last executing test programs: 4m30.551675312s ago: executing program 32 (id=3291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) 3m24.32010123s ago: executing program 33 (id=6352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 2m19.844956525s ago: executing program 34 (id=8726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getuid() 1m50.882754246s ago: executing program 5 (id=9813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd39}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) 1m50.773536965s ago: executing program 5 (id=9817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lstat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4004000) 1m50.735897098s ago: executing program 5 (id=9819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 1m50.708578931s ago: executing program 5 (id=9820): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m50.663919914s ago: executing program 5 (id=9822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m50.420728854s ago: executing program 5 (id=9831): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'tunl0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) 1m50.420134474s ago: executing program 35 (id=9831): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'tunl0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) 1m34.267968125s ago: executing program 8 (id=10311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) io_cancel(0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 1m34.173490703s ago: executing program 8 (id=10315): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) chmod(0x0, 0x4) 1m33.856935969s ago: executing program 8 (id=10321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1m33.664930865s ago: executing program 8 (id=10334): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m33.588707281s ago: executing program 8 (id=10326): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65}}]}}]}, 0x44}}, 0x20040054) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 1m33.512004627s ago: executing program 8 (id=10335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m33.47684996s ago: executing program 36 (id=10335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m7.112165641s ago: executing program 9 (id=11366): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 1m6.9950437s ago: executing program 9 (id=11371): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, r3) 1m6.946486794s ago: executing program 9 (id=11374): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=' ', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14"], 0x18, 0x20000080}}], 0x1, 0xc001) 1m6.888917929s ago: executing program 9 (id=11376): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m6.620111961s ago: executing program 9 (id=11383): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 1m6.26037423s ago: executing program 9 (id=11392): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r0, 0x20af, 0x6d82, 0x0, 0x0, 0x0) 1m6.26023052s ago: executing program 37 (id=11392): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r0, 0x20af, 0x6d82, 0x0, 0x0, 0x0) 1m1.166628033s ago: executing program 2 (id=11539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@acquire={0x16c, 0x17, 0x1, 0x2, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@multicast2}]}]}, 0x16c}}, 0x0) 1m1.125646717s ago: executing program 2 (id=11542): r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 1m0.669387824s ago: executing program 2 (id=11559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 1m0.645389805s ago: executing program 2 (id=11561): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000340)={0x0, 0x881c, 0x1, 0x2, 0x40000333, 0x0, r0}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/205, 0xcd}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m0.515894646s ago: executing program 2 (id=11566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009a40)=ANY=[@ANYBLOB="2800000002030104000000000000005b65b400090900020000000001300000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(r0) 1m0.272322066s ago: executing program 2 (id=11568): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000798600000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 1m0.272179306s ago: executing program 38 (id=11568): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000798600000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 28.107407248s ago: executing program 7 (id=12860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x7e08, 0x0) 28.048667703s ago: executing program 7 (id=12866): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x8, 0x0, 0xffffffffffffffff}}, 0x56) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 27.936370152s ago: executing program 7 (id=12871): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x40}, 0x18) unshare(0x26020400) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x34020000) 27.895005025s ago: executing program 7 (id=12875): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 27.853543478s ago: executing program 7 (id=12879): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 27.643852615s ago: executing program 7 (id=12888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0xfffffffffffffffe, 0x83501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 27.599740119s ago: executing program 39 (id=12888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0xfffffffffffffffe, 0x83501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 1.360462369s ago: executing program 6 (id=13819): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x5c3c636d, 0x4) syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) 1.246313498s ago: executing program 6 (id=13814): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 1.183374624s ago: executing program 6 (id=13816): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 939.770384ms ago: executing program 6 (id=13824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x32) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 884.520228ms ago: executing program 6 (id=13826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 732.347681ms ago: executing program 3 (id=13837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb28bd70000100000001"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 676.226815ms ago: executing program 1 (id=13840): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='=@w', 0x3}], 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 651.868217ms ago: executing program 0 (id=13841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 638.790878ms ago: executing program 3 (id=13842): r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 585.683712ms ago: executing program 4 (id=13844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) 529.089857ms ago: executing program 4 (id=13845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 520.568498ms ago: executing program 3 (id=13847): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 519.689328ms ago: executing program 0 (id=13858): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe00000fe}, 0x10) 500.525749ms ago: executing program 1 (id=13849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x848234f1c7d17d24) 466.949162ms ago: executing program 1 (id=13850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xcc, &(0x7f00000001c0)={@link_local, @random="50a241d5cde0", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "fbb2ea", 0x0, 0x33, 0xff, @rand_addr=' \x01\x00', @mcast2}}}}, 0x0) 466.679402ms ago: executing program 4 (id=13851): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b0000000000000000000000000000000000000003f0b571be4b285837898cc65dba", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 455.856623ms ago: executing program 0 (id=13852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 430.672935ms ago: executing program 0 (id=13853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 412.076286ms ago: executing program 0 (id=13854): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000021c0)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='stack\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 397.751147ms ago: executing program 1 (id=13855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000600)={0x0, 0xeed7}, 0x18) 397.236668ms ago: executing program 4 (id=13856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2) 377.50598ms ago: executing program 3 (id=13857): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) close(r1) 306.725195ms ago: executing program 1 (id=13859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x1}]}, 0x10) 185.831685ms ago: executing program 0 (id=13860): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) openat(0xffffffffffffff9c, 0x0, 0x80001, 0x0) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c7", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 185.637525ms ago: executing program 4 (id=13861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 128.242609ms ago: executing program 1 (id=13862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 107.579001ms ago: executing program 4 (id=13863): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ftruncate(r1, 0x81ff) 54.012906ms ago: executing program 3 (id=13864): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0x8) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r0, 0x401) 23.493448ms ago: executing program 3 (id=13865): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffffeff8, 0x0, 0x3, 0xff}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCMBIC(r2, 0x5417, 0x0) 0s ago: executing program 6 (id=13866): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): vc: denied { mount } for pid=30191 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 321.876914][ T29] audit: type=1400 audit(329.793:13241): avc: denied { mount } for pid=30191 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 321.898796][ T29] audit: type=1400 audit(329.793:13242): avc: denied { mounton } for pid=30191 comm="syz-executor" path="/root/syzkaller.ntc2RI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 321.925713][ T29] audit: type=1400 audit(329.793:13243): avc: denied { mounton } for pid=30191 comm="syz-executor" path="/root/syzkaller.ntc2RI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=91693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 321.953986][ T29] audit: type=1400 audit(329.836:13244): avc: denied { mounton } for pid=30191 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 321.976525][ T29] audit: type=1400 audit(329.836:13245): avc: denied { mount } for pid=30191 comm="syz-executor" name="/" dev="gadgetfs" ino=3731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 322.024466][ T29] audit: type=1326 audit(330.007:13246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30249 comm="syz.2.11393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995055ebe9 code=0x7ffc0000 [ 322.047916][ T29] audit: type=1326 audit(330.007:13247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30249 comm="syz.2.11393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995055ebe9 code=0x7ffc0000 [ 322.071238][ T29] audit: type=1326 audit(330.007:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30249 comm="syz.2.11393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f995055ebe9 code=0x7ffc0000 [ 322.242455][T30253] lo speed is unknown, defaulting to 1000 [ 322.354978][T30269] 9pnet_fd: Insufficient options for proto=fd [ 322.416734][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.491517][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.585861][T30279] wireguard0: entered promiscuous mode [ 322.591567][T30279] wireguard0: entered allmulticast mode [ 322.625044][T30285] pim6reg: entered allmulticast mode [ 322.649092][T30285] pim6reg: left allmulticast mode [ 322.776263][T30298] rdma_op ffff888140578d80 conn xmit_rdma 0000000000000000 [ 322.872836][T30308] netlink: 'syz.4.11432': attribute type 3 has an invalid length. [ 322.883412][T30310] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11433'. [ 322.899466][T30310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11433'. [ 323.185661][T30348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11450'. [ 323.202991][T30348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11450'. [ 323.321274][T30367] sctp: [Deprecated]: syz.4.11456 (pid 30367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.321274][T30367] Use struct sctp_sack_info instead [ 323.379538][T30376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11464'. [ 323.388615][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.402990][T30376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11464'. [ 323.460276][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.536591][T30393] netlink: 'syz.3.11471': attribute type 3 has an invalid length. [ 323.547913][T30395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11472'. [ 323.559101][T30395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11472'. [ 323.836298][T30428] loop2: detected capacity change from 0 to 1024 [ 323.855257][T30428] EXT4-fs: Ignoring removed nobh option [ 323.870890][T30428] EXT4-fs: Ignoring removed bh option [ 323.883468][T30428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.909960][T30191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.927080][T30437] pim6reg: entered allmulticast mode [ 323.933516][T30436] rdma_op ffff888110be0580 conn xmit_rdma 0000000000000000 [ 323.945366][T30437] pim6reg: left allmulticast mode [ 323.952529][T30439] loop2: detected capacity change from 0 to 512 [ 323.963452][T30439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 323.976913][T30439] EXT4-fs (loop2): 1 truncate cleaned up [ 323.983325][T30439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.021519][T30191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.070040][T30452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.087221][T30452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.117221][T30456] wireguard0: entered promiscuous mode [ 324.122784][T30456] wireguard0: entered allmulticast mode [ 324.338290][T30467] pim6reg: entered allmulticast mode [ 324.345213][T30467] pim6reg: left allmulticast mode [ 324.355054][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.429590][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.502326][T30478] sctp: [Deprecated]: syz.3.11509 (pid 30478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.502326][T30478] Use struct sctp_sack_info instead [ 324.847902][T30506] 9pnet_fd: Insufficient options for proto=fd [ 325.043048][T30530] 9pnet_fd: Insufficient options for proto=fd [ 325.324367][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.388442][T30538] lo speed is unknown, defaulting to 1000 [ 325.398943][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.635636][T30578] sctp: [Deprecated]: syz.7.11556 (pid 30578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.635636][T30578] Use struct sctp_sack_info instead [ 325.718548][T30585] loop2: detected capacity change from 0 to 1024 [ 325.744665][T30585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.860710][T30191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.951538][T30601] lo speed is unknown, defaulting to 1000 [ 326.261902][ T4822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.293749][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.334744][ T4822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.368313][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.399745][ T4822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.479878][ T4822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.536404][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 326.536424][ T29] audit: type=1326 audit(334.846:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.595682][ T4822] bridge_slave_1: left allmulticast mode [ 326.601380][ T4822] bridge_slave_1: left promiscuous mode [ 326.607471][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.632425][ T29] audit: type=1326 audit(334.889:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.655703][ T29] audit: type=1326 audit(334.889:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.679221][ T29] audit: type=1326 audit(334.889:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.702649][ T29] audit: type=1326 audit(334.889:13492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.725972][ T29] audit: type=1326 audit(334.943:13493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.749420][ T29] audit: type=1326 audit(334.943:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.772655][ T29] audit: type=1326 audit(334.943:13495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.795785][ T29] audit: type=1326 audit(334.943:13496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.819069][ T29] audit: type=1326 audit(334.943:13497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30630 comm="syz.1.11577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 326.846217][ T4822] bridge_slave_0: left allmulticast mode [ 326.851992][ T4822] bridge_slave_0: left promiscuous mode [ 326.858077][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.987570][ T4822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.998681][ T4822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.009122][ T4822] bond0 (unregistering): Released all slaves [ 327.020876][T30631] tipc: New replicast peer: 255.255.255.255 [ 327.027330][T30631] tipc: Enabled bearer , priority 10 [ 327.066306][T30614] lo speed is unknown, defaulting to 1000 [ 327.241068][ T4822] hsr_slave_0: left promiscuous mode [ 327.256770][ T4822] hsr_slave_1: left promiscuous mode [ 327.263075][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.270822][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.278452][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.294163][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.301890][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.325924][ T4822] veth1_macvtap: left promiscuous mode [ 327.337458][ T4822] veth0_macvtap: left promiscuous mode [ 327.337858][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.347700][ T4822] veth1_vlan: left promiscuous mode [ 327.361937][ T4822] veth0_vlan: left promiscuous mode [ 327.532678][ T4822] team0 (unregistering): Port device team_slave_1 removed [ 327.546281][ T4822] team0 (unregistering): Port device team_slave_0 removed [ 327.622843][T30614] chnl_net:caif_netlink_parms(): no params data found [ 327.700633][T30645] lo speed is unknown, defaulting to 1000 [ 327.738060][T30614] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.745393][T30614] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.757466][T30614] bridge_slave_0: entered allmulticast mode [ 327.763985][T30614] bridge_slave_0: entered promiscuous mode [ 327.813682][T30614] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.820824][T30614] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.841173][T30614] bridge_slave_1: entered allmulticast mode [ 327.848227][T30614] bridge_slave_1: entered promiscuous mode [ 327.887413][T30672] lo speed is unknown, defaulting to 1000 [ 327.894756][T30614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.931844][T30614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.010190][T30692] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 328.021752][T30692] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 328.038042][T30692] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 328.057187][T30692] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 328.068171][T30614] team0: Port device team_slave_0 added [ 328.076044][T30614] team0: Port device team_slave_1 added [ 328.141903][T30614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.148991][T30614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.175086][T30614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.208883][T30614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.215949][T30614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.242127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.249170][T30614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.316239][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.397978][T30614] hsr_slave_0: entered promiscuous mode [ 328.408834][T30614] hsr_slave_1: entered promiscuous mode [ 328.415027][T30614] debugfs: 'hsr0' already exists in 'hsr' [ 328.420959][T30614] Cannot create hsr debugfs directory [ 328.442644][T30727] tipc: New replicast peer: 255.255.255.255 [ 328.448900][T30727] tipc: Enabled bearer , priority 10 [ 328.761065][T30614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.770698][T30614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.782167][T30614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.793798][T30614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.838412][T30614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.856006][T30614] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.866832][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.873948][ T4822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.898387][T30614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.908941][T30614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.926208][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.933384][ T4822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.001512][T30614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.078104][T30614] veth0_vlan: entered promiscuous mode [ 329.086721][T30614] veth1_vlan: entered promiscuous mode [ 329.105340][T30614] veth0_macvtap: entered promiscuous mode [ 329.113965][T30614] veth1_macvtap: entered promiscuous mode [ 329.126400][T30614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.139403][T30614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.150602][ T4822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.159993][ T4822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.176143][ T4822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.188117][ T4861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.202006][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.276707][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.381455][T30785] tipc: New replicast peer: 255.255.255.255 [ 329.387658][T30785] tipc: Enabled bearer , priority 10 [ 329.593006][T30813] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 329.608207][T30813] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 329.627384][T30813] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 329.642013][T30813] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 329.659929][T30813] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 329.702026][T30809] lo speed is unknown, defaulting to 1000 [ 330.171063][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.254929][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.366117][T30829] cgroup: fork rejected by pids controller in /syz3 [ 330.501476][T30909] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 330.875064][T30940] veth0_vlan: left promiscuous mode [ 331.140441][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.218598][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.314556][T30978] serio: Serial port ptm0 [ 331.471994][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 331.472012][ T29] audit: type=1400 audit(340.146:13645): avc: denied { wake_alarm } for pid=30992 comm="syz.0.11725" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.545061][ T29] audit: type=1326 audit(340.221:13646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.568269][ T29] audit: type=1326 audit(340.221:13647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.609169][ T29] audit: type=1326 audit(340.275:13648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.632935][ T29] audit: type=1326 audit(340.275:13649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.656533][ T29] audit: type=1326 audit(340.275:13650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.679863][ T29] audit: type=1326 audit(340.275:13651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.702939][ T29] audit: type=1326 audit(340.275:13652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.726048][ T29] audit: type=1326 audit(340.275:13653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.749125][ T29] audit: type=1326 audit(340.275:13654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30996 comm="syz.0.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 331.984979][T31035] serio: Serial port ptm0 [ 332.110070][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.193622][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.656885][T31110] lo speed is unknown, defaulting to 1000 [ 332.743567][T31126] netlink: 'syz.1.11773': attribute type 21 has an invalid length. [ 332.772181][T31126] netlink: 'syz.1.11773': attribute type 1 has an invalid length. [ 332.780084][T31126] __nla_validate_parse: 3 callbacks suppressed [ 332.780174][T31126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11773'. [ 333.079110][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.163074][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.660125][T31186] netlink: 'syz.0.11801': attribute type 21 has an invalid length. [ 333.687245][T31186] netlink: 'syz.0.11801': attribute type 1 has an invalid length. [ 333.695416][T31186] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11801'. [ 333.894727][T31205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11810'. [ 334.048506][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.070280][T31200] lo speed is unknown, defaulting to 1000 [ 334.132269][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.144063][T31231] netlink: 'syz.4.11818': attribute type 21 has an invalid length. [ 334.160842][T31231] netlink: 'syz.4.11818': attribute type 1 has an invalid length. [ 334.168784][T31231] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11818'. [ 335.017719][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.101723][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.111733][T31305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.543615][T31373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11878'. [ 335.562423][T31376] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 335.579343][T31376] SELinux: failed to load policy [ 335.686485][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x1 [ 335.694088][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 335.701560][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 335.709008][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 335.716419][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 335.726311][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 335.733757][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 335.741311][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 335.748920][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x2 [ 335.756387][ T3413] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 335.765023][ T3413] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 335.930322][T31415] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11895'. [ 335.987099][ C0] net_ratelimit: 1 callbacks suppressed [ 335.987152][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.070926][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.124929][T31447] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 336.143317][T31447] SELinux: failed to load policy [ 336.206849][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 336.206869][ T29] audit: type=1326 audit(345.221:13765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.246264][ T29] audit: type=1326 audit(345.221:13766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.269573][ T29] audit: type=1326 audit(345.253:13767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.292996][ T29] audit: type=1326 audit(345.253:13768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.316128][ T29] audit: type=1326 audit(345.253:13769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.339255][ T29] audit: type=1326 audit(345.253:13770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.362390][ T29] audit: type=1326 audit(345.253:13771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.386222][ T29] audit: type=1326 audit(345.253:13772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.409794][ T29] audit: type=1326 audit(345.253:13773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.433326][ T29] audit: type=1326 audit(345.253:13774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31462 comm="syz.1.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 336.457321][T31466] openvswitch: netlink: Message has 6 unknown bytes. [ 336.467367][T31469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.476599][T31469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.569346][T31486] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 336.577344][T31486] SELinux: failed to load policy [ 336.603981][ T10] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 336.956601][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.014494][T31564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.040808][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.925807][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.956719][T31679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12014'. [ 337.976412][T31681] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.981135][T31679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12014'. [ 338.000865][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.040387][T31686] tipc: Bearer : already 2 bearers with priority 10 [ 338.047770][T31686] tipc: Bearer : trying with adjusted priority [ 338.055989][T31686] tipc: New replicast peer: 255.255.255.83 [ 338.062090][T31686] tipc: Enabled bearer , priority 9 [ 338.408145][T31736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12039'. [ 338.417227][T31736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12039'. [ 338.451699][T31736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12039'. [ 338.460789][T31736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12039'. [ 338.580863][T31753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12050'. [ 338.761295][T31772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12057'. [ 338.797558][T31776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12059'. [ 338.811140][T31776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12059'. [ 338.862075][T31782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.895113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.979066][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.237739][T31835] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 339.244401][T31835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 339.251992][T31835] vhci_hcd vhci_hcd.0: Device attached [ 339.259725][T31835] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 339.266316][T31835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 339.273924][T31835] vhci_hcd vhci_hcd.0: Device attached [ 339.280214][T31835] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 339.286746][T31835] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 339.294599][T31835] vhci_hcd vhci_hcd.0: Device attached [ 339.300617][T31835] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.309608][T31835] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 339.316328][T31835] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.324013][T31835] vhci_hcd vhci_hcd.0: Device attached [ 339.330290][T31835] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 339.337002][T31835] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.344839][T31835] vhci_hcd vhci_hcd.0: Device attached [ 339.350886][T31838] vhci_hcd: connection closed [ 339.350925][T31840] vhci_hcd: connection closed [ 339.352395][T31836] vhci_hcd: connection closed [ 339.355863][T31842] vhci_hcd: connection closed [ 339.360488][T31844] vhci_hcd: connection closed [ 339.370400][ T4833] vhci_hcd: stop threads [ 339.379478][ T4833] vhci_hcd: release socket [ 339.383964][ T4833] vhci_hcd: disconnect device [ 339.388804][ T4833] vhci_hcd: stop threads [ 339.393195][ T4833] vhci_hcd: release socket [ 339.397630][ T4833] vhci_hcd: disconnect device [ 339.402555][ T4833] vhci_hcd: stop threads [ 339.407168][ T4833] vhci_hcd: release socket [ 339.411683][ T4833] vhci_hcd: disconnect device [ 339.416535][ T4833] vhci_hcd: stop threads [ 339.417180][ T3413] vhci_hcd: vhci_device speed not set [ 339.421168][ T4833] vhci_hcd: release socket [ 339.430732][ T4833] vhci_hcd: disconnect device [ 339.435628][ T4833] vhci_hcd: stop threads [ 339.439924][ T4833] vhci_hcd: release socket [ 339.444363][ T4833] vhci_hcd: disconnect device [ 339.864368][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.347356][T31868] tipc: Bearer : already 2 bearers with priority 10 [ 340.354755][T31868] tipc: Bearer : trying with adjusted priority [ 340.364110][T31868] tipc: New replicast peer: 255.255.255.83 [ 340.370073][T31868] tipc: Enabled bearer , priority 9 [ 340.476148][T31891] syz_tun: left allmulticast mode [ 340.484316][T31892] random: crng reseeded on system resumption [ 340.511623][T31892] vhci_hcd: invalid port number 23 [ 340.604726][T31905] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 340.611388][T31905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.619181][T31905] vhci_hcd vhci_hcd.0: Device attached [ 340.633001][T31905] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 340.639571][T31905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.647130][T31905] vhci_hcd vhci_hcd.0: Device attached [ 340.656254][T31905] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 340.662817][T31905] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 340.670771][T31905] vhci_hcd vhci_hcd.0: Device attached [ 340.678790][T31905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 340.688300][T31905] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 340.695078][T31905] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.702766][T31905] vhci_hcd vhci_hcd.0: Device attached [ 340.709844][T31905] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 340.716466][T31905] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.724112][T31905] vhci_hcd vhci_hcd.0: Device attached [ 340.733792][T31916] vhci_hcd: connection closed [ 340.733958][T31914] vhci_hcd: connection closed [ 340.738979][ T160] vhci_hcd: stop threads [ 340.739181][T31910] vhci_hcd: connection closed [ 340.743764][ T160] vhci_hcd: release socket [ 340.743776][ T160] vhci_hcd: disconnect device [ 340.743793][T31912] vhci_hcd: connection closed [ 340.757725][ T160] vhci_hcd: stop threads [ 340.764764][T31906] vhci_hcd: connection closed [ 340.767341][ T160] vhci_hcd: release socket [ 340.781192][ T160] vhci_hcd: disconnect device [ 340.786139][ T160] vhci_hcd: stop threads [ 340.790487][ T160] vhci_hcd: release socket [ 340.795072][ T160] vhci_hcd: disconnect device [ 340.800010][ T160] vhci_hcd: stop threads [ 340.804398][ T160] vhci_hcd: release socket [ 340.808872][ T160] vhci_hcd: disconnect device [ 340.813770][ T160] vhci_hcd: stop threads [ 340.818129][ T160] vhci_hcd: release socket [ 340.822552][ T160] vhci_hcd: disconnect device [ 340.833811][ C0] net_ratelimit: 1 callbacks suppressed [ 340.833828][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.848546][ T10] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 340.856031][ T10] usb 1-1: enqueue for inactive port 0 [ 340.861516][ T10] usb 1-1: enqueue for inactive port 0 [ 340.867120][ T10] usb 1-1: enqueue for inactive port 0 [ 340.908428][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.945586][ T10] vhci_hcd: vhci_device speed not set [ 341.129511][T31920] tipc: Bearer : already 2 bearers with priority 10 [ 341.136997][T31920] tipc: Bearer : trying with adjusted priority [ 341.145855][T31920] tipc: New replicast peer: 255.255.255.83 [ 341.151848][T31920] tipc: Enabled bearer , priority 9 [ 341.410289][T31961] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 341.416886][T31961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.424493][T31961] vhci_hcd vhci_hcd.0: Device attached [ 341.459811][T31961] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 341.466447][T31961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.474205][T31961] vhci_hcd vhci_hcd.0: Device attached [ 341.501518][T31961] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 341.508093][T31961] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 341.515917][T31961] vhci_hcd vhci_hcd.0: Device attached [ 341.533748][T31972] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 341.549325][T31976] random: crng reseeded on system resumption [ 341.566301][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 341.566317][ T29] audit: type=1326 audit(350.972:14074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.598852][T31961] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 341.605501][T31961] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 341.613256][T31961] vhci_hcd vhci_hcd.0: Device attached [ 341.616315][ T29] audit: type=1326 audit(351.004:14075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.642764][ T29] audit: type=1326 audit(351.015:14076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.648840][T31972] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 341.666265][ T29] audit: type=1326 audit(351.015:14077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.672557][T31972] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 341.700395][ T29] audit: type=1326 audit(351.036:14078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.703367][T31972] vhci_hcd vhci_hcd.0: Device attached [ 341.726576][ T29] audit: type=1326 audit(351.036:14079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.735679][ T5347] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 341.755509][ T29] audit: type=1326 audit(351.036:14080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.786032][ T29] audit: type=1326 audit(351.036:14081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.788484][T31981] vhci_hcd: connection closed [ 341.809528][ T29] audit: type=1326 audit(351.036:14082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.809586][ T29] audit: type=1326 audit(351.036:14083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.0.12149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 341.809709][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.814801][T31969] vhci_hcd: connection closed [ 341.839093][T31979] vhci_hcd: connection closed [ 341.877002][T31963] vhci_hcd: connection reset by peer [ 341.877807][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.881962][T31967] vhci_hcd: connection closed [ 341.910414][ T4833] vhci_hcd: stop threads [ 341.919577][ T4833] vhci_hcd: release socket [ 341.924051][ T4833] vhci_hcd: disconnect device [ 341.951248][ T4833] vhci_hcd: stop threads [ 341.955960][ T4833] vhci_hcd: release socket [ 341.960679][ T4833] vhci_hcd: disconnect device [ 341.969030][ T4833] vhci_hcd: stop threads [ 341.973446][ T4833] vhci_hcd: release socket [ 341.977915][ T4833] vhci_hcd: disconnect device [ 341.985160][ T4833] vhci_hcd: stop threads [ 341.989506][ T4833] vhci_hcd: release socket [ 341.993971][ T4833] vhci_hcd: disconnect device [ 342.002737][ T4833] vhci_hcd: stop threads [ 342.007238][ T4833] vhci_hcd: release socket [ 342.011832][ T4833] vhci_hcd: disconnect device [ 342.529703][T32064] netlink: 'syz.7.12174': attribute type 21 has an invalid length. [ 342.631705][T32080] __nla_validate_parse: 34 callbacks suppressed [ 342.631726][T32080] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12187'. [ 342.721842][T32092] netlink: 'syz.0.12194': attribute type 21 has an invalid length. [ 342.737489][T32092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12194'. [ 342.772991][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.807149][T32108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12199'. [ 342.845966][T32112] netlink: 'syz.0.12203': attribute type 3 has an invalid length. [ 342.847282][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.021847][T32137] netlink: 'syz.7.12214': attribute type 1 has an invalid length. [ 343.046016][T32137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.054417][T32140] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 343.215580][T32167] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12230'. [ 343.226824][T32170] netlink: 'syz.4.12231': attribute type 3 has an invalid length. [ 343.433326][T32200] netlink: 'syz.7.12245': attribute type 3 has an invalid length. [ 343.531266][T32214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12250'. [ 343.540442][T32214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12250'. [ 343.556019][ T160] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.556113][T32214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12250'. [ 343.573967][T32214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12250'. [ 343.581237][ T160] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.609866][ T160] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.645116][ T160] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.736030][T32231] netlink: 'syz.3.12258': attribute type 3 has an invalid length. [ 343.743977][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.817753][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.158598][T32281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12282'. [ 344.253767][T32293] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 344.374870][T32310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12297'. [ 344.720434][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.785750][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.262622][ T4861] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.283541][ T4861] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.296809][ T4861] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.319738][ T4861] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.526053][T32399] netlink: 'syz.0.12336': attribute type 1 has an invalid length. [ 345.535585][T32404] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 345.662495][T32423] ref_ctr_offset mismatch. inode: 0x2f17 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 345.680848][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.755375][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.782346][T32435] netlink: 'syz.3.12353': attribute type 1 has an invalid length. [ 345.962875][T32456] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 346.190143][T32495] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 346.283892][T32512] ref_ctr_offset mismatch. inode: 0x3142 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 346.297806][T32514] netlink: 'syz.4.12388': attribute type 298 has an invalid length. [ 346.435474][ T5347] usb 7-1: enqueue for inactive port 0 [ 346.441188][ T5347] usb 7-1: enqueue for inactive port 0 [ 346.451864][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 346.451930][ T29] audit: type=1326 audit(356.218:14245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.488844][ T29] audit: type=1326 audit(356.218:14246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.512163][ T29] audit: type=1326 audit(356.250:14247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.535547][ T29] audit: type=1326 audit(356.250:14248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.558765][ T29] audit: type=1326 audit(356.250:14249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.582084][ T29] audit: type=1326 audit(356.250:14250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.605542][ T29] audit: type=1326 audit(356.250:14251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.628896][ T29] audit: type=1326 audit(356.250:14252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.652125][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.668977][ T5347] vhci_hcd: vhci_device speed not set [ 346.681781][ T29] audit: type=1326 audit(356.444:14253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.705234][ T29] audit: type=1326 audit(356.444:14254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32526 comm="syz.1.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b56bebe9 code=0x7ffc0000 [ 346.725143][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.829347][T32554] ref_ctr_offset mismatch. inode: 0x365 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 346.849390][T32557] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 346.856044][T32557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 346.863796][T32557] vhci_hcd vhci_hcd.0: Device attached [ 346.872764][T32558] vhci_hcd: connection closed [ 346.873008][ T4861] vhci_hcd: stop threads [ 346.882214][ T4861] vhci_hcd: release socket [ 346.886704][ T4861] vhci_hcd: disconnect device [ 346.991856][T32579] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 347.347834][T32629] __nla_validate_parse: 9 callbacks suppressed [ 347.347856][T32629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12439'. [ 347.422167][T32639] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 347.429011][T32639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 347.436713][T32639] vhci_hcd vhci_hcd.0: Device attached [ 347.444224][T32642] vhci_hcd: connection closed [ 347.445248][ T4845] vhci_hcd: stop threads [ 347.454606][ T4845] vhci_hcd: release socket [ 347.459097][ T4845] vhci_hcd: disconnect device [ 347.530658][T32658] validate_nla: 2 callbacks suppressed [ 347.530674][T32658] netlink: 'syz.7.12449': attribute type 21 has an invalid length. [ 347.628439][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.693744][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.941228][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12462'. [ 348.027678][T32685] netlink: 104 bytes leftover after parsing attributes in process `syz.7.12475'. [ 348.163986][T32705] netlink: 'syz.3.12473': attribute type 21 has an invalid length. [ 348.325278][T32713] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 348.331842][T32713] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.339497][T32713] vhci_hcd vhci_hcd.0: Device attached [ 348.348259][T32714] vhci_hcd: connection closed [ 348.348533][ T4822] vhci_hcd: stop threads [ 348.357726][ T4822] vhci_hcd: release socket [ 348.362235][ T4822] vhci_hcd: disconnect device [ 348.385149][T32719] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12480'. [ 348.588538][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.011695][ T301] netlink: 'syz.0.12500': attribute type 1 has an invalid length. [ 349.098105][ T313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.194937][ T327] syzkaller1: entered promiscuous mode [ 349.200621][ T327] syzkaller1: entered allmulticast mode [ 349.207608][ T327] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 349.357737][ T339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12513'. [ 349.411219][ T345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12516'. [ 349.420477][ T345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12516'. [ 350.527165][ C0] net_ratelimit: 3 callbacks suppressed [ 350.527188][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.611047][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.633978][ T418] syzkaller1: entered promiscuous mode [ 350.639661][ T418] syzkaller1: entered allmulticast mode [ 350.907473][ T464] syzkaller1: entered promiscuous mode [ 350.913268][ T464] syzkaller1: entered allmulticast mode [ 351.011978][ T474] SELinux: failed to load policy [ 351.118232][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 351.118252][ T29] audit: type=1400 audit(361.229:14532): avc: denied { create } for pid=494 comm="syz.4.12588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.164240][ T504] pimreg: entered allmulticast mode [ 351.172801][ T29] audit: type=1400 audit(361.239:14533): avc: denied { read } for pid=499 comm="syz.0.12589" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.184356][ T504] pimreg: left allmulticast mode [ 351.195553][ T29] audit: type=1400 audit(361.239:14534): avc: denied { open } for pid=499 comm="syz.0.12589" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.224373][ T29] audit: type=1400 audit(361.239:14535): avc: denied { allowed } for pid=499 comm="syz.0.12589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 351.243391][ T29] audit: type=1400 audit(361.261:14536): avc: denied { write } for pid=494 comm="syz.4.12588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.263524][ T29] audit: type=1400 audit(361.261:14537): avc: denied { read } for pid=494 comm="syz.4.12588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.283453][ T29] audit: type=1400 audit(361.261:14538): avc: denied { create } for pid=503 comm="syz.1.12590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.302773][ T29] audit: type=1400 audit(361.261:14539): avc: denied { create } for pid=499 comm="syz.0.12589" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 351.323712][ T29] audit: type=1400 audit(361.261:14540): avc: denied { map } for pid=499 comm="syz.0.12589" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=100123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 351.347687][ T29] audit: type=1400 audit(361.261:14541): avc: denied { read write } for pid=499 comm="syz.0.12589" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=100123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 351.496429][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.566867][ T533] netlink: 'syz.0.12602': attribute type 1 has an invalid length. [ 351.574860][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.653807][ T538] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12604'. [ 351.794195][ T543] vhci_hcd: invalid port number 96 [ 351.799546][ T543] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 351.902120][ T553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12612'. [ 352.343039][ T593] netlink: 'syz.1.12630': attribute type 1 has an invalid length. [ 352.465738][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.540638][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.635105][ T620] netlink: 'syz.7.12642': attribute type 1 has an invalid length. [ 353.206950][ T667] SELinux: failed to load policy [ 353.435620][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.509998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.688451][ T707] netlink: 'syz.1.12685': attribute type 1 has an invalid length. [ 353.765901][ T713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12686'. [ 353.868988][ T734] pimreg: entered allmulticast mode [ 353.882467][ T734] pimreg: left allmulticast mode [ 353.962271][ T749] sctp: [Deprecated]: syz.4.12703 (pid 749) Use of int in maxseg socket option. [ 353.962271][ T749] Use struct sctp_assoc_value instead [ 354.048921][ T754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12704'. [ 354.133148][ T768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12713'. [ 354.142357][ T768] IPVS: Unknown mcast interface: vcan0 [ 354.413738][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.479046][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.589509][ T785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12720'. [ 355.383098][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.448386][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.808140][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 355.808160][ T29] audit: type=1400 audit(366.250:14711): avc: denied { create } for pid=843 comm="syz.7.12756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.864352][ T29] audit: type=1326 audit(366.261:14712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.4.12745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5143caebe9 code=0x7ffc0000 [ 355.887739][ T29] audit: type=1326 audit(366.261:14713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.4.12745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5143caebe9 code=0x7ffc0000 [ 355.911177][ T29] audit: type=1326 audit(366.282:14714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.4.12745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f5143caebe9 code=0x7ffc0000 [ 355.934482][ T29] audit: type=1326 audit(366.282:14715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.4.12745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5143caebe9 code=0x7ffc0000 [ 355.957553][ T29] audit: type=1326 audit(366.282:14716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.4.12745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5143caebe9 code=0x7ffc0000 [ 355.980910][ T29] audit: type=1400 audit(366.282:14717): avc: denied { bind } for pid=843 comm="syz.7.12756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.999740][ T29] audit: type=1400 audit(366.282:14718): avc: denied { write } for pid=843 comm="syz.7.12756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.058037][ T852] netlink: 'syz.7.12749': attribute type 3 has an invalid length. [ 356.291344][ T29] audit: type=1326 audit(366.776:14719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=857 comm="syz.0.12753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 356.340643][ T29] audit: type=1326 audit(366.776:14720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=857 comm="syz.0.12753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b066debe9 code=0x7ffc0000 [ 356.363780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.418193][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.538413][ T876] dummy0: entered allmulticast mode [ 356.545865][ T876] dummy0: left allmulticast mode [ 356.560045][ T880] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12763'. [ 356.578228][ T882] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 356.713391][ T902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12774'. [ 356.763412][ T909] dummy0: entered allmulticast mode [ 356.769224][ T909] dummy0: left allmulticast mode [ 356.824685][ T916] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12780'. [ 356.883566][ T917] SELinux: ebitmap: truncated map [ 356.899728][ T917] SELinux: failed to load policy [ 356.917617][ T923] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 356.992535][ T935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12788'. [ 357.046070][ T940] dummy0: entered allmulticast mode [ 357.053574][ T941] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12793'. [ 357.070663][ T940] dummy0: left allmulticast mode [ 357.143013][ T953] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 357.207471][ T963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12802'. [ 357.259891][ T971] netlink: 'syz.1.12816': attribute type 3 has an invalid length. [ 357.322251][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.387076][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.893688][ T1045] SELinux: ebitmap: truncated map [ 357.901692][ T1045] SELinux: failed to load policy [ 358.291136][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.348935][ T1091] Falling back ldisc for ttyS3. [ 358.356551][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.565493][T26273] syz_tun (unregistering): left promiscuous mode [ 358.579016][ T1127] __nla_validate_parse: 2 callbacks suppressed [ 358.579095][ T1127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12884'. [ 358.596086][ T1127] batadv0 (unregistering): left allmulticast mode [ 358.602824][ T1127] batadv0 (unregistering): left promiscuous mode [ 358.609291][ T1127] bridge0: port 1(batadv0) entered disabled state [ 358.709404][ T4861] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.720002][ T4861] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.778062][ T1138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12891'. [ 358.800310][ T4861] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.810878][ T4861] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.856974][ T4861] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.867340][ T4861] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.888068][ T1146] Falling back ldisc for ttyS3. [ 358.957848][ T4861] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.968218][ T4861] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.979858][ T1143] lo speed is unknown, defaulting to 1000 [ 359.072009][ T1143] chnl_net:caif_netlink_parms(): no params data found [ 359.133640][ T4861] batadv1: left allmulticast mode [ 359.138778][ T4861] batadv1: left promiscuous mode [ 359.144048][ T4861] bridge0: port 3(batadv1) entered disabled state [ 359.153463][ T4861] bridge_slave_1: left allmulticast mode [ 359.159319][ T4861] bridge_slave_1: left promiscuous mode [ 359.165020][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.174513][ T4861] bridge_slave_0: left allmulticast mode [ 359.180254][ T4861] bridge_slave_0: left promiscuous mode [ 359.185964][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.251298][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.307588][ T4861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.324303][ T4861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.333089][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.341506][ T4861] bond0 (unregistering): Released all slaves [ 359.350963][ T4861] bond1 (unregistering): (slave batadv2): Releasing active interface [ 359.360695][ T4861] bond1 (unregistering): Released all slaves [ 359.370247][ T4861] bond2 (unregistering): Released all slaves [ 359.391682][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.398894][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.406379][ T1143] bridge_slave_0: entered allmulticast mode [ 359.416721][ T1143] bridge_slave_0: entered promiscuous mode [ 359.423802][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.430939][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.438261][ T1143] bridge_slave_1: entered allmulticast mode [ 359.445337][ T1143] bridge_slave_1: entered promiscuous mode [ 359.470908][ T1143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.501226][ T1143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.519548][ T1184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12902'. [ 359.540617][ T4861] batadv_slave_0: left promiscuous mode [ 359.549162][ T4861] hsr_slave_0: left promiscuous mode [ 359.557948][ T4861] hsr_slave_1: left promiscuous mode [ 359.563847][ T4861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.571690][ T4861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.579680][ T4861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.587186][ T4861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.594888][ T4861] batman_adv: batadv0: Interface deactivated: macvlan0 [ 359.601808][ T4861] batman_adv: batadv0: Removing interface: macvlan0 [ 359.612077][ T4861] veth1_macvtap: left promiscuous mode [ 359.617770][ T4861] veth0_macvtap: left promiscuous mode [ 359.623370][ T4861] veth1_vlan: left promiscuous mode [ 359.701718][ T4861] team0 (unregistering): Port device team_slave_1 removed [ 359.711268][ T4861] team0 (unregistering): Port device team_slave_0 removed [ 359.745674][ T1143] team0: Port device team_slave_0 added [ 359.751480][ T1188] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 359.759460][ T1143] team0: Port device team_slave_1 added [ 359.780747][ T1143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.787878][ T1143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.814086][ T1143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.827336][ T1143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.834428][ T1143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.860867][ T1143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.914179][ T1143] hsr_slave_0: entered promiscuous mode [ 359.921310][ T1143] hsr_slave_1: entered promiscuous mode [ 360.148259][ T4861] ------------[ cut here ]------------ [ 360.153761][ T4861] WARNING: CPU: 0 PID: 4861 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x94/0x100 [ 360.164180][ T4861] Modules linked in: [ 360.168170][ T4861] CPU: 0 UID: 0 PID: 4861 Comm: kworker/u8:46 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 360.181032][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.191182][ T4861] Workqueue: netns cleanup_net [ 360.196122][ T4861] RIP: 0010:xfrm6_tunnel_net_exit+0x94/0x100 [ 360.202146][ T4861] Code: f2 62 ab fc 4b 83 3c 3e 00 75 19 e8 a6 91 90 fc 49 81 ff f8 07 00 00 74 1d e8 98 91 90 fc 49 83 c7 08 eb d7 e8 8d 91 90 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 360.221838][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.228888][ T4861] RSP: 0018:ffffc900012f3c78 EFLAGS: 00010293 [ 360.235134][ T4861] RAX: ffffffff84c76823 RBX: ffff888109984740 RCX: ffff88812609a100 [ 360.243207][ T4861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888125f3c000 [ 360.251322][ T4861] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 360.259437][ T4861] R10: ffffc900012f3bf8 R11: 0001c900012f3bf8 R12: ffffffff86c93940 [ 360.267449][ T4861] R13: ffff888109984768 R14: ffff888125f3c000 R15: 0000000000000000 [ 360.275693][ T4861] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 360.284826][ T4861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.291485][ T4861] CR2: 00007ffcd840ee48 CR3: 0000000145b26000 CR4: 00000000003506f0 [ 360.295699][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.300027][ T4861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082 [ 360.314456][ T4861] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 360.322672][ T4861] Call Trace: [ 360.326047][ T4861] [ 360.329050][ T4861] ops_undo_list+0x278/0x410 [ 360.333794][ T4861] cleanup_net+0x2de/0x4d0 [ 360.338603][ T4861] process_scheduled_works+0x4cb/0x9d0 [ 360.344263][ T4861] worker_thread+0x582/0x770 [ 360.349034][ T4861] kthread+0x489/0x510 [ 360.353176][ T4861] ? finish_task_switch+0xad/0x2b0 [ 360.358424][ T4861] ? __pfx_worker_thread+0x10/0x10 [ 360.363714][ T4861] ? __pfx_kthread+0x10/0x10 [ 360.367830][ T1207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12921'. [ 360.368494][ T4861] ret_from_fork+0xda/0x150 [ 360.382234][ T4861] ? __pfx_kthread+0x10/0x10 [ 360.386886][ T4861] ret_from_fork_asm+0x1a/0x30 [ 360.391845][ T4861] [ 360.393542][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.394884][ T4861] ---[ end trace 0000000000000000 ]--- [ 360.395838][ T4861] ------------[ cut here ]------------ [ 360.402385][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.407930][ T4861] WARNING: CPU: 0 PID: 4861 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd8/0x100 [ 360.430841][ T4861] Modules linked in: [ 360.434778][ T4861] CPU: 0 UID: 0 PID: 4861 Comm: kworker/u8:46 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 360.449134][ T4861] Tainted: [W]=WARN [ 360.453051][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.463180][ T4861] Workqueue: netns cleanup_net [ 360.468139][ T4861] RIP: 0010:xfrm6_tunnel_net_exit+0xd8/0x100 [ 360.474545][ T4861] Code: ae 62 ab fc 49 83 3c 1e 00 75 19 e8 62 91 90 fc 48 81 fb f8 07 00 00 74 1d e8 54 91 90 fc 48 83 c3 08 eb d7 e8 49 91 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 37 91 90 fc 5b 41 5e 41 5f [ 360.494680][ T4861] RSP: 0018:ffffc900012f3c78 EFLAGS: 00010293 [ 360.500854][ T4861] RAX: ffffffff84c76867 RBX: 0000000000000008 RCX: ffff88812609a100 [ 360.508954][ T4861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888125f3c808 [ 360.517200][ T4861] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 360.525249][ T4861] R10: ffffc900012f3bf8 R11: 0001c900012f3bf8 R12: ffffffff86c93940 [ 360.533417][ T4861] R13: ffff888109984768 R14: ffff888125f3c800 R15: 00000000000007f8 [ 360.541777][ T4861] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 360.550830][ T4861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.557462][ T4861] CR2: 00007ffcd840ee48 CR3: 0000000145b26000 CR4: 00000000003506f0 [ 360.565458][ T4861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082 [ 360.573565][ T4861] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 360.581667][ T4861] Call Trace: [ 360.585069][ T4861] [ 360.588076][ T4861] ops_undo_list+0x278/0x410 [ 360.592730][ T4861] cleanup_net+0x2de/0x4d0 [ 360.597204][ T4861] process_scheduled_works+0x4cb/0x9d0 [ 360.602731][ T4861] worker_thread+0x582/0x770 [ 360.607387][ T4861] kthread+0x489/0x510 [ 360.611788][ T4861] ? finish_task_switch+0xad/0x2b0 [ 360.617022][ T4861] ? __pfx_worker_thread+0x10/0x10 [ 360.622183][ T4861] ? __pfx_kthread+0x10/0x10 [ 360.626784][ T4861] ret_from_fork+0xda/0x150 [ 360.631384][ T4861] ? __pfx_kthread+0x10/0x10 [ 360.636193][ T4861] ret_from_fork_asm+0x1a/0x30 [ 360.641024][ T4861] [ 360.644113][ T4861] ---[ end trace 0000000000000000 ]--- [ 360.650480][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.658350][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.697707][ T4861] ------------[ cut here ]------------ [ 360.703221][ T4861] WARNING: CPU: 0 PID: 4861 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 360.712900][ T4861] Modules linked in: [ 360.716939][ T4861] CPU: 0 UID: 0 PID: 4861 Comm: kworker/u8:46 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 360.731417][ T4861] Tainted: [W]=WARN [ 360.735267][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.745483][ T4861] Workqueue: netns cleanup_net [ 360.750375][ T4861] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 360.756099][ T4861] Code: 48 8d bb 30 0e 00 00 e8 72 0e bd fc 48 8b bb 30 0e 00 00 e8 36 8f c9 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c5 50 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 b7 50 a2 fc 90 0f 0b 90 4c 89 f7 e8 3b [ 360.776111][ T4861] RSP: 0018:ffffc900012f3c60 EFLAGS: 00010293 [ 360.782342][ T4861] RAX: ffffffff84b5a8eb RBX: ffff888109984740 RCX: ffff88812609a100 [ 360.790423][ T4861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109985540 [ 360.798418][ T4861] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 360.806612][ T4861] R10: ffffc900012f3be8 R11: 0001c900012f3be8 R12: ffffffff86c8b7c0 [ 360.814627][ T4861] R13: ffff888109984768 R14: ffff888109985540 R15: ffff888109984740 [ 360.822679][ T4861] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 360.831655][ T4861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.838311][ T4861] CR2: 00007ffcd840ee48 CR3: 0000000110100000 CR4: 00000000003506f0 [ 360.846976][ T4861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082 [ 360.855199][ T4861] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 360.863187][ T4861] Call Trace: [ 360.866509][ T4861] [ 360.869528][ T4861] xfrm_net_exit+0x2d/0x60 [ 360.874027][ T4861] ops_undo_list+0x278/0x410 [ 360.878648][ T4861] cleanup_net+0x2de/0x4d0 [ 360.883251][ T4861] process_scheduled_works+0x4cb/0x9d0 [ 360.888811][ T4861] worker_thread+0x582/0x770 [ 360.893856][ T4861] kthread+0x489/0x510 [ 360.898028][ T4861] ? finish_task_switch+0xad/0x2b0 [ 360.903249][ T4861] ? __pfx_worker_thread+0x10/0x10 [ 360.908400][ T4861] ? __pfx_kthread+0x10/0x10 [ 360.913012][ T4861] ret_from_fork+0xda/0x150 [ 360.917526][ T4861] ? __pfx_kthread+0x10/0x10 [ 360.922201][ T4861] ret_from_fork_asm+0x1a/0x30 [ 360.927045][ T4861] [ 360.930131][ T4861] ---[ end trace 0000000000000000 ]--- [ 360.984366][ T1143] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.993159][ T1143] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.001869][ T1143] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 361.011150][ T1143] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.047914][ T1143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.060634][ T1143] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.069861][ T4861] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.076937][ T4861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.089685][ T4861] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.096864][ T4861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.159829][ T1143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.199685][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.265009][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.280933][ T1143] veth0_vlan: entered promiscuous mode [ 361.289023][ T1143] veth1_vlan: entered promiscuous mode [ 361.304789][ T1143] veth0_macvtap: entered promiscuous mode [ 361.312456][ T1143] veth1_macvtap: entered promiscuous mode [ 361.324582][ T1143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.335774][ T1143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.346837][ T4822] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.356119][ T4822] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.365797][ T4822] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.376374][ T4822] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.394312][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 361.394329][ T29] audit: type=1400 audit(372.247:14855): avc: denied { mounton } for pid=1143 comm="syz-executor" path="/root/syzkaller.R7IXY6/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 361.425411][ T29] audit: type=1400 audit(372.247:14856): avc: denied { mount } for pid=1143 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 361.447228][ T29] audit: type=1400 audit(372.258:14857): avc: denied { mount } for pid=1143 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 361.468975][ T29] audit: type=1400 audit(372.258:14858): avc: denied { mounton } for pid=1143 comm="syz-executor" path="/root/syzkaller.R7IXY6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 361.495285][ T29] audit: type=1400 audit(372.258:14859): avc: denied { mounton } for pid=1143 comm="syz-executor" path="/root/syzkaller.R7IXY6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=103568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 361.522598][ T29] audit: type=1400 audit(372.258:14860): avc: denied { unmount } for pid=1143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 361.542356][ T29] audit: type=1400 audit(372.280:14861): avc: denied { mounton } for pid=1143 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 361.565161][ T29] audit: type=1400 audit(372.280:14862): avc: denied { mount } for pid=1143 comm="syz-executor" name="/" dev="gadgetfs" ino=3731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 361.587447][ T29] audit: type=1400 audit(372.290:14863): avc: denied { add_name } for pid=1143 comm="syz-executor" name="syz6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 361.611662][ T29] audit: type=1400 audit(372.290:14864): avc: denied { create } for pid=1143 comm="syz-executor" name="syz6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 361.618016][ T1235] netlink: 300 bytes leftover after parsing attributes in process `syz.6.12890'. [ 361.667759][ T1239] loop6: detected capacity change from 0 to 512 [ 361.674413][ T1239] EXT4-fs: Ignoring removed bh option [ 361.697404][ T1239] EXT4-fs error (device loop6): __ext4_iget:5464: inode #15: block 1803188595: comm syz.6.12913: invalid block [ 361.715145][ T1239] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.12913: couldn't read orphan inode 15 (err -117) [ 361.728396][ T1239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.856435][ T1143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.965304][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.974071][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.044274][ T1293] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 362.159182][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.233813][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.615797][ T1309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12944'. [ 363.129163][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.203102][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.539932][ T9] kernel write not supported for file /594/clear_refs (pid: 9 comm: kworker/0:0) [ 363.645453][T11020] syz_tun (unregistering): left promiscuous mode [ 363.692419][ T160] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.764221][ T160] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.814657][ T160] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.885552][ T160] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.017459][ T1340] lo speed is unknown, defaulting to 1000 [ 364.098175][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.127411][ T160] smc: removing net device bond0 with user defined pnetid SYZ2 [ 364.145375][ T160] bond0 (unregistering): Released all slaves [ 364.154260][ T160] bond1 (unregistering): Released all slaves [ 364.171892][ T160] bond2 (unregistering): Released all slaves [ 364.178132][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.189253][ T160] bond3 (unregistering): Released all slaves [ 364.198667][ T160] bond4 (unregistering): Released all slaves [ 364.209024][ T160] bond5 (unregistering): Released all slaves [ 364.218325][ T160] bond6 (unregistering): Released all slaves [ 364.290660][ T160] tipc: Disabling bearer [ 364.295921][ T160] tipc: Disabling bearer [ 364.301396][ T160] tipc: Disabling bearer [ 364.306516][ T160] tipc: Left network mode [ 364.311130][ T1366] lo speed is unknown, defaulting to 1000 [ 364.394036][ T1387] lo speed is unknown, defaulting to 1000 [ 364.394119][ T1340] chnl_net:caif_netlink_parms(): no params data found [ 364.455416][ T160] batadv_slave_0: left promiscuous mode [ 364.493750][ T4833] smc: removing ib device syz! [ 364.587624][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.594849][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.602720][ T1340] bridge_slave_0: entered allmulticast mode [ 364.609919][ T1340] bridge_slave_0: entered promiscuous mode [ 364.617011][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.624216][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.631782][ T1340] bridge_slave_1: entered allmulticast mode [ 364.640064][ T1340] bridge_slave_1: entered promiscuous mode [ 364.689343][ T1366] chnl_net:caif_netlink_parms(): no params data found [ 364.709475][ T1340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.753556][ T1340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.824543][ T1340] team0: Port device team_slave_0 added [ 364.830561][ T1366] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.837775][ T1366] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.845781][ T1366] bridge_slave_0: entered allmulticast mode [ 364.853751][ T1366] bridge_slave_0: entered promiscuous mode [ 364.863612][ T160] IPVS: stop unused estimator thread 0... [ 364.873797][ T1340] team0: Port device team_slave_1 added [ 364.879885][ T1366] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.887118][ T1366] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.904330][ T1366] bridge_slave_1: entered allmulticast mode [ 364.919254][ T1366] bridge_slave_1: entered promiscuous mode [ 364.956333][ T1340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.963351][ T1340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.989551][ T1340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.002359][ T160] ------------[ cut here ]------------ [ 365.007975][ T160] WARNING: CPU: 0 PID: 160 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 365.017926][ T160] Modules linked in: [ 365.022124][ T160] CPU: 0 UID: 0 PID: 160 Comm: kworker/u8:4 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 365.036508][ T160] Tainted: [W]=WARN [ 365.040542][ T160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.050725][ T160] Workqueue: netns cleanup_net [ 365.055607][ T160] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 365.061343][ T160] Code: 48 8d bb 30 0e 00 00 e8 72 0e bd fc 48 8b bb 30 0e 00 00 e8 36 8f c9 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c5 50 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 b7 50 a2 fc 90 0f 0b 90 4c 89 f7 e8 3b [ 365.081386][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.088408][ T160] RSP: 0018:ffffc90000f13c60 EFLAGS: 00010293 [ 365.094591][ T160] RAX: ffffffff84b5a8eb RBX: ffff88810406af80 RCX: ffff8881019c6300 [ 365.102618][ T160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810406bd80 [ 365.110819][ T160] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 365.118854][ T160] R10: ffffc90000f13be8 R11: 0001c90000f13be8 R12: ffffffff86c8b7c0 [ 365.126969][ T160] R13: ffff88810406afa8 R14: ffff88810406bd80 R15: ffff88810406af80 [ 365.135005][ T160] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 365.141692][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.144096][ T160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.157660][ T160] CR2: 0000001b33621ff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 365.165954][ T160] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000082 [ 365.174123][ T160] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 365.182224][ T160] Call Trace: [ 365.185513][ T160] [ 365.188467][ T160] xfrm_net_exit+0x2d/0x60 [ 365.192938][ T160] ops_undo_list+0x278/0x410 [ 365.197697][ T160] cleanup_net+0x2de/0x4d0 [ 365.202180][ T160] process_scheduled_works+0x4cb/0x9d0 [ 365.207809][ T160] worker_thread+0x582/0x770 [ 365.212481][ T160] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 365.218471][ T160] kthread+0x489/0x510 [ 365.222623][ T160] ? __pfx_worker_thread+0x10/0x10 [ 365.227913][ T160] ? __pfx_kthread+0x10/0x10 [ 365.232549][ T160] ret_from_fork+0xda/0x150 [ 365.237125][ T160] ? __pfx_kthread+0x10/0x10 [ 365.241869][ T160] ret_from_fork_asm+0x1a/0x30 [ 365.246702][ T160] [ 365.249809][ T160] ---[ end trace 0000000000000000 ]--- [ 365.271279][ T1340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.278488][ T1340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.304563][ T1340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.325307][ T1366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.340517][ T1366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.370178][ T1366] team0: Port device team_slave_0 added [ 365.395079][ T1366] team0: Port device team_slave_1 added [ 365.403074][ T1340] hsr_slave_0: entered promiscuous mode [ 365.409274][ T1340] hsr_slave_1: entered promiscuous mode [ 365.415662][ T1340] debugfs: 'hsr0' already exists in 'hsr' [ 365.421408][ T1340] Cannot create hsr debugfs directory [ 365.450850][ T1366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.457862][ T1366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.483908][ T1366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.504504][ T1366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.511589][ T1366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.537793][ T1366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.588923][ T1366] hsr_slave_0: entered promiscuous mode [ 365.595102][ T1366] hsr_slave_1: entered promiscuous mode [ 365.601110][ T1366] debugfs: 'hsr0' already exists in 'hsr' [ 365.606849][ T1366] Cannot create hsr debugfs directory [ 365.990830][ T1340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.014795][ T1340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.034627][ T1340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.041594][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.053844][ T1340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.083064][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13017'. [ 366.095707][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 366.095723][ T29] audit: type=1400 audit(377.290:14978): avc: denied { firmware_load } for pid=1496 comm="syz.4.13017" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 366.116709][ T1340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.126680][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.172737][ T1340] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.175309][ T1501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.180746][ T29] audit: type=1400 audit(377.376:14979): avc: denied { read write } for pid=1500 comm="syz.0.13019" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.189591][ T1501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.211753][ T29] audit: type=1400 audit(377.376:14980): avc: denied { open } for pid=1500 comm="syz.0.13019" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.242685][ T29] audit: type=1400 audit(377.376:14981): avc: denied { ioctl } for pid=1500 comm="syz.0.13019" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.291296][ T4861] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.298495][ T4861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.328800][ T4861] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.336014][ T4861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.347224][ T29] audit: type=1400 audit(377.537:14982): avc: denied { create } for pid=1500 comm="syz.0.13019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.366735][ T29] audit: type=1400 audit(377.537:14983): avc: denied { ioctl } for pid=1500 comm="syz.0.13019" path="socket:[104140]" dev="sockfs" ino=104140 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.437156][ T1366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 366.447531][ T29] audit: type=1400 audit(377.676:14984): avc: denied { module_request } for pid=1340 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 366.473180][ T1366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 366.486532][ T29] audit: type=1400 audit(377.719:14985): avc: denied { sys_module } for pid=1340 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.497359][ T1366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.520452][ T1366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.571571][ T1340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.598511][ T1366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.613497][ T1366] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.627448][ T4861] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.634685][ T4861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.645480][ T4861] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.652971][ T4861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.725045][ T1340] veth0_vlan: entered promiscuous mode [ 366.756646][ T1340] veth1_vlan: entered promiscuous mode [ 366.778698][ T1340] veth0_macvtap: entered promiscuous mode [ 366.792178][ T1366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.807748][ T1340] veth1_macvtap: entered promiscuous mode [ 366.825757][ T1340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.839171][ T1340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.860529][ T4822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.896981][ T4822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.924736][ T29] audit: type=1400 audit(378.180:14986): avc: denied { mounton } for pid=1340 comm="syz-executor" path="/root/syzkaller.PZAh5T/syz-tmp" dev="sda1" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 366.957836][ T4822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.989671][ T29] audit: type=1400 audit(378.180:14987): avc: denied { mount } for pid=1340 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 367.002896][ T1366] veth0_vlan: entered promiscuous mode [ 367.011732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.020911][ T1366] veth1_vlan: entered promiscuous mode [ 367.030572][ T4822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.052636][ T3401] hid_parser_main: 54 callbacks suppressed [ 367.052666][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.066229][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.070027][ T1366] veth0_macvtap: entered promiscuous mode [ 367.073841][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.082886][ T1366] veth1_macvtap: entered promiscuous mode [ 367.087584][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.099958][ T1366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.100398][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.115024][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.119115][ T1366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.122761][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.136687][ T160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.137706][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.151657][ T160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.153795][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.170269][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.177838][ T3401] hid-generic 0000:0000:0008.0012: unknown main item tag 0x0 [ 367.189130][ T3401] hid-generic 0000:0000:0008.0012: hidraw0: HID vc.87 Device [syz0] on syz1 [ 367.194067][ T4833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.225136][ T4833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.624575][ T1620] netlink: 'syz.1.13053': attribute type 3 has an invalid length. [ 367.645197][ T1619] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 367.714099][ T37] hid-generic 0000:0000:0000.0013: hidraw0: HID v8.00 Device [syz1] on syz0 [ 367.768493][ T1636] bond1: entered promiscuous mode [ 367.773702][ T1636] bond1: entered allmulticast mode [ 367.779452][ T1636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.793694][ T1636] bond1 (unregistering): Released all slaves [ 367.870015][ T1652] bond6: entered promiscuous mode [ 367.875250][ T1652] bond6: entered allmulticast mode [ 367.884184][ T1652] 8021q: adding VLAN 0 to HW filter on device bond6 [ 367.904792][ T1652] bond6 (unregistering): Released all slaves [ 367.919576][ T1658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13070'. [ 367.984483][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.050363][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.058493][ T1679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13081'. [ 368.098521][ T1684] netlink: 332 bytes leftover after parsing attributes in process `syz.0.13083'. [ 368.351201][ T1714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13097'. [ 368.360363][ T1714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13097'. [ 368.390227][ T1719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13099'. [ 368.431672][ T1725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13102'. [ 368.440938][ T1725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13102'. [ 368.953756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.019140][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.234919][ T1801] netlink: 'syz.0.13135': attribute type 3 has an invalid length. [ 369.297307][ T1809] sctp: [Deprecated]: syz.3.13139 (pid 1809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.297307][ T1809] Use struct sctp_sack_info instead [ 369.463907][ T1833] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 369.487528][ T1833] SELinux: failed to load policy [ 369.560036][ T1846] SELinux: failed to load policy [ 369.621565][ T1860] ref_ctr_offset mismatch. inode: 0x38bf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 369.776416][ T1882] netlink: 'syz.1.13176': attribute type 3 has an invalid length. [ 369.782022][ T1887] pimreg: entered allmulticast mode [ 369.790683][ T1887] pimreg: left allmulticast mode [ 369.820067][ T1892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13180'. [ 369.831141][ T1892] IPVS: Error joining to the multicast group [ 369.914321][ C0] net_ratelimit: 1 callbacks suppressed [ 369.914343][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.988464][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.098810][ T1923] netlink: 'syz.6.13194': attribute type 1 has an invalid length. [ 370.537927][ T1990] SELinux: failed to load policy [ 370.801581][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 370.801602][ T29] audit: type=1400 audit(382.343:15323): avc: denied { write } for pid=2009 comm="syz.4.13234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 370.826933][ T29] audit: type=1400 audit(382.343:15324): avc: denied { connect } for pid=2009 comm="syz.4.13234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 370.846330][ T29] audit: type=1400 audit(382.343:15325): avc: denied { name_connect } for pid=2009 comm="syz.4.13234" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 370.885392][ T29] audit: type=1326 audit(382.429:15326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2011 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6280eebe9 code=0x7ffc0000 [ 370.908627][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.915825][ T29] audit: type=1326 audit(382.429:15327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2011 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6280eebe9 code=0x7ffc0000 [ 370.939343][ T29] audit: type=1326 audit(382.429:15328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2011 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd6280eebe9 code=0x7ffc0000 [ 370.958159][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.962874][ T29] audit: type=1326 audit(382.429:15329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2011 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6280eebe9 code=0x7ffc0000 [ 370.992644][ T29] audit: type=1326 audit(382.429:15330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2011 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6280eebe9 code=0x7ffc0000 [ 371.015571][ T29] audit: type=1326 audit(382.429:15331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2011 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd6280eebe9 code=0x7ffc0000 [ 371.038495][ T29] audit: type=1326 audit(382.429:15332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2011 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6280eebe9 code=0x7ffc0000 [ 371.155011][ T2031] __nla_validate_parse: 3 callbacks suppressed [ 371.155061][ T2031] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13244'. [ 371.248215][ T2046] 9pnet: Could not find request transport: 0xffffffffffffffff [ 371.333304][ T2063] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 371.393445][ T3401] IPVS: starting estimator thread 0... [ 371.410457][ T2064] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.417772][ T2064] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.467727][ T2064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.478341][ T2064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.489699][ T2073] IPVS: using max 2160 ests per chain, 108000 per kthread [ 371.545097][ T2070] macvlan1: entered promiscuous mode [ 371.551711][ T2070] ipvlan0: entered promiscuous mode [ 371.564087][ T2070] ipvlan0: left promiscuous mode [ 371.579871][ T2070] macvlan1: left promiscuous mode [ 371.592871][ T4845] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.622816][ T4845] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.639079][ T4845] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.649163][ T4845] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.702111][ T2104] loop6: detected capacity change from 0 to 2048 [ 371.728985][ T2104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.847884][ T1143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.861761][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.891062][ T2126] netlink: '+}[@': attribute type 10 has an invalid length. [ 371.898698][ T2126] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 371.927136][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.935759][ T2126] team0: Port device geneve1 added [ 372.382576][ T2163] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13304'. [ 372.821802][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.858343][ T2205] rdma_op ffff888127cc2d80 conn xmit_rdma 0000000000000000 [ 372.896351][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.398011][ T2238] serio: Serial port ptm0 [ 373.505953][ T2243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13336'. [ 373.800530][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.865733][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.254149][ T2284] bond6: entered promiscuous mode [ 374.259524][ T2284] bond6: entered allmulticast mode [ 374.265245][ T2284] 8021q: adding VLAN 0 to HW filter on device bond6 [ 374.286251][ T2284] bond6 (unregistering): Released all slaves [ 374.483560][ T10] hid_parser_main: 62 callbacks suppressed [ 374.483637][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.497166][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.504640][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.512477][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.519971][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.527394][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.535059][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.542700][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.550337][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.557866][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 374.558926][ T2302] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 374.569146][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v8.00 Device [syz1] on syz0 [ 374.617280][ T3401] hid-generic 0000:0000:0008.0015: hidraw0: HID vc.87 Device [syz0] on syz1 [ 374.733110][ T3401] IPVS: starting estimator thread 0... [ 374.761066][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.826934][ T2316] IPVS: using max 2160 ests per chain, 108000 per kthread [ 374.835064][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.880100][ T2325] bond1: entered promiscuous mode [ 374.885345][ T2325] bond1: entered allmulticast mode [ 374.899471][ T2325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.916176][ T2325] bond1 (unregistering): Released all slaves [ 374.931939][ T2329] netlink: 'syz.4.13372': attribute type 3 has an invalid length. [ 375.025862][ T2333] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 375.059313][ T2335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13375'. [ 375.142236][ T10] hid-generic 0000:0000:0008.0016: hidraw0: HID vc.87 Device [syz0] on syz1 [ 375.316444][ T2360] bond3: entered promiscuous mode [ 375.321817][ T2360] bond3: entered allmulticast mode [ 375.343150][ T2360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.374947][ T2360] bond3 (unregistering): Released all slaves [ 375.414796][ T2369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13391'. [ 375.498864][ T3401] hid-generic 0000:0000:0008.0017: hidraw0: HID vc.87 Device [syz0] on syz1 [ 375.500750][ T10] IPVS: starting estimator thread 0... [ 375.600128][ T2381] IPVS: using max 2208 ests per chain, 110400 per kthread [ 375.730380][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.783405][ T2402] bond1: entered promiscuous mode [ 375.788588][ T2402] bond1: entered allmulticast mode [ 375.796048][ T2402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.804439][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.816077][ T2402] bond1 (unregistering): Released all slaves [ 376.322269][ T2415] netlink: 332 bytes leftover after parsing attributes in process `syz.3.13409'. [ 376.448442][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 376.448499][ T29] audit: type=1326 audit(644.400:15464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.478017][ T29] audit: type=1326 audit(644.400:15465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.541130][ T29] audit: type=1326 audit(644.400:15466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.564287][ T29] audit: type=1326 audit(644.400:15467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.587421][ T29] audit: type=1326 audit(644.400:15468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.610936][ T29] audit: type=1326 audit(644.400:15469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.634534][ T29] audit: type=1326 audit(644.400:15470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.657938][ T29] audit: type=1326 audit(644.400:15471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.681359][ T29] audit: type=1326 audit(644.400:15472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.705112][ T29] audit: type=1326 audit(644.464:15473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.3.13414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f787ebe9 code=0x7ffc0000 [ 376.708460][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.755517][ T2435] bond1: entered promiscuous mode [ 376.760892][ T2435] bond1: entered allmulticast mode [ 376.771130][ T2435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.773795][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.799213][ T2435] bond1 (unregistering): Released all slaves [ 376.950212][ T2452] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13425'. [ 377.122462][ T2471] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.385820][ T2496] netlink: 'syz.6.13443': attribute type 13 has an invalid length. [ 377.394325][ T2496] netlink: 'syz.6.13443': attribute type 17 has an invalid length. [ 377.482290][ T2496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.499220][ T2496] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.510776][ T2496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.533600][ T2506] wireguard0: entered promiscuous mode [ 377.539314][ T2506] wireguard0: entered allmulticast mode [ 377.668531][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.743070][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.770410][ T2545] netlink: 100 bytes leftover after parsing attributes in process `syz.4.13467'. [ 377.853208][ T2560] veth7: entered promiscuous mode [ 377.910929][ T2570] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13478'. [ 378.001321][ T2574] infiniband syz!: set active [ 378.006214][ T2574] infiniband syz!: added team_slave_0 [ 378.023018][ T2574] RDS/IB: syz!: added [ 378.031611][ T2588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13486'. [ 378.032032][ T2574] smc: adding ib device syz! with port count 1 [ 378.047261][ T2574] smc: ib device syz! port 1 has pnetid [ 378.056873][ T2588] IPVS: Error joining to the multicast group [ 378.410329][ T2614] can0: slcan on ttyS3. [ 378.435558][ T2618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13500'. [ 378.499853][ T2614] can0 (unregistered): slcan off ttyS3. [ 378.500361][ T2623] tipc: Started in network mode [ 378.510549][ T2623] tipc: Node identity ac14140f, cluster identity 4711 [ 378.520180][ T2623] tipc: New replicast peer: 255.255.255.255 [ 378.526750][ T2623] tipc: Enabled bearer , priority 10 [ 378.686272][ T2638] netlink: 'syz.1.13509': attribute type 6 has an invalid length. [ 378.717404][ T2643] gre1: entered promiscuous mode [ 378.893607][ T2667] 9pnet_fd: Insufficient options for proto=fd [ 378.920552][ T2670] vhci_hcd: invalid port number 85 [ 378.925768][ T2670] vhci_hcd: default hub control req: 0501 v0005 i0055 l0 [ 379.381139][ T2720] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13547'. [ 379.401980][ T2720] 0ªX¹¦À: renamed from caif0 [ 379.415240][ T2720] 0ªX¹¦À: entered allmulticast mode [ 379.565626][ T2733] netlink: 428 bytes leftover after parsing attributes in process `+}[@'. [ 379.574468][ T1405] tipc: Node number set to 2886997007 [ 379.616411][ C0] net_ratelimit: 4 callbacks suppressed [ 379.616433][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.681870][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.730252][ T2754] SELinux: failed to load policy [ 379.847329][ T2769] netlink: 'syz.0.13570': attribute type 1 has an invalid length. [ 379.855264][ T2769] netlink: 'syz.0.13570': attribute type 4 has an invalid length. [ 379.863226][ T2769] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.13570'. [ 380.249030][ T4861] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 380.250492][ T2813] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 380.287359][ T2817] macvtap0: refused to change device tx_queue_len [ 380.576619][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.651683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.676318][ T2868] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 380.829753][ T2883] usb usb1: usbfs: process 2883 (syz.1.13620) did not claim interface 2 before use [ 380.918168][ T2892] rdma_op ffff888105541980 conn xmit_rdma 0000000000000000 [ 381.046827][ T2906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2906 comm=syz.6.13631 [ 381.094870][ T2911] sd 0:0:1:0: device reset [ 381.119691][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 381.119826][ T29] audit: type=1400 audit(2000000000.665:15774): avc: denied { read write } for pid=2913 comm="syz.6.13635" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 381.149812][ T29] audit: type=1400 audit(2000000000.665:15775): avc: denied { open } for pid=2913 comm="syz.6.13635" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 381.177572][ T9] hid_parser_main: 150 callbacks suppressed [ 381.177594][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x1 [ 381.191208][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 381.198939][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 381.206578][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 381.214144][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 381.221820][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 381.229305][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 381.236726][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 381.244378][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 381.252010][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 381.266862][ T9] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 381.296134][ T29] audit: type=1400 audit(2000000000.858:15776): avc: denied { create } for pid=2919 comm="syz.1.13638" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.338819][ T29] audit: type=1400 audit(2000000000.890:15777): avc: denied { unlink } for pid=1366 comm="syz-executor" name="file0" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.387461][ T29] audit: type=1400 audit(2000000000.944:15778): avc: denied { create } for pid=2927 comm="syz.1.13642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 381.408300][ T29] audit: type=1400 audit(2000000000.944:15779): avc: denied { write } for pid=2927 comm="syz.1.13642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 381.429123][ T29] audit: type=1400 audit(2000000000.944:15780): avc: denied { nlmsg_write } for pid=2927 comm="syz.1.13642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 381.459663][ T29] audit: type=1400 audit(2000000001.029:15781): avc: denied { sys_module } for pid=2929 comm="syz.4.13643" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 381.537116][ T29] audit: type=1400 audit(2000000001.094:15782): avc: denied { create } for pid=2941 comm="syz.4.13647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 381.565035][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.612240][ T2952] loop6: detected capacity change from 0 to 512 [ 381.621046][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.628455][ T2952] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 381.630180][ T29] audit: type=1400 audit(2000000001.190:15783): avc: denied { mounton } for pid=2950 comm="syz.6.13652" path="/143/bus" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 381.672830][ T2952] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.13652: invalid indirect mapped block 83886080 (level 1) [ 381.690830][ T2957] pimreg: entered allmulticast mode [ 381.697184][ T2957] pimreg: left allmulticast mode [ 381.703402][ T2952] EXT4-fs (loop6): Remounting filesystem read-only [ 381.710266][ T2952] EXT4-fs (loop6): 1 orphan inode deleted [ 381.716255][ T2952] EXT4-fs (loop6): 1 truncate cleaned up [ 381.723257][ T2952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.746382][ T2968] IPVS: Error connecting to the multicast addr [ 381.757109][ T1143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.002263][ T3000] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13670'. [ 382.016078][ T3000] netem: change failed [ 382.020390][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13672'. [ 382.032173][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13672'. [ 382.055222][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13672'. [ 382.081465][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13672'. [ 382.147822][ T3017] vhci_hcd: invalid port number 23 [ 382.177747][ T3021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13680'. [ 382.289402][ T3041] netlink: 'syz.4.13690': attribute type 6 has an invalid length. [ 382.370204][ T3050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13694'. [ 382.390086][ T3050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13694'. [ 382.515206][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.554065][ T3069] netlink: 'syz.4.13703': attribute type 1 has an invalid length. [ 382.589968][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.666356][ T3091] SELinux: failed to load policy [ 382.810054][ T3118] block device autoloading is deprecated and will be removed. [ 382.863016][ T3126] bridge: RTM_NEWNEIGH with invalid ether address [ 382.912824][ T3132] loop6: detected capacity change from 0 to 512 [ 382.920468][ T3132] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 382.931984][ T3132] EXT4-fs (loop6): 1 truncate cleaned up [ 382.938213][ T3132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.952281][ T3132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.984665][ T3134] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.992061][ T3134] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.042817][ T3134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.054009][ T3134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.095032][ T4833] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.105884][ T4833] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.115164][ T4833] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.124392][ T4833] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.152143][ T3142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13732'. [ 383.485106][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.559116][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.720262][ T3182] rdma_op ffff888119cca980 conn xmit_rdma 0000000000000000 [ 384.006455][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.050125][ T3220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3220 comm=syz.4.13765 [ 384.239486][ T3247] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 384.240302][ T3246] IPVS: stopping master sync thread 3247 ... [ 384.272512][ T3250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3250 comm=syz.3.13779 [ 384.306988][ T3254] batman_adv: batadv0: Adding interface: dummy0 [ 384.313329][ T3254] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.338814][ T3254] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 384.463110][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.528975][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.803424][ T3298] macvlan1: entered promiscuous mode [ 384.810677][ T3298] ipvlan0: entered promiscuous mode [ 384.816571][ T3298] ipvlan0: left promiscuous mode [ 384.822010][ T3298] macvlan1: left promiscuous mode [ 384.999354][ T3319] loop6: detected capacity change from 0 to 512 [ 385.008417][ T3319] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 385.026427][ T3319] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.13819: iget: bogus i_mode (5) [ 385.049296][ T3319] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.13819: couldn't read orphan inode 15 (err -117) [ 385.063792][ T3319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.076358][ T3319] ext2 filesystem being mounted at /167/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.102692][ T1143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.174392][ T3335] batman_adv: batadv0: Adding interface: dummy0 [ 385.180828][ T3335] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.208530][ T3335] batman_adv: batadv0: Interface activated: dummy0 [ 385.209125][ T3339] loop6: detected capacity change from 0 to 1024 [ 385.220051][ T3335] batadv0: mtu less than device minimum [ 385.227609][ T3335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.238379][ T3335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.244394][ T3339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.249295][ T3335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.269979][ T3339] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.13816: Allocating blocks 497-513 which overlap fs metadata [ 385.271734][ T3335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.288113][ T3339] EXT4-fs (loop6): pa ffff888100677930: logic 256, phys. 369, len 9 [ 385.296371][ T3335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.303881][ T3339] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 385.314720][ T3335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.335163][ T3335] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.355524][ T3337] pimreg: entered allmulticast mode [ 385.408833][ T1143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.560416][ T3375] netlink: 'syz.3.13832': attribute type 3 has an invalid length. [ 385.641570][ T3391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13837'. [ 385.955293][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 385.955310][ T29] audit: type=1400 audit(2000000261.852:15990): avc: denied { mounton } for pid=3432 comm="syz.0.13854" path="/proc/1055/task" dev="proc" ino=110520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 386.011083][ T29] audit: type=1400 audit(2000000261.884:15991): avc: denied { mount } for pid=3432 comm="syz.0.13854" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 386.033298][ T29] audit: type=1326 audit(2000000261.905:15992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3435 comm="syz.1.13855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ce83ebe9 code=0x7ffc0000 [ 386.057128][ T29] audit: type=1326 audit(2000000261.905:15993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3435 comm="syz.1.13855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ce83ebe9 code=0x7ffc0000 [ 386.080934][ T29] audit: type=1326 audit(2000000261.905:15994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3435 comm="syz.1.13855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f90ce83ebe9 code=0x7ffc0000 [ 386.104858][ T29] audit: type=1326 audit(2000000261.905:15995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3435 comm="syz.1.13855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ce83ebe9 code=0x7ffc0000 [ 386.128822][ T29] audit: type=1326 audit(2000000261.905:15996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3435 comm="syz.1.13855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ce83ebe9 code=0x7ffc0000 [ 386.176295][ T29] audit: type=1400 audit(2000000262.088:15997): avc: denied { setopt } for pid=3442 comm="syz.1.13859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 386.509892][ T3447] ================================================================== [ 386.518023][ T3447] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 386.526660][ T3447] [ 386.529014][ T3447] write to 0xffff8881153b7228 of 8 bytes by task 3453 on cpu 1: [ 386.536703][ T3447] shmem_file_splice_read+0x470/0x600 [ 386.542116][ T3447] splice_direct_to_actor+0x26c/0x680 [ 386.547515][ T3447] do_splice_direct+0xda/0x150 [ 386.552313][ T3447] do_sendfile+0x380/0x650 [ 386.556775][ T3447] __x64_sys_sendfile64+0x105/0x150 [ 386.562110][ T3447] x64_sys_call+0x2bb0/0x2ff0 [ 386.566915][ T3447] do_syscall_64+0xd2/0x200 [ 386.571446][ T3447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.577390][ T3447] [ 386.579737][ T3447] write to 0xffff8881153b7228 of 8 bytes by task 3447 on cpu 0: [ 386.587387][ T3447] shmem_file_splice_read+0x470/0x600 [ 386.592808][ T3447] splice_direct_to_actor+0x26c/0x680 [ 386.598215][ T3447] do_splice_direct+0xda/0x150 [ 386.603050][ T3447] do_sendfile+0x380/0x650 [ 386.607510][ T3447] __x64_sys_sendfile64+0x105/0x150 [ 386.612841][ T3447] x64_sys_call+0x2bb0/0x2ff0 [ 386.617549][ T3447] do_syscall_64+0xd2/0x200 [ 386.622091][ T3447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.628014][ T3447] [ 386.630348][ T3447] value changed: 0x00000000000169ed -> 0x0000000000016a24 [ 386.637644][ T3447] [ 386.640104][ T3447] Reported by Kernel Concurrency Sanitizer on: [ 386.646310][ T3447] CPU: 0 UID: 0 PID: 3447 Comm: syz.0.13860 Tainted: G W 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 386.660500][ T3447] Tainted: [W]=WARN [ 386.664318][ T3447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.674482][ T3447] ================================================================== [ 389.301112][ C0] net_ratelimit: 20 callbacks suppressed [ 389.301133][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.375706][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.270448][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.344983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.248458][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.313752][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.321469][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.217786][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.283701][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.178430][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.253097][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.156500][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.222340][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.126347][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.200421][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.086589][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.160998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available