [ 178.193909][T10780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.211214][T10776] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 178.211214][T10776] U) failed (rc=-5) [ 178.246214][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.643056][T10832] SELinux: syz.4.3031 (10832) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 178.747296][ T3415] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 178.754844][ T3415] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 178.762261][ T3415] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 179.123745][ T3415] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 179.164166][T10865] loop9: detected capacity change from 0 to 7 [ 179.182153][T10865] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.201611][T10865] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.209758][T10865] loop9: unable to read partition table [ 179.234885][T10865] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 179.234885][T10865] U) failed (rc=-5) [ 179.941042][T10896] SELinux: failed to load policy [ 179.972517][T10905] random: crng reseeded on system resumption [ 180.045704][T10910] loop9: detected capacity change from 0 to 7 [ 180.070140][T10910] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.086444][T10910] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.094569][T10910] loop9: unable to read partition table [ 180.101455][T10910] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 180.101455][T10910] U) failed (rc=-5) [ 180.834272][T10919] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3071'. [ 181.059919][T10928] lo speed is unknown, defaulting to 1000 [ 181.442653][T10947] random: crng reseeded on system resumption [ 181.826102][T10972] loop5: detected capacity change from 0 to 1024 [ 181.833352][T10972] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 181.895226][T10973] lo speed is unknown, defaulting to 1000 [ 182.047747][T10991] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 182.101003][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 182.101022][ T29] audit: type=1326 audit(1749542906.079:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.174580][ T29] audit: type=1326 audit(1749542906.119:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.198836][ T29] audit: type=1326 audit(1749542906.119:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.222814][ T29] audit: type=1326 audit(1749542906.119:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.246932][ T29] audit: type=1326 audit(1749542906.119:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.271597][ T29] audit: type=1326 audit(1749542906.119:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d2a3ed290 code=0x7ffc0000 [ 182.274862][T10996] lo speed is unknown, defaulting to 1000 [ 182.295903][ T29] audit: type=1326 audit(1749542906.129:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.325412][ T29] audit: type=1326 audit(1749542906.129:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.348863][ T29] audit: type=1326 audit(1749542906.129:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.372484][ T29] audit: type=1326 audit(1749542906.129:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2a3ee929 code=0x7ffc0000 [ 182.415423][T11003] random: crng reseeded on system resumption [ 182.808218][T11027] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 182.819652][T11027] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 182.892883][T11035] xt_hashlimit: max too large, truncated to 1048576 [ 182.961116][T11044] ipip0: entered promiscuous mode [ 184.062858][T11076] netlink: 'syz.6.3135': attribute type 10 has an invalid length. [ 184.070838][T11076] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3135'. [ 184.094819][T11076] dummy0: entered promiscuous mode [ 184.100843][T11076] bridge0: port 3(dummy0) entered blocking state [ 184.107451][T11076] bridge0: port 3(dummy0) entered disabled state [ 184.114088][T11076] dummy0: entered allmulticast mode [ 184.120455][T11076] bridge0: port 3(dummy0) entered blocking state [ 184.126978][T11076] bridge0: port 3(dummy0) entered forwarding state [ 184.479288][T11103] vhci_hcd: invalid port number 96 [ 184.484920][T11103] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 184.617019][T11114] lo speed is unknown, defaulting to 1000 [ 184.627961][T11118] pimreg: entered allmulticast mode [ 184.639904][T11118] pimreg: left allmulticast mode [ 184.757689][T11127] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 185.104078][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3160'. [ 185.125820][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3160'. [ 185.167718][T11160] vhci_hcd: invalid port number 96 [ 185.172904][T11160] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 185.255543][T11177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=11177 comm=syz.4.3170 [ 185.449136][T11197] lo speed is unknown, defaulting to 1000 [ 185.595472][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 185.606951][T11212] IPVS: Error joining to the multicast group [ 185.711557][T11223] netlink: 'syz.4.3190': attribute type 4 has an invalid length. [ 185.919927][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3201'. [ 186.084449][T11269] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3212'. [ 186.175844][T11277] 0{X: entered promiscuous mode [ 186.181583][T11277] vlan0: entered promiscuous mode [ 186.347884][T11296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3225'. [ 186.464043][T11307] SELinux: security policydb version 18 (MLS) not backwards compatible [ 186.489453][T11307] SELinux: failed to load policy [ 186.645648][T11335] lo speed is unknown, defaulting to 1000 [ 186.761485][T11350] netlink: 'syz.0.3247': attribute type 6 has an invalid length. [ 187.123545][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 187.123636][ T29] audit: type=1400 audit(1749542911.089:3384): avc: denied { relabelfrom } for pid=11376 comm="syz.4.3257" name="NETLINK" dev="sockfs" ino=32677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.154719][ T29] audit: type=1400 audit(1749542911.089:3385): avc: denied { relabelto } for pid=11376 comm="syz.4.3257" name="NETLINK" dev="sockfs" ino=32677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 187.303695][ T29] audit: type=1326 audit(1749542911.209:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 187.328058][ T29] audit: type=1326 audit(1749542911.209:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 187.351860][ T29] audit: type=1400 audit(1749542911.209:3388): avc: denied { associate } for pid=11382 comm="syz.6.3260" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 187.372692][ T29] audit: type=1326 audit(1749542911.209:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 187.396441][ T29] audit: type=1326 audit(1749542911.209:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 187.420204][ T29] audit: type=1326 audit(1749542911.209:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 187.444451][ T29] audit: type=1326 audit(1749542911.209:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 187.468623][ T29] audit: type=1326 audit(1749542911.209:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 187.791786][T11405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3268'. [ 187.859056][T11412] netlink: 'syz.2.3272': attribute type 4 has an invalid length. [ 187.912541][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3275'. [ 187.979797][T11418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.115015][T11439] netlink: 'syz.5.3284': attribute type 1 has an invalid length. [ 188.175903][T11447] sd 0:0:1:0: device reset [ 188.223835][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 188.232796][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 188.486944][T11489] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3309'. [ 188.504643][T11489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3309'. [ 188.574686][T11507] netlink: 'syz.6.3315': attribute type 11 has an invalid length. [ 188.582805][T11507] netlink: 448 bytes leftover after parsing attributes in process `syz.6.3315'. [ 188.669961][T11518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.686984][T11522] netlink: 'syz.0.3322': attribute type 1 has an invalid length. [ 188.725173][T11528] lo speed is unknown, defaulting to 1000 [ 188.753732][T11530] sd 0:0:1:0: device reset [ 188.850587][T11543] netlink: 'syz.6.3331': attribute type 280 has an invalid length. [ 189.843377][T11563] 9pnet_fd: p9_fd_create_tcp (11563): problem connecting socket to 127.0.0.1 [ 189.877354][T11631] netlink: 'syz.0.3370': attribute type 280 has an invalid length. [ 190.256556][T11665] netlink: 'syz.6.3386': attribute type 6 has an invalid length. [ 190.465985][T11678] syzkaller0: entered promiscuous mode [ 190.471658][T11678] syzkaller0: entered allmulticast mode [ 190.628636][T11693] loop5: detected capacity change from 0 to 1024 [ 190.650791][T11693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.726860][T11693] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 190.761368][T11693] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 190.774065][T11693] EXT4-fs (loop5): This should not happen!! Data will be lost [ 190.774065][T11693] [ 190.784303][T11693] EXT4-fs (loop5): Total free blocks count 0 [ 190.790746][T11693] EXT4-fs (loop5): Free/Dirty block details [ 190.796942][T11693] EXT4-fs (loop5): free_blocks=68451041280 [ 190.802961][T11693] EXT4-fs (loop5): dirty_blocks=64 [ 190.808143][T11693] EXT4-fs (loop5): Block reservation details [ 190.814495][T11693] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 190.892257][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.951330][T11721] __nla_validate_parse: 3 callbacks suppressed [ 190.951351][T11721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3407'. [ 191.005876][T11724] gretap0: entered promiscuous mode [ 191.025359][T11724] vlan2: entered promiscuous mode [ 191.250189][T11773] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 191.250189][T11773] program syz.4.3433 not setting count and/or reply_len properly [ 191.350135][T11790] loop9: detected capacity change from 0 to 7 [ 191.377193][T11790] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.385555][T11790] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.393754][T11790] loop9: unable to read partition table [ 191.401702][T11790] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 191.401702][T11790] U) failed (rc=-5) [ 191.592330][T11817] smc: net device bond0 applied user defined pnetid SYZ0 [ 191.605238][T11817] smc: net device bond0 erased user defined pnetid SYZ0 [ 191.706398][T11829] SELinux: failed to load policy [ 191.712640][T11825] loop5: detected capacity change from 0 to 8192 [ 191.720420][T11825] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.851760][T11845] netlink: 'syz.6.3468': attribute type 3 has an invalid length. [ 191.986381][ T3433] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 191.993915][ T3433] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max [ 192.006474][ T3433] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 192.015306][ T3433] hid-generic 0000:0000:0000.0006: unknown main item tag 0x6 [ 192.022899][ T3433] hid-generic 0000:0000:0000.0006: reserved main item tag 0xd [ 192.033337][ T3433] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 192.117359][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3487'. [ 192.126772][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3487'. [ 192.144635][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3487'. [ 192.312967][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 192.312987][ T29] audit: type=1326 audit(1749542916.289:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 192.378332][ T29] audit: type=1326 audit(1749542916.289:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 192.402091][ T29] audit: type=1326 audit(1749542916.299:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 192.426085][ T29] audit: type=1326 audit(1749542916.299:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 192.445695][T11904] xt_hashlimit: max too large, truncated to 1048576 [ 192.449999][ T29] audit: type=1326 audit(1749542916.299:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 192.450053][ T29] audit: type=1326 audit(1749542916.299:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 192.504385][ T29] audit: type=1326 audit(1749542916.299:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 192.528154][ T29] audit: type=1400 audit(1749542916.449:3652): avc: denied { mounton } for pid=11886 comm="syz.0.3488" path="/proc/1571/task" dev="proc" ino=34377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 192.591863][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 192.648188][ T29] audit: type=1326 audit(1749542916.629:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.6.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabcbee929 code=0x7ffc0000 [ 192.672662][ T29] audit: type=1326 audit(1749542916.629:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.6.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabcbee929 code=0x7ffc0000 [ 193.023275][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 193.566031][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3538'. [ 193.577539][T12008] netem: change failed [ 193.621476][T12006] loop5: detected capacity change from 0 to 8192 [ 193.628994][T12006] vfat: Unknown parameter 'GPL' [ 193.717652][T12016] vhci_hcd: invalid port number 96 [ 193.722933][T12016] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 194.317012][T12035] syzkaller1: entered promiscuous mode [ 194.322745][T12035] syzkaller1: entered allmulticast mode [ 194.494223][T12063] loop5: detected capacity change from 0 to 512 [ 194.501702][T12062] vhci_hcd: invalid port number 96 [ 194.507413][T12062] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 194.537332][T12063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.552556][T12063] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.598313][T12071] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 194.626062][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.489010][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 195.498574][ T36] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 196.390166][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 196.399403][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 196.442273][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 196.451702][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 196.501025][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 196.510239][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 196.538655][T12183] smc: net device bond0 applied user defined pnetid SYZ0 [ 196.555072][T12183] smc: net device bond0 erased user defined pnetid SYZ0 [ 196.686936][T12201] netlink: 'syz.2.3626': attribute type 4 has an invalid length. [ 196.745916][T12206] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 196.954317][T12230] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 197.269113][T12257] xt_hashlimit: max too large, truncated to 1048576 [ 197.451271][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 197.451291][ T29] audit: type=1400 audit(1749542921.429:4116): avc: denied { read } for pid=12279 comm="syz.4.3663" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.509668][T12284] loop5: detected capacity change from 0 to 1024 [ 197.520231][ T29] audit: type=1400 audit(1749542921.429:4117): avc: denied { open } for pid=12279 comm="syz.4.3663" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.554609][T12284] EXT4-fs: Ignoring removed bh option [ 197.575289][T12288] xt_hashlimit: max too large, truncated to 1048576 [ 197.594157][T12284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.637231][ T29] audit: type=1400 audit(1749542921.599:4118): avc: denied { setattr } for pid=12283 comm="syz.5.3665" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.670893][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.680994][T12299] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 197.740633][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3676'. [ 197.753222][T12309] IPVS: Error joining to the multicast group [ 197.809588][ T29] audit: type=1400 audit(1749542921.789:4119): avc: denied { ioctl } for pid=12315 comm="syz.0.3679" path="/dev/usbmon6" dev="devtmpfs" ino=160 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.852683][ T29] audit: type=1400 audit(1749542921.829:4120): avc: denied { cpu } for pid=12319 comm="syz.4.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 198.007021][T12332] lo speed is unknown, defaulting to 1000 [ 198.081706][ T29] audit: type=1326 audit(1749542922.059:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.4.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 198.105645][ T29] audit: type=1326 audit(1749542922.059:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.4.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 198.156035][ T29] audit: type=1400 audit(1749542922.099:4123): avc: denied { create } for pid=12329 comm="syz.5.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.176167][ T29] audit: type=1326 audit(1749542922.109:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.4.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 198.201122][ T29] audit: type=1326 audit(1749542922.109:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.4.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 198.249413][T12350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3692'. [ 198.328487][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3695'. [ 198.598321][T12367] netlink: zone id is out of range [ 198.603990][T12367] netlink: zone id is out of range [ 198.609403][T12367] netlink: zone id is out of range [ 198.614896][T12367] netlink: zone id is out of range [ 198.620128][T12367] netlink: zone id is out of range [ 198.625478][T12367] netlink: zone id is out of range [ 198.630650][T12367] netlink: zone id is out of range [ 198.636020][T12367] netlink: zone id is out of range [ 198.641226][T12367] netlink: zone id is out of range [ 198.646753][T12367] netlink: zone id is out of range [ 198.789305][ T3415] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 198.797090][ T3415] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 198.809368][ T3415] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 198.827762][ T3415] hid-generic 0000:0000:0000.0008: unknown main item tag 0x6 [ 198.835591][ T3415] hid-generic 0000:0000:0000.0008: reserved main item tag 0xd [ 198.868501][ T3415] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 199.040755][T12410] smc: net device bond0 applied user defined pnetid SYZ0 [ 199.069277][T12410] smc: net device bond0 erased user defined pnetid SYZ0 [ 199.111027][T12418] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 199.141122][ T3415] hid-generic 0000:0000:0000.0009: unknown main item tag 0x7 [ 199.148914][ T3415] hid-generic 0000:0000:0000.0009: ignoring exceeding usage max [ 199.160995][ T3415] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 199.169614][ T3415] hid-generic 0000:0000:0000.0009: unknown main item tag 0x6 [ 199.177305][ T3415] hid-generic 0000:0000:0000.0009: reserved main item tag 0xd [ 199.186477][ T3415] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 199.257592][T12430] IPVS: Unknown mcast interface: vcan0 [ 199.391058][T12444] loop5: detected capacity change from 0 to 512 [ 199.435012][T12444] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.474386][T12444] EXT4-fs (loop5): 1 truncate cleaned up [ 199.480861][T12444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.583783][T12459] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.3734: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 199.635063][T12459] EXT4-fs (loop5): Remounting filesystem read-only [ 199.697732][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.722117][T12466] smc: net device bond0 applied user defined pnetid SYZ0 [ 199.730121][T12466] smc: net device bond0 erased user defined pnetid SYZ0 [ 200.126307][T12488] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 200.395343][T12515] SELinux: security_context_str_to_sid () failed with errno=-22 [ 200.536238][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.544590][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.552703][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.583521][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.591872][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.600075][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.608522][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.617009][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.625742][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.633909][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.642376][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.650559][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.658942][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.667445][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.717630][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.718146][T12528] loop5: detected capacity change from 0 to 2048 [ 200.726484][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.726518][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.750035][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.758287][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.766618][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.775184][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.777745][T12528] No source specified [ 200.783619][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.795885][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.804105][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.812316][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.820661][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.829105][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.837411][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.845670][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: unknown main item tag 0x0 [ 200.868852][ T36] hid-generic FFFF:FFFFFFFC:20000001.000A: hidraw0: HID va0.69 Device [syz0] on syz1 [ 201.332238][T12593] netlink: 'syz.2.3799': attribute type 3 has an invalid length. [ 201.466207][T12612] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 201.744512][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.752864][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.761302][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.769972][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.778649][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.787049][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.795843][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.804440][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.813395][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.822429][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.831473][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.840575][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.849042][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.857587][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.876798][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.885462][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.894071][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.902302][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.910629][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.919138][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.927489][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.936085][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.944834][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.953102][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.961707][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.970025][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.978496][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.987007][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 201.995377][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: unknown main item tag 0x0 [ 202.061474][T12630] lo speed is unknown, defaulting to 1000 [ 202.071516][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000B: hidraw0: HID va0.69 Device [syz0] on syz1 [ 202.107377][T12648] __nla_validate_parse: 5 callbacks suppressed [ 202.107398][T12648] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3819'. [ 202.219610][T12630] chnl_net:caif_netlink_parms(): no params data found [ 202.326672][T12668] syzkaller0: entered promiscuous mode [ 202.332252][T12668] syzkaller0: entered allmulticast mode [ 202.356582][T12630] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.363843][T12630] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.393102][T12630] bridge_slave_0: entered allmulticast mode [ 202.399920][T12630] bridge_slave_0: entered promiscuous mode [ 202.440657][T12630] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.448035][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.455748][T12630] bridge_slave_1: entered allmulticast mode [ 202.462758][T12630] bridge_slave_1: entered promiscuous mode [ 202.484044][T12630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.494734][T12630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.518305][T12630] team0: Port device team_slave_0 added [ 202.533707][T12630] team0: Port device team_slave_1 added [ 202.562565][T12630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.569662][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.596216][T12630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.610768][T12630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.617928][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.644228][T12630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.702470][T12630] hsr_slave_0: entered promiscuous mode [ 202.709550][T12630] hsr_slave_1: entered promiscuous mode [ 202.716615][T12630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.724993][T12630] Cannot create hsr debugfs directory [ 202.869030][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.878019][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.886210][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.906405][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.914749][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.923022][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.931740][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.934829][T12630] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.940444][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.959326][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.967903][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.976125][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.984538][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 202.992770][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.001293][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.010227][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.018609][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.027169][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.035703][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.043948][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.052527][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.060921][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.069170][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.077376][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.085749][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.094076][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.102482][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.110885][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.119293][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.127475][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: unknown main item tag 0x0 [ 203.137627][ T3401] hid-generic FFFF:FFFFFFFC:20000001.000C: hidraw0: HID va0.69 Device [syz0] on syz1 [ 203.195228][T12630] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.245127][T12630] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.295291][T12630] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.368796][T12630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.377944][T12630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.386978][T12630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.396029][T12630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.430478][T12630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.443430][T12630] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.453983][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.461202][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.472285][ T1715] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.479516][ T1715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.543363][T12630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.608439][T12630] veth0_vlan: entered promiscuous mode [ 203.616678][T12630] veth1_vlan: entered promiscuous mode [ 203.635826][T12630] veth0_macvtap: entered promiscuous mode [ 203.643310][T12630] veth1_macvtap: entered promiscuous mode [ 203.654836][T12630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.665852][T12630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.675718][T12630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.684540][T12630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.693437][T12630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.702624][T12630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.721836][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 203.721854][ T29] audit: type=1400 audit(1749542927.699:4568): avc: denied { mounton } for pid=12630 comm="syz-executor" path="/root/syzkaller.CXYyV8/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 203.754447][ T29] audit: type=1400 audit(1749542927.699:4569): avc: denied { mount } for pid=12630 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.777396][ T29] audit: type=1400 audit(1749542927.699:4570): avc: denied { mount } for pid=12630 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 203.799621][ T29] audit: type=1400 audit(1749542927.699:4571): avc: denied { mounton } for pid=12630 comm="syz-executor" path="/root/syzkaller.CXYyV8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 203.827846][ T29] audit: type=1400 audit(1749542927.699:4572): avc: denied { mounton } for pid=12630 comm="syz-executor" path="/root/syzkaller.CXYyV8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 203.856725][ T29] audit: type=1400 audit(1749542927.739:4573): avc: denied { mounton } for pid=12630 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 203.880041][ T29] audit: type=1400 audit(1749542927.739:4574): avc: denied { mount } for pid=12630 comm="syz-executor" name="/" dev="gadgetfs" ino=4500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 203.922235][T12714] bridge0: port 1(syz_tun) entered blocking state [ 203.929253][T12714] bridge0: port 1(syz_tun) entered disabled state [ 203.954297][T12714] syz_tun: entered allmulticast mode [ 203.980486][T12714] syz_tun: entered promiscuous mode [ 203.989752][T12714] bridge0: port 1(syz_tun) entered blocking state [ 203.989796][T12714] bridge0: port 1(syz_tun) entered forwarding state [ 204.019471][ T29] audit: type=1400 audit(1749542927.989:4575): avc: denied { read } for pid=12720 comm="syz.6.3839" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.019512][ T29] audit: type=1400 audit(1749542927.989:4576): avc: denied { open } for pid=12720 comm="syz.6.3839" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.099258][ T29] audit: type=1400 audit(1749542928.079:4577): avc: denied { bind } for pid=12726 comm="syz.4.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.264099][T12731] syzkaller0: entered promiscuous mode [ 204.269692][T12731] syzkaller0: entered allmulticast mode [ 204.517990][T12753] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 204.547661][T12753] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 204.616092][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3858'. [ 205.038401][T12793] vhci_hcd: invalid port number 224 [ 205.515337][T12836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3884'. [ 205.612603][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 205.710085][T12852] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3898'. [ 205.746415][T12856] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.805677][T12858] syzkaller0: entered promiscuous mode [ 205.811545][T12858] syzkaller0: entered allmulticast mode [ 205.830095][T12856] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.869388][T12856] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.963558][T12856] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.025676][T12856] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.038006][T12856] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.049653][T12856] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.062432][T12856] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.116235][T12886] loop5: detected capacity change from 0 to 256 [ 206.159644][T12892] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3915'. [ 206.625636][T12906] syzkaller0: entered promiscuous mode [ 206.631467][T12906] syzkaller0: entered allmulticast mode [ 206.651378][T12908] lo speed is unknown, defaulting to 1000 [ 206.711888][T12915] sd 0:0:1:0: device reset [ 206.837657][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3934'. [ 206.859361][T12934] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 207.090983][ T3366] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0 [ 207.099598][ T3366] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0 [ 207.107912][ T3366] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0 [ 207.140436][ T3366] hid-generic 0000:0004:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 207.287750][T12979] rdma_op ffff888140414180 conn xmit_rdma 0000000000000000 [ 207.476164][T12994] loop5: detected capacity change from 0 to 1024 [ 207.485871][T12994] EXT4-fs: Ignoring removed nobh option [ 207.491727][T12994] EXT4-fs: Ignoring removed bh option [ 207.503497][T12994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.548588][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.939292][T13034] netlink: 87 bytes leftover after parsing attributes in process `syz.5.3982'. [ 208.638757][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 208.638826][ T29] audit: type=1326 audit(1749543700.825:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.0.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1ec9e929 code=0x7ffc0000 [ 208.680450][ T29] audit: type=1326 audit(1749543700.847:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.0.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fda1ec9e929 code=0x7ffc0000 [ 208.705257][ T29] audit: type=1326 audit(1749543700.847:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.0.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1ec9e929 code=0x7ffc0000 [ 208.782084][T13101] geneve2: entered promiscuous mode [ 208.882256][ T29] audit: type=1326 audit(1749543701.069:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13106 comm="syz.6.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabcbee929 code=0x7ffc0000 [ 208.906635][ T29] audit: type=1326 audit(1749543701.069:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13106 comm="syz.6.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ffabcbee929 code=0x7ffc0000 [ 208.931033][ T29] audit: type=1326 audit(1749543701.069:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13106 comm="syz.6.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabcbee929 code=0x7ffc0000 [ 208.955402][ T29] audit: type=1326 audit(1749543701.069:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13106 comm="syz.6.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ffabcbee929 code=0x7ffc0000 [ 208.979535][ T29] audit: type=1326 audit(1749543701.069:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13106 comm="syz.6.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabcbee929 code=0x7ffc0000 [ 209.285066][T13134] infiniband syz!: set down [ 209.289884][T13134] infiniband syz!: added team_slave_0 [ 209.301973][T13134] RDS/IB: syz!: added [ 209.306283][T13134] smc: adding ib device syz! with port count 1 [ 209.312891][T13134] smc: ib device syz! port 1 has pnetid [ 209.668398][T13143] rose0: refused to change device tx_queue_len [ 209.675513][T13145] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 209.794963][T13154] netlink: 64 bytes leftover after parsing attributes in process `+}[@'. [ 209.993385][T13165] loop5: detected capacity change from 0 to 8192 [ 210.022011][T13165] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.105934][ T29] audit: type=1326 audit(1749543702.369:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 210.154843][ T29] audit: type=1326 audit(1749543702.369:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 210.269603][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4050'. [ 210.321278][T13189] loop5: detected capacity change from 0 to 1024 [ 210.328974][T13189] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 210.339315][T13189] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 210.365945][T13189] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 210.370593][T13195] lo speed is unknown, defaulting to 1000 [ 210.379588][T13189] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.4049: unexpected bad inode w/o EXT4_IGET_BAD [ 210.400284][T13189] EXT4-fs (loop5): no journal found [ 210.406088][T13189] EXT4-fs (loop5): can't get journal size [ 210.418587][T13189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.437751][T13189] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 16: comm syz.5.4049: path /719/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 210.463787][T13189] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 16: comm syz.5.4049: path /719/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 210.523716][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.717145][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4057'. [ 210.726477][T13208] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4057'. [ 210.735753][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4057'. [ 210.768174][T13208] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4057'. [ 210.777364][T13208] netlink: 'syz.6.4057': attribute type 6 has an invalid length. [ 210.995775][T13235] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4069'. [ 211.006240][T13231] lo speed is unknown, defaulting to 1000 [ 211.098426][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4073'. [ 211.145166][T13250] xt_hashlimit: max too large, truncated to 1048576 [ 211.246566][T13262] SELinux: ebitmap: truncated map [ 211.253272][T13262] SELinux: failed to load policy [ 211.573414][T13286] loop5: detected capacity change from 0 to 164 [ 211.638286][T13286] rock: directory entry would overflow storage [ 211.644599][T13286] rock: sig=0x4543, size=28, remaining=18 [ 211.748178][T13302] loop5: detected capacity change from 0 to 256 [ 211.760536][T13302] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 211.768842][T13302] FAT-fs (loop5): Filesystem has been set read-only [ 211.776363][T13302] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 211.786752][T13302] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 211.802851][T13302] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 211.804109][T13304] SELinux: failed to load policy [ 211.989586][T13316] loop5: detected capacity change from 0 to 512 [ 212.006537][T13326] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 212.017973][T13316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.039389][T13328] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 212.050964][T13316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 212.071486][T13316] ext4 filesystem being mounted at /737/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.102842][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 212.121249][T13337] SELinux: Context system_u:object_r:gpg_helper_exec_t:s0 is not valid (left unmapped). [ 212.136103][T13339] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 212.207730][T13349] loop5: detected capacity change from 0 to 256 [ 212.275635][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813fcc1a00: rx timeout, send abort [ 212.722145][T13393] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.748704][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813fcc1c00: rx timeout, send abort [ 212.757557][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813fcc1a00: abort rx timeout. Force session deactivation [ 212.782546][T13393] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.869304][T13393] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.923993][T13393] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.977380][T13393] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.994144][T13393] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.012588][T13393] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.053114][T13393] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.182897][T13427] lo speed is unknown, defaulting to 1000 [ 213.195280][T13429] program syz.4.4150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.230750][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813fcc1c00: abort rx timeout. Force session deactivation [ 213.412482][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 213.412500][ T29] audit: type=1400 audit(1749543705.857:5220): avc: denied { prog_run } for pid=13433 comm="syz.6.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.512991][ T29] audit: type=1400 audit(1749543705.973:5221): avc: denied { read write } for pid=3653 comm="syz-executor" name="loop5" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.517535][T13438] netlink: 'syz.4.4155': attribute type 1 has an invalid length. [ 213.537208][ T29] audit: type=1400 audit(1749543705.973:5222): avc: denied { open } for pid=3653 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.573206][ T29] audit: type=1400 audit(1749543705.973:5223): avc: denied { ioctl } for pid=3653 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=605 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.625416][T13438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.652276][ T29] audit: type=1400 audit(1749543706.111:5224): avc: denied { open } for pid=13442 comm="syz.5.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.672116][ T29] audit: type=1400 audit(1749543706.111:5225): avc: denied { perfmon } for pid=13442 comm="syz.5.4168" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.693442][ T29] audit: type=1400 audit(1749543706.111:5226): avc: denied { kernel } for pid=13442 comm="syz.5.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.714358][ T29] audit: type=1400 audit(1749543706.111:5227): avc: denied { tracepoint } for pid=13442 comm="syz.5.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.735647][ T29] audit: type=1400 audit(1749543706.121:5228): avc: denied { cpu } for pid=13442 comm="syz.5.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.755583][ T29] audit: type=1400 audit(1749543706.195:5229): avc: denied { create } for pid=13444 comm="syz.6.4158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.638414][T13525] vhci_hcd: invalid port number 224 [ 214.739660][T13540] netlink: 'syz.2.4184': attribute type 2 has an invalid length. [ 214.747555][T13540] netlink: 'syz.2.4184': attribute type 1 has an invalid length. [ 214.755689][T13540] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4184'. [ 215.331969][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4212'. [ 215.491737][ T5687] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.548217][ T5687] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.603303][ T5687] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.682470][ T5687] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.703501][T13659] lo speed is unknown, defaulting to 1000 [ 215.770493][T13677] geneve2: entered promiscuous mode [ 215.776283][T13677] geneve2: entered allmulticast mode [ 215.800851][T13673] lo speed is unknown, defaulting to 1000 [ 215.807952][ T5687] bridge_slave_1: left allmulticast mode [ 215.814238][ T5687] bridge_slave_1: left promiscuous mode [ 215.820259][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.839171][ T5687] bridge_slave_0: left allmulticast mode [ 215.845255][ T5687] bridge_slave_0: left promiscuous mode [ 215.851197][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.963149][ T5687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.974701][ T5687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.984908][ T5687] bond0 (unregistering): Released all slaves [ 215.994984][T13681] vhci_hcd: invalid port number 96 [ 216.000611][T13681] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 216.087911][T13659] chnl_net:caif_netlink_parms(): no params data found [ 216.105631][ T5687] hsr_slave_0: left promiscuous mode [ 216.111891][ T5687] hsr_slave_1: left promiscuous mode [ 216.118267][ T5687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.126586][ T5687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.138259][ T5687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.146050][ T5687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.161924][ T5687] veth1_macvtap: left promiscuous mode [ 216.168032][ T5687] veth0_macvtap: left promiscuous mode [ 216.174152][ T5687] veth1_vlan: left promiscuous mode [ 216.179983][ T5687] veth0_vlan: left promiscuous mode [ 216.268721][ T5687] team0 (unregistering): Port device team_slave_1 removed [ 216.293436][ T5687] team0 (unregistering): Port device team_slave_0 removed [ 216.391746][T13702] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 216.471098][T13659] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.478692][T13659] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.512365][T13659] bridge_slave_0: entered allmulticast mode [ 216.532487][T13659] bridge_slave_0: entered promiscuous mode [ 216.547610][T13718] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 216.564926][T13659] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.565472][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4242'. [ 216.572429][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.589487][T13659] bridge_slave_1: entered allmulticast mode [ 216.596494][T13659] bridge_slave_1: entered promiscuous mode [ 216.625568][T13659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.653118][T13659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.677661][T13659] team0: Port device team_slave_0 added [ 216.706736][T13659] team0: Port device team_slave_1 added [ 216.787696][T13659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.794866][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.822376][T13659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.907034][T13659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.914302][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.940989][T13659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.080510][T13659] hsr_slave_0: entered promiscuous mode [ 217.107092][T13659] hsr_slave_1: entered promiscuous mode [ 217.113404][T13659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.123717][T13659] Cannot create hsr debugfs directory [ 217.133326][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.140933][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.148503][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.156829][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.164415][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172240][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172344][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172366][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172393][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172417][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172469][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172494][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172515][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172537][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.172779][ T3433] kernel read not supported for file /input/event0 (pid: 3433 comm: kworker/1:5) [ 217.194577][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.194639][ T3366] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 217.196546][ T3366] hid-generic 0006:0000:0000.000E: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 217.221877][T13752] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 217.317131][T13659] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 217.319758][T13659] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 217.353228][T13762] 9pnet_fd: Insufficient options for proto=fd [ 217.393685][T13659] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 217.416080][T13659] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 217.502088][T13659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.517790][T13659] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.540957][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.548373][ T5696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.571056][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.578416][ T5687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.607989][T13659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.618637][T13659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.707244][T13659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.877519][T13659] veth0_vlan: entered promiscuous mode [ 217.893578][T13659] veth1_vlan: entered promiscuous mode [ 217.915384][T13659] veth0_macvtap: entered promiscuous mode [ 217.925619][T13659] veth1_macvtap: entered promiscuous mode [ 217.942243][T13659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.955004][T13659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.968391][T13659] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.977324][T13659] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.986246][T13659] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.995104][T13659] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.053879][T13808] netlink: 'syz.6.4267': attribute type 2 has an invalid length. [ 218.061789][T13808] netlink: 'syz.6.4267': attribute type 1 has an invalid length. [ 218.070012][T13808] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.4267'. [ 218.104535][T13810] wg2: entered promiscuous mode [ 218.109733][T13810] wg2: entered allmulticast mode [ 218.178956][T13816] netlink: 'syz.6.4270': attribute type 1 has an invalid length. [ 218.187534][T13816] netlink: 'syz.6.4270': attribute type 2 has an invalid length. [ 218.228794][T13818] sch_fq: defrate 0 ignored. [ 218.229722][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4270'. [ 218.299999][T13822] atomic_op ffff888137ec2928 conn xmit_atomic 0000000000000000 [ 218.321175][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 218.321205][ T29] audit: type=1400 audit(1749543711.055:5491): avc: denied { write } for pid=13819 comm="syz.5.4272" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.363723][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.396120][ T29] audit: type=1400 audit(1749543711.055:5492): avc: denied { open } for pid=13819 comm="syz.5.4272" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.401573][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.420480][ T29] audit: type=1400 audit(1749543711.097:5493): avc: denied { read write } for pid=13823 comm="syz.6.4275" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.452350][ T29] audit: type=1400 audit(1749543711.097:5494): avc: denied { open } for pid=13823 comm="syz.6.4275" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.476595][ T29] audit: type=1400 audit(1749543711.097:5495): avc: denied { ioctl } for pid=13823 comm="syz.6.4275" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.521270][ T29] audit: type=1326 audit(1749543711.245:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.2.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 218.545645][ T29] audit: type=1326 audit(1749543711.245:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.2.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc5d22ae929 code=0x7ffc0000 [ 218.569413][ T29] audit: type=1326 audit(1749543711.245:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.2.4277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5d22ae929 code=0x0 [ 218.593214][ T29] audit: type=1400 audit(1749543711.255:5499): avc: denied { create } for pid=13823 comm="syz.6.4275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.613144][ T29] audit: type=1400 audit(1749543711.255:5500): avc: denied { ioctl } for pid=13823 comm="syz.6.4275" path="socket:[43772]" dev="sockfs" ino=43772 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.183942][T13869] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4293'. [ 219.245165][T13879] netlink: 'syz.6.4299': attribute type 1 has an invalid length. [ 219.259737][T13879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.298527][T13879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.306716][T13879] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 219.319145][T13879] bond2: (slave vti0): Error -95 calling set_mac_address [ 219.337017][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4302'. [ 219.401169][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4305'. [ 219.440187][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 219.463253][T13906] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 219.529845][T13910] netlink: 'syz.5.4312': attribute type 10 has an invalid length. [ 219.537929][T13910] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4312'. [ 219.553238][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 219.563829][T13910] team0: entered promiscuous mode [ 219.569310][T13910] bridge0: port 2(team0) entered blocking state [ 219.576419][T13910] bridge0: port 2(team0) entered disabled state [ 219.584320][T13910] team0: entered allmulticast mode [ 219.823587][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4327'. [ 220.393619][T13996] atomic_op ffff888118331d28 conn xmit_atomic 0000000000000000 [ 220.408155][T13999] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 220.422919][T13999] batman_adv: batadv0: Adding interface: ip6gretap1 [ 220.429696][T13999] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 220.452054][T13999] batman_adv: batadv0: Interface activated: ip6gretap1 [ 220.504837][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4351'. [ 220.918773][T14065] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 221.194900][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4382'. [ 221.317760][T14079] netlink: 'syz.2.4384': attribute type 4 has an invalid length. [ 221.326854][T14079] netlink: 'syz.2.4384': attribute type 4 has an invalid length. [ 221.653084][T14098] 9pnet: p9_errstr2errno: server reported unknown error AC [ 221.737207][T14109] serio: Serial port ptm0 [ 221.907798][T14121] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.995107][T14121] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.009103][T14138] 9pnet_fd: Insufficient options for proto=fd [ 222.062680][T14121] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.097643][T14121] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.144976][T14121] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.159304][T14121] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.174799][T14121] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.189171][T14121] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.377645][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4426'. [ 222.386963][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4426'. [ 222.387339][T14183] vhci_hcd: invalid port number 96 [ 222.396431][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4426'. [ 222.401577][T14183] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 222.418354][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4426'. [ 222.427750][T14181] netlink: 'syz.5.4426': attribute type 6 has an invalid length. [ 222.471527][T14187] netlink: 'syz.7.4429': attribute type 298 has an invalid length. [ 222.541243][T14193] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.581145][T14201] sg_write: data in/out 2008/14 bytes for SCSI command 0x0-- guessing data in; [ 222.581145][T14201] program syz.4.4438 not setting count and/or reply_len properly [ 222.621397][T14193] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.661346][T14193] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.716171][T14193] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.775680][T14218] loop5: detected capacity change from 0 to 512 [ 222.784448][T14218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.804472][T14193] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.805934][T14218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.818342][T14193] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.835513][T14218] ext4 filesystem being mounted at /809/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.839034][T14193] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.875326][T14193] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.878368][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.002181][T14229] lo speed is unknown, defaulting to 1000 [ 223.126565][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 223.126584][ T29] audit: type=1400 audit(1749543716.123:5681): avc: denied { setopt } for pid=14235 comm="syz.5.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.189001][ T29] audit: type=1400 audit(1749543716.197:5682): avc: denied { bind } for pid=14244 comm="syz.2.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.416147][T14259] IPVS: stopping master sync thread 14260 ... [ 223.416592][T14260] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 223.514402][T14268] serio: Serial port ptm0 [ 223.571653][ T29] audit: type=1400 audit(1749543716.588:5683): avc: denied { create } for pid=14274 comm="syz.6.4469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 223.601830][ T29] audit: type=1400 audit(1749543716.588:5684): avc: denied { accept } for pid=14274 comm="syz.6.4469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 223.767895][ T29] audit: type=1400 audit(1749543716.799:5685): avc: denied { create } for pid=14293 comm="syz.2.4478" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.793378][ T29] audit: type=1400 audit(1749543716.799:5686): avc: denied { associate } for pid=14293 comm="syz.2.4478" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 223.816132][ T29] audit: type=1400 audit(1749543716.799:5687): avc: denied { unlink } for pid=3327 comm="syz-executor" name="file0" dev="tmpfs" ino=4906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.906691][T14306] 9p: Unknown access argument ree: -22 [ 223.953533][ T29] audit: type=1400 audit(1749543716.979:5688): avc: denied { append } for pid=14309 comm="syz.5.4485" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 224.036160][ T29] audit: type=1326 audit(1749543717.084:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.5.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 224.060832][ T29] audit: type=1326 audit(1749543717.084:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.5.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 224.103559][T14323] loop9: detected capacity change from 0 to 7 [ 224.112516][T14323] Buffer I/O error on dev loop9, logical block 0, async page read [ 224.136374][T14323] Buffer I/O error on dev loop9, logical block 0, async page read [ 224.144439][T14323] loop9: unable to read partition table [ 224.153715][T14323] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 224.153715][T14323] U) failed (rc=-5) [ 224.252347][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4497'. [ 224.282176][T14346] sd 0:0:1:0: device reset [ 224.327789][T14351] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4499'. [ 224.364591][T14357] ip6gre1: entered promiscuous mode [ 224.370031][T14357] ip6gre1: entered allmulticast mode [ 224.434881][T14360] 9pnet_fd: Insufficient options for proto=fd [ 224.442489][T14361] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.484617][T14361] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.536373][T14361] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.579536][T14361] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.653933][T14361] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.668184][T14361] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.680692][T14361] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.692813][T14385] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 224.705582][T14385] batman_adv: batadv0: Adding interface: ip6gretap1 [ 224.712404][T14385] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.739231][T14385] batman_adv: batadv0: Interface activated: ip6gretap1 [ 224.750616][T14361] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.826427][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4519'. [ 225.515161][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4563'. [ 225.524880][T14487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4563'. [ 225.534344][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4563'. [ 225.547706][T14487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4563'. [ 225.556926][T14487] netlink: 'syz.2.4563': attribute type 6 has an invalid length. [ 225.567713][T14483] lo speed is unknown, defaulting to 1000 [ 225.836549][T14525] Falling back ldisc for ttyS3. [ 225.845295][T14527] netlink: 'syz.6.4582': attribute type 13 has an invalid length. [ 225.856114][T14527] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 225.867054][T14527] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.875233][T14527] gretap1: entered promiscuous mode [ 225.880693][T14527] gretap1: entered allmulticast mode [ 226.000988][T14540] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.038591][T14540] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.080192][T14548] syzkaller1: entered promiscuous mode [ 226.085970][T14548] syzkaller1: entered allmulticast mode [ 226.132866][T14540] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.190169][T14540] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.234306][T14540] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.246619][T14540] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.259010][T14540] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.270857][T14540] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.389935][T14563] serio: Serial port ptm0 [ 226.466779][T14573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.519578][T14571] SELinux: ebitmap: truncated map [ 226.526443][T14571] SELinux: failed to load policy [ 226.576575][T14586] netlink: 'syz.4.4608': attribute type 2 has an invalid length. [ 226.656905][T14598] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4613'. [ 226.787720][T14609] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4619'. [ 226.827395][T14614] netlink: 'syz.4.4621': attribute type 10 has an invalid length. [ 226.843611][T14614] dummy0: entered allmulticast mode [ 227.000686][T14630] loop5: detected capacity change from 0 to 1024 [ 227.016471][T14630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.050521][T14637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14637 comm=syz.4.4631 [ 227.064306][T14637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14637 comm=syz.4.4631 [ 227.174079][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.213075][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4637'. [ 227.300347][T14666] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 227.384551][T14675] loop5: detected capacity change from 0 to 512 [ 227.395350][T14675] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.400112][ T1036] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.430200][ T1036] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.454485][T14675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.477520][T14675] ext4 filesystem being mounted at /842/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.498418][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4656'. [ 227.589155][T14680] hid-generic 0000:0000:0000.000F: pid 14680 passed too large report [ 227.707925][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.739583][T14707] netlink: 'syz.6.4664': attribute type 1 has an invalid length. [ 227.761765][T14709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14709 comm=syz.5.4663 [ 227.878592][T14725] syzkaller1: entered promiscuous mode [ 227.884515][T14725] syzkaller1: entered allmulticast mode [ 227.922063][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 227.922082][ T29] audit: type=1400 audit(1749543721.179:6056): avc: denied { listen } for pid=14730 comm="syz.7.4675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.985224][ T29] audit: type=1400 audit(1749543721.232:6057): avc: denied { getopt } for pid=14734 comm="syz.5.4677" lport=41816 faddr=::ffff:100.1.1.3 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 228.050561][ T29] audit: type=1326 audit(1749543721.327:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.5.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 228.050608][ T29] audit: type=1326 audit(1749543721.327:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.5.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 228.050646][ T29] audit: type=1326 audit(1749543721.327:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.5.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1267fe963 code=0x7ffc0000 [ 228.050679][ T29] audit: type=1326 audit(1749543721.327:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.5.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1267fe963 code=0x7ffc0000 [ 228.050765][ T29] audit: type=1326 audit(1749543721.327:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.5.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 228.050839][ T29] audit: type=1326 audit(1749543721.327:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.5.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 228.050874][ T29] audit: type=1326 audit(1749543721.327:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.5.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 228.050903][ T29] audit: type=1326 audit(1749543721.327:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.5.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 228.266475][T14752] 9p: Unknown access argument : -22 [ 228.597043][T14786] hub 9-0:1.0: USB hub found [ 228.597096][T14786] hub 9-0:1.0: 8 ports detected [ 228.797796][T14809] netlink: 'syz.4.4712': attribute type 21 has an invalid length. [ 228.811411][T14811] netlink: 'syz.2.4711': attribute type 10 has an invalid length. [ 228.884349][T14817] serio: Serial port ptm0 [ 228.897017][T14813] syzkaller0: entered promiscuous mode [ 228.902915][T14813] syzkaller0: entered allmulticast mode [ 228.918503][T14821] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 228.925204][T14821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.933145][T14821] vhci_hcd vhci_hcd.0: Device attached [ 228.944391][T14821] program syz.2.4716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.973007][T14822] vhci_hcd: connection closed [ 228.973727][ T31] vhci_hcd: stop threads [ 228.982997][ T31] vhci_hcd: release socket [ 228.988318][ T31] vhci_hcd: disconnect device [ 229.634769][T14871] loop5: detected capacity change from 0 to 1024 [ 229.653478][T14871] EXT4-fs: Ignoring removed orlov option [ 229.670995][T14871] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 229.701821][T14871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.791245][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.812903][T14878] loop5: detected capacity change from 0 to 128 [ 229.995690][T14896] __nla_validate_parse: 3 callbacks suppressed [ 229.995709][T14896] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4748'. [ 230.380434][T14931] netlink: 'syz.2.4764': attribute type 5 has an invalid length. [ 230.564309][T14945] netlink: 2116 bytes leftover after parsing attributes in process `syz.2.4770'. [ 230.689401][T14970] syzkaller1: entered promiscuous mode [ 230.695439][T14970] syzkaller1: entered allmulticast mode [ 230.817342][T14987] ALSA: seq fatal error: cannot create timer (-22) [ 231.069425][T15020] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 231.139554][T15033] program syz.6.4805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.167933][T15035] netem: change failed [ 231.232241][T15044] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 231.348674][T15051] loop5: detected capacity change from 0 to 1024 [ 231.364885][T15051] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.376165][T15051] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.448863][T15051] JBD2: no valid journal superblock found [ 231.454851][T15051] EXT4-fs (loop5): Could not load journal inode [ 231.496898][T15051] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 231.727885][T15072] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4820'. [ 231.755248][T15069] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 231.786142][T15074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4822'. [ 231.983949][T15089] SELinux: Context  is not valid (left unmapped). [ 232.063386][T15101] 9pnet: p9_errstr2errno: server reported unknown error VM}OUp3rS @oj)[n 阿]?913IDž׺xd٤s [ 232.150190][T15102] SELinux: failed to load policy [ 232.162080][T15105] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 232.194005][T15105] SELinux: failed to load policy [ 232.309443][T15120] syzkaller1: entered promiscuous mode [ 232.315265][T15120] syzkaller1: entered allmulticast mode [ 232.550524][T15152] ALSA: seq fatal error: cannot create timer (-22) [ 232.593238][T15156] loop5: detected capacity change from 0 to 1024 [ 232.634086][T15156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.657055][T15166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.666620][T15156] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.4859: lblock 1 mapped to illegal pblock 1 (length 15) [ 232.681455][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 232.681469][ T29] audit: type=1400 audit(234.184:6316): avc: denied { read write } for pid=15155 comm="syz.5.4859" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.681531][T15166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.711662][T15156] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.4859: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 232.719255][ T29] audit: type=1400 audit(234.184:6317): avc: denied { open } for pid=15155 comm="syz.5.4859" path="/875/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.791869][T15168] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 1: comm syz.5.4859: lblock 1 mapped to illegal pblock 1 (length 15) [ 232.809916][ T29] audit: type=1400 audit(234.331:6318): avc: denied { create } for pid=15167 comm="syz.7.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.866805][ T29] audit: type=1400 audit(234.394:6319): avc: denied { unmount } for pid=3653 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 232.881267][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.901210][ T29] audit: type=1400 audit(234.436:6320): avc: denied { create } for pid=15177 comm="syz.6.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.923600][T15178] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4868'. [ 232.923598][ T29] audit: type=1400 audit(234.457:6321): avc: denied { write } for pid=15177 comm="syz.6.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.933468][T15178] unsupported nla_type 65024 [ 232.953446][ T29] audit: type=1400 audit(234.457:6322): avc: denied { nlmsg_write } for pid=15177 comm="syz.6.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.993218][ T29] audit: type=1400 audit(234.520:6323): avc: denied { create } for pid=15179 comm="syz.5.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.015993][ T29] audit: type=1400 audit(234.552:6324): avc: denied { bind } for pid=15179 comm="syz.5.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.037297][ T29] audit: type=1400 audit(234.552:6325): avc: denied { write } for pid=15179 comm="syz.5.4867" path="socket:[49256]" dev="sockfs" ino=49256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.125322][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4871'. [ 233.137085][T15186] dummy0: left allmulticast mode [ 233.142557][T15186] bridge0: port 3(dummy0) entered disabled state [ 233.153234][T15186] bridge_slave_1: left allmulticast mode [ 233.159361][T15186] bridge_slave_1: left promiscuous mode [ 233.165924][T15186] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.174255][T15186] bridge_slave_0: left allmulticast mode [ 233.180472][T15186] bridge_slave_0: left promiscuous mode [ 233.186717][T15186] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.299940][T15194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.383352][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4876'. [ 233.392913][T15198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4876'. [ 233.415325][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4876'. [ 233.958382][T15239] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.033852][T15239] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.101742][T15239] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.177228][T15239] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.253905][T15239] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.284290][T15239] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.310999][T15248] loop5: detected capacity change from 0 to 8192 [ 234.319885][T15239] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.341506][T15239] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.387351][T15245] lo speed is unknown, defaulting to 1000 [ 234.469068][T15248] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 234.476913][T15248] FAT-fs (loop5): Filesystem has been set read-only [ 234.513946][T15267] serio: Serial port ptm0 [ 234.575742][T15245] chnl_net:caif_netlink_parms(): no params data found [ 234.594959][T15269] ref_ctr_offset mismatch. inode: 0x14d0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 234.650727][T15245] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.658369][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.666119][T15245] bridge_slave_0: entered allmulticast mode [ 234.672973][T15245] bridge_slave_0: entered promiscuous mode [ 234.680697][T15245] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.687973][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.695582][T15245] bridge_slave_1: entered allmulticast mode [ 234.702650][T15245] bridge_slave_1: entered promiscuous mode [ 234.730186][T15245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.751532][T15245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.776846][T15245] team0: Port device team_slave_0 added [ 234.784543][T15245] team0: Port device team_slave_1 added [ 234.812104][T15245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.819825][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.847975][T15245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.862976][T15245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.870047][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.898133][T15245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.932143][T15245] hsr_slave_0: entered promiscuous mode [ 234.940088][T15245] hsr_slave_1: entered promiscuous mode [ 234.946504][T15245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.954944][T15245] Cannot create hsr debugfs directory [ 235.034948][T15245] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 235.045517][T15245] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 235.056455][T15245] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 235.065634][T15245] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 235.113062][T15245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.127227][T15245] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.139013][ T5687] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.146539][ T5687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.164407][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.173814][ T5680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.280628][T15245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.406453][T15245] veth0_vlan: entered promiscuous mode [ 235.415034][T15245] veth1_vlan: entered promiscuous mode [ 235.433291][T15245] veth0_macvtap: entered promiscuous mode [ 235.442256][T15245] veth1_macvtap: entered promiscuous mode [ 235.454625][T15245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.468053][T15245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.478695][T15245] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.487900][T15245] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.497666][T15245] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.507443][T15245] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.625967][ T36] kernel read not supported for file /2238/oom_adj (pid: 36 comm: kworker/1:1) [ 236.293766][T15338] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.379465][T15338] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.403833][T15349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.439508][T15349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.464517][T15338] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.036040][T15388] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 237.456268][T15338] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.587892][T15404] __nla_validate_parse: 3 callbacks suppressed [ 237.587913][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4952'. [ 237.622600][T15404] bridge0: port 3(macvlan2) entered blocking state [ 237.630118][T15404] bridge0: port 3(macvlan2) entered disabled state [ 237.643506][T15404] macvlan2: entered allmulticast mode [ 237.649147][T15404] bridge0: entered allmulticast mode [ 237.673213][T15404] macvlan2: left allmulticast mode [ 237.678865][T15404] bridge0: left allmulticast mode [ 237.765363][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 237.765383][ T29] audit: type=1326 audit(495.538:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 237.795830][ T29] audit: type=1326 audit(495.538:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 237.820637][ T29] audit: type=1326 audit(495.538:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 237.844710][ T29] audit: type=1326 audit(495.538:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 237.875999][ T29] audit: type=1326 audit(495.601:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 237.903571][ T29] audit: type=1326 audit(495.601:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 237.929789][ T29] audit: type=1326 audit(495.601:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 237.957329][ T29] audit: type=1326 audit(495.601:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 237.989292][ T29] audit: type=1326 audit(495.653:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 238.082473][ T29] audit: type=1400 audit(495.874:6541): avc: denied { setopt } for pid=15428 comm="syz.4.4964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.332594][T15452] atomic_op ffff888109b2d928 conn xmit_atomic 0000000000000000 [ 238.351325][T15454] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 238.364005][T15454] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 238.394710][T15459] vhci_hcd: invalid port number 96 [ 238.400796][T15459] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 238.554385][T15476] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 238.566087][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4985'. [ 238.583686][T15481] syz_tun: entered allmulticast mode [ 238.590517][T15480] syz_tun: left allmulticast mode [ 238.830963][T15338] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.842998][T15338] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.854983][T15338] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.867183][T15338] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.988521][T15506] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4998'. [ 239.082270][T15510] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5000'. [ 239.185829][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5001'. [ 239.238323][T15521] program syz.2.5005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.796682][T15566] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5026'. [ 239.860168][T15570] lo speed is unknown, defaulting to 1000 [ 240.138157][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5031'. [ 240.147461][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5031'. [ 240.502532][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5043'. [ 240.838005][T15624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15624 comm=syz.7.5053 [ 240.850737][T15624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15624 comm=syz.7.5053 [ 240.973153][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5057'. [ 240.985064][T15636] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 240.992691][T15636] batman_adv: batadv0: Removing interface: ip6gretap1 [ 241.037751][T15642] loop5: detected capacity change from 0 to 1024 [ 241.064020][T15642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.123950][ T3653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.270619][T15672] policy can only be matched on NF_INET_PRE_ROUTING [ 241.270652][T15672] unable to load match [ 241.400337][T15682] loop9: detected capacity change from 0 to 7 [ 241.410477][T15682] Buffer I/O error on dev loop9, logical block 0, async page read [ 241.418584][T15682] Buffer I/O error on dev loop9, logical block 0, async page read [ 241.426701][T15682] loop9: unable to read partition table [ 241.433250][T15682] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 241.433250][T15682] U) failed (rc=-5) [ 241.863567][T15738] lo speed is unknown, defaulting to 1000 [ 242.004037][T15741] hub 9-0:1.0: USB hub found [ 242.009294][T15741] hub 9-0:1.0: 8 ports detected [ 242.137455][T15749] pim6reg1: entered promiscuous mode [ 242.143265][T15749] pim6reg1: entered allmulticast mode [ 242.343401][T15774] netlink: 'syz.4.5114': attribute type 1 has an invalid length. [ 242.383928][T15774] netlink: 'syz.4.5114': attribute type 1 has an invalid length. [ 242.549349][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 242.549369][ T29] audit: type=1326 audit(500.566:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.5.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 242.584162][ T29] audit: type=1326 audit(500.566:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.5.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 242.608727][ T29] audit: type=1326 audit(500.566:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.5.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 242.633013][ T29] audit: type=1326 audit(500.566:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.5.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 242.656378][ T29] audit: type=1326 audit(500.566:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.5.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1267fe929 code=0x7ffc0000 [ 242.720559][ T29] audit: type=1326 audit(500.703:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.4.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 242.745910][ T29] audit: type=1326 audit(500.703:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.4.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 242.769815][ T29] audit: type=1326 audit(500.703:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.4.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 242.793910][ T29] audit: type=1326 audit(500.703:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.4.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 242.818885][ T29] audit: type=1326 audit(500.703:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.4.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9bfce929 code=0x7ffc0000 [ 243.103347][ T5693] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.206714][ T5693] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.222202][T15822] : renamed from vlan0 (while UP) [ 243.312370][ T5693] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.453576][T15814] net_ratelimit: 2 callbacks suppressed [ 243.453593][T15814] Set syz1 is full, maxelem 65536 reached [ 243.468637][ T5693] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.495076][T15825] lo speed is unknown, defaulting to 1000 [ 243.639785][ T5693] erspan0 (unregistering): left allmulticast mode [ 243.695660][ T5693] bond0 (unregistering): Released all slaves [ 243.776195][ T5693] tipc: Disabling bearer [ 243.782367][ T5693] tipc: Left network mode [ 243.838248][ T5693] hsr_slave_0: left promiscuous mode [ 243.846479][ T5693] hsr_slave_1: left promiscuous mode [ 243.857893][ T5693] veth1_macvtap: left promiscuous mode [ 243.863623][ T5693] veth0_macvtap: left promiscuous mode [ 243.908517][T15868] __nla_validate_parse: 1 callbacks suppressed [ 243.908537][T15868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5154'. [ 243.989591][T15825] chnl_net:caif_netlink_parms(): no params data found [ 244.114056][T15825] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.121593][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.134538][T15825] bridge_slave_0: entered allmulticast mode [ 244.142118][T15825] bridge_slave_0: entered promiscuous mode [ 244.150955][T15825] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.158326][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.166280][T15825] bridge_slave_1: entered allmulticast mode [ 244.174640][T15825] bridge_slave_1: entered promiscuous mode [ 244.216435][T15825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.236135][T15825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.282613][T15825] team0: Port device team_slave_0 added [ 244.294368][T15825] team0: Port device team_slave_1 added [ 244.329769][T15825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.336918][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.363242][T15825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.388102][T15825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.395188][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.422044][T15825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.477115][T15825] hsr_slave_0: entered promiscuous mode [ 244.485354][T15911] ================================================================== [ 244.492352][T15825] hsr_slave_1: entered promiscuous mode [ 244.493581][T15911] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 244.493614][T15911] [ 244.493621][T15911] write to 0xffff888102329da0 of 4 bytes by task 15910 on cpu 0: [ 244.499803][T15825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.508569][T15911] selinux_inode_permission+0x31b/0x620 [ 244.508609][T15911] security_inode_permission+0x6d/0xb0 [ 244.521399][T15825] Cannot create hsr debugfs directory [ 244.526765][T15911] inode_permission+0x106/0x310 [ 244.526799][T15911] link_path_walk+0x162/0x900 [ 244.526825][T15911] path_openat+0x1de/0x2170 [ 244.557994][T15911] do_filp_open+0x109/0x230 [ 244.562886][T15911] io_openat2+0x272/0x390 [ 244.567503][T15911] io_openat+0x1b/0x30 [ 244.571940][T15911] __io_issue_sqe+0xfb/0x2e0 [ 244.576650][T15911] io_issue_sqe+0x53/0x970 [ 244.581110][T15911] io_submit_sqes+0x667/0xfd0 [ 244.585910][T15911] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 244.591672][T15911] __x64_sys_io_uring_enter+0x78/0x90 [ 244.597106][T15911] x64_sys_call+0x28c8/0x2fb0 [ 244.601827][T15911] do_syscall_64+0xd2/0x200 [ 244.607090][T15911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.613004][T15911] [ 244.615336][T15911] read to 0xffff888102329da0 of 4 bytes by task 15911 on cpu 1: [ 244.623065][T15911] selinux_inode_permission+0x2a7/0x620 [ 244.628750][T15911] security_inode_permission+0x6d/0xb0 [ 244.634226][T15911] inode_permission+0x106/0x310 [ 244.639099][T15911] link_path_walk+0x162/0x900 [ 244.643802][T15911] path_openat+0x1de/0x2170 [ 244.648348][T15911] do_filp_open+0x109/0x230 [ 244.653158][T15911] io_openat2+0x272/0x390 [ 244.657613][T15911] io_openat+0x1b/0x30 [ 244.661820][T15911] __io_issue_sqe+0xfb/0x2e0 [ 244.666456][T15911] io_issue_sqe+0x53/0x970 [ 244.670956][T15911] io_wq_submit_work+0x3f7/0x5f0 [ 244.676031][T15911] io_worker_handle_work+0x44e/0x9b0 [ 244.681554][T15911] io_wq_worker+0x22e/0x870 [ 244.686206][T15911] ret_from_fork+0xda/0x150 [ 244.690836][T15911] ret_from_fork_asm+0x1a/0x30 [ 244.696270][T15911] [ 244.698962][T15911] value changed: 0x00000001 -> 0x00000002 [ 244.704951][T15911] [ 244.707375][T15911] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 244.713890][T15911] CPU: 1 UID: 0 PID: 15911 Comm: iou-wrk-15910 Tainted: G W 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 244.729071][T15911] Tainted: [W]=WARN [ 244.732992][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.743336][T15911] ================================================================== [ 244.877339][ T3653] bridge0: port 1(syz_tun) entered disabled state [ 244.922897][ T3653] syz_tun (unregistering): left allmulticast mode [ 244.929625][ T3653] syz_tun (unregistering): left promiscuous mode [ 244.936375][ T3653] bridge0: port 1(syz_tun) entered disabled state [ 245.073658][ T5693] bridge_slave_1: left allmulticast mode [ 245.079455][ T5693] bridge_slave_1: left promiscuous mode [ 245.085363][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.093229][ T5693] bridge_slave_0: left allmulticast mode [ 245.098995][ T5693] bridge_slave_0: left promiscuous mode [ 245.104820][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.209511][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.221155][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.232309][ T5693] bond0 (unregistering): Released all slaves [ 245.282973][ T5693] hsr_slave_0: left promiscuous mode [ 245.288930][ T5693] hsr_slave_1: left promiscuous mode [ 245.294970][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.303066][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.324254][ T5693] team0 (unregistering): Port device team_slave_1 removed [ 245.335017][ T5693] team0 (unregistering): Port device team_slave_0 removed [ 245.591994][ T5693] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.636801][ T5693] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.703405][ T5693] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.760459][ T5693] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.830591][ T5693] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.855634][ T5693] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.922219][ T5693] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.989097][ T5693] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.059976][ T5693] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.093555][ T5693] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.160129][ T5693] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.198586][ T5693] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.249620][ T5693] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.283602][ T5693] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.331519][ T5693] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.388501][ T5693] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.458210][ T5693] bridge_slave_1: left allmulticast mode [ 246.464027][ T5693] bridge_slave_1: left promiscuous mode [ 246.469854][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.477707][ T5693] bridge_slave_0: left allmulticast mode [ 246.483675][ T5693] bridge_slave_0: left promiscuous mode [ 246.489743][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.498133][ T5693] bridge_slave_1: left allmulticast mode [ 246.503954][ T5693] bridge_slave_1: left promiscuous mode [ 246.509647][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.517409][ T5693] bridge_slave_0: left allmulticast mode [ 246.523507][ T5693] bridge_slave_0: left promiscuous mode [ 246.529701][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.538298][ T5693] team0: left allmulticast mode [ 246.543438][ T5693] bridge0: port 2(team0) entered disabled state [ 246.552386][ T5693] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 246.684939][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.694805][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.704582][ T5693] bond0 (unregistering): Released all slaves [ 246.715856][ T5693] batman_adv: batadv0: Removing interface: ip6gretap1 [ 246.790280][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.800449][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.810253][ T5693] bond0 (unregistering): Released all slaves [ 246.883484][ T5693] erspan0 (unregistering): left allmulticast mode [ 246.890140][ T5693] erspan0 (unregistering): left promiscuous mode [ 246.933278][ T5693] bond0 (unregistering): Released all slaves [ 246.941697][ T5693] bond1 (unregistering): Released all slaves [ 246.950310][ T5693] bond2 (unregistering): Released all slaves [ 246.958878][ T5693] bond3 (unregistering): Released all slaves [ 247.001394][ T5693] tipc: Left network mode [ 247.006396][ T5693] tipc: Disabling bearer [ 247.012078][ T5693] tipc: Left network mode [ 247.085827][ T5693] hsr_slave_0: left promiscuous mode [ 247.092039][ T5693] hsr_slave_1: left promiscuous mode [ 247.098185][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.105905][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.113621][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.121258][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.131205][ T5693] hsr_slave_0: left promiscuous mode [ 247.136905][ T5693] hsr_slave_1: left promiscuous mode [ 247.142747][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.150382][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.158256][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.166103][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.174890][ T5693] hsr_slave_0: left promiscuous mode [ 247.180781][ T5693] hsr_slave_1: left promiscuous mode [ 247.187844][ T5693] hsr_slave_0: left promiscuous mode [ 247.193700][ T5693] hsr_slave_1: left promiscuous mode [ 247.208738][ T5693] veth1_macvtap: left promiscuous mode [ 247.215022][ T5693] veth0_macvtap: left promiscuous mode [ 247.220889][ T5693] veth1_vlan: left promiscuous mode [ 247.226273][ T5693] veth0_vlan: left promiscuous mode [ 247.232139][ T5693] veth1_macvtap: left promiscuous mode [ 247.237972][ T5693] veth0_macvtap: left promiscuous mode [ 247.243766][ T5693] veth1_vlan: left promiscuous mode [ 247.249316][ T5693] veth0_vlan: left promiscuous mode [ 247.255355][ T5693] veth1_macvtap: left promiscuous mode [ 247.260954][ T5693] veth0_macvtap: left promiscuous mode [ 247.383218][ T5693] team0 (unregistering): Port device team_slave_1 removed [ 247.394358][ T5693] team0 (unregistering): Port device team_slave_0 removed [ 247.449549][ T5693] team0 (unregistering): Port device team_slave_1 removed [ 247.460602][ T5693] team0 (unregistering): Port device team_slave_0 removed [ 247.559022][ T5687] smc: removing ib device syz! [ 248.293037][ T5693] IPVS: stop unused estimator thread 0... [ 248.299521][ T5693] IPVS: stop unused estimator thread 0...