last executing test programs: 4m22.156431961s ago: executing program 0 (id=51): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x40043d04, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x200000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getpgid(r1) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r5, 0x0, 0x37, 0x75) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r6, 0x0, 0x0, 0x1001f0) 4m18.927176094s ago: executing program 0 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f00000000c0)={0x2}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x7ff, 0x0, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xf) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004b00004000640000000690780aa10108ac1414aa44140a01ffffffffffffaa7eac1414aa000080010703ef0000e50000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000790780000"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0x80, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x4, 0x3f, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0xd, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x2005, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x400, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x100006, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x2, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x31b9, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0x8001]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff561fd, 0x8000004, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff7}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000180)={{0x33, @multicast2, 0x4e22, 0x3, 'sed\x00', 0x20, 0x5a34, 0x5e}, {@empty, 0x4e20, 0x10000, 0x8, 0xab5, 0x5}}, 0x44) ioctl$FS_IOC_RESVSP(r13, 0x40305828, 0x0) 4m17.161502248s ago: executing program 0 (id=69): r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1dd, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd8580, 0x11c) sendfile(r0, r1, 0x0, 0xffff) 4m17.018835614s ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_procfs(0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) pread64(r3, &(0x7f0000000040)=""/48, 0x30, 0x4abb) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 4m16.000840243s ago: executing program 0 (id=79): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000300), &(0x7f0000000700)=r0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x80000001, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x204, 0x6, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0x1ff, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x88, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x402, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x4251, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3fe, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0x6d5f, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0x7, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x2, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x804, 0x7fff, 0x62, 0xfffeffff, 0x5, 0x0, 0x7fffffff, 0x3, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0xcb4, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x9, 0x28000, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe68, 0x10, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m15.921252397s ago: executing program 0 (id=88): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x4000000) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="002b00fcb611606187c3563516857a6092b2fb6362ada3a23c543900520006494b9e6de9dfaff6", 0x3}, {&(0x7f0000000340)="751af6b645cce9debf3dec12794bb7b6591cf36c63ca18d36ce27bf9", 0x1c}], 0x2}}, {{0x0, 0x0, &(0x7f00000012c0), 0x5b}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2008000) 4m15.875575279s ago: executing program 32 (id=88): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x4000000) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="002b00fcb611606187c3563516857a6092b2fb6362ada3a23c543900520006494b9e6de9dfaff6", 0x3}, {&(0x7f0000000340)="751af6b645cce9debf3dec12794bb7b6591cf36c63ca18d36ce27bf9", 0x1c}], 0x2}}, {{0x0, 0x0, &(0x7f00000012c0), 0x5b}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2008000) 1m6.619154161s ago: executing program 5 (id=4010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2, 0x0, '\x00', 0x0, 0x6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xfb, 0xff, 0x3, '\x00', 0x69}, {0x0, 0xfa, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x6}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x8, '\x00', 0xdc}, {0xfb, 0x58, 0xfb, '\x00', 0xc}, {0xfe, 0x1, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x42, 0x6, '\x00', 0xb}, {0xb, 0x6, 0xc0, '\x00', 0x9}, {0x31, 0xc, 0x5}, {0x9, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x4d, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x8f, 0x7e, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1m6.464770828s ago: executing program 5 (id=4012): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r2, 0x80000cf5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1m6.407182501s ago: executing program 5 (id=4014): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000301010100000000000000000700000608001a400000000608000840000000040800234000000001080003"], 0x34}, 0x1, 0x0, 0x0, 0x24044854}, 0x20000000) 1m6.404535581s ago: executing program 5 (id=4016): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x130800b, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m6.329349815s ago: executing program 5 (id=4017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x7}, {0xc}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x7, 0xc, 0x8, 0x0, 0x0, 0xc, 0xd, 0x5, 0xd, 0xd, 0xe, 0xa, 0x5, 0x0, 0x2, 0x4], 0x0, [0x0, 0x2, 0x4, 0x6, 0x3ff, 0x4, 0x6, 0xb, 0x9, 0x418, 0x9, 0x0, 0x5, 0xf800, 0x5, 0x2], [0xc, 0x9, 0x4, 0x2, 0x80, 0x3, 0x0, 0x6, 0x5, 0xd7, 0x6, 0x1, 0x3, 0x8, 0x4cb, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m6.264829818s ago: executing program 5 (id=4018): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000002001,flush,uid=', @ANYRESHEX=0x0, @ANYBLOB="0004074443", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1ff, &(0x7f00000008c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 1m6.050235508s ago: executing program 33 (id=4018): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000002001,flush,uid=', @ANYRESHEX=0x0, @ANYBLOB="0004074443", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1ff, &(0x7f00000008c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 36.900586164s ago: executing program 3 (id=4641): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000700)=ANY=[], 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 36.795159489s ago: executing program 3 (id=4643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.731163072s ago: executing program 3 (id=4644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x55) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$loop(&(0x7f0000000040), 0xa5, 0x8000) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) 35.51695008s ago: executing program 3 (id=4651): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 35.207162795s ago: executing program 3 (id=4653): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) 35.035125943s ago: executing program 3 (id=4656): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 35.006922615s ago: executing program 34 (id=4656): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 17.531194185s ago: executing program 4 (id=5033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) connect$netlink(r1, &(0x7f00000000c0), 0xc) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17.531085856s ago: executing program 4 (id=5034): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000002400)={0x1, 0x0, 0x80000000, 0x3}) 17.454931559s ago: executing program 4 (id=5037): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x400}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x909}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x34, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 16.614141349s ago: executing program 4 (id=5055): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 16.539165773s ago: executing program 4 (id=5056): r0 = socket$inet6(0xa, 0x2, 0x3a) write$eventfd(r0, &(0x7f0000000040)=0x7, 0x8) 16.462522096s ago: executing program 4 (id=5057): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x4, 0x2c, 0x0, @remote, @local, {[], "43d50543"}}}}}, 0x0) 16.39483014s ago: executing program 35 (id=5057): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x4, 0x2c, 0x0, @remote, @local, {[], "43d50543"}}}}}, 0x0) 9.021002151s ago: executing program 6 (id=5186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000440fdffffff0800064000000008080007400000000108000240000000170900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x40) 8.898998066s ago: executing program 6 (id=5191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000030101040000004000000000020000002400018014000180080001"], 0x38}}, 0x0) 8.802749071s ago: executing program 6 (id=5198): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000040000000000000a010000e9"], 0x0, 0x51, 0x0, 0x1, 0x3}, 0x28) 8.790407181s ago: executing program 6 (id=5200): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 8.739251633s ago: executing program 6 (id=5203): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000030000000000000e0300003e40000000030000000000000800000000000000000000000204000000000000000000000a020000000000006161"], 0x0, 0x52, 0x0, 0x1}, 0x28) 8.558551892s ago: executing program 6 (id=5208): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xdd86}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 8.288614475s ago: executing program 36 (id=5208): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xdd86}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 2.811863036s ago: executing program 1 (id=5386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@loopback]}}}]}, 0x4c}}, 0x0) 2.757890678s ago: executing program 1 (id=5389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) 2.09466595s ago: executing program 1 (id=5400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f00000026c0)="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"/336, 0xffffff07}, {&(0x7f00000046c0)="6a2b0f48673a48424757c5300bf19bb842104eef0cb0f864d7f91cd0f864ce63b6d75ef2bdd2239990ce8b62d3cb1043684db92f5b38ec6c9730d743a29b4588b95d65ad13a98224f961497798b5e5d302b0977194905f855093fd3f288ac0d94d1971ec7e794345fdf5368e58c993a2aea157c8b7a1b7c74f231a60dfadd9be019580ace836d9277c895d09af54387220751a5222638c6e77b421950773dc7d1c1a5a1e64a9a77888541bc114e0815507ea265c5a7dbd91ae277338c13b19b2a121ed789af2241df2febfb05066cf734425499a94fcb155e02fa85b19cb6a4a9564c775454a3dc9e882ddbf0c288d4c6310333d29b0525d228228de7524966242886e224f6a09f8fbe2cdbd0dee278779229e093d243efda38b820a3f4c3a605185e8c5c9350456e4a23a3161e6ffcb37bfe8cce006aa58a419166d2847b9bec4aacaced9c568c2ccd019f279e5ca25d8830eaac51dd3a53ea122b4540452ba0d6de2a78691c1bf12bbb29d577074a2498f17e08faf1e2d5c35c2e3d347ef713816895949256825bf9face0e998c5e978984f55ff2687c54dcd8692ab85478dd37d5192e7b2b24394e93d3a2aa43e1048f3ce287154077270d6a6f0d4063cc32eb5fffb206539f799c9340b489170baf6f82084f0c414260daeb1be28443c97e2b06d7fb16f01bc84b95fccd73ecfb45dbc9d4463a98180f86b50e18ca89576ccda95d2fdbdcf8b1e4f37bd09fd1640eaaf9fc338388d3e5ee9b74e7fe9ec3a78fc54f273ff128193eee3bd784913c8cc6a911c2b6714c8fc4c4aa1eda43dedf51a9f9543bf9f40f3d1d3d289f1d7de3dedfd9f416d450a2e982ab740940b0dabeed7091ca099b9106ab16b1c8f4d9501643212b3772d7902220aa1aa0869d97943abe8d9f37e81e33394b4a0a56b880206a1eb2d1536ab8d0c58db3b22853280a96f93f89a6b107fab3233a554076b8735c7c92b9c9885454581aecfba04c460dbf10e50fc15e0c08a48926e4e4a82c024ec8d54eaf9dca63a20fcc2e948380a191381649d9ed328a32e5da65e1e63136c0d772e05a774ddf9d3b2ef3aca3e2b11de324bd785fe9c13c56e46354f0eff21f656e7de3e25920875941786baa8ef1123d78574513fe07fd62fe9710e092c76bb0543dace86c5b9387e5174fb68a8fb12ed35f6d15e4ad90b57ca7bf0a1fd2958c945951cc1c21bb048f71f531a66ab104d0a4a6541ecfb5538a5681b84304af7152e5b9e3c449374f0b757f09e1aea29fb48b8ce121c3c536b88a9d3a19862108cee8344229bf9a1bcfc5a643032ccd47bb195d8027ca6fed2c105485db58f5334b0cb40aab1a15f8737f80f14d86add4d5aec5caa41f8e3d91f435d4d5378bb80be6f297215836d1bd95ebf82994a7e35b3bc0fb87b521a0a9588d3c0d05a6f12a8eb63eba1ae35d9e3eeecf1e065fff42ae0483c5d1a34fd572d4b1232fa394f87524af6d542039a7583f97ec3ff1d17bc20d5d8eec614be258841b1a11096139b999b5fee913dff742508f0ba9af56c744597533f25860fbd2129582546407696b776caca9bbb97ff5ff1bc7b92fb558615203a10f9d8ba460d603ec9056f48869789c32ba44ad42191a29480853d6b1440dd322b2851ec3aca1fbc08ac0754625c80cb5e67de400fc696c9bb37f8534b8dc337f46fcc2aaed438a21d306c15e8f79f079aa75e3e66cc13f44c8d9970d549855114630c7c17858d10790b7d90c588665ecc4b9a8de1881dd690ff6095743cf00ca6a9380ec145e6c2883b36ac4bea689dc4d32e562c1aba54693fed67ad14fce297d3e1db2eea597427a82e2a91c2668e82dec903b85bf2abee23088a4b9c330a801ed472e8bf05baa3af8d7101b6fc7c120fc3d7a76dc14ccbb492fab13a6dc3021cefe45e92891c5dc81223721cb9744c12d8754a8760556a03788c4d1cb613de900a02cd4f6df1de72e9e233c53ab343868df04101b54f4fedddf4bcd7d7694301d43446309bcf0a3c8a8046e3c6a3eb63a7a2613533c8b81b993c4b34bbcaa569bfa8bbff6793f213003de8684f8653a5b7c34a01ee9e4d2d7e76604e398c03f0df04a78251433e43a2c8cc7486c9e48853c4d30723a7fba307c648949a839b1fb72237b429b539a08b4f18b85e8c06476634682575198e5cb6e74123ece543c2a6f05c74786fe4bc749e33eebeae83f65b19d33dff32de05f58916ed6da78766b7e84715a94524a9a4c7f9740e498eee39aed0a8429f0422e5402e116e77ce2d19595f7b2d91a63ac73ae614260e7138f6d2d24b8469815cbc3c04bb59168f811030a3959a924fa352ffdf98128c55e12a7f85c6ce31f0fb89a603099d29795744b37983b25660e501798d5737c5fb8101485a4f21566900a9fec5dd3606c8717364c48a8e580ef99230f4c1fe85666001bf08adbce326ed68875309a35f7f2b60fed0aa40b8a4bc76040de91264304ec500964916d2c97cafb608a9a6b2f236748d8ff3c42c5302f76a23c95ff9ea7960c6e8cdc63bd127d4c1592f15426b7de5ed31f4d7dddcf053fbd2721408a0c8934afa729edfe12a878ca1010cbc6f68c4fc7d2d4ae8b83fd21190737209004e793e5b96bb117c4c39f321e3987164ec3a44853e1803ea80b4f3c6fcfaf4b76acada3ace312b97ae334bfd8445731acf97d194a2744ee2f6bde2531325bd2cbfac11af864eff6a49dbf45884c98c954188b6582e9e9c12a393aa2a54133f8b8171e17e6d8a5cff85b0383d2eec203acf7d0bf2e0b2b3fb1a39e2eb655fdbe36b7e1e7c241b1b7e528319a1e6bdeb25dff85b8785e04cabd4dd167063cf0e759e9b550fd09c4d8dbce6e50d1ca1ff86fa8fa582b133dbe453556605820b313118210e53fcf699cf4c911699d8d5c3c2bb7c48ed3f429fde940463aa221bc6506170f8ee6fdc3f2d6343f8b396bc16f73f15c1c870d2ed186e2d786ba5a88e0db3a7089f45f9be6f81245b64544779c208491c4521df50acffe759aa432b4d9b1925dbcfd557d1627786fb59fb652069d1f92790221054187cf1f6f1ede0baec89b3544633d5630d907ab43d6ce762bd5e9db107389d3b6c12d142ab40ccdf35da66325a1f2712aa5c3182e3d925bc812a8593c7bf9b9bcb7754dd51968e674ecc76b8d22cc6c7d9098c71d9be38ab604decdadab828d67494e1042ad28a5386b72f9cae8664785f372abe40efe896dca68f97deb5d4a5eab7363e2ac09525b1dd5a75a7fb3e8a13aa4fd6684edd5a52878222b752c1d3d0d6150389fd9d60511bca75da1d34049e64fa6564692ac98334885e6176c2e6e28ce26f58b1676656afe4d237cc7ebcff7d9f7b3d6c3bf2a4e07c23b7554ea26421735acff2e43a3dee5c4c13b044a8b0a6ea61b9702cf9ca800757cfa6b334c1b572596e6d0405e8fd1bf39a2f01f17f9f0993f7fea94f23b0863181911b8da3e0a10b27b00b47b0369cf947c34a1a87a605f23644b230cc6f1eeb71732212935f4ff87edecddc264c05c062f8ea3349fec35162970aa837e69e0b5b477ba9be96ecdf85fe7b646a0c5f9c6129b8932050893989f35e1f940f6d87ca4c23761bf2e15412532f73174e880d046912d32a9aef746d16e1d0f52fe84c555aaf3aa54c8c3a3cc829c0c5d0a5ff46d36d402653efb6ea47e9c23f4a7751fbbb69dfd97b7a6ac83477a0681f89982efdc350a2c972f08bf9b0ed60e55566836aa8630f55e3a4fe489d6d0ac6eed020adef1eeff6380d33a5b6a6f6ba36498c564f233cb5099483d5377d5b3b79f5c6ace6e09705ad26ef2a83fb45febee3646c1d1960ad187439a08cb703cab825777a4f8a0fc83b06606e29cd50fa52e21a2614f71a6fffaf3661914d4af14beec1c94484891a5aa8f3e3fe37ad207495e2724d02af3bf4b43f4251f632ea3ae53e30ab8939394a2a4b6c6039c308bd67d5fe6425a5f192357a55d393fafa41c7a7f25ecdd24d74c52e380fb19e9de24fcca005dd4b7f78410afb7d309d6be8bb791b21884431be65f87473890eb2ab80b76fa9e1d508571988749a6f7a6ee625d85f33c8160339bb5ab1ca5447f8b6684e02a3ad07d9089cb1211f62cbbb5bfc62c2f5bb0d5e2c4cf2dba3eff58de8a622e281bff404fac10ad10508c2c0301167c05bed87361a6efeae9fbbb1e399db6c8892c96d7a7405d75691daaa29d0f5afe2291d96ff2955e17592319780ee707bc61db4ac83220bf944a967bbad4666935fcec49d04d0b920635b5cce51491a9574fd0639fc73c816f7e9e734c9140ec5e364cca2b9ceecb3e99275a6b91cbb7659be4e69db4472da56b411706001052a1f18eccbaae3c8792c859f0319e6b33bc905f22c2245f3a3fc1436fda35d4447b6d34fdb0ed1dad815a4b4163b764303f5c5df1f3011446474d9dd966d4f0caa7002ca315e41e10de7942f7fe7f6b172fbd64fbbf8584c0e8a24e2a3cf06bad260d6ce48f64d75b393f21491b307b05611fc9b08999968141c9c68c09b8c2e798f22a813e4bbe409f394455239122bccd19f356802a1e3a2754e07da3b7bc7d92fd83593e06bffff8844f2c0ff905460574538727aa4279e7ee29df786500e1e6be50cabe59056b0afeba022f2f6d3bde2820a79a699548f57e0b69747470fc67c54950be72263f39af22fe5f2ac787be3fcc47aba2e088d3fa1953f5fdf9336c5e4ce16a4e1a4e10423050cc2421c2b3e17335ccb5a1a2a0a7ad0914e08a77c804e8e0c87cb38d7a233c25772393fb694b9838ad0c3101d2a0bd69f5020b473ae7efe196a5a5cb1c4ad9ce653d4240b0f95a8bbc393bc36e07b8e2ac0af9da4d0c8a99d30be86841e3bc37f851ed25bd73d224dc138577030c38f80796f80cc779a41ccc7ff91dd87a6aa1b6b1c449e2270f7b06afd4459a3630eb3395eea8b009ab638a2bdfb956dca950090a4caca7cdddf0e9b7d1c211eea0fad1bfcf316551353979fc69703416ed82be02c72f0a02ada11a5a79b28b6b7ad6053035e9319d00a41941598022e13929a30", 0xdea}], 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 2.056820222s ago: executing program 1 (id=5401): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002b40)={0x1b, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) 2.037321173s ago: executing program 1 (id=5402): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) 1.975029716s ago: executing program 1 (id=5405): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x6, 0xe, 0x0, 0xcac0, 0xb}}}, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(r0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.205824872s ago: executing program 7 (id=5412): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.114914716s ago: executing program 7 (id=5416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 937.749465ms ago: executing program 8 (id=5430): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x8000000, 0x0, 0x3, 0x3, 0x4, 0xffff}, 0x20) 924.115235ms ago: executing program 8 (id=5431): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf2502000000140001800800030004000000080003000000000004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x68, r7, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff2547}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 879.195328ms ago: executing program 2 (id=5432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r2, 0x20b, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4) 879.040828ms ago: executing program 2 (id=5433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xdc, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="24000000000000002900000032000000ff11"], 0x28, 0x7ffffff7}}], 0x1, 0x4040) 879.009658ms ago: executing program 2 (id=5434): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff01c}, {0x6}]}, 0x10) 878.968948ms ago: executing program 2 (id=5435): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="f1a1c1", 0x3}}, 0x0) 878.019228ms ago: executing program 8 (id=5436): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfa, {}, [@IFLA_IFNAME={0x14}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x10000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000002) 850.326229ms ago: executing program 8 (id=5437): syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0xd27}}}}}, 0x0) 843.790949ms ago: executing program 2 (id=5438): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1ff}], 0x1, 0x7, 0x0) 771.031933ms ago: executing program 8 (id=5439): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0xfffffffc, 0x32}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) 770.732603ms ago: executing program 8 (id=5440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000720000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) 289.394156ms ago: executing program 7 (id=5441): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xc, @esp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x2, 0x81}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@local, @private=0xa010101, 0x0, 0x5}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x806, 0x5, [0x6, 0x6]}, 0xff, 0xffffffff}}}) 279.146646ms ago: executing program 7 (id=5442): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt(r1, 0xc41, 0xdf, &(0x7f0000001100), 0x0) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000005c0)="0a00dc99ea47", 0x6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff0600000000"], 0x1c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 107.244434ms ago: executing program 9 (id=5449): r0 = socket(0x1d, 0x2, 0x6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) 107.098624ms ago: executing program 7 (id=5450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "06d29f1776045d08", "400eee6caef8f8a115c83ba2232e2d4b", "0076d300", "1e093a6f5d2a2899"}, 0x1) 106.995094ms ago: executing program 7 (id=5451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 106.925064ms ago: executing program 9 (id=5452): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), 0x10) 73.854266ms ago: executing program 9 (id=5453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@updsa={0x138, 0x1a, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@local, @in=@private=0xa010100, 0x4e23, 0x4, 0x4e20, 0xc477, 0xa, 0x60, 0x0, 0x84}, {@in=@private=0xa010100, 0x4d5, 0x3c}, @in=@local, {0x5, 0x524a, 0x200, 0x3, 0x100, 0x2, 0xffffffff, 0x5}, {0x4, 0x3, 0x800, 0x1}, {0x7, 0x2, 0x4}, 0x70bd2b, 0x3507, 0x2, 0x4, 0x6, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc-camellia-aesni-avx2\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x890}, 0x2014) 64.018086ms ago: executing program 9 (id=5454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, 0x0, 0x20000000}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x156, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x120, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[@srh={0x29, 0x0, 0x4, 0x0, 0x2, 0x18, 0x6}, @dstopts={0x2c, 0xa, '\x00', [@generic={0x4, 0x55, "8d3a8100ab87eabe65ff2a51dac55b54509cc443d663405edf0fe5330ad05521531b25563b8a4bd289bab333de55663e40ad3b0d45120d378575dc3615133ff5e3b2cf1acbcbc8bb19bc4778cc00c01beadd334034"}]}, @fragment={0xc, 0x0, 0x2, 0x0, 0x0, 0xf, 0x68}, @dstopts={0x5e, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @routing={0x21, 0xa, 0x1, 0x1f, 0x0, [@mcast2, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @dev={0xfe, 0x80, '\x00', 0x3f}]}], @pkt_toobig={0x2, 0x0, 0x0, 0xc, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) 11.124959ms ago: executing program 9 (id=5455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) 10.923979ms ago: executing program 9 (id=5456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 0s ago: executing program 2 (id=5457): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) kernel console output (not intermixed with test programs): 6103][ T7656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.955068][ T7656] device veth0_vlan entered promiscuous mode [ 180.963430][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.967250][ T7674] overlayfs: unrecognized mount option "userxattr" or missing value [ 180.971762][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.988255][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.998466][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.006657][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.014797][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.023365][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.031516][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.039315][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.060331][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.070355][ T7656] device veth1_macvtap entered promiscuous mode [ 181.083245][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.100593][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.271800][ T7689] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.600396][ T24] audit: type=1400 audit(1773750617.801:628): avc: denied { mounton } for pid=7696 comm="syz.4.3128" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 181.652552][ T7701] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3130'. [ 182.297100][ T24] audit: type=1326 audit(1773750618.501:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 182.325741][ T24] audit: type=1326 audit(1773750618.501:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 182.349611][ T24] audit: type=1326 audit(1773750618.501:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 182.373336][ T24] audit: type=1326 audit(1773750618.501:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 182.397271][ T24] audit: type=1326 audit(1773750618.501:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 182.421567][ T24] audit: type=1326 audit(1773750618.501:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 182.446810][ T24] audit: type=1326 audit(1773750618.501:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 182.718391][ T7718] F2FS-fs (loop4): fault_injection options not supported [ 182.725537][ T7718] F2FS-fs (loop4): fault_type options not supported [ 182.733406][ T7718] F2FS-fs (loop4): invalid crc value [ 182.859338][ T7718] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.903211][ T7718] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.908745][ T415] usb 6-1: USB disconnect, device number 2 [ 182.980153][ T7736] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3143'. [ 182.985990][ T7718] attempt to access beyond end of device [ 182.985990][ T7718] loop4: rw=2049, want=45232, limit=40427 [ 183.007982][ T7718] attempt to access beyond end of device [ 183.007982][ T7718] loop4: rw=2049, want=45232, limit=40427 [ 183.020632][ T24] audit: type=1326 audit(1773750619.221:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 183.046257][ T24] audit: type=1326 audit(1773750619.231:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 183.046279][ T7417] attempt to access beyond end of device [ 183.046279][ T7417] loop4: rw=2049, want=45240, limit=40427 [ 183.188009][ T7749] netlink: 'syz.1.3151': attribute type 11 has an invalid length. [ 183.696810][ T433] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 183.906810][ T415] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 183.936749][ T433] usb 6-1: Using ep0 maxpacket: 16 [ 184.056820][ T433] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.067001][ T433] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.176175][ T415] usb 5-1: Using ep0 maxpacket: 8 [ 184.337022][ T415] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 184.344966][ T415] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 184.356744][ T415] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 184.368694][ T415] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 184.380591][ T415] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 184.396075][ T415] usb 5-1: config 168 interface 0 has no altsetting 0 [ 184.417783][ T433] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.426895][ T433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.435211][ T433] usb 6-1: Product: syz [ 184.439520][ T433] usb 6-1: Manufacturer: syz [ 184.444127][ T433] usb 6-1: SerialNumber: syz [ 184.476999][ T415] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 184.484673][ T415] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 184.496130][ T415] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 184.507858][ T415] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 184.517904][ T7788] overlayfs: failed to clone upperpath [ 184.519350][ T415] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 184.539865][ T415] usb 5-1: config 168 interface 0 has no altsetting 0 [ 184.626808][ T415] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 184.634344][ T415] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 184.645550][ T415] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 184.657198][ T415] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 184.668247][ T415] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 184.681715][ T415] usb 5-1: config 168 interface 0 has no altsetting 0 [ 184.776923][ T433] usb 6-1: 0:2 : does not exist [ 184.785703][ T433] usb 6-1: USB disconnect, device number 3 [ 184.794200][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.926871][ T415] usb 5-1: string descriptor 0 read error: -22 [ 184.933277][ T415] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 184.942602][ T415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.227877][ T415] usb 5-1: USB disconnect, device number 4 [ 186.246784][ T415] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.265295][ T7842] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 187.091345][ T7850] device batadv_slave_0 entered promiscuous mode [ 187.136774][ T415] usb 5-1: Using ep0 maxpacket: 32 [ 187.465639][ T7861] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue [ 187.478678][ T415] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 187.500196][ T415] usb 5-1: config 0 has no interface number 0 [ 187.506512][ T415] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.838525][ T7861] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 187.845159][ T415] usb 5-1: config 0 interface 89 has no altsetting 0 [ 187.921053][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 187.923120][ T24] audit: type=1400 audit(1773750624.121:644): avc: denied { mounton } for pid=7882 comm="syz.1.3206" path="/17/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 187.960204][ T24] audit: type=1400 audit(1773750624.151:645): avc: denied { unmount } for pid=7656 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 187.979218][ T7887] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 188.068441][ T7889] device batadv_slave_0 entered promiscuous mode [ 188.132111][ T415] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 188.311951][ T415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.371728][ T415] usb 5-1: Product: syz [ 188.397436][ T415] usb 5-1: Manufacturer: syz [ 188.406083][ T415] usb 5-1: SerialNumber: syz [ 188.426904][ T415] usb 5-1: config 0 descriptor?? [ 188.920611][ T7942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7942 comm=syz.1.3231 [ 188.968511][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.977002][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.010543][ T7940] device bridge_slave_0 entered promiscuous mode [ 189.029428][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.036745][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.044727][ T7940] device bridge_slave_1 entered promiscuous mode [ 189.132583][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.139687][ T7940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.146980][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.154295][ T7940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.178975][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.199917][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.207606][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.634211][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.643069][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.651257][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.659154][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.667312][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.683006][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.690193][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.697988][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.706337][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.713522][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.721554][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.910737][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.927154][ T7973] device batadv_slave_0 entered promiscuous mode [ 189.954159][ T7940] device veth0_vlan entered promiscuous mode [ 190.183577][ T415] usb 5-1: USB disconnect, device number 5 [ 190.203844][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.229865][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.243343][ T7940] device veth1_macvtap entered promiscuous mode [ 190.254226][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.262497][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.274101][ T7977] EXT4-fs (loop4): Test dummy encryption mode enabled [ 190.281538][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.293785][ T7977] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue [ 190.309134][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.320915][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.323921][ T7977] EXT4-fs (loop4): shut down requested (2) [ 190.330215][ T24] audit: type=1400 audit(1773750626.531:646): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 190.340672][ T7977] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 190.358504][ T24] audit: type=1400 audit(1773750626.531:647): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.399323][ T24] audit: type=1400 audit(1773750626.531:648): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.420943][ T24] audit: type=1400 audit(1773750626.531:649): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.448192][ T300] device bridge_slave_1 left promiscuous mode [ 190.456945][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.464468][ T24] audit: type=1400 audit(1773750626.531:650): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 190.485614][ T24] audit: type=1400 audit(1773750626.531:652): avc: denied { create } for pid=7976 comm="syz.4.3242" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 190.528355][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 190.546979][ T300] device bridge_slave_0 left promiscuous mode [ 190.553755][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.562945][ T300] device veth1_macvtap left promiscuous mode [ 190.569377][ T300] device veth0_vlan left promiscuous mode [ 190.635807][ T24] audit: type=1400 audit(1773750626.531:651): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 190.833724][ T24] audit: type=1400 audit(1773750626.561:653): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.043707][ T7998] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.3246: bad orphan inode 15 [ 191.054306][ T7998] ext4_test_bit(bit=14, block=5) = 0 [ 191.060063][ T7998] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,inlinecrypt,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 191.496768][ T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.588199][ T8022] tipc: Started in network mode [ 191.593224][ T8022] tipc: Own node identity 7f000001, cluster identity 4711 [ 191.601295][ T8022] tipc: Enabling of bearer rejected, failed to enable media [ 191.609844][ T7892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 191.619201][ T8022] netlink: 39 bytes leftover after parsing attributes in process `syz.5.3254'. [ 191.628702][ T8022] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3254'. [ 191.638711][ T8022] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 191.647373][ T8022] tipc: Enabled bearer , priority 10 [ 191.736741][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 191.856863][ T5] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.868196][ T5] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.876743][ T7892] usb 4-1: Using ep0 maxpacket: 16 [ 191.998412][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.007811][ T5] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 192.016180][ T5] usb 5-1: Product: syz [ 192.020492][ T5] usb 5-1: Manufacturer: syz [ 192.046883][ T7892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.057692][ T5] hub 5-1:4.0: USB hub found [ 192.126875][ T7892] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 107, changing to 7 [ 192.296853][ T7892] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 192.306160][ T7892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.325575][ T7892] usb 4-1: Product: syz [ 192.333043][ T7892] usb 4-1: Manufacturer: syz [ 192.341127][ T7892] usb 4-1: SerialNumber: syz [ 192.366878][ T5] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 192.417797][ T8041] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue [ 192.440522][ T8041] EXT4-fs (loop5): re-mounted. Opts: (null) [ 192.454159][ T8041] overlayfs: upper fs is r/o, try multi-lower layers mount [ 192.524424][ T8045] EXT4-fs (loop5): Ignoring removed bh option [ 192.530653][ T8045] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.540362][ T8045] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 192.549835][ T8045] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 192.559546][ T8045] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 192.633561][ T8045] System zones: 0-2, 18-18, 34-35 [ 192.640627][ T8045] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,bh,bsdgroups,,errors=continue [ 192.665937][ T8045] fscrypt (loop5, inode 12): Error -61 getting encryption context [ 192.746862][ T7892] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 192.766831][ T7892] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 192.775968][ T25] tipc: 32-bit node address hash set to 100007f [ 192.826902][ T7892] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 192.839758][ T7892] usb 4-1: USB disconnect, device number 4 [ 193.056786][ T5] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 193.342174][ T8075] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.467177][ T5] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 193.476082][ T5] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 193.636853][ T5] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 193.646110][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.654594][ T5] usb 6-1: Product: syz [ 193.659209][ T5] usb 6-1: Manufacturer: syz [ 193.666517][ T5] usb 6-1: SerialNumber: syz [ 193.675289][ T5] usb 6-1: config 0 descriptor?? [ 194.014844][ T8103] device syzkaller0 entered promiscuous mode [ 194.366855][ T5276] usb 5-1: USB disconnect, device number 6 [ 194.513848][ T8131] xt_hashlimit: size too large, truncated to 1048576 [ 194.981651][ T8140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.325603][ T8144] tipc: Started in network mode [ 195.350199][ T8144] tipc: Own node identity fe80000000000000000000000000000f, cluster identity 4711 [ 195.378266][ T8144] tipc: Enabled bearer , priority 10 [ 195.464101][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 195.464114][ T24] audit: type=1400 audit(1773750631.661:656): avc: denied { read } for pid=8149 comm="syz.4.3302" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 195.557433][ T24] audit: type=1400 audit(1773750631.661:657): avc: denied { open } for pid=8149 comm="syz.4.3302" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 195.616815][ T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 195.801888][ T5276] usb 6-1: USB disconnect, device number 4 [ 196.346792][ T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.356164][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.364460][ T5] usb 4-1: Product: syz [ 196.369003][ T5] usb 4-1: Manufacturer: syz [ 196.373609][ T5] usb 4-1: SerialNumber: syz [ 196.506778][ T415] tipc: 32-bit node address hash set to f0080fe [ 196.716829][ T7892] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.986781][ T7892] usb 5-1: Using ep0 maxpacket: 32 [ 197.026792][ T415] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 197.266855][ T7892] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 197.275985][ T415] usb 6-1: Using ep0 maxpacket: 32 [ 197.281789][ T7892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.290375][ T7892] usb 5-1: Product: syz [ 197.294747][ T7892] usb 5-1: Manufacturer: syz [ 197.299832][ T7892] usb 5-1: SerialNumber: syz [ 197.305647][ T7892] usb 5-1: config 0 descriptor?? [ 197.306506][ T8178] FAT-fs (loop1): Directory bread(block 64) failed [ 197.317566][ T8178] FAT-fs (loop1): Directory bread(block 65) failed [ 197.324520][ T8178] FAT-fs (loop1): Directory bread(block 66) failed [ 197.331472][ T8178] FAT-fs (loop1): Directory bread(block 67) failed [ 197.338403][ T8178] FAT-fs (loop1): Directory bread(block 68) failed [ 197.345413][ T8178] FAT-fs (loop1): Directory bread(block 69) failed [ 197.352443][ T8178] FAT-fs (loop1): Directory bread(block 70) failed [ 197.359403][ T8178] FAT-fs (loop1): Directory bread(block 71) failed [ 197.366214][ T8178] FAT-fs (loop1): Directory bread(block 72) failed [ 197.372817][ T8178] FAT-fs (loop1): Directory bread(block 73) failed [ 197.396848][ T415] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 197.405527][ T415] usb 6-1: config 0 has no interface number 0 [ 197.591980][ T8180] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.646864][ T415] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 197.656389][ T415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.664588][ T415] usb 6-1: Product: syz [ 197.668825][ T415] usb 6-1: Manufacturer: syz [ 197.673478][ T415] usb 6-1: SerialNumber: syz [ 197.679100][ T415] usb 6-1: config 0 descriptor?? [ 198.371551][ T415] usb 4-1: USB disconnect, device number 5 [ 198.731288][ T5] usb 5-1: USB disconnect, device number 7 [ 198.755832][ T8204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.891910][ T25] usb 6-1: USB disconnect, device number 5 [ 201.129944][ T8289] cgroup: syz.1.3352 (8289) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 201.181339][ T8289] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 201.208234][ T24] audit: type=1400 audit(1773750637.411:658): avc: denied { mounton } for pid=8288 comm="syz.1.3352" path="/61/file0" dev="cgroup" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 201.606174][ T8305] loop: Write error at byte offset 4, length 3584. [ 201.613590][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 201.624783][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 201.633604][ T8305] loop: Write error at byte offset 4, length 3584. [ 201.640597][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 201.652160][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 201.664310][ T8307] netlink: 'syz.4.3358': attribute type 12 has an invalid length. [ 201.672544][ T8307] netlink: 'syz.4.3358': attribute type 29 has an invalid length. [ 201.708981][ T8307] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3358'. [ 201.733229][ T8307] netlink: 'syz.4.3358': attribute type 2 has an invalid length. [ 201.756218][ T8307] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3358'. [ 202.132540][ T8339] device batadv_slave_0 entered promiscuous mode [ 202.401571][ T24] audit: type=1400 audit(1773750638.601:659): avc: denied { write } for pid=8343 comm="syz.3.3374" name="file0" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 202.454999][ T24] audit: type=1400 audit(1773750638.621:660): avc: denied { open } for pid=8343 comm="syz.3.3374" path="/21/file0" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 202.479926][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3375'. [ 202.656855][ T8358] device bridge_slave_0 left promiscuous mode [ 202.663681][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.705409][ T8358] device bridge_slave_1 left promiscuous mode [ 202.801836][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.102750][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3388'. [ 203.976732][ T15] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 205.216816][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.227843][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.237925][ T15] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.247102][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.261542][ T15] usb 4-1: config 0 descriptor?? [ 205.307347][ T15] hub 4-1:0.0: USB hub found [ 205.559032][ T8387] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 205.580228][ T8387] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 205.589433][ T8387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 205.598528][ T8387] EXT4-fs (loop3): orphan cleanup on readonly fs [ 205.605971][ T8387] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 205.615703][ T8387] EXT4-fs warning (device loop3): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.633900][ T8387] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 205.641058][ T8387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3393: bg 0: block 40: padding at end of block bitmap is not set [ 205.680541][ T8387] EXT4-fs (loop3): Remounting filesystem read-only [ 205.687400][ T8387] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 205.696306][ T8387] EXT4-fs (loop3): 1 truncate cleaned up [ 205.702143][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit, [ 205.726854][ T15] hub 4-1:0.0: 1 port detected [ 205.946791][ T15] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 205.957041][ T15] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 206.056827][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 206.063234][ T15] usbhid: probe of 4-1:0.0 failed with error -71 [ 206.097025][ T15] usb 4-1: USB disconnect, device number 6 [ 206.639521][ T24] audit: type=1400 audit(1773750642.841:661): avc: denied { accept } for pid=8472 comm="syz.2.3422" path="socket:[40931]" dev="sockfs" ino=40931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 207.252123][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3435'. [ 207.299435][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3435'. [ 207.367518][ T7367] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 207.756862][ T7367] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.777488][ T7367] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.957155][ T7367] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.981194][ T7367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.237228][ T7367] usb 5-1: Product: syz [ 208.241436][ T7367] usb 5-1: Manufacturer: syz [ 208.246912][ T7367] usb 5-1: SerialNumber: syz [ 208.303800][ T8538] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 208.363164][ T24] audit: type=1400 audit(1773750644.561:662): avc: denied { remove_name } for pid=8537 comm="syz.3.3446" name="file0" dev="loop3" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.387383][ T24] audit: type=1400 audit(1773750644.561:663): avc: denied { rename } for pid=8537 comm="syz.3.3446" name="file0" dev="loop3" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.537002][ T8543] exfat: Deprecated parameter 'namecase' [ 208.544986][ T8543] exfat: Deprecated parameter 'namecase' [ 208.577043][ T7367] usb 5-1: 0:2 : does not exist [ 208.586970][ T7367] usb 5-1: USB disconnect, device number 8 [ 208.615635][ T8543] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 208.655752][ T24] audit: type=1400 audit(1773750644.851:664): avc: denied { read open } for pid=8542 comm="syz.3.3448" path="/30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.965662][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 209.365054][ T8569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=8569 comm=syz.5.3455 [ 210.304201][ T8573] EXT4-fs (loop3): Test dummy encryption mode enabled [ 210.527765][ T8573] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000003,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 211.543341][ T8605] device syzkaller0 entered promiscuous mode [ 211.668413][ T8603] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 212.166902][ T24] audit: type=1400 audit(1773750648.361:665): avc: denied { write } for pid=8602 comm="syz.1.3467" path="/79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop1" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.345687][ T24] audit: type=1400 audit(1773750648.491:666): avc: denied { map } for pid=8602 comm="syz.1.3467" path="/79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop1" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.391673][ T24] audit: type=1400 audit(1773750648.491:667): avc: denied { execute } for pid=8602 comm="syz.1.3467" path="/79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop1" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.796209][ T24] audit: type=1326 audit(1773750648.501:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.3.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 213.012102][ T24] audit: type=1326 audit(1773750648.511:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.3.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 213.083056][ T24] audit: type=1326 audit(1773750648.511:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.3.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 213.124707][ T24] audit: type=1326 audit(1773750648.521:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.3.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 213.148554][ T24] audit: type=1326 audit(1773750648.521:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.3.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 213.173910][ T24] audit: type=1326 audit(1773750648.521:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.3.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 213.221847][ T24] audit: type=1326 audit(1773750648.521:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.3.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 213.280894][ T8643] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.314574][ T8643] EXT4-fs (loop5): 1 truncate cleaned up [ 213.321974][ T8628] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 213.343111][ T8643] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 213.370940][ T8628] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1600728191 (102446604224 ns) > initial count (42797365888 ns). Using initial count to start timer. [ 213.406251][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 213.415028][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.423686][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 213.432501][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.449970][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.458651][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.467174][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.475863][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.676965][ T8653] device syzkaller0 entered promiscuous mode [ 213.716939][ T5] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 214.242051][ T8670] F2FS-fs (loop3): invalid crc value [ 214.260144][ T8670] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.280232][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 214.305976][ T8670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 214.352151][ T7940] attempt to access beyond end of device [ 214.352151][ T7940] loop3: rw=2049, want=45104, limit=40427 [ 214.436921][ T5] usb 6-1: unable to get BOS descriptor or descriptor too short [ 214.508614][ T8687] device syzkaller0 entered promiscuous mode [ 214.526829][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 214.546938][ T5] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 214.620897][ T8691] erofs: (device loop4): mounted with root inode @ nid 36. [ 214.726852][ T5] usb 6-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 214.745972][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.764181][ T5] usb 6-1: Product: syz [ 214.833902][ T5] usb 6-1: Manufacturer: syz [ 214.841118][ T5] usb 6-1: SerialNumber: syz [ 214.994153][ T8705] 9pnet: Could not find request transport: rdma [ 215.259214][ T8704] device batadv_slave_0 left promiscuous mode [ 215.274835][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 215.290697][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.304618][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 215.314053][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.323492][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.326789][ T5] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 215.333751][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.348543][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.359003][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.366779][ T5] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 215.368276][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.405909][ T5] usb 6-1: USB disconnect, device number 6 [ 215.775637][ T8718] device syzkaller0 entered promiscuous mode [ 216.126803][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 216.583439][ T8731] F2FS-fs (loop1): Test dummy encryption mode enabled [ 216.592251][ T8731] F2FS-fs (loop1): invalid crc value [ 216.607906][ T8731] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.684475][ T8731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.836786][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 216.846670][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 216.874410][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.893253][ T25] usb 4-1: config 0 descriptor?? [ 216.996217][ T8751] device batadv_slave_0 left promiscuous mode [ 217.050718][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 217.072816][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 217.101274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.121846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 217.168235][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.177594][ T5276] usb 4-1: USB disconnect, device number 7 [ 217.198347][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.215787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.234272][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.251376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.269944][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.289090][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3518'. [ 218.702965][ T558] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 219.021359][ T8784] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 219.034458][ T7367] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 219.129211][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.136411][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.146962][ T558] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 219.155339][ T558] usb 5-1: config 0 has no interface number 0 [ 219.161796][ T558] usb 5-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 219.173069][ T558] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.185856][ T558] usb 5-1: config 0 interface 113 has no altsetting 0 [ 219.488175][ T7367] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.498773][ T7367] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.526921][ T558] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 219.536228][ T558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.544419][ T558] usb 5-1: Product: syz [ 219.548702][ T558] usb 5-1: Manufacturer: syz [ 219.553385][ T558] usb 5-1: SerialNumber: syz [ 219.558746][ T558] usb 5-1: config 0 descriptor?? [ 219.637886][ T8799] device batadv_slave_0 left promiscuous mode [ 219.657360][ T8799] device veth0_vlan left promiscuous mode [ 219.664266][ T8799] device veth0_vlan entered promiscuous mode [ 219.670503][ T7367] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 219.684510][ T8799] device veth1_macvtap left promiscuous mode [ 219.690979][ T7367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.699489][ T7367] usb 4-1: Product: syz [ 219.699537][ T8799] device veth1_macvtap entered promiscuous mode [ 219.703788][ T7367] usb 4-1: Manufacturer: syz [ 219.715595][ T7367] usb 4-1: SerialNumber: syz [ 219.724206][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.725261][ T7367] usb 4-1: config 0 descriptor?? [ 219.733933][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.750521][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.761739][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.768816][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.776621][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.785182][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.793949][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.801112][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.817557][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.819441][ T7367] usb 5-1: USB disconnect, device number 9 [ 219.872437][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 219.880986][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.889901][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 219.898280][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.906829][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.915095][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.923669][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.932274][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.940898][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.949506][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.958032][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.966628][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.975327][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.984023][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.992840][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.001293][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.002455][ T558] usb 4-1: USB disconnect, device number 8 [ 220.009929][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.024187][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.032815][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.041146][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.049552][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.057639][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.066279][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.075023][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.083150][ T8801] device batadv_slave_1 entered promiscuous mode [ 220.090088][ T8800] device batadv_slave_1 left promiscuous mode [ 220.096445][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.102617][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 221.102630][ T24] audit: type=1326 audit(1773750657.301:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.3546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x0 [ 221.766797][ T558] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 222.046868][ T558] usb 6-1: Using ep0 maxpacket: 32 [ 222.186787][ T558] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.356828][ T558] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 222.369619][ T558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.400288][ T558] usb 6-1: Product: syz [ 222.410365][ T558] usb 6-1: Manufacturer: syz [ 222.416993][ T558] usb 6-1: SerialNumber: syz [ 222.730688][ T558] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 222.783099][ T558] usb 6-1: USB disconnect, device number 7 [ 222.838981][ T8898] tipc: Started in network mode [ 222.846221][ T8895] FAT-fs (loop3): Directory bread(block 64) failed [ 222.852931][ T8895] FAT-fs (loop3): Directory bread(block 65) failed [ 222.860360][ T8898] tipc: Own node identity 5efc09cf0d36, cluster identity 4711 [ 222.860853][ T8895] FAT-fs (loop3): Directory bread(block 66) failed [ 222.874958][ T8895] FAT-fs (loop3): Directory bread(block 67) failed [ 222.877563][ T8898] tipc: Enabled bearer , priority 0 [ 222.881949][ T8895] FAT-fs (loop3): Directory bread(block 68) failed [ 222.890139][ T8902] device syzkaller0 entered promiscuous mode [ 222.896070][ T8895] FAT-fs (loop3): Directory bread(block 69) failed [ 222.908454][ T8895] FAT-fs (loop3): Directory bread(block 70) failed [ 222.914978][ T8895] FAT-fs (loop3): Directory bread(block 71) failed [ 222.921592][ T8895] FAT-fs (loop3): Directory bread(block 72) failed [ 222.928192][ T8895] FAT-fs (loop3): Directory bread(block 73) failed [ 222.937280][ T8895] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.963123][ T8898] tipc: Resetting bearer [ 222.965596][ T8895] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 222.977234][ T8907] overlayfs: failed to clone upperpath [ 222.977600][ T8895] FAT-fs (loop3): Filesystem has been set read-only [ 222.983325][ T8897] tipc: Resetting bearer [ 223.010228][ T8897] tipc: Disabling bearer [ 223.149256][ T8918] loop1: p1 p2 p4[EZD] [ 223.167218][ T8918] loop1: p4 start 201326592 is beyond EOD, truncated [ 223.407935][ T24] audit: type=1400 audit(1773750659.611:684): avc: denied { getopt } for pid=8944 comm="syz.4.3591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.788000][ T8962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3598'. [ 224.080535][ T8966] overlayfs: workdir and upperdir must reside under the same mount [ 224.288806][ T7] attempt to access beyond end of device [ 224.288806][ T7] loop4: rw=1, want=1041, limit=128 [ 224.625335][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3612'. [ 224.866580][ T9007] 9pnet: Insufficient options for proto=fd [ 225.679695][ T9015] overlayfs: failed to clone upperpath [ 225.909119][ T9046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=9046 comm=syz.1.3633 [ 225.937052][ T7367] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.206769][ T7367] usb 5-1: Using ep0 maxpacket: 32 [ 226.265368][ T9059] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3640'. [ 226.326778][ T7367] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.338157][ T7367] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.381238][ T9067] overlayfs: failed to clone upperpath [ 226.466829][ T7367] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.476045][ T7367] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 226.484931][ T7367] usb 5-1: Product: syz [ 226.489524][ T7367] usb 5-1: Manufacturer: syz [ 226.537796][ T7367] hub 5-1:4.0: USB hub found [ 226.909412][ T9087] EXT4-fs (loop3): Ignoring removed orlov option [ 226.986870][ T7367] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 227.118491][ T9087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002] [ 227.126936][ T9087] System zones: 0-2, 18-18, 34-35 [ 227.134704][ T9087] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noinit_itable,orlov,usrquota,data_err=ignore,debug,noauto_da_alloc,,errors=continue [ 227.150687][ T9087] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.661442][ T9099] netlink: 'syz.1.3652': attribute type 13 has an invalid length. [ 227.683359][ T9099] netlink: 'syz.1.3652': attribute type 17 has an invalid length. [ 227.692463][ T9099] gretap0: refused to change device tx_queue_len [ 227.699859][ T9099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 228.437552][ T9129] overlayfs: failed to resolve './file0/file1': -2 [ 228.728194][ T9138] EXT4-fs (loop3): Ignoring removed orlov option [ 228.757379][ T9138] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002] [ 228.765536][ T9138] System zones: 0-2, 18-18, 34-35 [ 228.771980][ T9138] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noinit_itable,orlov,usrquota,data_err=ignore,debug,noauto_da_alloc,,errors=continue [ 228.787636][ T9138] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.864721][ T9167] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 228.882948][ T5] usb 5-1: USB disconnect, device number 10 [ 229.125320][ T7] tipc: Disabling bearer [ 229.131006][ T7] tipc: Left network mode [ 229.469109][ T9189] device ipip0 entered promiscuous mode [ 229.623246][ T9208] overlayfs: unrecognized mount option "uuid=off" or missing value [ 229.697638][ T7] device bridge_slave_1 left promiscuous mode [ 229.704918][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.713633][ T7] device bridge_slave_0 left promiscuous mode [ 229.720450][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.825303][ T24] audit: type=1400 audit(1773750666.021:685): avc: denied { watch } for pid=9214 comm="syz.2.3702" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 229.862285][ T9217] EXT4-fs (loop3): Ignoring removed orlov option [ 229.878753][ T9217] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002] [ 229.886873][ T9217] System zones: 0-2, 18-18, 34-35 [ 229.892532][ T9217] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noinit_itable,orlov,usrquota,data_err=ignore,debug,noauto_da_alloc,,errors=continue [ 229.908167][ T9217] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.849394][ T9283] device ipip0 left promiscuous mode [ 230.868052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 230.881506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.903964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 230.923693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.949910][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.968398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.986146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.994758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.010572][ T9286] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3731'. [ 231.060109][ T9288] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.116771][ T24] audit: type=1326 audit(1773750667.301:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.140998][ T24] audit: type=1326 audit(1773750667.301:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.189645][ T24] audit: type=1326 audit(1773750667.301:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.217107][ T24] audit: type=1326 audit(1773750667.301:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.241772][ T24] audit: type=1326 audit(1773750667.301:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.267016][ T24] audit: type=1326 audit(1773750667.301:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.291280][ T24] audit: type=1326 audit(1773750667.301:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.324989][ T24] audit: type=1326 audit(1773750667.301:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.349131][ T24] audit: type=1326 audit(1773750667.301:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.5.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd372178799 code=0x7ffc0000 [ 231.470794][ T9297] erofs: (device loop4): mounted with root inode @ nid 36. [ 231.487389][ T9297] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 231.587125][ T9313] device batadv_slave_0 entered promiscuous mode [ 232.616542][ T9352] device erspan0 entered promiscuous mode [ 232.624841][ T9352] device vlan2 entered promiscuous mode [ 232.735015][ T9363] overlayfs: failed to clone upperpath [ 232.781187][ T9355] EXT4-fs (loop4): Ignoring removed orlov option [ 232.811429][ T9355] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002] [ 232.820065][ T9355] System zones: 0-2, 18-18, 34-35 [ 232.825845][ T9355] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,noinit_itable,orlov,usrquota,data_err=ignore,debug,noauto_da_alloc,,errors=continue [ 232.841532][ T9355] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.841573][ T9369] device batadv_slave_0 entered promiscuous mode [ 232.876843][ T5] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 233.126845][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 233.266911][ T5] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.290351][ T5] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.426872][ T5] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 233.436120][ T5] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 233.446040][ T5] usb 6-1: Product: syz [ 233.450694][ T5] usb 6-1: Manufacturer: syz [ 233.498104][ T5] hub 6-1:4.0: USB hub found [ 234.566896][ T5] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 234.677937][ T9411] EXT4-fs (loop4): Ignoring removed orlov option [ 234.723685][ T9411] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002] [ 234.731896][ T9411] System zones: 0-2, 18-18, 34-35 [ 234.737547][ T9411] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,noinit_itable,orlov,usrquota,data_err=ignore,debug,noauto_da_alloc,,errors=continue [ 234.753291][ T9411] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.815229][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 235.815241][ T24] audit: type=1400 audit(1773750672.011:728): avc: denied { write } for pid=9445 comm="syz.3.3790" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 236.146764][ T433] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 236.196826][ T5] usb 6-1: USB disconnect, device number 8 [ 236.506794][ T433] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 236.516247][ T433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.550229][ T433] usb 4-1: config 0 descriptor?? [ 236.566790][ T5] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.806719][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 236.926795][ T5] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.937996][ T5] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.944708][ T5] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 236.954259][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.963440][ T5] usb 5-1: config 0 descriptor?? [ 237.292383][ T9489] device batadv_slave_0 entered promiscuous mode [ 237.613965][ T5] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 237.621656][ T5] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 237.629280][ T5] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 237.637052][ T5] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 237.645374][ T5] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 237.701758][ T25] usb 5-1: USB disconnect, device number 11 [ 238.135990][ T9505] overlayfs: failed to clone upperpath [ 238.772021][ T9531] device batadv_slave_0 entered promiscuous mode [ 239.098093][ T15] usb 4-1: USB disconnect, device number 9 [ 239.167940][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3824'. [ 239.176996][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3824'. [ 239.189287][ T9539] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 240.846814][ T7367] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 240.986780][ T5276] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 241.096733][ T7367] usb 5-1: Using ep0 maxpacket: 32 [ 241.216792][ T7367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.228742][ T7367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.238921][ T7367] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 241.246703][ T5276] usb 4-1: Using ep0 maxpacket: 32 [ 241.248163][ T7367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.267020][ T7367] usb 5-1: config 0 descriptor?? [ 241.366878][ T5276] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.376885][ T5276] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.387021][ T5276] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.519004][ T9622] overlayfs: failed to clone upperpath [ 241.566828][ T5276] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 241.576089][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.584375][ T5276] usb 4-1: Product: syz [ 241.588606][ T5276] usb 4-1: Manufacturer: syz [ 241.593193][ T5276] usb 4-1: SerialNumber: syz [ 241.598618][ T5276] usb 4-1: config 0 descriptor?? [ 241.738587][ T7367] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 241.766751][ T15] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 241.958528][ T7367] koneplus 0003:1E7D:2D51.0003: couldn't init struct koneplus_device [ 241.966797][ T7367] koneplus 0003:1E7D:2D51.0003: couldn't install mouse [ 241.975232][ T7367] koneplus: probe of 0003:1E7D:2D51.0003 failed with error -71 [ 241.989773][ T7367] usb 5-1: USB disconnect, device number 12 [ 242.008241][ T9627] fido_id[9627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 242.016765][ T15] usb 6-1: Using ep0 maxpacket: 32 [ 242.316928][ T15] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 242.326435][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.334617][ T15] usb 6-1: Product: syz [ 242.339302][ T15] usb 6-1: Manufacturer: syz [ 242.344315][ T15] usb 6-1: SerialNumber: syz [ 242.349842][ T15] usb 6-1: config 0 descriptor?? [ 242.465474][ T9645] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 242.724788][ T15] usb 6-1: USB disconnect, device number 9 [ 242.902905][ T9658] overlayfs: failed to clone upperpath [ 243.176749][ T15] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 243.486766][ T15] usb 6-1: Using ep0 maxpacket: 32 [ 243.500307][ T5] usb 4-1: USB disconnect, device number 10 [ 243.782271][ T15] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 243.806005][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.826524][ T15] usb 6-1: Product: syz [ 243.830817][ T15] usb 6-1: Manufacturer: syz [ 243.835452][ T15] usb 6-1: SerialNumber: syz [ 243.911419][ T15] usb 6-1: config 0 descriptor?? [ 244.208419][ T15] usb 6-1: USB disconnect, device number 10 [ 244.510821][ T9740] device syzkaller0 entered promiscuous mode [ 244.704519][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3923'. [ 245.118103][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3938'. [ 245.473611][ T9822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3946'. [ 245.756633][ T9846] netlink: 'syz.2.3957': attribute type 3 has an invalid length. [ 246.269664][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3979'. [ 247.466772][ T7892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 247.638708][ T24] audit: type=1326 audit(1773750683.841:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 247.678642][ T24] audit: type=1326 audit(1773750683.881:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 247.736749][ T7892] usb 4-1: Using ep0 maxpacket: 32 [ 247.738963][ T24] audit: type=1326 audit(1773750683.881:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 247.786754][ T24] audit: type=1326 audit(1773750683.881:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 247.827864][ T24] audit: type=1326 audit(1773750683.881:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 247.851892][ T24] audit: type=1326 audit(1773750683.971:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 247.875931][ T24] audit: type=1326 audit(1773750683.971:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 247.899503][ T24] audit: type=1326 audit(1773750683.971:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 247.923738][ T24] audit: type=1326 audit(1773750683.971:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 247.948497][ T24] audit: type=1326 audit(1773750683.971:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 247.949168][ T7892] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.986470][ T7892] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.117141][ T7892] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 248.126633][ T7892] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 248.142347][ T7892] usb 4-1: Product: syz [ 248.151968][ T7892] usb 4-1: Manufacturer: syz [ 248.199294][ T7892] hub 4-1:4.0: USB hub found [ 248.242988][ T7] tipc: Disabling bearer [ 248.250945][ T7] tipc: Left network mode [ 248.506913][ T7892] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 248.823928][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.831163][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.838649][ T9989] device bridge_slave_0 entered promiscuous mode [ 248.848316][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.875934][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.884336][ T9989] device bridge_slave_1 entered promiscuous mode [ 248.949953][ T7] device bridge_slave_1 left promiscuous mode [ 248.958622][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.985809][ T7] device bridge_slave_0 left promiscuous mode [ 249.017978][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.036587][ T7] device veth1_macvtap left promiscuous mode [ 249.044795][ T7] device veth0_vlan left promiscuous mode [ 249.310912][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.319026][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.330579][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.340363][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.349615][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.356786][ T7993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.365576][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.374829][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.383367][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.390738][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.398228][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.414407][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.422468][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.436560][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.448740][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.457482][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.465050][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.473719][ T9989] device veth0_vlan entered promiscuous mode [ 249.483974][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.493305][ T9989] device veth1_macvtap entered promiscuous mode [ 249.503772][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.514376][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.631344][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4037'. [ 250.479899][T10050] device syzkaller0 entered promiscuous mode [ 250.645723][ T433] usb 4-1: USB disconnect, device number 11 [ 250.722960][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4049'. [ 250.733714][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4049'. [ 250.743117][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4049'. [ 250.769359][T10069] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.836748][T10075] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 251.213511][T10083] device batadv_slave_0 entered promiscuous mode [ 252.076421][ T415] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 252.326775][ T415] usb 7-1: Using ep0 maxpacket: 32 [ 252.446890][ T415] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.647166][ T415] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.670021][ T415] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.730352][ T415] usb 7-1: Product: syz [ 253.051303][ T415] usb 7-1: Manufacturer: syz [ 253.149477][ T415] usb 7-1: SerialNumber: syz [ 253.282040][ T415] usb 7-1: config 0 descriptor?? [ 253.410334][T10087] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 253.438272][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'. [ 253.447657][ T415] hub 7-1:0.0: bad descriptor, ignoring hub [ 253.454692][ T415] hub: probe of 7-1:0.0 failed with error -5 [ 253.753505][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 253.753518][ T24] audit: type=1326 audit(1773750689.951:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 253.786823][ T7367] usb 7-1: USB disconnect, device number 2 [ 253.787130][ T24] audit: type=1326 audit(1773750689.951:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 253.816447][ T24] audit: type=1326 audit(1773750689.981:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 253.856734][ T24] audit: type=1326 audit(1773750689.981:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 253.897649][ T24] audit: type=1326 audit(1773750689.981:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x7ffc0000 [ 255.184179][ T24] audit: type=1326 audit(1773750691.381:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.3.4091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8175844799 code=0x0 [ 256.310783][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4097'. [ 256.344571][T10212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4097'. [ 257.221557][ T24] audit: type=1400 audit(1773750693.421:775): avc: denied { remount } for pid=10245 comm="syz.6.4112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 257.255640][ T24] audit: type=1400 audit(1773750693.451:776): avc: denied { unmount } for pid=9989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 257.583218][T10274] overlayfs: './file0' not a directory [ 257.969818][T10305] overlayfs: failed to clone upperpath [ 258.667385][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4152'. [ 258.683646][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4152'. [ 259.373060][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4161'. [ 259.402843][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4161'. [ 260.173029][T10413] kvm: emulating exchange as write [ 260.214438][ T24] audit: type=1326 audit(1773750696.411:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.4.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefafa1799 code=0x7ffc0000 [ 260.276433][ T24] audit: type=1326 audit(1773750696.441:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.4.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefafa1799 code=0x7ffc0000 [ 260.329440][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4190'. [ 260.336913][ T24] audit: type=1326 audit(1773750696.441:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.4.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefafa1799 code=0x7ffc0000 [ 260.396769][ T24] audit: type=1326 audit(1773750696.441:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.4.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefafa1799 code=0x7ffc0000 [ 260.453038][ T24] audit: type=1326 audit(1773750696.441:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.4.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7faefafa1799 code=0x7ffc0000 [ 260.484406][ T24] audit: type=1326 audit(1773750696.441:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.4.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faefafa1799 code=0x7ffc0000 [ 260.521488][ T24] audit: type=1326 audit(1773750696.441:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.4.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faefafa1799 code=0x7ffc0000 [ 260.549242][ T24] audit: type=1326 audit(1773750696.441:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.4.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faefafa1799 code=0x7ffc0000 [ 260.612335][T10467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4201'. [ 260.657781][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4206'. [ 260.668632][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4206'. [ 260.746475][T10488] netlink: 'syz.3.4212': attribute type 16 has an invalid length. [ 260.759645][T10488] netlink: 'syz.3.4212': attribute type 17 has an invalid length. [ 260.779720][T10488] device batadv_slave_0 left promiscuous mode [ 260.791112][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.921932][ T24] audit: type=1326 audit(1773750697.121:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.2.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 260.973332][ T24] audit: type=1326 audit(1773750697.121:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.2.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1406e799 code=0x7ffc0000 [ 261.052215][T10533] xt_hashlimit: size too large, truncated to 1048576 [ 261.092851][T10533] xt_hashlimit: max too large, truncated to 1048576 [ 261.110352][T10540] overlayfs: missing 'lowerdir' [ 261.962135][T10640] __nla_validate_parse: 9 callbacks suppressed [ 261.962144][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4271'. [ 262.039265][T10650] tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 262.280754][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4292'. [ 262.315136][T10663] EXT4-fs (loop6): Ignoring removed orlov option [ 262.464764][T10685] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 262.474178][T10663] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002] [ 262.493849][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4300'. [ 262.506973][T10663] System zones: 0-2, 18-18, 34-35 [ 262.563235][T10663] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,noinit_itable,orlov,usrquota,data_err=ignore,debug,noauto_da_alloc,,errors=continue [ 262.644644][T10663] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.673738][T10699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=10699 comm=syz.1.4304 [ 263.399392][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4327'. [ 263.779805][T10774] EXT4-fs (loop6): Test dummy encryption mode enabled [ 263.832232][T10774] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000003,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 264.256154][T10799] EXT4-fs (loop3): Ignoring removed orlov option [ 264.284216][T10799] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002] [ 264.293988][T10799] System zones: 0-2, 18-18, 34-35 [ 264.307464][T10799] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noinit_itable,orlov,usrquota,data_err=ignore,debug,noauto_da_alloc,,errors=continue [ 264.346299][T10799] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.917315][T10851] netlink: 'syz.2.4366': attribute type 2 has an invalid length. [ 266.047751][T10919] EXT4-fs (loop4): Test dummy encryption mode enabled [ 266.178805][T10919] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000003,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 266.798395][T10972] overlayfs: failed to clone upperpath [ 266.816167][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4421'. [ 266.953038][T10976] device ip6gre1 entered promiscuous mode [ 266.960895][T10981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.973382][ T7367] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.996765][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.056624][ T7367] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.246753][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.410288][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4435'. [ 267.972794][T11029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.980625][T11029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.989012][T11029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.997312][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.353831][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4447'. [ 268.400522][T11040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.536603][T11023] Leaked POSIX lock on dev=0x0:0x27 ino=0x5ef fl_owner=ffff88811da15040 fl_flags=0x81 fl_type=0x1 fl_pid=11022 [ 269.140022][ T7656] Leaked locks on dev=0x0:0x27 ino=0x5ef: [ 269.146046][ T7656] POSIX: fl_owner=ffff88811da15040 fl_flags=0x81 fl_type=0x1 fl_pid=11022 [ 269.165163][T11049] netlink: 'syz.6.4452': attribute type 1 has an invalid length. [ 269.340486][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4457'. [ 269.809977][T11071] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4459'. [ 269.819382][T11071] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.335487][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4486'. [ 270.398471][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4487'. [ 270.588331][T11140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.276955][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.617752][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.643643][ T485] kernel write not supported for file bpf-prog (pid: 485 comm: kworker/1:6) [ 271.646748][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 271.768751][T11239] overlayfs: failed to clone upperpath [ 271.892277][T11249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=11249 comm=syz.2.4538 [ 271.946736][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 272.182076][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4549'. [ 272.192468][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4549'. [ 272.352514][ T7892] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 273.464043][ T485] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 273.469983][T11300] overlayfs: failed to clone upperpath [ 273.472049][ T485] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 273.495007][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4560'. [ 273.548675][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.572991][ T485] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.581110][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 273.606883][ T485] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.616821][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 274.006728][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.157828][T11320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4566'. [ 274.359026][T11330] overlayfs: failed to clone upperpath [ 274.404295][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 274.404303][ T24] audit: type=1400 audit(1773750710.601:798): avc: denied { listen } for pid=11339 comm="syz.1.4575" lport=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.590640][T11363] overlayfs: failed to clone upperpath [ 274.715001][T11375] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 274.911711][T11399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4602'. [ 274.945938][T11399] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4602'. [ 274.974296][T11405] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4605'. [ 275.145998][T11423] device syzkaller0 entered promiscuous mode [ 275.758008][T11435] device syzkaller0 entered promiscuous mode [ 275.884897][T11401] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 275.906859][T11401] FAT-fs (loop4): Filesystem has been set read-only [ 276.116964][T11451] device syzkaller0 entered promiscuous mode [ 277.098886][ T7892] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 277.115320][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4635'. [ 277.376785][ T7892] usb 7-1: Using ep0 maxpacket: 32 [ 277.497344][ T7892] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.514978][ T7892] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.583736][ T24] audit: type=1400 audit(1773750713.781:799): avc: denied { mounton } for pid=11494 comm="syz.3.4641" path="/248/file0/file0" dev="ramfs" ino=52256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 277.583957][T11496] overlayfs: upper fs does not support tmpfile. [ 277.606730][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 277.620752][T11496] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 277.628077][T11496] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 277.638968][T11496] SELinux: (dev overlay, type overlay) has no security xattr handler [ 277.706797][ T7892] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 277.716028][ T7892] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 277.724740][ T7892] usb 7-1: Product: syz [ 277.728970][ T7892] usb 7-1: Manufacturer: syz [ 277.768171][ T7892] hub 7-1:4.0: USB hub found [ 277.836728][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 277.844337][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 278.077015][ T7892] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 279.105300][T11526] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.120863][ T24] audit: type=1400 audit(1773750715.321:800): avc: denied { mounton } for pid=11525 comm="syz.3.4651" path="/251/file1/bus" dev="loop3" ino=1048683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 279.321360][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4655'. [ 279.529238][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4660'. [ 279.676719][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.687363][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.699849][T11541] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.709422][T11541] device bridge_slave_0 entered promiscuous mode [ 279.713973][T11557] 9pnet: Insufficient options for proto=fd [ 279.726349][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.734414][T11541] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.743975][T11541] device bridge_slave_1 entered promiscuous mode [ 280.110486][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.117665][T11541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.125017][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.132083][T11541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.157262][ T5276] usb 7-1: USB disconnect, device number 3 [ 280.190492][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.202528][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.212671][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.232640][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.241011][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.248077][ T7993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.257603][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.273550][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.280684][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.307969][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.316240][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.340036][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.349477][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.358433][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.366386][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.374974][T11541] device veth0_vlan entered promiscuous mode [ 280.385578][ T49] device bridge_slave_1 left promiscuous mode [ 280.392017][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.401740][ T49] device bridge_slave_0 left promiscuous mode [ 280.408279][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.416509][ T49] device veth1_macvtap left promiscuous mode [ 280.539686][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.547252][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.557130][T11541] device veth1_macvtap entered promiscuous mode [ 280.564913][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4700'. [ 280.583539][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.592657][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.602734][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.623298][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.648421][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.657103][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.665706][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.761091][T11653] erofs: (device loop6): mounted with root inode @ nid 36. [ 280.787881][ T24] audit: type=1400 audit(1773750716.991:801): avc: denied { map } for pid=11652 comm="syz.6.4711" path="/110/file2/file1" dev="loop6" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.817002][T11652] attempt to access beyond end of device [ 280.817002][T11652] loop6: rw=524288, want=1348712416, limit=16 [ 280.841166][T11652] attempt to access beyond end of device [ 280.841166][T11652] loop6: rw=0, want=1348712296, limit=16 [ 280.852831][T11652] attempt to access beyond end of device [ 280.852831][T11652] loop6: rw=0, want=1348712296, limit=16 [ 280.864557][T11652] attempt to access beyond end of device [ 280.864557][T11652] loop6: rw=0, want=1348712296, limit=16 [ 280.876482][T11652] attempt to access beyond end of device [ 280.876482][T11652] loop6: rw=0, want=1348712296, limit=16 [ 280.888584][T11652] attempt to access beyond end of device [ 280.888584][T11652] loop6: rw=0, want=1348712296, limit=16 [ 280.900677][T11652] attempt to access beyond end of device [ 280.900677][T11652] loop6: rw=0, want=1348712296, limit=16 [ 280.912359][T11652] attempt to access beyond end of device [ 280.912359][T11652] loop6: rw=0, want=1348712296, limit=16 [ 280.924186][T11652] attempt to access beyond end of device [ 280.924186][T11652] loop6: rw=0, want=1348712296, limit=16 [ 280.935817][T11652] attempt to access beyond end of device [ 280.935817][T11652] loop6: rw=0, want=1348712296, limit=16 [ 281.452568][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4717'. [ 281.556813][T11683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4721'. [ 281.593012][T11683] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4721'. [ 281.969181][T11715] overlayfs: failed to clone upperpath [ 282.173253][ T24] audit: type=1400 audit(1773750718.351:802): avc: denied { remount } for pid=11739 comm="syz.2.4744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 282.940211][T11776] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4758'. [ 282.965595][ T24] audit: type=1400 audit(1773750719.161:803): avc: denied { setattr } for pid=11777 comm="syz.7.4760" name="ptmx" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 282.988436][ T5276] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 283.226730][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 283.347056][ T5276] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.425330][ T5276] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.566949][ T5276] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 283.585350][ T5276] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 283.623473][ T5276] usb 5-1: Product: syz [ 283.639503][ T5276] usb 5-1: Manufacturer: syz [ 283.711459][ T5276] hub 5-1:4.0: USB hub found [ 284.020620][ T5276] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 284.038397][ T24] audit: type=1326 audit(1773750720.241:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 284.106807][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 284.159833][ T24] audit: type=1326 audit(1773750720.241:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 284.207895][ T24] audit: type=1326 audit(1773750720.261:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 284.311710][ T24] audit: type=1326 audit(1773750720.261:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 284.376814][ T24] audit: type=1326 audit(1773750720.261:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 284.426814][ T7892] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 284.514134][ T24] audit: type=1326 audit(1773750720.261:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 284.573721][ T24] audit: type=1326 audit(1773750720.261:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 284.726751][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 284.806697][ T7892] usb 7-1: Using ep0 maxpacket: 32 [ 285.203772][T11833] device ip6gre2 entered promiscuous mode [ 285.216847][ T7892] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.245877][ T7892] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.396896][ T7892] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 285.412145][ T7892] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 285.437073][ T7892] usb 7-1: Product: syz [ 285.449890][ T7892] usb 7-1: Manufacturer: syz [ 285.519301][ T7892] hub 7-1:4.0: USB hub found [ 285.938843][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4787'. [ 285.957003][ T433] usb 5-1: USB disconnect, device number 13 [ 285.959140][ T7892] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 286.013691][T11852] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 286.086726][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 286.242860][T11853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.250312][T11853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.259842][T11853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.716723][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 286.724611][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.180616][T11884] netlink: 'syz.4.4800': attribute type 10 has an invalid length. [ 287.189860][T11884] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4800'. [ 287.200790][T11884] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4800'. [ 287.716849][ T415] usb 7-1: USB disconnect, device number 4 [ 288.760602][T11943] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 288.774305][T11943] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 288.819678][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4830'. [ 288.838588][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4830'. [ 289.228497][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4844'. [ 289.243000][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4844'. [ 289.407198][T12003] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 289.490581][T12003] kvm: vcpu 0: requested 20480 ns lapic timer period limited to 200000 ns [ 289.500938][T12003] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=831181516 (13298904256 ns) > initial count (200000 ns). Using initial count to start timer. [ 289.544840][T12013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4855'. [ 289.973363][T12044] loop2: [ 289.978821][T12044] loop2: [ 289.990604][ T95] loop2: [ 290.107483][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4872'. [ 290.177384][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 290.177397][ T24] audit: type=1326 audit(1773750726.381:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 290.208817][ T24] audit: type=1326 audit(1773750726.381:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 290.266703][ T24] audit: type=1326 audit(1773750726.411:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 290.312920][ T24] audit: type=1326 audit(1773750726.411:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 290.366725][ T24] audit: type=1326 audit(1773750726.411:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809e704799 code=0x7ffc0000 [ 291.135054][T12120] device batadv_slave_0 entered promiscuous mode [ 292.398385][T12160] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 292.406475][T12160] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 292.490383][T12167] overlayfs: failed to clone upperpath [ 293.178717][T12230] overlayfs: failed to clone upperpath [ 293.280578][ T24] audit: type=1326 audit(1773750729.481:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.7.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1358541799 code=0x7ffc0000 [ 293.304938][ T24] audit: type=1326 audit(1773750729.481:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.7.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1358541799 code=0x7ffc0000 [ 293.329317][ T5] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 293.337016][ T24] audit: type=1326 audit(1773750729.481:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.7.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1358541799 code=0x7ffc0000 [ 293.337038][ T24] audit: type=1326 audit(1773750729.481:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.7.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1358541799 code=0x7ffc0000 [ 293.403073][ T24] audit: type=1326 audit(1773750729.481:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.7.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1358541799 code=0x7ffc0000 [ 293.596709][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 293.598854][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.609491][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.617055][T12255] device bridge_slave_0 entered promiscuous mode [ 293.624368][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.632179][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.639709][T12255] device bridge_slave_1 entered promiscuous mode [ 293.715196][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.716851][ T5] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.722457][T12255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.722534][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.745299][ T5] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.747695][T12255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.793879][T12277] device batadv_slave_0 entered promiscuous mode [ 293.803326][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.811843][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.863709][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.880278][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.897006][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.905254][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.906850][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 293.912391][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.912563][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.921978][ T5] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 293.929524][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.937109][ T5] usb 5-1: Product: syz [ 293.945208][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.964099][ T5] usb 5-1: Manufacturer: syz [ 293.969578][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.977660][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.997546][T12279] device syzkaller0 entered promiscuous mode [ 294.008212][ T5] hub 5-1:4.0: USB hub found [ 294.019251][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.037207][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.045223][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.053004][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.061886][T12255] device veth0_vlan entered promiscuous mode [ 294.086946][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.097395][T12255] device veth1_macvtap entered promiscuous mode [ 294.110593][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.143229][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.306801][ T5] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 294.437928][ T300] device bridge_slave_1 left promiscuous mode [ 294.446250][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.464906][ T300] device bridge_slave_0 left promiscuous mode [ 294.483484][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.504271][ T300] device veth1_macvtap left promiscuous mode [ 295.364505][T12335] kvm [12334]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000017 data 0x0 [ 295.568736][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4993'. [ 296.223787][ T7892] usb 5-1: USB disconnect, device number 14 [ 296.358005][T12393] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 296.760884][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 296.760896][ T24] audit: type=1400 audit(1773750732.961:847): avc: denied { connect } for pid=12428 comm="syz.4.5028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.808903][ T24] audit: type=1400 audit(1773750732.991:848): avc: denied { setopt } for pid=12428 comm="syz.4.5028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.248113][ T24] audit: type=1326 audit(1773750733.451:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12462 comm="syz.7.5043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1358541799 code=0x0 [ 298.137012][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 298.154984][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.183598][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 298.192242][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.201641][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.210311][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.219275][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.227957][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.236508][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.250337][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.398662][T12501] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.496061][T12501] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.537240][T12501] device bridge_slave_0 entered promiscuous mode [ 298.567635][T12501] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.596729][T12501] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.604196][T12501] device bridge_slave_1 entered promiscuous mode [ 298.763162][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.787048][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.815409][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.836209][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.857879][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.865336][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.901174][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.925744][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.946120][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.953245][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.977019][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.006054][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.025458][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.060102][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.107881][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.124258][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.140887][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.161144][T12501] device veth0_vlan entered promiscuous mode [ 299.192490][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.218520][T12501] device veth1_macvtap entered promiscuous mode [ 299.241885][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.263635][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.642568][T12566] tipc: Failed to remove local publication {66,0,0}/3255401941 [ 299.669251][T12566] tipc: Failed to remove local publication {66,0,0}/3255401941 [ 300.375377][T12593] device batadv_slave_0 entered promiscuous mode [ 301.196805][ T15] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 301.396842][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 301.446716][ T15] usb 7-1: Using ep0 maxpacket: 32 [ 301.566840][ T15] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.591535][ T15] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.601731][ T15] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 301.611007][ T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.622879][ T15] usb 7-1: config 0 descriptor?? [ 301.668073][ T15] hub 7-1:0.0: USB hub found [ 301.856742][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.866960][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.876283][ T25] usb 3-1: config 1 has no interface number 0 [ 301.876739][ T15] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 301.882453][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.901302][ T25] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 301.910498][ T25] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 301.921537][ T25] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 301.986743][ T5276] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 302.106875][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.116143][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.124252][ T25] usb 3-1: Product: syz [ 302.128524][ T25] usb 3-1: Manufacturer: syz [ 302.133428][ T25] usb 3-1: SerialNumber: syz [ 302.226766][ T5276] usb 9-1: Using ep0 maxpacket: 32 [ 302.311521][ T15] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 302.323974][ T15] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 302.356877][ T5276] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.369829][ T5276] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.546854][ T5276] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 302.556156][ T5276] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 302.565209][ T5276] usb 9-1: Product: syz [ 302.569668][ T5276] usb 9-1: Manufacturer: syz [ 302.574583][ T5276] usb 9-1: SerialNumber: syz [ 302.737243][ T5] usb 7-1: USB disconnect, device number 5 [ 302.846827][ T25] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 302.852968][ T25] cdc_ncm 3-1:1.1: bind() failure [ 302.859617][ T25] usb 3-1: USB disconnect, device number 5 [ 302.868316][ T5276] usb 9-1: USB disconnect, device number 2 [ 303.512729][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 303.686777][ T485] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 303.757042][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 303.876827][ T25] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 303.885946][ T25] usb 7-1: config 179 has no interface number 0 [ 303.892359][ T25] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 303.903969][ T25] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 303.915864][ T25] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.927267][ T485] usb 9-1: Using ep0 maxpacket: 16 [ 303.932608][ T25] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 303.942933][ T25] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 303.956455][ T25] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 303.965703][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.023640][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input5 [ 304.046780][ T485] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.056951][ T485] usb 9-1: config 0 has no interface number 0 [ 304.063396][ T485] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.074501][ T485] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.084413][ T485] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 304.093578][ T485] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.105862][ T485] usb 9-1: config 0 descriptor?? [ 304.228570][ T5276] usb 7-1: USB disconnect, device number 6 [ 304.236687][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 304.245260][ T5276] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 304.636718][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 304.797128][ T485] uclogic 0003:28BD:0071.0005: pen parameters not found [ 304.808806][ T485] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 304.891572][T12762] netlink: 'syz.1.5167': attribute type 11 has an invalid length. [ 304.955846][T12778] netlink: 'syz.1.5175': attribute type 4 has an invalid length. [ 304.963940][T12778] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.976206][T12780] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5177'. [ 305.002070][ T15] usb 9-1: USB disconnect, device number 3 [ 305.008469][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5178'. [ 305.149842][T12800] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 305.562295][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5191'. [ 305.594497][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5191'. [ 305.611612][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5191'. [ 306.316100][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5225'. [ 306.384159][T12870] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.392371][T12870] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.400631][T12870] device bridge_slave_0 entered promiscuous mode [ 306.408073][T12870] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.415127][T12870] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.422795][T12870] device bridge_slave_1 entered promiscuous mode [ 306.545525][T12870] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.552936][T12870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.560590][T12870] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.567740][T12870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.606217][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.614523][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.622808][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.631161][T12904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5234'. [ 306.642911][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.653964][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.672432][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.691904][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.700420][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.707788][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.710299][T12916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5239'. [ 306.726096][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.734952][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.751033][T12870] device veth0_vlan entered promiscuous mode [ 306.758321][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.767245][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.771878][T12918] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 306.774825][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.795703][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.845546][T12870] device veth1_macvtap entered promiscuous mode [ 306.853042][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.861710][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.870672][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.881523][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.890014][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.899808][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.037469][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.239651][ T24] audit: type=1400 audit(1773750743.441:850): avc: denied { remount } for pid=12934 comm="syz.9.5243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 307.674710][T12986] netlink: 'syz.2.5272': attribute type 4 has an invalid length. [ 307.687232][T12986] netlink: 'syz.2.5272': attribute type 4 has an invalid length. [ 307.808769][T13005] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5280'. [ 309.400217][T13102] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5322'. [ 309.415928][ T24] audit: type=1326 audit(1773750745.611:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 309.495361][ T24] audit: type=1326 audit(1773750745.611:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 309.561091][ T24] audit: type=1326 audit(1773750745.621:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 309.601092][ T24] audit: type=1326 audit(1773750745.621:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 309.641236][ T24] audit: type=1326 audit(1773750745.621:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff551ea8799 code=0x7ffc0000 [ 310.056722][ T5276] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 310.295774][T13149] device syzkaller0 entered promiscuous mode [ 310.317388][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 310.441585][ T5276] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 310.476808][ T5276] usb 3-1: config 0 has no interface number 0 [ 310.484378][ T24] audit: type=1400 audit(1773750746.681:856): avc: denied { bind } for pid=13168 comm="syz.7.5353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 310.522945][T13180] __nla_validate_parse: 4 callbacks suppressed [ 310.522954][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5359'. [ 310.525154][ T5276] usb 3-1: config 0 interface 223 has no altsetting 0 [ 310.529734][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5359'. [ 310.567098][T13182] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12594 sclass=netlink_xfrm_socket pid=13182 comm=syz.9.5358 [ 310.736875][ T5276] usb 3-1: New USB device found, idVendor=0cf3, idProduct=b002, bcdDevice=b0.94 [ 310.760311][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.786677][ T5276] usb 3-1: Product: syz [ 310.791044][ T5276] usb 3-1: Manufacturer: syz [ 310.795779][ T5276] usb 3-1: SerialNumber: syz [ 310.826912][ T5276] usb 3-1: config 0 descriptor?? [ 311.198403][ T5276] usb 3-1: USB disconnect, device number 6 [ 311.360694][T13209] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5370'. [ 311.672313][ T24] audit: type=1400 audit(1773750747.871:857): avc: denied { listen } for pid=13245 comm="syz.9.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.526897][ T24] audit: type=1400 audit(1773750749.731:858): avc: denied { create } for pid=13349 comm="syz.8.5430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.555175][T13352] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 313.565154][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5431'. [ 313.599365][ T24] audit: type=1400 audit(1773750749.801:859): avc: denied { create } for pid=13359 comm="syz.2.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 313.632305][ T24] audit: type=1400 audit(1773750749.821:860): avc: denied { write } for pid=13359 comm="syz.2.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 314.238993][T13381] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5444'. [ 314.280717][T13389] netlink: 'syz.9.5447': attribute type 5 has an invalid length. [ 314.434540][T13407] ================================================================== [ 314.442923][T13407] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 314.451204][T13407] Read of size 8 at addr ffff88812983f3c0 by task syz.9.5456/13407 [ 314.459413][T13407] [ 314.461742][T13407] CPU: 0 PID: 13407 Comm: syz.9.5456 Tainted: G W syzkaller #0 [ 314.470579][T13407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.480642][T13407] Call Trace: [ 314.483961][T13407] __dump_stack+0x21/0x24 [ 314.488316][T13407] dump_stack_lvl+0x1a7/0x208 [ 314.493331][T13407] ? show_regs_print_info+0x18/0x18 [ 314.498542][T13407] ? thaw_kernel_threads+0x220/0x220 [ 314.503817][T13407] print_address_description+0x7f/0x2c0 [ 314.509365][T13407] ? tc_setup_flow_action+0x842/0x3280 [ 314.514899][T13407] kasan_report+0xe2/0x130 [ 314.519316][T13407] ? flow_action_cookie_create+0x28/0x90 [ 314.525038][T13407] ? tc_setup_flow_action+0x842/0x3280 [ 314.530508][T13407] __asan_report_load8_noabort+0x14/0x20 [ 314.536164][T13407] tc_setup_flow_action+0x842/0x3280 [ 314.541550][T13407] ? __kmalloc+0x1a4/0x330 [ 314.545992][T13407] ? flow_rule_alloc+0x32/0x2c0 [ 314.551037][T13407] mall_replace_hw_filter+0x2cc/0x8a0 [ 314.556432][T13407] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 314.562605][T13407] ? mall_set_parms+0x410/0x410 [ 314.567652][T13407] ? tcf_exts_destroy+0xb0/0xb0 [ 314.572514][T13407] ? pcpu_alloc+0xf9b/0x16b0 [ 314.577222][T13407] ? mall_set_parms+0x19d/0x410 [ 314.582189][T13407] mall_change+0x546/0x760 [ 314.586708][T13407] ? __kasan_check_write+0x14/0x20 [ 314.591842][T13407] ? mall_get+0xa0/0xa0 [ 314.596009][T13407] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 314.602098][T13407] ? nla_strcmp+0xf4/0x140 [ 314.606652][T13407] tc_new_tfilter+0x1452/0x1a90 [ 314.611874][T13407] ? mall_get+0xa0/0xa0 [ 314.616045][T13407] ? tcf_gate_entry_destructor+0x20/0x20 [ 314.621880][T13407] ? security_capable+0x87/0xb0 [ 314.626824][T13407] ? ns_capable+0x8c/0xf0 [ 314.631166][T13407] ? netlink_net_capable+0x125/0x160 [ 314.636635][T13407] ? tcf_gate_entry_destructor+0x20/0x20 [ 314.642281][T13407] rtnetlink_rcv_msg+0x845/0xcc0 [ 314.647414][T13407] ? rtnetlink_bind+0x80/0x80 [ 314.652134][T13407] ? arch_stack_walk+0xee/0x140 [ 314.657006][T13407] ? stack_trace_save+0xa6/0xf0 [ 314.662080][T13407] ? stack_trace_snprint+0xf0/0xf0 [ 314.667202][T13407] ? avc_has_perm+0x168/0x3d0 [ 314.672067][T13407] ? memcpy+0x56/0x70 [ 314.676059][T13407] ? avc_has_perm+0x27f/0x3d0 [ 314.680835][T13407] ? __kasan_slab_alloc+0xbd/0xf0 [ 314.685958][T13407] ? slab_post_alloc_hook+0x5d/0x2f0 [ 314.691240][T13407] ? avc_has_perm_noaudit+0x260/0x260 [ 314.696620][T13407] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 314.702105][T13407] netlink_rcv_skb+0x1f5/0x440 [ 314.707091][T13407] ? rtnetlink_bind+0x80/0x80 [ 314.711859][T13407] ? netlink_ack+0xb70/0xb70 [ 314.716535][T13407] ? __netlink_lookup+0x387/0x3b0 [ 314.721551][T13407] rtnetlink_rcv+0x1c/0x20 [ 314.725958][T13407] netlink_unicast+0x876/0xa40 [ 314.730720][T13407] netlink_sendmsg+0x89c/0xb50 [ 314.735481][T13407] ? netlink_getsockopt+0x530/0x530 [ 314.740755][T13407] ? security_socket_sendmsg+0x82/0xa0 [ 314.746293][T13407] ? netlink_getsockopt+0x530/0x530 [ 314.751482][T13407] ____sys_sendmsg+0x5b7/0x8f0 [ 314.756328][T13407] ? __sys_sendmsg_sock+0x40/0x40 [ 314.761427][T13407] ? import_iovec+0x7c/0xb0 [ 314.766034][T13407] ___sys_sendmsg+0x236/0x2e0 [ 314.771038][T13407] ? __sys_sendmsg+0x280/0x280 [ 314.775817][T13407] ? alloc_file+0x82/0x540 [ 314.780244][T13407] ? __fdget+0x1a1/0x230 [ 314.784745][T13407] __x64_sys_sendmsg+0x1f9/0x2c0 [ 314.789764][T13407] ? __kasan_check_write+0x14/0x20 [ 314.795063][T13407] ? ___sys_sendmsg+0x2e0/0x2e0 [ 314.799916][T13407] ? __kasan_check_read+0x11/0x20 [ 314.805032][T13407] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 314.810855][T13407] do_syscall_64+0x31/0x40 [ 314.815452][T13407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 314.821531][T13407] RIP: 0033:0x7f726c047799 [ 314.825968][T13407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.845821][T13407] RSP: 002b:00007f726aaa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.854327][T13407] RAX: ffffffffffffffda RBX: 00007f726c2c0fa0 RCX: 00007f726c047799 [ 314.862861][T13407] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 314.871009][T13407] RBP: 00007f726c0ddc99 R08: 0000000000000000 R09: 0000000000000000 [ 314.879081][T13407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.887142][T13407] R13: 00007f726c2c1038 R14: 00007f726c2c0fa0 R15: 00007fff46aa0cb8 [ 314.895377][T13407] [ 314.897786][T13407] Allocated by task 13407: [ 314.902285][T13407] __kasan_kmalloc+0xda/0x110 [ 314.907195][T13407] __kmalloc+0x1a4/0x330 [ 314.911602][T13407] tcf_idr_create+0x5f/0x790 [ 314.916453][T13407] tcf_idr_create_from_flags+0x61/0x70 [ 314.921911][T13407] tcf_gact_init+0x2e6/0x560 [ 314.926585][T13407] tcf_action_init_1+0x443/0x6e0 [ 314.931509][T13407] tcf_action_init+0x227/0x780 [ 314.936267][T13407] tcf_exts_validate+0x248/0x570 [ 314.941281][T13407] mall_set_parms+0x4b/0x410 [ 314.945853][T13407] mall_change+0x47a/0x760 [ 314.950255][T13407] tc_new_tfilter+0x1452/0x1a90 [ 314.955183][T13407] rtnetlink_rcv_msg+0x845/0xcc0 [ 314.960199][T13407] netlink_rcv_skb+0x1f5/0x440 [ 314.965239][T13407] rtnetlink_rcv+0x1c/0x20 [ 314.969841][T13407] netlink_unicast+0x876/0xa40 [ 314.974681][T13407] netlink_sendmsg+0x89c/0xb50 [ 314.979501][T13407] ____sys_sendmsg+0x5b7/0x8f0 [ 314.984370][T13407] ___sys_sendmsg+0x236/0x2e0 [ 314.989039][T13407] __x64_sys_sendmsg+0x1f9/0x2c0 [ 314.994052][T13407] do_syscall_64+0x31/0x40 [ 314.998656][T13407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 315.004787][T13407] [ 315.007210][T13407] The buggy address belongs to the object at ffff88812983f300 [ 315.007210][T13407] which belongs to the cache kmalloc-192 of size 192 [ 315.021502][T13407] The buggy address is located 0 bytes to the right of [ 315.021502][T13407] 192-byte region [ffff88812983f300, ffff88812983f3c0) [ 315.035384][T13407] The buggy address belongs to the page: [ 315.041025][T13407] page:ffffea0004a60fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12983f [ 315.051331][T13407] flags: 0x4000000000000200(slab) [ 315.056444][T13407] raw: 4000000000000200 ffffea00048bbcc0 0000000d0000000d ffff888100043380 [ 315.065407][T13407] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 315.074242][T13407] page dumped because: kasan: bad access detected [ 315.080760][T13407] page_owner tracks the page as allocated [ 315.086491][T13407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 7449, ts 304060120036, free_ts 304059103440 [ 315.102832][T13407] prep_new_page+0x179/0x180 [ 315.107425][T13407] get_page_from_freelist+0x223b/0x23d0 [ 315.113006][T13407] __alloc_pages_nodemask+0x290/0x620 [ 315.118448][T13407] new_slab+0x84/0x3f0 [ 315.122534][T13407] ___slab_alloc+0x2a6/0x450 [ 315.127123][T13407] __slab_alloc+0x63/0xa0 [ 315.131534][T13407] kmem_cache_alloc_trace+0x1b0/0x2e0 [ 315.136905][T13407] kernfs_fop_open+0x343/0xb30 [ 315.141742][T13407] do_dentry_open+0x793/0x1090 [ 315.146510][T13407] vfs_open+0x73/0x80 [ 315.150643][T13407] path_openat+0x280f/0x31c0 [ 315.155230][T13407] do_filp_open+0x1e2/0x410 [ 315.159918][T13407] do_sys_openat2+0x19f/0x750 [ 315.164612][T13407] __x64_sys_openat+0x136/0x160 [ 315.169545][T13407] do_syscall_64+0x31/0x40 [ 315.174052][T13407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 315.179944][T13407] page last free stack trace: [ 315.184847][T13407] free_unref_page_prepare+0x2b7/0x2d0 [ 315.190489][T13407] __free_pages+0x146/0x3b0 [ 315.194991][T13407] __free_slab+0xcf/0x190 [ 315.199312][T13407] discard_slab+0x29/0x40 [ 315.203719][T13407] __slab_free+0x313/0x3a0 [ 315.208125][T13407] ___cache_free+0x10e/0x130 [ 315.212703][T13407] qlink_free+0x50/0x90 [ 315.216861][T13407] qlist_free_all+0x5f/0xb0 [ 315.221441][T13407] kasan_quarantine_reduce+0x14a/0x160 [ 315.226897][T13407] __kasan_slab_alloc+0x2f/0xf0 [ 315.232284][T13407] slab_post_alloc_hook+0x5d/0x2f0 [ 315.237400][T13407] kmem_cache_alloc+0x162/0x2d0 [ 315.242597][T13407] getname_flags+0xb9/0x500 [ 315.247379][T13407] user_path_at_empty+0x2f/0x50 [ 315.252365][T13407] vfs_statx+0x10a/0x530 [ 315.256760][T13407] __se_sys_newfstatat+0x10e/0x3d0 [ 315.261971][T13407] [ 315.264423][T13407] Memory state around the buggy address: [ 315.270066][T13407] ffff88812983f280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 315.278118][T13407] ffff88812983f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 315.286262][T13407] >ffff88812983f380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 315.294405][T13407] ^ [ 315.300820][T13407] ffff88812983f400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 315.309305][T13407] ffff88812983f480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 315.318271][T13407] ================================================================== [ 315.326703][T13407] Disabling lock debugging due to kernel taint