last executing test programs: 3m13.390424941s ago: executing program 1 (id=8362): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa4, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 3m13.326037036s ago: executing program 1 (id=8363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x10, 0x5}, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3e}, 0x18) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r1}) 3m13.207170746s ago: executing program 1 (id=8370): syslog(0x4, &(0x7f0000000000)=""/4096, 0x1000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000185600000dffff000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 3m13.197659867s ago: executing program 32 (id=8370): syslog(0x4, &(0x7f0000000000)=""/4096, 0x1000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000185600000dffff000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 3m10.626910672s ago: executing program 3 (id=8483): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x17, 0x40, 0x6, 0x0, 0x0, 0x10609, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0xffff, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) 3m10.626405192s ago: executing program 3 (id=8484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x20000}, 0x18) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) 3m10.599528394s ago: executing program 3 (id=8488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m10.510939562s ago: executing program 3 (id=8491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r1, 0x23) 3m10.348003784s ago: executing program 3 (id=8497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 3m10.347454394s ago: executing program 33 (id=8497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1m13.550605575s ago: executing program 34 (id=12987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 1m11.414303735s ago: executing program 7 (id=13056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, 0x0}]) 1m11.333789952s ago: executing program 7 (id=13061): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}, @in6={0xa, 0x4e24, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7269ca8d}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x0, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) 1m11.10446647s ago: executing program 5 (id=13076): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27a}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a86dd60a24b9f00302b00fe80000000000000f7000000000000bbfe8000000000000000000000000000aa3a0202"], 0x0) 1m11.074135203s ago: executing program 5 (id=13067): socket$kcm(0x2, 0xa, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m11.032799376s ago: executing program 5 (id=13070): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/22, 0x16}], 0x1}, 0x10001}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/126, 0x7e}], 0x1}}], 0x2, 0x20, 0x0) 1m10.47908991s ago: executing program 7 (id=13089): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m10.444769753s ago: executing program 7 (id=13090): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1m10.186839114s ago: executing program 5 (id=13094): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) r1 = eventfd2(0x4, 0x0) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/207, 0xcf}], 0x1) 1m9.936035454s ago: executing program 35 (id=13108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m9.934136954s ago: executing program 36 (id=13107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x4) 1m9.314867183s ago: executing program 7 (id=13111): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) 1m9.314464913s ago: executing program 5 (id=13112): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) listen(r0, 0x3) 1m9.165540855s ago: executing program 5 (id=13113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 1m9.165341575s ago: executing program 37 (id=13113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 1m7.72353825s ago: executing program 7 (id=13115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) 1m7.72325876s ago: executing program 38 (id=13115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) 1m5.010997497s ago: executing program 8 (id=13109): socket$kcm(0x2, 0xa, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m4.661818045s ago: executing program 8 (id=13171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m4.623998738s ago: executing program 8 (id=13174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1m4.606047129s ago: executing program 1 (id=13121): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 1m4.571252842s ago: executing program 8 (id=13177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 1m4.509770187s ago: executing program 8 (id=13180): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) 1m4.388613547s ago: executing program 1 (id=13181): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffffffc}) 1m3.605500459s ago: executing program 3 (id=13117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m3.586198971s ago: executing program 39 (id=13117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m3.437126813s ago: executing program 1 (id=13185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 1m3.419833704s ago: executing program 40 (id=13185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 1m3.357893809s ago: executing program 8 (id=13189): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0x300, 0x1, 0x0, 0x5, 0x0}) 1m3.311942013s ago: executing program 41 (id=13189): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0x300, 0x1, 0x0, 0x5, 0x0}) 3.223075573s ago: executing program 9 (id=15329): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x5d6aff9e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) 2.417888667s ago: executing program 9 (id=15331): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, 0x0, 0x0) 1.487648611s ago: executing program 9 (id=15357): unshare(0x4020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.355230852s ago: executing program 9 (id=15359): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[], 0xdd12}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.155066078s ago: executing program 9 (id=15364): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 775.916308ms ago: executing program 0 (id=15375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 655.804658ms ago: executing program 0 (id=15379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 547.948106ms ago: executing program 0 (id=15381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x4) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 506.60403ms ago: executing program 2 (id=15384): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 505.85629ms ago: executing program 0 (id=15385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000080000000000000000000000f00010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff05"], 0x48) 441.156645ms ago: executing program 2 (id=15386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r2) 343.432002ms ago: executing program 4 (id=15388): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0xfffffffffffffc79, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) io_setup(0x3, &(0x7f0000000340)) 343.219823ms ago: executing program 2 (id=15389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 301.187856ms ago: executing program 6 (id=15390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x40810}}], 0x2, 0x0) 270.517538ms ago: executing program 9 (id=15391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pselect6(0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 270.331219ms ago: executing program 6 (id=15392): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xfa67}], 0x1) 268.096639ms ago: executing program 2 (id=15393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 257.3016ms ago: executing program 4 (id=15394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x4) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 200.031704ms ago: executing program 6 (id=15395): r0 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x5, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x2}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 198.358625ms ago: executing program 4 (id=15405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x40810}}], 0x2, 0x0) 183.112016ms ago: executing program 6 (id=15396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x2b, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 149.331798ms ago: executing program 4 (id=15397): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 119.621801ms ago: executing program 6 (id=15398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r2) 119.355971ms ago: executing program 0 (id=15399): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000370000007f0000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) 119.112401ms ago: executing program 6 (id=15400): r0 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000010c0)=r3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 117.811211ms ago: executing program 2 (id=15409): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 111.447692ms ago: executing program 4 (id=15401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 53.446996ms ago: executing program 2 (id=15402): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[], 0xdd12}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 51.648976ms ago: executing program 4 (id=15414): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, 0x0, 0x0) 0s ago: executing program 0 (id=15403): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): (unregistering): Released all slaves [ 313.732882][ T7464] bond1 (unregistering): Released all slaves [ 313.741083][ T7464] bond2 (unregistering): Released all slaves [ 313.749654][ T7464] bond3 (unregistering): Released all slaves [ 314.369287][ T2514] lo speed is unknown, defaulting to 1000 [ 314.554221][ T7464] $H (unregistering): Released all slaves [ 314.562035][ T7464] bond1 (unregistering): Released all slaves [ 314.569968][ T7464] bond2 (unregistering): Released all slaves [ 314.578060][ T7464] bond0 (unregistering): Released all slaves [ 314.585717][ T7464] bond3 (unregistering): Released all slaves [ 314.594001][ T7464] bond4 (unregistering): Released all slaves [ 314.601958][ T7464] bond5 (unregistering): Released all slaves [ 314.646515][ T7464] tipc: Left network mode [ 314.652270][ T7464] IPVS: stopping backup sync thread 31036 ... [ 314.654508][ T2514] chnl_net:caif_netlink_parms(): no params data found [ 314.747247][ T2514] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.754414][ T2514] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.762006][ T2514] bridge_slave_0: entered allmulticast mode [ 314.768614][ T2514] bridge_slave_0: entered promiscuous mode [ 314.775612][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.782774][ T2514] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.790025][ T2514] bridge_slave_1: entered allmulticast mode [ 314.796807][ T2514] bridge_slave_1: entered promiscuous mode [ 314.812307][ T2514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.822381][ T2514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.840693][ T2514] team0: Port device team_slave_0 added [ 314.847532][ T2514] team0: Port device team_slave_1 added [ 314.861668][ T2514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.868708][ T2514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.894729][ T2514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.905864][ T2514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.912815][ T2514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.938835][ T2514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.963410][ T2514] hsr_slave_0: entered promiscuous mode [ 314.969402][ T2514] hsr_slave_1: entered promiscuous mode [ 314.975362][ T2514] debugfs: 'hsr0' already exists in 'hsr' [ 314.981180][ T2514] Cannot create hsr debugfs directory [ 315.061674][ T7464] IPVS: stop unused estimator thread 0... [ 315.104714][ T2514] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 315.115214][ T2514] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 315.123896][ T2514] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 315.134047][ T2514] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 315.181296][ T2534] lo speed is unknown, defaulting to 1000 [ 315.204321][ T2514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.217693][ T2514] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.232496][ T7505] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.239606][ T7505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.254653][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.261749][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.273594][ T2532] lo speed is unknown, defaulting to 1000 [ 315.281473][ T2514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.291877][ T2514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.379376][ T2534] chnl_net:caif_netlink_parms(): no params data found [ 315.430111][ T2534] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.437305][ T2534] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.444578][ T2534] bridge_slave_0: entered allmulticast mode [ 315.450927][ T2534] bridge_slave_0: entered promiscuous mode [ 315.469134][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.476289][ T2534] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.483546][ T2534] bridge_slave_1: entered allmulticast mode [ 315.490070][ T2534] bridge_slave_1: entered promiscuous mode [ 315.502995][ T2514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.512320][ T2532] chnl_net:caif_netlink_parms(): no params data found [ 315.527441][ T2534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.545909][ T2534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.565706][ T2534] team0: Port device team_slave_0 added [ 315.584916][ T2534] team0: Port device team_slave_1 added [ 315.615972][ T2534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.622976][ T2534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.649327][ T2534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.685010][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 315.685025][ T29] audit: type=1326 audit(1754976609.876:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.714894][ T29] audit: type=1326 audit(1754976609.876:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.715377][ T7488] dvmrp0 (unregistering): left allmulticast mode [ 315.738669][ T29] audit: type=1326 audit(1754976609.876:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.768858][ T29] audit: type=1326 audit(1754976609.876:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.792563][ T29] audit: type=1326 audit(1754976609.876:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.816292][ T29] audit: type=1326 audit(1754976609.876:15217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.840342][ T29] audit: type=1326 audit(1754976609.876:15218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.863933][ T29] audit: type=1326 audit(1754976609.876:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.887853][ T29] audit: type=1326 audit(1754976609.876:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.911543][ T29] audit: type=1326 audit(1754976609.876:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.2.13116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65c760ebe9 code=0x7ffc0000 [ 315.955156][ T7488] $H (unregistering): Released all slaves [ 315.963906][ T7488] bond0 (unregistering): Released all slaves [ 315.993785][ T2532] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.000849][ T2532] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.011037][ T2532] bridge_slave_0: entered allmulticast mode [ 316.017891][ T2532] bridge_slave_0: entered promiscuous mode [ 316.025981][ T2534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.033040][ T2534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.059057][ T2534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.075538][ T2532] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.082698][ T2532] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.089973][ T2532] bridge_slave_1: entered allmulticast mode [ 316.098819][ T2532] bridge_slave_1: entered promiscuous mode [ 316.138105][ T2532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.158442][ T2534] hsr_slave_0: entered promiscuous mode [ 316.164820][ T2534] hsr_slave_1: entered promiscuous mode [ 316.179596][ T2534] debugfs: 'hsr0' already exists in 'hsr' [ 316.185397][ T2534] Cannot create hsr debugfs directory [ 316.192457][ T7488] hsr_slave_0: left promiscuous mode [ 316.199108][ T7488] hsr_slave_1: left promiscuous mode [ 316.255319][ T2532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.285201][ T2514] veth0_vlan: entered promiscuous mode [ 316.304417][ T2532] team0: Port device team_slave_0 added [ 316.319705][ T2514] veth1_vlan: entered promiscuous mode [ 316.338698][ T2532] team0: Port device team_slave_1 added [ 316.373453][ T2532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.380539][ T2532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.406704][ T2532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.423422][ T2579] lo speed is unknown, defaulting to 1000 [ 316.430171][ T2532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.437169][ T2532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.463475][ T2532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.522153][ T2622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13132'. [ 316.534828][ T2532] hsr_slave_0: entered promiscuous mode [ 316.540890][ T2532] hsr_slave_1: entered promiscuous mode [ 316.547787][ T2532] debugfs: 'hsr0' already exists in 'hsr' [ 316.553600][ T2532] Cannot create hsr debugfs directory [ 316.579375][ T2514] veth0_macvtap: entered promiscuous mode [ 316.589307][ T2514] veth1_macvtap: entered promiscuous mode [ 316.624894][ T2514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.637793][ T2514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.648327][ T2631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13136'. [ 316.673768][ T2534] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 316.685864][ T7472] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.699214][ T7472] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.708719][ T7472] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.717569][ T2534] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 316.730851][ T7472] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.757053][ T2534] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 316.768935][ T2534] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 316.803298][ T2579] chnl_net:caif_netlink_parms(): no params data found [ 316.889230][ T2579] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.896683][ T2579] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.905627][ T2579] bridge_slave_0: entered allmulticast mode [ 316.912413][ T2579] bridge_slave_0: entered promiscuous mode [ 316.919265][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.926394][ T2579] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.934190][ T2579] bridge_slave_1: entered allmulticast mode [ 316.940590][ T2579] bridge_slave_1: entered promiscuous mode [ 316.965055][ T2579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.986627][ T2579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.016876][ T2579] team0: Port device team_slave_0 added [ 317.033729][ T2579] team0: Port device team_slave_1 added [ 317.058674][ T2579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.065687][ T2579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.091885][ T2579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.105260][ T2534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.116005][ T2579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.123007][ T2579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.149008][ T2579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.169898][ T2534] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.205632][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.212748][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.224170][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.231242][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.247098][ T2579] hsr_slave_0: entered promiscuous mode [ 317.253274][ T2579] hsr_slave_1: entered promiscuous mode [ 317.259216][ T2579] debugfs: 'hsr0' already exists in 'hsr' [ 317.264989][ T2579] Cannot create hsr debugfs directory [ 317.306683][ T7488] dvmrp0 (unregistering): left allmulticast mode [ 317.346895][ T7488] bond0 (unregistering): Released all slaves [ 317.372485][ T2532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 317.411651][ T2532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 317.445575][ T2532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 317.477786][ T2532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 317.567700][ T7488] hsr_slave_0: left promiscuous mode [ 317.574955][ T7488] hsr_slave_1: left promiscuous mode [ 317.714190][ T2534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.752366][ T2532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.772079][ T2579] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.794571][ T2532] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.806923][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.813993][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.845564][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.852669][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.865388][ T2579] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.923952][ T2579] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.004084][ T2579] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.037370][ T2532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.122373][ T2534] veth0_vlan: entered promiscuous mode [ 318.134664][ T2579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.160045][ T2579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.172585][ T2579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.192142][ T2534] veth1_vlan: entered promiscuous mode [ 318.205643][ T2534] veth0_macvtap: entered promiscuous mode [ 318.225710][ T2579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.242350][ T2534] veth1_macvtap: entered promiscuous mode [ 318.255456][ T2532] veth0_vlan: entered promiscuous mode [ 318.276427][ T2532] veth1_vlan: entered promiscuous mode [ 318.286404][ T2534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.302353][ T2534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.317140][ T2532] veth0_macvtap: entered promiscuous mode [ 318.325857][ T2532] veth1_macvtap: entered promiscuous mode [ 318.343347][ T7516] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.362717][ T7472] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.379919][ T7472] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.405153][ T2532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.418214][ T2579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.429179][ T7472] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.439433][ T2532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.455603][ T2579] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.466518][ T7516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.480896][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.488148][ T7472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.508812][ T2765] bridge_slave_0: left allmulticast mode [ 318.514657][ T2765] bridge_slave_0: left promiscuous mode [ 318.520416][ T2765] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.581849][ T2765] bridge_slave_1: left allmulticast mode [ 318.587627][ T2765] bridge_slave_1: left promiscuous mode [ 318.593365][ T2765] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.603256][ T2765] bond0: (slave bond_slave_0): Releasing backup interface [ 318.612606][ T2765] bond0: (slave bond_slave_1): Releasing backup interface [ 318.625920][ T2765] team0: Port device team_slave_0 removed [ 318.636022][ T2765] team0: Port device team_slave_1 removed [ 318.643175][ T2765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.650696][ T2765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.659858][ T2765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.667452][ T2765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.684636][ T7516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.754352][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.761449][ T7488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.790279][ T7516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.829052][ T7516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.905717][ T2579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.788047][ T2809] bridge_slave_0: left allmulticast mode [ 319.793826][ T2809] bridge_slave_0: left promiscuous mode [ 319.799415][ T2809] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.807905][ T2809] bridge_slave_1: left allmulticast mode [ 319.813651][ T2809] bridge_slave_1: left promiscuous mode [ 319.819420][ T2809] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.829340][ T2809] bond0: (slave bond_slave_0): Releasing backup interface [ 319.839297][ T2809] bond0: (slave bond_slave_1): Releasing backup interface [ 319.850305][ T2809] team0: Port device team_slave_0 removed [ 319.859402][ T2809] team0: Port device team_slave_1 removed [ 319.866265][ T2809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.873868][ T2809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.884377][ T2809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.891768][ T2809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.138624][ T2812] lo speed is unknown, defaulting to 1000 [ 320.304940][ T2825] lo speed is unknown, defaulting to 1000 [ 320.373340][ T2830] lo speed is unknown, defaulting to 1000 [ 320.391499][ T2812] chnl_net:caif_netlink_parms(): no params data found [ 320.465866][ T2849] lo speed is unknown, defaulting to 1000 [ 320.497251][ T2869] netlink: 'syz.9.13195': attribute type 1 has an invalid length. [ 320.524858][ T2812] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.531943][ T2812] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.539360][ T2812] bridge_slave_0: entered allmulticast mode [ 320.546900][ T2812] bridge_slave_0: entered promiscuous mode [ 320.555641][ T2812] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.562807][ T2812] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.569954][ T2812] bridge_slave_1: entered allmulticast mode [ 320.576650][ T2812] bridge_slave_1: entered promiscuous mode [ 320.609631][ T2812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.622236][ T2812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.660278][ T2812] team0: Port device team_slave_0 added [ 320.674445][ T2812] team0: Port device team_slave_1 added [ 320.691311][ T2825] chnl_net:caif_netlink_parms(): no params data found [ 320.700968][ T7499] bridge_slave_1: left allmulticast mode [ 320.706776][ T7499] bridge_slave_1: left promiscuous mode [ 320.712425][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.721259][ T7499] bridge_slave_0: left allmulticast mode [ 320.726972][ T7499] bridge_slave_0: left promiscuous mode [ 320.732896][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.794741][ T7499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.804564][ T7499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.814391][ T7499] bond0 (unregistering): Released all slaves [ 320.823389][ T2812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.830326][ T2812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.856470][ T2812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.868026][ T2812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.875011][ T2812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.901021][ T2812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.970658][ T2812] hsr_slave_0: entered promiscuous mode [ 320.976803][ T2812] hsr_slave_1: entered promiscuous mode [ 320.983011][ T2812] debugfs: 'hsr0' already exists in 'hsr' [ 320.988731][ T2812] Cannot create hsr debugfs directory [ 320.999346][ T7499] hsr_slave_0: left promiscuous mode [ 321.005696][ T7499] hsr_slave_1: left promiscuous mode [ 321.011737][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.019355][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.063656][ T7499] team0 (unregistering): Port device team_slave_1 removed [ 321.074327][ T7499] team0 (unregistering): Port device team_slave_0 removed [ 321.159221][ T2830] chnl_net:caif_netlink_parms(): no params data found [ 321.174873][ T2825] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.181959][ T2825] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.189432][ T2825] bridge_slave_0: entered allmulticast mode [ 321.195968][ T2825] bridge_slave_0: entered promiscuous mode [ 321.213611][ T2825] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.220667][ T2825] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.227921][ T2825] bridge_slave_1: entered allmulticast mode [ 321.234377][ T2825] bridge_slave_1: entered promiscuous mode [ 321.248325][ T2849] chnl_net:caif_netlink_parms(): no params data found [ 321.287998][ T2825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.312876][ T2825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.335545][ T2830] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.342778][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.350064][ T2830] bridge_slave_0: entered allmulticast mode [ 321.357034][ T2830] bridge_slave_0: entered promiscuous mode [ 321.365699][ T2830] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.372845][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.381358][ T2830] bridge_slave_1: entered allmulticast mode [ 321.388094][ T2830] bridge_slave_1: entered promiscuous mode [ 321.402612][ T2825] team0: Port device team_slave_0 added [ 321.419086][ T2825] team0: Port device team_slave_1 added [ 321.431151][ T2830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.443455][ T2830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.474926][ T2830] team0: Port device team_slave_0 added [ 321.484906][ T2849] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.492032][ T2849] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.499267][ T2849] bridge_slave_0: entered allmulticast mode [ 321.505980][ T2849] bridge_slave_0: entered promiscuous mode [ 321.513149][ T2830] team0: Port device team_slave_1 added [ 321.518993][ T2849] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.526133][ T2849] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.533423][ T2849] bridge_slave_1: entered allmulticast mode [ 321.539868][ T2849] bridge_slave_1: entered promiscuous mode [ 321.547471][ T2825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.554445][ T2825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.580384][ T2825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.603270][ T2825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.610257][ T2825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.636422][ T2825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.659776][ T7499] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.675030][ T2830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.681964][ T2830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.708043][ T2830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.719381][ T2830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.726443][ T2830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.752730][ T2830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.764749][ T2849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.789155][ T2849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.800123][ T7499] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.814447][ T2825] hsr_slave_0: entered promiscuous mode [ 321.820434][ T2825] hsr_slave_1: entered promiscuous mode [ 321.826874][ T2825] debugfs: 'hsr0' already exists in 'hsr' [ 321.832597][ T2825] Cannot create hsr debugfs directory [ 321.848780][ T2849] team0: Port device team_slave_0 added [ 321.866815][ T2830] hsr_slave_0: entered promiscuous mode [ 321.873184][ T2830] hsr_slave_1: entered promiscuous mode [ 321.879097][ T2830] debugfs: 'hsr0' already exists in 'hsr' [ 321.884845][ T2830] Cannot create hsr debugfs directory [ 321.890988][ T2849] team0: Port device team_slave_1 added [ 321.916242][ T7499] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.938345][ T2849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.945464][ T2849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.971642][ T2849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.988113][ T2849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.995107][ T2849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.021193][ T2849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.070323][ T2812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.082009][ T7499] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.095452][ T2849] hsr_slave_0: entered promiscuous mode [ 322.101563][ T2849] hsr_slave_1: entered promiscuous mode [ 322.107681][ T2849] debugfs: 'hsr0' already exists in 'hsr' [ 322.113477][ T2849] Cannot create hsr debugfs directory [ 322.123600][ T2812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.148635][ T2812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.171830][ T2812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.236755][ T7499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.273617][ T2812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.292771][ T2812] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.302267][ T7499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.316044][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.323206][ T7488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.334460][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.341533][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.365752][ T7499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.412801][ T2812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.437036][ T7499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.481525][ T2812] veth0_vlan: entered promiscuous mode [ 322.497919][ T2812] veth1_vlan: entered promiscuous mode [ 322.508782][ T2830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.517859][ T2830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.529446][ T2830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.539154][ T2830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.567970][ T7499] bridge_slave_1: left allmulticast mode [ 322.573699][ T7499] bridge_slave_1: left promiscuous mode [ 322.579372][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.588149][ T7499] bridge_slave_0: left allmulticast mode [ 322.593924][ T7499] bridge_slave_0: left promiscuous mode [ 322.599576][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.704697][ T7499] bond0 (unregistering): Released all slaves [ 322.775306][ T7499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.785400][ T7499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.795158][ T7499] bond0 (unregistering): Released all slaves [ 322.817539][ T7499] dvmrp0 (unregistering): left allmulticast mode [ 322.935021][ T7505] smc: removing ib device syz1 [ 322.935202][ T7499] $H (unregistering): Released all slaves [ 322.948404][ T7499] bond1 (unregistering): Released all slaves [ 322.956643][ T7499] bond2 (unregistering): Released all slaves [ 322.965186][ T7499] bond3 (unregistering): Released all slaves [ 322.973428][ T7499] bond0 (unregistering): Released all slaves [ 322.997723][ T2812] veth0_macvtap: entered promiscuous mode [ 323.015049][ T2812] veth1_macvtap: entered promiscuous mode [ 323.027508][ T2812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.044364][ T2830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.054697][ T2812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.070532][ T7488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.082096][ T2830] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.093088][ T7488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.101879][ T7488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.114202][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.121265][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.131358][ T7472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.150469][ T2830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.160918][ T2830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.174753][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.182043][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.245343][ T2825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.296597][ T2825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.308624][ T2825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.329722][ T2825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 323.343615][ T2830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.357952][ T7499] IPVS: stopping backup sync thread 2105 ... [ 323.448831][ T2825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.469284][ T2825] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.496815][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.503956][ T7472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.519354][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.526444][ T7472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.547371][ T7499] hsr_slave_0: left promiscuous mode [ 323.555958][ T7499] hsr_slave_1: left promiscuous mode [ 323.564067][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 323.564081][ T29] audit: type=1326 audit(1754976617.766:15335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.613897][ T29] audit: type=1326 audit(1754976617.796:15336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.637623][ T29] audit: type=1326 audit(1754976617.796:15337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.661196][ T29] audit: type=1326 audit(1754976617.796:15338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.667058][ T2934] hub 6-0:1.0: USB hub found [ 323.685145][ T29] audit: type=1326 audit(1754976617.796:15339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.689534][ T7499] hsr_slave_0: left promiscuous mode [ 323.713153][ T29] audit: type=1326 audit(1754976617.796:15340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.720318][ T2934] hub 6-0:1.0: 8 ports detected [ 323.741953][ T29] audit: type=1326 audit(1754976617.796:15341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.770625][ T29] audit: type=1326 audit(1754976617.796:15342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.794264][ T29] audit: type=1326 audit(1754976617.796:15343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.817814][ T29] audit: type=1326 audit(1754976617.796:15344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.0.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 323.843679][ T7499] hsr_slave_1: left promiscuous mode [ 323.849587][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.857080][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.866946][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.874404][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.893036][ T7499] veth1_macvtap: left promiscuous mode [ 323.899991][ T7499] veth0_macvtap: left promiscuous mode [ 323.908659][ T7499] veth1_vlan: left promiscuous mode [ 323.914496][ T7499] veth0_vlan: left promiscuous mode [ 323.931316][ T7499] veth1_macvtap: left promiscuous mode [ 323.942000][ T7499] veth0_macvtap: left promiscuous mode [ 323.949323][ T7499] veth1_vlan: left promiscuous mode [ 323.963941][ T7499] veth0_vlan: left promiscuous mode [ 324.187816][ T2991] rdma_op ffff88810a0fd980 conn xmit_rdma 0000000000000000 [ 324.201170][ T7499] team0 (unregistering): Port device team_slave_1 removed [ 324.221685][ T7499] team0 (unregistering): Port device team_slave_0 removed [ 324.323032][ T2849] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.331874][ T2849] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.341409][ T2830] veth0_vlan: entered promiscuous mode [ 324.362476][ T2825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.372887][ T2825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.396404][ T2849] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.422799][ T2849] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.453575][ T2830] veth1_vlan: entered promiscuous mode [ 324.535815][ T2825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.553193][ T2830] veth0_macvtap: entered promiscuous mode [ 324.561015][ T2830] veth1_macvtap: entered promiscuous mode [ 324.588500][ T2849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.600802][ T2830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.618629][ T2849] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.627644][ T2830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.645963][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.653073][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.671310][ T2849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.681733][ T2849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.702227][ T3042] SELinux: policydb version 0 does not match my version range 15-35 [ 324.712821][ T3042] SELinux: failed to load policy [ 324.721416][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.728566][ T7488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.753568][ T7464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.788740][ T7464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.819360][ T7464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.829657][ T2849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.851450][ T7464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.944233][ T2825] veth0_vlan: entered promiscuous mode [ 324.959564][ T3058] lo speed is unknown, defaulting to 1000 [ 324.967220][ T2825] veth1_vlan: entered promiscuous mode [ 325.035090][ T7499] IPVS: stop unused estimator thread 0... [ 325.047003][ T2825] veth0_macvtap: entered promiscuous mode [ 325.064745][ T2825] veth1_macvtap: entered promiscuous mode [ 325.080495][ T2825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.096135][ T2825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.105709][ T2849] veth0_vlan: entered promiscuous mode [ 325.116286][ T2849] veth1_vlan: entered promiscuous mode [ 325.126433][ T7457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.135837][ T7457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.148921][ T7457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.159884][ T7457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.170365][ T3099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13239'. [ 325.179590][ T3099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13239'. [ 325.188800][ T3099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13239'. [ 325.198851][ T3099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13239'. [ 325.208093][ T3099] netlink: 'syz.2.13239': attribute type 6 has an invalid length. [ 325.237049][ T2849] veth0_macvtap: entered promiscuous mode [ 325.256687][ T2849] veth1_macvtap: entered promiscuous mode [ 325.278991][ T2849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.300890][ T2849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.320019][ T7464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.337435][ T7464] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.373112][ T7464] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.396177][ T7464] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.540295][ T3140] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13254'. [ 325.594316][ T3146] pimreg: entered allmulticast mode [ 325.624931][ T3146] pimreg: left allmulticast mode [ 325.956446][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13270'. [ 325.965470][ T3173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13270'. [ 325.974530][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13270'. [ 326.045050][ T7464] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.105818][ T7464] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.115655][ T7464] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.124563][ T7464] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.196669][ T3183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13275'. [ 326.466197][ T3203] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13285'. [ 326.497103][ T3211] sd 0:0:1:0: device reset [ 326.587043][ T3229] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 326.597293][ T3219] veth1_macvtap: left promiscuous mode [ 326.725836][ T3249] openvswitch: netlink: Message has 6 unknown bytes. [ 326.748072][ T3255] rdma_op ffff8881284fd980 conn xmit_rdma 0000000000000000 [ 326.761803][ T3260] x_tables: ip_tables: udp match: only valid for protocol 17 [ 326.828303][ T3261] vhci_hcd: invalid port number 96 [ 326.833573][ T3261] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 326.888283][ T3274] pim6reg1: entered promiscuous mode [ 326.893670][ T3274] pim6reg1: entered allmulticast mode [ 327.832383][ T3418] vhci_hcd: invalid port number 96 [ 327.837594][ T3418] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 327.926522][ T3444] veth1_macvtap: left promiscuous mode [ 327.956344][ T3447] lo speed is unknown, defaulting to 1000 [ 327.962125][ T3447] lo speed is unknown, defaulting to 1000 [ 327.968628][ T3447] lo speed is unknown, defaulting to 1000 [ 327.975706][ T3447] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 327.995423][ T3447] lo speed is unknown, defaulting to 1000 [ 328.015616][ T3447] lo speed is unknown, defaulting to 1000 [ 328.028840][ T3447] lo speed is unknown, defaulting to 1000 [ 328.037497][ T3447] lo speed is unknown, defaulting to 1000 [ 328.053465][ T3447] lo speed is unknown, defaulting to 1000 [ 328.062269][ T3447] lo speed is unknown, defaulting to 1000 [ 328.063804][T26093] hid_parser_main: 165 callbacks suppressed [ 328.063820][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.075940][ T3447] lo speed is unknown, defaulting to 1000 [ 328.081424][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.094589][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.102026][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.109424][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.116861][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.124276][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.131672][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.139262][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.146686][T26093] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 328.157778][T26093] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz1] on syz0 [ 328.187458][ T3461] pim6reg1: entered promiscuous mode [ 328.192909][ T3461] pim6reg1: entered allmulticast mode [ 328.273731][ T3465] hub 2-0:1.0: USB hub found [ 328.288459][ T3465] hub 2-0:1.0: 8 ports detected [ 328.460819][ T3495] lo speed is unknown, defaulting to 1000 [ 328.460869][ T7516] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.475848][ T3495] lo speed is unknown, defaulting to 1000 [ 328.482979][ T3502] netem: change failed [ 328.512172][ T7516] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.530441][ T7516] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.569041][ T7516] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.630427][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 328.630441][ T29] audit: type=1326 audit(1754976622.826:15598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3517 comm="syz.9.13421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.664931][ T29] audit: type=1326 audit(1754976622.826:15599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3517 comm="syz.9.13421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.688739][ T29] audit: type=1326 audit(1754976622.856:15600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3517 comm="syz.9.13421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.712308][ T29] audit: type=1326 audit(1754976622.856:15601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3517 comm="syz.9.13421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.736064][ T29] audit: type=1326 audit(1754976622.856:15602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3517 comm="syz.9.13421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.759897][ T29] audit: type=1326 audit(1754976622.856:15603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3517 comm="syz.9.13421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.783874][ T29] audit: type=1326 audit(1754976622.926:15604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.9.13422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.807646][ T29] audit: type=1326 audit(1754976622.926:15605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.9.13422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.831302][ T29] audit: type=1326 audit(1754976622.926:15606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.9.13422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 328.855048][ T29] audit: type=1326 audit(1754976622.926:15607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.9.13422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 329.020312][ T3539] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 329.308116][ T3550] netlink: 'syz.9.13434': attribute type 3 has an invalid length. [ 329.316091][ T3550] netlink: 'syz.9.13434': attribute type 3 has an invalid length. [ 329.601938][ T3557] lo speed is unknown, defaulting to 1000 [ 329.643348][ T3557] lo speed is unknown, defaulting to 1000 [ 329.679507][ T3564] SELinux: failed to load policy [ 330.972679][ T3637] lo speed is unknown, defaulting to 1000 [ 330.998869][ T3637] lo speed is unknown, defaulting to 1000 [ 331.181124][ T3672] netlink: '+}[@': attribute type 1 has an invalid length. [ 331.194716][ T3676] __nla_validate_parse: 35 callbacks suppressed [ 331.194732][ T3676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13495'. [ 331.320369][ T3694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13503'. [ 331.364487][ T3698] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 331.372067][ T3698] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 331.574345][ T3729] vhci_hcd: invalid port number 96 [ 331.579717][ T3729] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 331.698526][ T3749] netlink: 'syz.0.13529': attribute type 1 has an invalid length. [ 331.920944][ T3772] SELinux: failed to load policy [ 331.921592][ T3776] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 332.035742][ T3789] lo speed is unknown, defaulting to 1000 [ 332.042134][ T3789] lo speed is unknown, defaulting to 1000 [ 332.158822][ T3395] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 332.368053][ T3855] 9pnet_fd: Insufficient options for proto=fd [ 332.397087][ T3861] syz.4.13577: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 332.411795][ T3861] CPU: 1 UID: 0 PID: 3861 Comm: syz.4.13577 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 332.411899][ T3861] Tainted: [W]=WARN [ 332.411906][ T3861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.411917][ T3861] Call Trace: [ 332.411925][ T3861] [ 332.411933][ T3861] __dump_stack+0x1d/0x30 [ 332.411956][ T3861] dump_stack_lvl+0xe8/0x140 [ 332.412003][ T3861] dump_stack+0x15/0x1b [ 332.412018][ T3861] warn_alloc+0x12b/0x1a0 [ 332.412044][ T3861] ? audit_log_end+0x1d7/0x1f0 [ 332.412125][ T3861] ? audit_log_end+0x1d7/0x1f0 [ 332.412174][ T3861] __vmalloc_node_range_noprof+0x9c/0xe00 [ 332.412202][ T3861] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 332.412289][ T3861] ? update_load_avg+0x1da/0x820 [ 332.412313][ T3861] ? __list_add_valid_or_report+0x38/0xe0 [ 332.412342][ T3861] ? __set_next_task_fair+0x5b/0x150 [ 332.412359][ T3861] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 332.412382][ T3861] ? should_fail_ex+0x30/0x280 [ 332.412489][ T3861] ? xskq_create+0x36/0xe0 [ 332.412519][ T3861] vmalloc_user_noprof+0x7d/0xb0 [ 332.412549][ T3861] ? xskq_create+0x80/0xe0 [ 332.412575][ T3861] xskq_create+0x80/0xe0 [ 332.412617][ T3861] xsk_init_queue+0x95/0xf0 [ 332.412734][ T3861] xsk_setsockopt+0x477/0x640 [ 332.412772][ T3861] ? __pfx_xsk_setsockopt+0x10/0x10 [ 332.412831][ T3861] __sys_setsockopt+0x184/0x200 [ 332.412849][ T3861] __x64_sys_setsockopt+0x64/0x80 [ 332.412866][ T3861] x64_sys_call+0x20ec/0x2ff0 [ 332.412888][ T3861] do_syscall_64+0xd2/0x200 [ 332.412986][ T3861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.413006][ T3861] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.413080][ T3861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.413098][ T3861] RIP: 0033:0x7f2d9f61ebe9 [ 332.413113][ T3861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.413127][ T3861] RSP: 002b:00007f2d9e07f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 332.413144][ T3861] RAX: ffffffffffffffda RBX: 00007f2d9f845fa0 RCX: 00007f2d9f61ebe9 [ 332.413155][ T3861] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 332.413167][ T3861] RBP: 00007f2d9f6a1e19 R08: 0000000000000004 R09: 0000000000000000 [ 332.413239][ T3861] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 332.413249][ T3861] R13: 00007f2d9f846038 R14: 00007f2d9f845fa0 R15: 00007ffdb9339a08 [ 332.413268][ T3861] [ 332.657726][ T3861] Mem-Info: [ 332.660985][ T3861] active_anon:6982 inactive_anon:89 isolated_anon:0 [ 332.660985][ T3861] active_file:9268 inactive_file:20846 isolated_file:0 [ 332.660985][ T3861] unevictable:0 dirty:274 writeback:0 [ 332.660985][ T3861] slab_reclaimable:3792 slab_unreclaimable:40657 [ 332.660985][ T3861] mapped:28832 shmem:3320 pagetables:1035 [ 332.660985][ T3861] sec_pagetables:0 bounce:0 [ 332.660985][ T3861] kernel_misc_reclaimable:0 [ 332.660985][ T3861] free:1848504 free_pcp:11503 free_cma:0 [ 332.706404][ T3861] Node 0 active_anon:28044kB inactive_anon:356kB active_file:37072kB inactive_file:83384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115328kB dirty:1096kB writeback:0kB shmem:13280kB kernel_stack:4944kB pagetables:4024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.735042][ T3861] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.763943][ T3861] lowmem_reserve[]: 0 2883 7862 7862 [ 332.769423][ T3861] Node 0 DMA32 free:2949316kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952848kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 332.799714][ T3861] lowmem_reserve[]: 0 0 4978 4978 [ 332.805065][ T3861] Node 0 Normal free:4429340kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27928kB inactive_anon:356kB active_file:37072kB inactive_file:83384kB unevictable:0kB writepending:1096kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:42280kB local_pcp:22676kB free_cma:0kB [ 332.837420][ T3861] lowmem_reserve[]: 0 0 0 0 [ 332.842197][ T3861] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.855085][ T3861] Node 0 DMA32: 5*4kB (M) 4*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949316kB [ 332.871580][ T3861] Node 0 Normal: 211*4kB (UME) 8*8kB (UME) 570*16kB (UME) 610*32kB (UME) 423*64kB (UME) 158*128kB (UME) 112*256kB (UM) 29*512kB (UM) 34*1024kB (UM) 33*2048kB (UM) 1027*4096kB (UME) = 4429356kB [ 332.890928][ T3861] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 332.900313][ T3861] 33597 total pagecache pages [ 332.905009][ T3861] 169 pages in swap cache [ 332.909314][ T3861] Free swap = 124320kB [ 332.913468][ T3861] Total swap = 124996kB [ 332.917604][ T3861] 2097051 pages RAM [ 332.921405][ T3861] 0 pages HighMem/MovableOnly [ 332.926178][ T3861] 80439 pages reserved [ 332.962450][ T3877] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13585'. [ 332.971678][ T3877] netlink: 84 bytes leftover after parsing attributes in process `syz.6.13585'. [ 333.109389][ T3893] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 333.249977][ T3923] sctp: [Deprecated]: syz.4.13608 (pid 3923) Use of int in maxseg socket option. [ 333.249977][ T3923] Use struct sctp_assoc_value instead [ 333.660636][ T3955] batadv_slave_1: entered promiscuous mode [ 333.678051][ T3955] batadv0: entered promiscuous mode [ 333.693856][ T3954] batadv0: left promiscuous mode [ 333.698955][ T3954] batadv_slave_1: left promiscuous mode [ 333.729284][ T3957] netlink: 'syz.2.13622': attribute type 3 has an invalid length. [ 333.761067][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 333.761083][ T29] audit: type=1326 audit(1754976630.955:15931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 333.926956][ T3974] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13628'. [ 333.952823][ T29] audit: type=1326 audit(1754976630.955:15932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 333.976588][ T29] audit: type=1326 audit(1754976630.955:15933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 334.000544][ T29] audit: type=1326 audit(1754976630.955:15934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 334.024366][ T29] audit: type=1326 audit(1754976630.955:15935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 334.048034][ T29] audit: type=1326 audit(1754976630.955:15936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 334.071751][ T29] audit: type=1326 audit(1754976630.955:15937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 334.095532][ T29] audit: type=1326 audit(1754976630.955:15938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 334.119282][ T29] audit: type=1326 audit(1754976630.995:15939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 334.142950][ T29] audit: type=1326 audit(1754976630.995:15940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.13625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 334.396456][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13646'. [ 334.407618][ T4008] lo speed is unknown, defaulting to 1000 [ 334.435855][ T4013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.451359][ T4008] lo speed is unknown, defaulting to 1000 [ 334.644144][ T4032] netlink: 'syz.2.13657': attribute type 1 has an invalid length. [ 334.685718][ T4032] bond1: entered promiscuous mode [ 334.690997][ T4032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.815966][ T4038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.850529][ T4038] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 334.860860][ T4038] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 334.886211][ T4038] bond1: (slave ip6gre1): making interface the new active one [ 334.893777][ T4038] ip6gre1: entered promiscuous mode [ 334.900993][ T4038] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 334.919298][ T4051] veth3: entered promiscuous mode [ 334.984305][ T4059] netlink: 'syz.9.13668': attribute type 1 has an invalid length. [ 334.992351][ T4059] netlink: 224 bytes leftover after parsing attributes in process `syz.9.13668'. [ 335.021771][ T4058] hub 2-0:1.0: USB hub found [ 335.050292][ T4058] hub 2-0:1.0: 8 ports detected [ 335.085664][ T4075] smc: net device bond0 applied user defined pnetid SYZ2 [ 335.093162][ T4075] smc: net device bond0 erased user defined pnetid SYZ2 [ 335.337544][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13690'. [ 335.352308][ T4108] pimreg: entered allmulticast mode [ 335.358080][ T4104] IPVS: Error joining to the multicast group [ 335.358454][ T4107] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13693'. [ 335.366685][ T4108] pimreg: left allmulticast mode [ 335.448200][ T4125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13698'. [ 335.504202][ T4125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.529446][ T4122] lo speed is unknown, defaulting to 1000 [ 335.535722][ T4122] lo speed is unknown, defaulting to 1000 [ 335.561353][ T4125] bond1: (slave batadv1): Opening slave failed [ 335.704862][ T4154] netlink: 'syz.2.13710': attribute type 21 has an invalid length. [ 336.067524][ T4197] loop0: detected capacity change from 0 to 512 [ 336.078859][ T4197] EXT4-fs: test_dummy_encryption option not supported [ 336.408305][ T4232] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 336.478244][ T4245] netlink: 'syz.6.13749': attribute type 30 has an invalid length. [ 336.628107][ T4270] __nla_validate_parse: 3 callbacks suppressed [ 336.628124][ T4270] netlink: 580 bytes leftover after parsing attributes in process `syz.9.13748'. [ 336.992670][ T4346] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 337.000723][ T4346] SELinux: failed to load policy [ 337.519331][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13807'. [ 337.595241][ T4439] lo speed is unknown, defaulting to 1000 [ 337.602526][ T4439] lo speed is unknown, defaulting to 1000 [ 337.840438][ T4485] random: crng reseeded on system resumption [ 337.939624][ T4503] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 337.963399][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13842'. [ 337.972704][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13842'. [ 337.993136][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13842'. [ 338.002321][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13842'. [ 338.031986][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13842'. [ 338.041244][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13842'. [ 338.075035][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13846'. [ 338.323406][ T4548] lo speed is unknown, defaulting to 1000 [ 338.329508][ T4548] lo speed is unknown, defaulting to 1000 [ 338.346334][ T4551] loop0: detected capacity change from 0 to 512 [ 338.353109][ T4551] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 338.733239][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 338.733254][ T29] audit: type=1326 audit(1754977404.003:16520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.765276][ T29] audit: type=1326 audit(1754977404.003:16521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.790137][ T29] audit: type=1326 audit(1754977404.003:16522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.814367][ T29] audit: type=1326 audit(1754977404.003:16523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.838276][ T29] audit: type=1326 audit(1754977404.003:16524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.861936][ T29] audit: type=1326 audit(1754977404.003:16525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.885589][ T29] audit: type=1326 audit(1754977404.003:16526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.909253][ T29] audit: type=1326 audit(1754977404.003:16527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.932998][ T29] audit: type=1326 audit(1754977404.003:16528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 338.956586][ T29] audit: type=1326 audit(1754977404.045:16529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.13875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93c1ebe9 code=0x7ffc0000 [ 339.230703][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13893'. [ 339.257919][ T4625] IPVS: Error joining to the multicast group [ 339.558641][ T4684] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 339.566916][ T4688] SELinux: security_context_str_to_sid () failed with errno=-22 [ 340.392024][ T4763] SELinux: unknown common r [ 340.396804][ T4763] SELinux: failed to load policy [ 340.414060][ T4765] 0X: renamed from caif0 [ 340.420873][ T4765] 0X: entered allmulticast mode [ 340.426146][ T4765] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 340.482222][ T4773] netlink: 'syz.0.13961': attribute type 12 has an invalid length. [ 340.490630][ T4773] netlink: 'syz.0.13961': attribute type 29 has an invalid length. [ 340.498655][ T4773] netlink: 'syz.0.13961': attribute type 2 has an invalid length. [ 340.506522][ T4773] netlink: 'syz.0.13961': attribute type 3 has an invalid length. [ 340.597699][ T4794] netlink: 'syz.2.13970': attribute type 13 has an invalid length. [ 340.606289][ T4794] netlink: 'syz.2.13970': attribute type 17 has an invalid length. [ 340.671165][ T4794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.850599][ T4835] ipvlan2: entered promiscuous mode [ 340.858183][ T4835] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.867081][ T4835] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 341.459275][ T4898] netlink: '+}[@': attribute type 1 has an invalid length. [ 341.570337][ T4908] syzkaller1: entered promiscuous mode [ 341.575864][ T4908] syzkaller1: entered allmulticast mode [ 341.658048][ T4912] __nla_validate_parse: 4 callbacks suppressed [ 341.658061][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14022'. [ 341.998860][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14034'. [ 342.206754][ T4968] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 342.235623][ T4975] netlink: 'syz.6.14050': attribute type 1 has an invalid length. [ 343.070833][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14062'. [ 343.156847][ T5014] SELinux: failed to load policy [ 343.269761][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14076'. [ 343.333734][T16538] hid_parser_main: 49 callbacks suppressed [ 343.333751][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 343.347379][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 343.360720][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 343.368507][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 343.376230][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 343.382440][ T5050] 9pnet_fd: Insufficient options for proto=fd [ 343.383926][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 343.397596][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 343.405283][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 343.413162][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 343.420848][T16538] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 343.437751][T16538] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 343.473295][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14096'. [ 343.513191][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14098'. [ 343.548298][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 343.548311][ T29] audit: type=1400 audit(1754977409.099:16955): avc: denied { read } for pid=5073 comm="syz.0.14100" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 343.578943][ T29] audit: type=1400 audit(1754977409.099:16956): avc: denied { open } for pid=5073 comm="syz.0.14100" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 343.605017][ T29] audit: type=1400 audit(1754977409.163:16957): avc: denied { ioctl } for pid=5073 comm="syz.0.14100" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 343.632640][ T29] audit: type=1400 audit(1754977409.163:16958): avc: denied { write } for pid=5075 comm="syz.9.14086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 343.709857][ T5091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14095'. [ 343.720506][ T5091] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14095'. [ 343.761924][ T5082] SELinux: failed to load policy [ 343.819814][ T29] audit: type=1326 audit(1754977409.374:16959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d9f615ba7 code=0x7ffc0000 [ 343.870735][ T29] audit: type=1326 audit(1754977409.384:16960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d9f5badd9 code=0x7ffc0000 [ 343.886428][ T5095] lo speed is unknown, defaulting to 1000 [ 343.894434][ T29] audit: type=1326 audit(1754977409.384:16961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 343.903447][ T5095] lo speed is unknown, defaulting to 1000 [ 343.923749][ T29] audit: type=1326 audit(1754977409.384:16962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d9f615ba7 code=0x7ffc0000 [ 343.952953][ T29] audit: type=1326 audit(1754977409.384:16963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d9f5badd9 code=0x7ffc0000 [ 343.976491][ T29] audit: type=1326 audit(1754977409.384:16964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.4.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2d9f615ba7 code=0x7ffc0000 [ 344.032579][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14102'. [ 344.284398][T26094] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 344.345344][ T5149] syz.2.14124: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 344.360015][ T5149] CPU: 1 UID: 0 PID: 5149 Comm: syz.2.14124 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 344.360051][ T5149] Tainted: [W]=WARN [ 344.360058][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.360070][ T5149] Call Trace: [ 344.360078][ T5149] [ 344.360096][ T5149] __dump_stack+0x1d/0x30 [ 344.360119][ T5149] dump_stack_lvl+0xe8/0x140 [ 344.360139][ T5149] dump_stack+0x15/0x1b [ 344.360154][ T5149] warn_alloc+0x12b/0x1a0 [ 344.360179][ T5149] ? audit_log_end+0x1d7/0x1f0 [ 344.360324][ T5149] ? audit_log_end+0x1d7/0x1f0 [ 344.360352][ T5149] __vmalloc_node_range_noprof+0x9c/0xe00 [ 344.360386][ T5149] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 344.360473][ T5149] ? __rcu_read_unlock+0x4f/0x70 [ 344.360492][ T5149] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 344.360510][ T5149] ? perf_cgroup_switch+0x10c/0x480 [ 344.360526][ T5149] ? update_load_avg+0x1da/0x820 [ 344.360596][ T5149] ? __list_add_valid_or_report+0x38/0xe0 [ 344.360621][ T5149] ? should_fail_ex+0x30/0x280 [ 344.360717][ T5149] ? xskq_create+0x36/0xe0 [ 344.360770][ T5149] vmalloc_user_noprof+0x7d/0xb0 [ 344.360795][ T5149] ? xskq_create+0x80/0xe0 [ 344.360844][ T5149] xskq_create+0x80/0xe0 [ 344.360868][ T5149] xsk_init_queue+0x95/0xf0 [ 344.360963][ T5149] xsk_setsockopt+0x477/0x640 [ 344.360987][ T5149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.361010][ T5149] __sys_setsockopt+0x184/0x200 [ 344.361029][ T5149] __x64_sys_setsockopt+0x64/0x80 [ 344.361073][ T5149] x64_sys_call+0x20ec/0x2ff0 [ 344.361091][ T5149] do_syscall_64+0xd2/0x200 [ 344.361117][ T5149] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 344.361138][ T5149] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 344.361225][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.361244][ T5149] RIP: 0033:0x7f7dbb29ebe9 [ 344.361257][ T5149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.361272][ T5149] RSP: 002b:00007f7db9d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.361369][ T5149] RAX: ffffffffffffffda RBX: 00007f7dbb4c5fa0 RCX: 00007f7dbb29ebe9 [ 344.361385][ T5149] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 344.361397][ T5149] RBP: 00007f7dbb321e19 R08: 0000000000000004 R09: 0000000000000000 [ 344.361408][ T5149] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 344.361419][ T5149] R13: 00007f7dbb4c6038 R14: 00007f7dbb4c5fa0 R15: 00007ffd2bf4bcf8 [ 344.361435][ T5149] [ 344.361479][ T5149] Mem-Info: [ 344.378071][ T5154] batadv_slave_1: entered promiscuous mode [ 344.379390][ T5149] active_anon:13298 inactive_anon:91 isolated_anon:0 [ 344.379390][ T5149] active_file:9268 inactive_file:20852 isolated_file:0 [ 344.379390][ T5149] unevictable:0 dirty:210 writeback:0 [ 344.379390][ T5149] slab_reclaimable:3796 slab_unreclaimable:54060 [ 344.379390][ T5149] mapped:28828 shmem:9044 pagetables:1216 [ 344.379390][ T5149] sec_pagetables:0 bounce:0 [ 344.379390][ T5149] kernel_misc_reclaimable:0 [ 344.379390][ T5149] free:1828055 free_pcp:10655 free_cma:0 [ 344.398006][ T5154] batadv0: entered promiscuous mode [ 344.400526][ T5149] Node 0 active_anon:53192kB inactive_anon:364kB active_file:37072kB inactive_file:83408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115312kB dirty:840kB writeback:0kB shmem:36176kB kernel_stack:5056kB pagetables:4980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.409978][ T5152] batadv0: left promiscuous mode [ 344.413888][ T5149] Node 0 [ 344.418794][ T5152] batadv_slave_1: left promiscuous mode [ 344.423403][ T5149] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.740997][ T5149] lowmem_reserve[]: 0 2883 7862 7862 [ 344.746306][ T5149] Node 0 DMA32 free:2949316kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952848kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 344.776775][ T5149] lowmem_reserve[]: 0 0 4978 4978 [ 344.781834][ T5149] Node 0 Normal free:4347544kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53424kB inactive_anon:364kB active_file:37072kB inactive_file:83408kB unevictable:0kB writepending:840kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:38656kB local_pcp:17296kB free_cma:0kB [ 344.814106][ T5149] lowmem_reserve[]: 0 0 0 0 [ 344.818661][ T5149] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.831560][ T5149] Node 0 DMA32: 5*4kB (M) 4*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949316kB [ 344.847963][ T5149] Node 0 Normal: 1212*4kB (UM) 1636*8kB (UM) 807*16kB (UM) 302*32kB (UME) 163*64kB (UM) 175*128kB (UME) 120*256kB (UME) 38*512kB (UME) 29*1024kB (UME) 22*2048kB (UME) 1013*4096kB (UM) = 4347520kB [ 344.867760][ T5149] Node 0 hugepages_total=6 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 344.877209][ T5149] 39329 total pagecache pages [ 344.881879][ T5149] 171 pages in swap cache [ 344.886359][ T5149] Free swap = 124312kB [ 344.890529][ T5149] Total swap = 124996kB [ 344.894685][ T5149] 2097051 pages RAM [ 344.898542][ T5149] 0 pages HighMem/MovableOnly [ 344.903228][ T5149] 80439 pages reserved [ 344.964528][ T5169] 9pnet_fd: Insufficient options for proto=fd [ 345.079032][ T5186] netlink: 44 bytes leftover after parsing attributes in process `syz.9.14138'. [ 345.117541][ T5196] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 345.188860][ T5212] sctp: [Deprecated]: syz.9.14153 (pid 5212) Use of int in maxseg socket option. [ 345.188860][ T5212] Use struct sctp_assoc_value instead [ 346.155657][ T5258] lo speed is unknown, defaulting to 1000 [ 346.163737][ T5258] lo speed is unknown, defaulting to 1000 [ 346.413993][ T5267] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 346.484540][ T5265] lo speed is unknown, defaulting to 1000 [ 346.500232][ T5265] lo speed is unknown, defaulting to 1000 [ 346.538199][ T5272] hub 2-0:1.0: USB hub found [ 346.545835][ T5272] hub 2-0:1.0: 8 ports detected [ 346.653353][ T5292] netlink: 'syz.0.14199': attribute type 1 has an invalid length. [ 346.683933][ T5292] bond2: entered promiscuous mode [ 346.689281][ T5292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.737973][ T5292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.764766][ T5292] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 346.775133][ T5292] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 346.792492][ T5292] bond2: (slave ip6gre1): making interface the new active one [ 346.800031][ T5292] ip6gre1: entered promiscuous mode [ 346.824474][ T5292] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 346.917925][ T5294] lo speed is unknown, defaulting to 1000 [ 346.940239][ T5294] lo speed is unknown, defaulting to 1000 [ 347.499169][ T5356] __nla_validate_parse: 1 callbacks suppressed [ 347.499186][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14214'. [ 347.576707][ T5353] lo speed is unknown, defaulting to 1000 [ 347.583010][ T5353] lo speed is unknown, defaulting to 1000 [ 347.756701][ T5360] lo speed is unknown, defaulting to 1000 [ 347.781470][ T5360] lo speed is unknown, defaulting to 1000 [ 347.901506][ T5378] netlink: 'syz.0.14225': attribute type 30 has an invalid length. [ 348.291306][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 348.291322][ T29] audit: type=1400 audit(1754977414.108:17379): avc: denied { name_bind } for pid=5404 comm="syz.6.14240" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 348.382868][ T29] audit: type=1400 audit(1754977414.108:17380): avc: denied { node_bind } for pid=5404 comm="syz.6.14240" saddr=::ffff:0.0.0.0 src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 348.405726][ T29] audit: type=1326 audit(1754977414.150:17381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.14241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 348.429311][ T29] audit: type=1326 audit(1754977414.150:17382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.14241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 348.452929][ T29] audit: type=1326 audit(1754977414.171:17383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.14241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 348.476864][ T29] audit: type=1326 audit(1754977414.171:17384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.14241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 348.500770][ T29] audit: type=1326 audit(1754977414.171:17385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.14241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 348.524450][ T29] audit: type=1326 audit(1754977414.171:17386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.14241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 348.548019][ T29] audit: type=1326 audit(1754977414.171:17387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 348.571162][ T29] audit: type=1326 audit(1754977414.171:17388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 348.604389][ T5416] veth3: entered promiscuous mode [ 348.763770][ T5434] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 348.764975][ T5437] netlink: 'syz.4.14253': attribute type 1 has an invalid length. [ 348.779303][ T5437] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14253'. [ 348.785250][ T5434] SELinux: failed to load policy [ 348.794477][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14252'. [ 348.871765][ T5436] lo speed is unknown, defaulting to 1000 [ 348.877905][ T5436] lo speed is unknown, defaulting to 1000 [ 349.179189][ T5457] smc: net device bond0 applied user defined pnetid SYZ2 [ 349.206162][ T5457] smc: net device bond0 erased user defined pnetid SYZ2 [ 349.312296][ T5471] lo speed is unknown, defaulting to 1000 [ 349.319936][ T5471] lo speed is unknown, defaulting to 1000 [ 349.474918][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14274'. [ 349.491683][ T5484] IPVS: Error joining to the multicast group [ 349.599393][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14285'. [ 349.644872][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14287'. [ 349.661228][ T5508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.676469][ T5508] bond1: (slave batadv1): Opening slave failed [ 350.396892][ T5561] netlink: 204 bytes leftover after parsing attributes in process `syz.6.14320'. [ 350.513361][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14310'. [ 350.611264][ T5570] lo speed is unknown, defaulting to 1000 [ 350.623381][ T5570] lo speed is unknown, defaulting to 1000 [ 350.687394][ T5583] netlink: 'syz.9.14316': attribute type 21 has an invalid length. [ 350.898950][ T5604] netlink: 76 bytes leftover after parsing attributes in process `syz.6.14328'. [ 350.908556][ T7505] bridge_slave_1: left allmulticast mode [ 350.914213][ T7505] bridge_slave_1: left promiscuous mode [ 350.919959][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.938490][ T7505] bridge_slave_0: left allmulticast mode [ 350.944508][ T7505] bridge_slave_0: left promiscuous mode [ 350.950248][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.074232][ T7505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.093097][ T7505] bond_slave_0: left promiscuous mode [ 351.102570][ T7505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.116379][ T5622] netlink: 'syz.6.14334': attribute type 1 has an invalid length. [ 351.124432][ T5622] netlink: 224 bytes leftover after parsing attributes in process `syz.6.14334'. [ 351.134038][ T7505] bond_slave_1: left promiscuous mode [ 351.139734][ T7505] bond0 (unregistering): Released all slaves [ 351.149586][ T7505] bond1 (unregistering): (slave bond2): Releasing backup interface [ 351.158697][ T7505] bond2 (unregistering): left promiscuous mode [ 351.165632][ T7505] bond1 (unregistering): Released all slaves [ 351.176119][ T7505] bond2 (unregistering): Released all slaves [ 351.204474][ T5620] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 351.247381][ T5612] lo speed is unknown, defaulting to 1000 [ 351.253991][ T5612] lo speed is unknown, defaulting to 1000 [ 351.310765][ T7505] hsr_slave_0: left promiscuous mode [ 351.317695][ T7505] hsr_slave_1: left promiscuous mode [ 351.345951][ T7505] team0 (unregistering): Port device team_slave_1 removed [ 351.361460][ T7505] team0 (unregistering): Port device team_slave_0 removed [ 351.580474][ T7505] IPVS: stop unused estimator thread 0... [ 352.122544][ T5655] lo speed is unknown, defaulting to 1000 [ 352.180231][ T5677] netlink: 'syz.2.14356': attribute type 1 has an invalid length. [ 353.028136][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 353.028151][ T29] audit: type=1400 audit(1754977419.114:17587): avc: denied { name_connect } for pid=5691 comm="syz.9.14365" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 353.103281][ T29] audit: type=1400 audit(1754977419.146:17588): avc: denied { sqpoll } for pid=5701 comm="syz.9.14367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 353.122864][ T29] audit: type=1400 audit(1754977419.156:17589): avc: denied { watch } for pid=5695 comm="syz.2.14364" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 353.167668][ T29] audit: type=1326 audit(1754977419.220:17590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 353.191400][ T29] audit: type=1326 audit(1754977419.220:17591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 353.215082][ T29] audit: type=1326 audit(1754977419.230:17592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 353.238749][ T29] audit: type=1326 audit(1754977419.230:17593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 353.262472][ T29] audit: type=1326 audit(1754977419.230:17594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 353.286155][ T29] audit: type=1400 audit(1754977419.251:17595): avc: denied { write } for pid=5709 comm="syz.9.14371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 353.306008][ T29] audit: type=1326 audit(1754977419.251:17596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.4.14370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 353.420545][ T5726] __nla_validate_parse: 7 callbacks suppressed [ 353.420560][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14377'. [ 353.455536][ T5726] IPVS: Error joining to the multicast group [ 353.929965][ T5801] netlink: 'syz.4.14387': attribute type 30 has an invalid length. [ 353.941518][ T5800] netlink: 'syz.0.14396': attribute type 1 has an invalid length. [ 353.949535][ T5800] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14396'. [ 354.272144][ T5857] netlink: 'syz.9.14400': attribute type 30 has an invalid length. [ 354.943691][ T5960] SELinux: security_context_str_to_sid () failed with errno=-22 [ 355.558744][ T6029] netlink: 'syz.4.14438': attribute type 13 has an invalid length. [ 355.566767][ T6029] netlink: 'syz.4.14438': attribute type 17 has an invalid length. [ 355.643621][ T6029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.975974][ T6080] SELinux: unknown common r [ 355.980801][ T6080] SELinux: failed to load policy [ 356.156123][ T6117] random: crng reseeded on system resumption [ 356.528509][ T6155] random: crng reseeded on system resumption [ 356.641948][ T6179] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 356.751416][ T6195] random: crng reseeded on system resumption [ 356.933024][ T6217] lo speed is unknown, defaulting to 1000 [ 357.087593][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14493'. [ 357.308133][ T6278] random: crng reseeded on system resumption [ 357.445919][ T6296] lo speed is unknown, defaulting to 1000 [ 357.476550][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14523'. [ 357.704789][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14519'. [ 357.714186][ T6344] IPVS: Error joining to the multicast group [ 357.830602][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 357.830674][ T29] audit: type=1400 audit(1754977424.181:17810): avc: denied { mounton } for pid=6365 comm="syz.2.14524" path="/259/file0" dev="tmpfs" ino=1344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 358.147707][ T29] audit: type=1400 audit(1754977424.519:17811): avc: denied { setopt } for pid=6419 comm="syz.2.14539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.178185][ T29] audit: type=1400 audit(1754977424.540:17812): avc: denied { write } for pid=6419 comm="syz.2.14539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.391964][ T29] audit: type=1400 audit(1754977424.772:17813): avc: denied { create } for pid=6455 comm="syz.9.14533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 358.417893][ T29] audit: type=1400 audit(1754977424.772:17814): avc: denied { connect } for pid=6455 comm="syz.9.14533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 358.438839][ T29] audit: type=1400 audit(1754977424.804:17815): avc: denied { create } for pid=6460 comm="syz.4.14537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.458625][ T29] audit: type=1400 audit(1754977424.804:17816): avc: denied { write } for pid=6460 comm="syz.4.14537" path="socket:[123572]" dev="sockfs" ino=123572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.495809][ T6463] SELinux: security_context_str_to_sid () failed with errno=-22 [ 358.528252][ T29] audit: type=1400 audit(1754977424.846:17817): avc: denied { write } for pid=6455 comm="syz.9.14533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 358.547972][ T29] audit: type=1400 audit(1754977424.846:17818): avc: denied { setopt } for pid=6460 comm="syz.4.14537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.567915][ T29] audit: type=1400 audit(1754977424.899:17819): avc: denied { setopt } for pid=6467 comm="syz.2.14543" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.448494][ T6524] ipvlan2: entered promiscuous mode [ 359.454365][ T6524] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 359.463175][ T6524] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 359.934516][ T6612] ipvlan2: entered promiscuous mode [ 359.944333][ T6612] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 359.952412][ T6612] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 360.144827][ T6637] netlink: 'syz.6.14582': attribute type 13 has an invalid length. [ 360.152984][ T6637] netlink: 'syz.6.14582': attribute type 17 has an invalid length. [ 360.226758][ T6637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.244080][ T3395] lo speed is unknown, defaulting to 1000 [ 361.291975][ T6726] raw_sendmsg: syz.2.14595 forgot to set AF_INET. Fix it! [ 361.301402][ T6726] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 361.310610][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.9.14596'. [ 361.498291][ T6744] openvswitch: netlink: Message has 6 unknown bytes. [ 361.512846][ T6741] SELinux: unknown common r [ 361.517823][ T6741] SELinux: failed to load policy [ 361.588123][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14610'. [ 361.598348][ T6757] IPVS: Error joining to the multicast group [ 361.621981][ T6761] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 361.621981][ T6761] program syz.0.14611 not setting count and/or reply_len properly [ 361.915257][ T7516] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 362.362159][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14627'. [ 362.372824][ T6782] openvswitch: netlink: Message has 6 unknown bytes. [ 362.470399][ T6799] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 362.470399][ T6799] program syz.6.14624 not setting count and/or reply_len properly [ 362.699112][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 362.699130][ T29] audit: type=1400 audit(1754977429.320:17855): avc: denied { name_connect } for pid=6807 comm="syz.9.14629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 362.739583][ T29] audit: type=1400 audit(1754977429.352:17856): avc: denied { name_bind } for pid=6814 comm="syz.0.14630" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 362.850101][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.9.14633'. [ 362.869217][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14632'. [ 362.961643][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14640'. [ 362.971347][ T6835] IPVS: Error joining to the multicast group [ 362.984743][ T29] audit: type=1326 audit(1754977429.615:17857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.4.14641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 363.022500][ T29] audit: type=1326 audit(1754977429.647:17858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.4.14641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 363.035696][ T6845] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14646'. [ 363.046213][ T29] audit: type=1326 audit(1754977429.647:17859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.4.14641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 363.078975][ T29] audit: type=1326 audit(1754977429.647:17860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.4.14641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 363.102577][ T29] audit: type=1326 audit(1754977429.647:17861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.4.14641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 363.126275][ T29] audit: type=1326 audit(1754977429.647:17862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.4.14641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 363.150157][ T29] audit: type=1326 audit(1754977429.647:17863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.4.14641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 363.173769][ T29] audit: type=1326 audit(1754977429.647:17864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.4.14641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f61ebe9 code=0x7ffc0000 [ 363.682549][ T6879] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14660'. [ 363.760191][ T6887] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 364.121033][ T7499] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 364.286629][ T6926] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 364.994644][ T6981] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14708'. [ 365.061835][ T7505] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 365.812550][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14739'. [ 366.082638][ T7073] hub 6-0:1.0: USB hub found [ 366.092917][ T7073] hub 6-0:1.0: 8 ports detected [ 366.554839][ T7140] block device autoloading is deprecated and will be removed. [ 366.653990][ T7148] hub 6-0:1.0: USB hub found [ 366.668235][ T7148] hub 6-0:1.0: 8 ports detected [ 366.806821][ T7176] block device autoloading is deprecated and will be removed. [ 366.826951][ T7174] loop0: detected capacity change from 0 to 1024 [ 366.882469][ T7174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.997327][ T2812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.029412][ T7200] __nla_validate_parse: 3 callbacks suppressed [ 367.029426][ T7200] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14803'. [ 367.044957][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14803'. [ 367.054023][ T7200] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14803'. [ 367.063224][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14803'. [ 367.072292][ T7200] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14803'. [ 367.187243][ T7221] block device autoloading is deprecated and will be removed. [ 367.525313][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 367.525329][ T29] audit: type=1326 audit(1754977434.404:17940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.570145][ T7267] lo speed is unknown, defaulting to 1000 [ 367.614337][ T29] audit: type=1326 audit(1754977434.446:17941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.638072][ T29] audit: type=1326 audit(1754977434.446:17942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.661666][ T29] audit: type=1326 audit(1754977434.446:17943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.685399][ T29] audit: type=1326 audit(1754977434.446:17944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.708992][ T29] audit: type=1326 audit(1754977434.446:17945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.732768][ T29] audit: type=1326 audit(1754977434.446:17946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.756445][ T29] audit: type=1326 audit(1754977434.446:17947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.780206][ T29] audit: type=1326 audit(1754977434.446:17948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.803844][ T29] audit: type=1326 audit(1754977434.446:17949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.14840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f7dbb29ebe9 code=0x7ffc0000 [ 367.958348][ T7301] bridge0: entered promiscuous mode [ 367.971622][ T7301] bridge0: port 3(macsec1) entered blocking state [ 367.978254][ T7301] bridge0: port 3(macsec1) entered disabled state [ 368.022477][ T7301] macsec1: entered allmulticast mode [ 368.028051][ T7301] bridge0: entered allmulticast mode [ 368.043899][ T7301] macsec1: left allmulticast mode [ 368.049011][ T7301] bridge0: left allmulticast mode [ 368.067032][ T7301] bridge0: left promiscuous mode [ 368.096376][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14859'. [ 368.108938][ T7306] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 368.114935][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14859'. [ 368.209462][ T7333] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 368.332960][ T7352] bridge0: entered promiscuous mode [ 368.351845][ T7352] bridge0: port 1(macsec0) entered blocking state [ 368.358368][ T7352] bridge0: port 1(macsec0) entered disabled state [ 368.377717][ T7352] macsec0: entered allmulticast mode [ 368.383225][ T7352] bridge0: entered allmulticast mode [ 368.390518][ T7352] macsec0: left allmulticast mode [ 368.395571][ T7352] bridge0: left allmulticast mode [ 368.401331][ T7352] bridge0: left promiscuous mode [ 368.440809][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14890'. [ 368.455739][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14890'. [ 368.460113][ T7354] lo speed is unknown, defaulting to 1000 [ 368.679987][ T7395] bridge0: entered promiscuous mode [ 368.690197][ T7395] bridge0: port 3(macsec0) entered blocking state [ 368.697257][ T7395] bridge0: port 3(macsec0) entered disabled state [ 368.710691][ T7395] macsec0: entered allmulticast mode [ 368.716055][ T7395] bridge0: entered allmulticast mode [ 368.723898][ T7395] macsec0: left allmulticast mode [ 368.728971][ T7395] bridge0: left allmulticast mode [ 368.747713][ T7395] bridge0: left promiscuous mode [ 368.753941][ T7407] blktrace: Concurrent blktraces are not allowed on loop0 [ 368.954833][ T7418] lo speed is unknown, defaulting to 1000 [ 369.009822][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14911'. [ 369.136696][ T7453] block device autoloading is deprecated and will be removed. [ 369.333456][ T7535] lo speed is unknown, defaulting to 1000 [ 369.464218][ T7547] bridge0: entered promiscuous mode [ 369.471268][ T7547] bridge0: port 3(macsec1) entered blocking state [ 369.477750][ T7547] bridge0: port 3(macsec1) entered disabled state [ 369.484467][ T7547] macsec1: entered allmulticast mode [ 369.489936][ T7547] bridge0: entered allmulticast mode [ 369.496330][ T7547] macsec1: left allmulticast mode [ 369.501484][ T7547] bridge0: left allmulticast mode [ 369.508500][ T7547] bridge0: left promiscuous mode [ 369.548593][ T7555] tipc: Started in network mode [ 369.553577][ T7555] tipc: Node identity ac14140f, cluster identity 4711 [ 369.562593][ T7555] tipc: New replicast peer: 255.255.255.255 [ 369.568741][ T7555] tipc: Enabled bearer , priority 10 [ 369.585293][ T7559] block device autoloading is deprecated and will be removed. [ 369.758130][ T7582] lo speed is unknown, defaulting to 1000 [ 369.940296][ T7613] blktrace: Concurrent blktraces are not allowed on loop4 [ 370.094436][ T7639] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 370.204679][ T7658] tipc: Started in network mode [ 370.209716][ T7658] tipc: Node identity ac14140f, cluster identity 4711 [ 370.216734][ T7658] tipc: New replicast peer: 255.255.255.255 [ 370.222987][ T7658] tipc: Enabled bearer , priority 10 [ 370.585232][ T7666] 9pnet: p9_errstr2errno: server reported unknown error W~uZz&4 [ 370.626559][T16538] tipc: Node number set to 2886997007 [ 370.711516][ T7673] syz.9.14986 (7673) used greatest stack depth: 9208 bytes left [ 370.890637][ T7696] loop4: detected capacity change from 0 to 512 [ 370.897990][ T7696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 370.915673][ T7696] EXT4-fs (loop4): 1 truncate cleaned up [ 370.925785][ T7696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.939071][ T7699] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 371.014319][ T7711] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 371.043752][ T2825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.063848][ T7715] 9pnet: p9_errstr2errno: server reported unknown error W~uZz&4 [ 371.231809][ T7745] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 371.269104][ T7750] 9pnet: p9_errstr2errno: server reported unknown error W~uZz&4 [ 371.285869][T26096] tipc: Node number set to 2886997007 [ 371.925712][ T7786] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 371.940205][ T7787] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 372.130524][ T7812] bridge0: port 3(batadv1) entered blocking state [ 372.137175][ T7812] bridge0: port 3(batadv1) entered disabled state [ 372.146143][ T7812] batadv1: entered allmulticast mode [ 372.152165][ T7812] batadv1: entered promiscuous mode [ 372.183356][ T7818] loop4: detected capacity change from 0 to 2048 [ 372.204229][ T7822] __nla_validate_parse: 4 callbacks suppressed [ 372.204285][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15050'. [ 372.213584][ T7818] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.219617][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15050'. [ 372.265905][ T2825] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 372.340591][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 372.340607][ T29] audit: type=1326 audit(374.245:18145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.385205][ T29] audit: type=1326 audit(374.245:18146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.408532][ T29] audit: type=1326 audit(374.245:18147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.431652][ T29] audit: type=1326 audit(374.287:18148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.454635][ T29] audit: type=1326 audit(374.287:18149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.478174][ T29] audit: type=1326 audit(374.297:18150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.501312][ T29] audit: type=1326 audit(374.297:18151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.524560][ T29] audit: type=1326 audit(374.297:18152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.547617][ T29] audit: type=1326 audit(374.297:18153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.570590][ T29] audit: type=1326 audit(374.297:18154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.6.15057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 372.606702][ T7843] bridge0: port 3(batadv1) entered blocking state [ 372.613550][ T7843] bridge0: port 3(batadv1) entered disabled state [ 372.617303][ T7516] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 372.629310][ T7516] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 372.629340][ T7843] batadv1: entered allmulticast mode [ 372.644528][ T7843] batadv1: entered promiscuous mode [ 372.746998][ T7861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15069'. [ 372.757691][ T7861] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 372.799173][ T7867] block device autoloading is deprecated and will be removed. [ 372.821281][ T7869] SELinux: Context system_u:object is not valid (left unmapped). [ 372.863297][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15077'. [ 372.872350][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15077'. [ 372.894023][ T7877] block device autoloading is deprecated and will be removed. [ 373.085147][ T7464] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 373.094418][ T7464] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 373.119096][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15092'. [ 373.128361][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15092'. [ 373.675990][ T7930] loop4: detected capacity change from 0 to 128 [ 373.738823][ T7936] bridge0: port 1(batadv1) entered blocking state [ 373.745395][ T7936] bridge0: port 1(batadv1) entered disabled state [ 373.757874][ T7936] batadv1: entered allmulticast mode [ 373.763988][ T7936] batadv1: entered promiscuous mode [ 373.814739][ T7948] netlink: 'syz.6.15120': attribute type 3 has an invalid length. [ 373.881804][ T7956] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15125'. [ 374.025429][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15126'. [ 374.057100][ T7986] netlink: 'syz.4.15128': attribute type 1 has an invalid length. [ 374.065035][ T7986] netlink: 'syz.4.15128': attribute type 4 has an invalid length. [ 374.072930][ T7986] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15128'. [ 374.218914][ T7457] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 374.228135][ T7457] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 375.085255][ T8044] loop4: detected capacity change from 0 to 512 [ 375.093436][ T8044] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.102193][ T8044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 375.126476][ T8044] EXT4-fs (loop4): 1 truncate cleaned up [ 375.142793][ T8044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.916965][ T2825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.060172][ T8134] lo speed is unknown, defaulting to 1000 [ 376.208960][ T8156] random: crng reseeded on system resumption [ 376.469170][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.469240][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.002104][ T8228] random: crng reseeded on system resumption [ 377.115664][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 377.115680][ T29] audit: type=1326 audit(379.263:18323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe377a85ba7 code=0x7ffc0000 [ 377.181986][ T29] audit: type=1326 audit(379.263:18324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe377a2add9 code=0x7ffc0000 [ 377.205043][ T29] audit: type=1326 audit(379.263:18325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe377a85ba7 code=0x7ffc0000 [ 377.228107][ T29] audit: type=1326 audit(379.263:18326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe377a2add9 code=0x7ffc0000 [ 377.251182][ T29] audit: type=1326 audit(379.263:18327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 377.274479][ T29] audit: type=1326 audit(379.263:18328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 377.297580][ T29] audit: type=1326 audit(379.263:18329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 377.320686][ T29] audit: type=1326 audit(379.263:18330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 377.343783][ T29] audit: type=1326 audit(379.263:18331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.9.15242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe377a8ebe9 code=0x7ffc0000 [ 377.416747][ T8244] lo speed is unknown, defaulting to 1000 [ 377.545287][ T29] audit: type=1326 audit(379.683:18332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7dbb295ba7 code=0x7ffc0000 [ 377.727754][ T3413] hid_parser_main: 22 callbacks suppressed [ 377.727770][ T3413] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 377.743662][ T3413] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.990706][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.001163][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.611561][ T8365] ALSA: seq fatal error: cannot create timer (-19) [ 379.668368][ T8376] netlink: 'syz.4.15306': attribute type 10 has an invalid length. [ 379.703196][ T8381] __nla_validate_parse: 5 callbacks suppressed [ 379.703212][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15309'. [ 379.705049][ T8376] team0: Port device dummy0 added [ 379.709465][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15309'. [ 379.746572][ T8376] netlink: 'syz.4.15306': attribute type 10 has an invalid length. [ 379.749342][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15309'. [ 379.763874][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15309'. [ 379.790563][ T8376] team0: Port device dummy0 removed [ 379.792337][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15309'. [ 379.804908][ T8381] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15309'. [ 379.826380][ T8376] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 380.006459][ T8403] loop4: detected capacity change from 0 to 512 [ 380.031646][ T8397] lo speed is unknown, defaulting to 1000 [ 380.048861][ T8403] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 380.057990][ T8403] EXT4-fs (loop4): orphan cleanup on readonly fs [ 380.077446][ T8403] EXT4-fs (loop4): 1 orphan inode deleted [ 380.083317][ T7496] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 1 [ 380.102405][ T8403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.141997][ T2825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.066578][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 382.066601][ T29] audit: type=1326 audit(384.449:18474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.15355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 382.103795][ T29] audit: type=1326 audit(384.491:18475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.15355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 382.127046][ T29] audit: type=1326 audit(384.491:18476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.15355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 382.150092][ T29] audit: type=1326 audit(384.491:18477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.15355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880ac4ebe9 code=0x7ffc0000 [ 382.196898][ T29] audit: type=1400 audit(384.585:18478): avc: denied { compute_member } for pid=8500 comm="syz.2.15360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 382.224983][ T8504] netlink: 'syz.2.15361': attribute type 10 has an invalid length. [ 382.239063][ T8504] team0: Port device dummy0 added [ 382.292401][ T8504] netlink: 'syz.2.15361': attribute type 10 has an invalid length. [ 382.308904][ T8504] team0: Port device dummy0 removed [ 382.325271][ T8504] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 382.583923][ T8527] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 382.583923][ T8527] program syz.6.15371 not setting count and/or reply_len properly [ 382.824356][ T8543] pim6reg: entered allmulticast mode [ 382.837352][ T8543] pim6reg: left allmulticast mode [ 382.872813][ T8545] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15380'. [ 383.205376][ T8569] pim6reg: entered allmulticast mode [ 383.216221][ T8569] pim6reg: left allmulticast mode [ 383.465296][ T8604] ================================================================== [ 383.473400][ T8604] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 383.480663][ T8604] [ 383.482965][ T8604] read-write to 0xffff888103703210 of 4 bytes by task 8602 on cpu 1: [ 383.491019][ T8604] io_issue_sqe+0x19c/0x970 [ 383.495500][ T8604] io_wq_submit_work+0x3f7/0x5f0 [ 383.500469][ T8604] io_worker_handle_work+0x44e/0x9b0 [ 383.505739][ T8604] io_wq_worker+0x22e/0x870 [ 383.510240][ T8604] ret_from_fork+0xda/0x150 [ 383.514740][ T8604] ret_from_fork_asm+0x1a/0x30 [ 383.519657][ T8604] [ 383.521957][ T8604] read to 0xffff888103703210 of 4 bytes by task 8604 on cpu 0: [ 383.529505][ T8604] io_flush_timeouts+0x56/0x1d0 [ 383.534333][ T8604] __io_commit_cqring_flush+0xeb/0x100 [ 383.539785][ T8604] io_issue_sqe+0x7cb/0x970 [ 383.544276][ T8604] io_wq_submit_work+0x3f7/0x5f0 [ 383.549328][ T8604] io_worker_handle_work+0x44e/0x9b0 [ 383.554602][ T8604] io_wq_worker+0x22e/0x870 [ 383.559093][ T8604] ret_from_fork+0xda/0x150 [ 383.563581][ T8604] ret_from_fork_asm+0x1a/0x30 [ 383.568333][ T8604] [ 383.570646][ T8604] value changed: 0x0000049b -> 0x0000049c [ 383.576335][ T8604] [ 383.578637][ T8604] Reported by Kernel Concurrency Sanitizer on: [ 383.584779][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: iou-wrk-8593 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 383.598920][ T8604] Tainted: [W]=WARN [ 383.602714][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.612847][ T8604] ==================================================================