last executing test programs: 1m17.65596126s ago: executing program 1 (id=3389): chmod(&(0x7f0000000100)='./file0\x00', 0xed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(r0, &(0x7f0000000740), 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/78, 0x4e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/52, 0x34}], 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/2, 0x2}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0000000000000040000000340b000000ffffff95"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2e}, 0x94) 1m16.751892294s ago: executing program 1 (id=3404): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x7ff, 0x8}) 1m16.751587084s ago: executing program 1 (id=3406): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000002800)='./bus\x00', 0x2000006, &(0x7f000000cc00)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="2c73686f72056d6500"/21, @ANYRES32, @ANYRES32], 0x25, 0x34f, &(0x7f0000002c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183042, 0x1e1) unshare(0x22020600) fadvise64(r0, 0x8, 0x7, 0x3) 1m16.581885932s ago: executing program 1 (id=3413): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020600) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040840) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3363005, 0x0) 1m16.524510435s ago: executing program 1 (id=3414): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], &(0x7f0000000180)=[0x9, 0x5, 0x5, 0x5, 0x71], 0x1}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1m16.384192152s ago: executing program 1 (id=3415): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r3, 0x3328}, {r2, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m16.384009432s ago: executing program 32 (id=3415): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r3, 0x3328}, {r2, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m9.728117675s ago: executing program 0 (id=3548): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x6, 0x7, 0x10021da0, 0x10000, 0xff, "42f407000000195a14c84953dc7e8e5aec7776", 0xfffffffe, 0x9}) 1m9.692936427s ago: executing program 0 (id=3550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 1m9.648285609s ago: executing program 0 (id=3551): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.impure\x00') 1m9.647629619s ago: executing program 0 (id=3553): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) 1m9.530518665s ago: executing program 0 (id=3555): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) lchown(0x0, 0x0, 0xffffffffffffffff) dup2(r4, r3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, 0x0) 1m8.484424405s ago: executing program 0 (id=3575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) unshare(0x6020400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae64, 0x0) 1m8.133118702s ago: executing program 33 (id=3575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) unshare(0x6020400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae64, 0x0) 29.776597174s ago: executing program 5 (id=4374): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2000007ff) 29.742325806s ago: executing program 5 (id=4377): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 29.522627876s ago: executing program 5 (id=4393): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd049350725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e0407516ba", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x61, 0x2bd, &(0x7f00000007c0)="$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") sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 29.23000377s ago: executing program 5 (id=4398): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 28.948014585s ago: executing program 5 (id=4403): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f748b2c036f646f74732c6e6f646f74732c642c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f7765479e17603139a2b14100a23681697865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f63aab08ab0623a6f8f6c7fb2bdc7749ddce7f586a5e16f432"], 0x1, 0x209, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x6) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 27.956183972s ago: executing program 5 (id=4421): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) read$char_usb(r2, &(0x7f0000000300)=""/137, 0xd00) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 27.860109237s ago: executing program 34 (id=4421): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) read$char_usb(r2, &(0x7f0000000300)=""/137, 0xd00) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 1.940308585s ago: executing program 2 (id=5063): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 1.940054605s ago: executing program 2 (id=5064): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010002, 0x0) 1.088922967s ago: executing program 2 (id=5086): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x10, 0x400000000000460e, 0x7) 1.037335479s ago: executing program 2 (id=5090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000c40)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe0}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 953.876173ms ago: executing program 2 (id=5094): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000720000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) 953.774303ms ago: executing program 7 (id=5095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 953.571483ms ago: executing program 7 (id=5097): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 896.304576ms ago: executing program 7 (id=5098): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 895.935856ms ago: executing program 7 (id=5101): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000440)=""/229, 0xd9}, {&(0x7f0000000540)=""/266, 0xfb}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000002380)=""/4086, 0x1001}, {&(0x7f0000000300)=""/51, 0x33}], 0x5}, 0x2000009}, {{0x0, 0x58, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x4020, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 581.338161ms ago: executing program 6 (id=5121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 512.375805ms ago: executing program 6 (id=5124): unshare(0x20000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) 512.067905ms ago: executing program 6 (id=5127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 464.471517ms ago: executing program 6 (id=5132): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e0000180002800800150000001000040012000500160001"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) 412.175299ms ago: executing program 6 (id=5135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)) 315.693824ms ago: executing program 4 (id=5139): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000003280)={0x3, 0x2}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 239.445508ms ago: executing program 4 (id=5144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 192.393ms ago: executing program 3 (id=5145): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 192.26738ms ago: executing program 4 (id=5146): unshare(0x400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 188.682141ms ago: executing program 4 (id=5147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001800)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 180.789741ms ago: executing program 3 (id=5148): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) 127.397243ms ago: executing program 4 (id=5149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, 0x0, 0x0) shutdown(r1, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 127.266513ms ago: executing program 3 (id=5150): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0xfee9) 126.538523ms ago: executing program 2 (id=5151): socket$inet(0x2, 0x803, 0x53792800) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000ed0000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x5c5a0000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2000}) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000500)=""/38, &(0x7f0000000100)=0x9) sendto(0xffffffffffffffff, &(0x7f0000000000)="0e2fc0d80521e58272d5086a22091a96be7adf40228ca05cc0be70287884894861dccabe826e2bd91b5d1b8b74ad122748625adf6eb89f10dc9a48bdb59a4839f538bae85e7a32359a5f52222a557375685897d6abcdc41e4be5d4fe188dfb7feae4eaf2367219e6283dad8a0326e68b3f163e43121f2a4551a630a18e085de5b1a1b4625925e0813eeb681efc58237c5d80fe0e836d96a0c25ddabc9b0a53f87af10ee5fd4431e1c329bf306f1b0589", 0xb0, 0x20000005, &(0x7f0000000140)=@isdn={0x22, 0xf, 0x6, 0x1, 0x4}, 0x80) 126.158123ms ago: executing program 3 (id=5152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000006c0), 0x0}, 0x20) 99.628414ms ago: executing program 4 (id=5153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="4000000000000000ce0080c988ca", 0xe}], 0x1) 97.114125ms ago: executing program 3 (id=5154): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x601, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) 16.380989ms ago: executing program 7 (id=5155): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 16.165189ms ago: executing program 3 (id=5156): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2000000013000318680907070000000f0000ff3f13000000170a001700000000", 0x20}], 0x1) 1.230159ms ago: executing program 7 (id=5157): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x1b, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b"}}) 0s ago: executing program 6 (id=5158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): ice=dc.7b [ 279.143834][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.157037][ T26] usb 3-1: Product: syz [ 279.170698][ T26] usb 3-1: Manufacturer: syz [ 279.182362][ T26] usb 3-1: SerialNumber: syz [ 279.196294][ T26] usb 3-1: config 0 descriptor?? [ 279.270961][ T297] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 279.461449][ T3259] usb 3-1: USB disconnect, device number 19 [ 279.640311][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2254'. [ 279.681145][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.692999][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.881359][ T297] usb 5-1: New USB device found, idVendor=097f, idProduct=3333, bcdDevice= 0.40 [ 279.890720][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.901120][ T297] usb 5-1: config 0 descriptor?? [ 279.908896][ T6377] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6377 comm=syz.1.2256 [ 280.441149][ T297] usbhid 5-1:0.0: can't add hid device: -71 [ 280.453271][ T297] usbhid: probe of 5-1:0.0 failed with error -71 [ 280.828212][ T297] usb 5-1: USB disconnect, device number 18 [ 280.886112][ T6403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6403 comm=syz.2.2268 [ 281.036075][ T6415] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 281.046364][ T6415] device syzkaller0 entered promiscuous mode [ 281.082584][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2270'. [ 281.516620][ T6431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6431 comm=syz.3.2280 [ 281.584882][ T6439] tipc: Enabling of bearer rejected, failed to enable media [ 282.082075][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2293'. [ 282.096118][ T6460] device ip6gre1 entered promiscuous mode [ 282.105725][ T6463] tipc: Enabling of bearer rejected, failed to enable media [ 282.208351][ T30] audit: type=1326 audit(1773696210.752:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.235569][ T30] audit: type=1326 audit(1773696210.752:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.260381][ T30] audit: type=1326 audit(1773696210.752:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.286292][ T30] audit: type=1326 audit(1773696210.752:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.310489][ T30] audit: type=1326 audit(1773696210.752:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.334475][ T30] audit: type=1326 audit(1773696210.752:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.358687][ T30] audit: type=1326 audit(1773696210.752:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.384452][ T30] audit: type=1326 audit(1773696210.752:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.408818][ T30] audit: type=1326 audit(1773696210.752:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 282.473254][ T6482] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2303'. [ 283.077352][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 283.077372][ T30] audit: type=1326 audit(1773696211.632:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.110607][ T30] audit: type=1326 audit(1773696211.632:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.185336][ T30] audit: type=1326 audit(1773696211.672:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.210059][ T30] audit: type=1326 audit(1773696211.672:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.241860][ T30] audit: type=1326 audit(1773696211.672:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.285523][ T30] audit: type=1326 audit(1773696211.672:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.312428][ T30] audit: type=1326 audit(1773696211.672:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.336560][ T30] audit: type=1326 audit(1773696211.672:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.380784][ T30] audit: type=1326 audit(1773696211.672:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 283.404653][ T30] audit: type=1326 audit(1773696211.672:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f9194d2d799 code=0x7ffc0000 [ 284.679514][ T6586] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6586 comm=syz.0.2348 [ 285.299461][ T6613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6613 comm=syz.1.2359 [ 285.943867][ T6640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6640 comm=syz.0.2371 [ 286.363816][ T3259] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 286.791035][ T3259] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.801553][ T3259] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.921286][ T3259] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.930442][ T3259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.951000][ T3259] usb 5-1: SerialNumber: syz [ 287.251873][ T3259] usb 5-1: 0:2 : does not exist [ 287.266308][ T3259] usb 5-1: USB disconnect, device number 19 [ 288.445539][ T6729] fuse: Unknown parameter 'grou00000000000000000000' [ 288.546409][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 288.546427][ T30] audit: type=1400 audit(1773696217.102:589): avc: denied { execute } for pid=6730 comm="syz.2.2407" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 288.580332][ T30] audit: type=1400 audit(1773696217.102:590): avc: denied { execute_no_trans } for pid=6730 comm="syz.2.2407" path=2F6D656D66643A5B0B7827A5291AA9FDFAADD16D64C8854858A9250C1A6501202864656C6574656429 dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 288.619634][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'. [ 292.202694][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2439'. [ 294.290325][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2455'. [ 294.916310][ T30] audit: type=1326 audit(1773696223.472:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.023775][ T6900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2467'. [ 295.038504][ T30] audit: type=1326 audit(1773696223.512:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.102076][ T6900] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2467'. [ 295.133294][ T6900] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2467'. [ 295.302911][ T30] audit: type=1326 audit(1773696223.512:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.331970][ T30] audit: type=1326 audit(1773696223.512:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.356129][ T30] audit: type=1326 audit(1773696223.512:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.380208][ T30] audit: type=1326 audit(1773696223.512:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.404610][ T30] audit: type=1326 audit(1773696223.512:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.443954][ T30] audit: type=1326 audit(1773696223.512:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.528802][ T30] audit: type=1326 audit(1773696223.512:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.554619][ T30] audit: type=1326 audit(1773696223.512:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f148a291799 code=0x7ffc0000 [ 295.594894][ T6919] loop2: detected capacity change from 0 to 256 [ 295.692565][ T6919] exfat: Deprecated parameter 'namecase' [ 295.698412][ T6919] exfat: Deprecated parameter 'utf8' [ 295.720357][ T6931] device ip6gre1 entered promiscuous mode [ 295.727923][ T2416] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.739917][ T6931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.747805][ T2416] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.756082][ T2416] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.764003][ T6931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.954842][ T6919] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 296.081309][ T2416] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.171110][ T2416] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.567316][ T6946] loop4: detected capacity change from 0 to 131072 [ 296.624106][ T6946] F2FS-fs (loop4): invalid crc value [ 296.737456][ T6946] F2FS-fs (loop4): Found nat_bits in checkpoint [ 296.871071][ T6946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 298.048939][ T6997] overlayfs: failed to clone upperpath [ 298.482667][ T7004] loop4: detected capacity change from 0 to 16 [ 298.523165][ T7004] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 298.815955][ T7011] fuse: Unknown parameter 'group_id00000000000000000000' [ 299.401024][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.559621][ T7027] overlayfs: failed to clone upperpath [ 299.979612][ T7049] overlayfs: failed to clone upperpath [ 300.169724][ T7053] fuse: Unknown parameter 'group_id00000000000000000000' [ 300.796737][ T7070] x_tables: duplicate underflow at hook 4 [ 301.089796][ T7084] netlink: 'syz.0.2535': attribute type 27 has an invalid length. [ 301.390390][ T7088] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 301.558036][ T7103] fuse: Bad value for 'user_id' [ 302.277279][ T7106] overlayfs: failed to clone upperpath [ 302.378396][ T7109] overlayfs: failed to clone upperpath [ 302.443462][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 302.480316][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 302.518497][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 302.557016][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 302.568443][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2557'. [ 302.583949][ T7126] netlink: 'syz.3.2558': attribute type 13 has an invalid length. [ 302.596405][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 302.616296][ T7126] gretap0: refused to change device tx_queue_len [ 302.633507][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 302.663033][ T7126] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.757311][ T7129] device veth0_vlan left promiscuous mode [ 302.764842][ T7129] device veth0_vlan entered promiscuous mode [ 302.773009][ T7129] device veth1_macvtap left promiscuous mode [ 302.979940][ T7129] device veth1_macvtap entered promiscuous mode [ 303.061932][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.096937][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.196256][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.229134][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.236964][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.245497][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.261140][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.269339][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.276594][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.285425][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.295726][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.311132][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.320998][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.328745][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.341341][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.355702][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.358899][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.363316][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.367636][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.392106][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 303.401038][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.402265][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.408790][ T3259] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 303.420171][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 303.444855][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.454190][ T3259] hid-generic 0006:0004:0009.000E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 303.458100][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.538652][ T7147] fido_id[7147]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 303.555264][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.565343][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.583278][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.592670][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.601367][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.610495][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.619801][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.629119][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.638859][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.651591][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.661596][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.670398][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.688796][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.700114][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.709734][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.724547][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.734670][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.742949][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.760157][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.769570][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.797257][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.679339][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.692831][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.700334][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.713125][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.721258][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.729322][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.738441][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.746484][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.754645][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.762974][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.770515][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.786520][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.795254][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.804094][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.811986][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.819826][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.828192][ T1742] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 304.850413][ T1742] hid-generic 0006:0004:0009.000F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 304.929342][ T7187] fido_id[7187]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 307.081124][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.467291][ T4460] tipc: Left network mode [ 307.666662][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 307.666682][ T30] audit: type=1400 audit(1773696236.222:617): avc: denied { mounton } for pid=7257 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 307.784135][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2616'. [ 307.801822][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 307.836814][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.845565][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.855385][ T7257] device bridge_slave_0 entered promiscuous mode [ 307.872029][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.879518][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.889338][ T7257] device bridge_slave_1 entered promiscuous mode [ 307.947741][ T7288] tmpfs: Unsupported parameter 'mpol' [ 308.033389][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.041369][ T7257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.048900][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.056347][ T7257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.889650][ T7339] tmpfs: Unsupported parameter 'mpol' [ 309.002480][ T593] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.021067][ T593] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.029811][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 309.055778][ T7332] bridge0: port 3(vlan2) entered blocking state [ 309.062675][ T7332] bridge0: port 3(vlan2) entered disabled state [ 309.069987][ T7332] device vlan2 entered promiscuous mode [ 309.091630][ T7342] device veth1_vlan entered promiscuous mode [ 309.144341][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.164278][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.183973][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.201362][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.226993][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.234605][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.268411][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.370729][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.393365][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.400918][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.523742][ T7361] loop2: detected capacity change from 0 to 256 [ 309.533921][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.551362][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.562668][ T7361] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 309.571701][ T7361] FAT-fs (loop2): Filesystem has been set read-only [ 309.579412][ T7361] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 309.603948][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.627933][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.656887][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.683501][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.717675][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.726806][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.737344][ T7257] device veth0_vlan entered promiscuous mode [ 309.745079][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.755016][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.774620][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.784919][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.797179][ T7257] device veth1_macvtap entered promiscuous mode [ 309.811924][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.821455][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.830823][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.853750][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.864350][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.984313][ T30] audit: type=1400 audit(1773696239.542:618): avc: denied { mounton } for pid=7257 comm="syz-executor" path="/root/syzkaller.ZpX9HU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 311.906911][ T7419] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2675'. [ 312.801097][ T30] audit: type=1400 audit(1773696241.342:619): avc: denied { remount } for pid=7428 comm="syz.2.2679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 312.869440][ T7435] device syz_tun entered promiscuous mode [ 312.907720][ T7435] device syz_tun left promiscuous mode [ 313.350154][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 314.763916][ T4460] tipc: Left network mode [ 314.889478][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.942054][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.969171][ T7517] device bridge_slave_0 entered promiscuous mode [ 315.002078][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.009421][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.017532][ T7517] device bridge_slave_1 entered promiscuous mode [ 315.886889][ T4460] device bridge_slave_1 left promiscuous mode [ 315.898752][ T30] audit: type=1326 audit(1773696244.462:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde889c6799 code=0x7ffc0000 [ 315.923779][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.979374][ T4460] device bridge_slave_0 left promiscuous mode [ 316.005979][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.041451][ T30] audit: type=1326 audit(1773696244.522:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fde889c6799 code=0x7ffc0000 [ 316.081462][ T4460] device veth1_macvtap left promiscuous mode [ 316.101298][ T30] audit: type=1326 audit(1773696244.522:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde889c6799 code=0x7ffc0000 [ 316.127237][ T4460] device veth0_vlan left promiscuous mode [ 317.097296][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.111715][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.132261][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.141955][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.151374][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.158592][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.167232][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.187593][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.199842][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.213983][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.221349][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.252312][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.264028][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.290861][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.304011][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.330577][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.353235][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.447263][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.458006][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.467553][ T7517] device veth0_vlan entered promiscuous mode [ 317.475729][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.484364][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.513001][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.525577][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.664718][ T7517] device veth1_macvtap entered promiscuous mode [ 317.995066][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.054810][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.297840][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.365774][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.426920][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.525611][ T7597] netlink: 'syz.4.2750': attribute type 9 has an invalid length. [ 318.637290][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.644888][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.755790][ T7619] fuse: Invalid rootmode [ 319.069573][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.077136][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.086126][ T7623] device bridge_slave_0 entered promiscuous mode [ 319.095757][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.103419][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.111883][ T7623] device bridge_slave_1 entered promiscuous mode [ 319.226349][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.233794][ T7623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.241465][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.249082][ T7623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.294899][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.303903][ T593] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.311707][ T593] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.323882][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.332773][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.339832][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.355406][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.364195][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.371700][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.388756][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.397537][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.417135][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.433586][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.443596][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.452919][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.463504][ T7623] device veth0_vlan entered promiscuous mode [ 319.478557][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.489827][ T7623] device veth1_macvtap entered promiscuous mode [ 319.505345][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.526711][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.599210][ T7636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7636 comm=syz.3.2760 [ 320.874802][ T7661] fuse: Bad value for 'rootmode' [ 321.170449][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.178948][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.188169][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.195984][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.204262][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.212418][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.220537][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.228609][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.236582][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.244685][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.252538][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.260474][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.268020][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.276417][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.285334][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.293355][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.301797][ T2416] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 321.311063][ T2416] hid-generic 0006:0004:0009.0010: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 321.342977][ T7688] fido_id[7688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 321.842375][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.854245][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.871694][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.887570][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.897102][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.905794][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.913591][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.921680][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.930137][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.937885][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.977773][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 321.995551][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 322.006932][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 322.015960][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 322.023864][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 322.033073][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 322.041423][ T3259] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 322.062715][ T3259] hid-generic 0006:0004:0009.0011: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 322.120803][ T7728] fido_id[7728]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 322.200944][ T2416] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 322.581196][ T2416] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.595727][ T2416] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.701793][ T2416] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 322.715289][ T2416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 322.727595][ T2416] usb 4-1: SerialNumber: syz [ 323.017108][ T2416] usb 4-1: 0:2 : does not exist [ 323.030566][ T2416] usb 4-1: USB disconnect, device number 10 [ 323.164860][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.173686][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.182703][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.192138][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.200051][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.208832][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.217121][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.225720][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.234333][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.243122][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.251362][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.259682][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.269005][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.279420][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 323.316586][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.326266][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.334504][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.342860][ T39] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 323.351649][ T39] hid-generic 0006:0004:0009.0012: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 323.413892][ T7765] fido_id[7765]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 323.500221][ T7771] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.610521][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.617896][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.878190][ T30] audit: type=1326 audit(1773696253.432:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 324.929019][ T30] audit: type=1326 audit(1773696253.442:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 325.989154][ T30] audit: type=1326 audit(1773696253.442:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 326.032784][ T30] audit: type=1326 audit(1773696253.442:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 326.056759][ T30] audit: type=1326 audit(1773696253.452:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 326.106506][ T30] audit: type=1326 audit(1773696253.452:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 326.157345][ T30] audit: type=1326 audit(1773696253.452:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 326.187182][ T30] audit: type=1326 audit(1773696253.452:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 326.214659][ T30] audit: type=1326 audit(1773696253.452:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 326.281421][ T30] audit: type=1326 audit(1773696253.452:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 326.351213][ T7874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'. [ 326.457507][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2852'. [ 326.468865][ T7884] create_pit_timer: 12 callbacks suppressed [ 326.468942][ T7884] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 326.503787][ T7884] kvm: pic: non byte read [ 326.511445][ T7884] kvm: pic: non byte read [ 326.520748][ T7884] kvm: pic: non byte read [ 326.528995][ T7884] kvm: pic: non byte read [ 326.545053][ T7884] kvm: pic: non byte read [ 326.553488][ T7884] kvm: pic: non byte read [ 329.551059][ T8001] tmpfs: Unsupported parameter 'mpol' [ 329.596984][ T8007] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2896'. [ 329.629223][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2898'. [ 329.639430][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2898'. [ 329.844113][ T8032] device batadv_slave_0 entered promiscuous mode [ 329.968709][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 330.236624][ T8039] overlayfs: failed to clone upperpath [ 330.716019][ T3259] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 330.863822][ T8107] overlayfs: failed to clone upperpath [ 331.081043][ T3259] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.092233][ T3259] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.201035][ T3259] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.217774][ T8156] xt_hashlimit: size too large, truncated to 1048576 [ 331.224934][ T3259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.238485][ T3259] usb 5-1: SerialNumber: syz [ 331.278785][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2961'. [ 331.298137][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2961'. [ 331.314347][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2961'. [ 331.330440][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2961'. [ 331.545289][ T3259] usb 5-1: 0:2 : does not exist [ 332.385768][ T3259] usb 5-1: USB disconnect, device number 20 [ 332.418581][ T8186] device vlan3 entered promiscuous mode [ 332.430333][ T8186] device bridge0 entered promiscuous mode [ 332.482508][ T8194] loop2: detected capacity change from 0 to 512 [ 332.592073][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 332.707051][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.725038][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.742906][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.758469][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.773202][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.788881][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.809998][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.826569][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.842666][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.860310][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.878038][ T8216] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8216 comm=syz.4.2984 [ 332.891992][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.905303][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.920545][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.928477][ T8216] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8216 comm=syz.4.2984 [ 332.941975][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.949772][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.957794][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.965793][ T3259] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 332.981174][ T3259] hid-generic 0006:0004:0009.0013: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 333.055529][ T8217] fido_id[8217]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 333.292377][ T8232] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 333.540550][ T8250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2995'. [ 333.550689][ T8250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2995'. [ 333.888012][ T8260] device batadv_slave_0 entered promiscuous mode [ 336.050505][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3045'. [ 336.338792][ T8389] fuse: Bad value for 'fd' [ 336.414487][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 336.414557][ T30] audit: type=1400 audit(1773696264.972:641): avc: denied { read } for pid=8391 comm="syz.1.3056" name="file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 336.943232][ T30] audit: type=1326 audit(1773696265.502:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 336.969804][ T30] audit: type=1326 audit(1773696265.502:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 337.035428][ T30] audit: type=1326 audit(1773696265.532:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 337.059537][ T30] audit: type=1326 audit(1773696265.532:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 337.106934][ T30] audit: type=1326 audit(1773696265.532:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 337.150113][ T30] audit: type=1326 audit(1773696265.562:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 337.181228][ T30] audit: type=1326 audit(1773696265.562:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 337.208649][ T8423] binder: BINDER_SET_CONTEXT_MGR already set [ 337.226093][ T8423] binder: 8420:8423 ioctl 4018620d 200000004a80 returned -16 [ 337.275335][ T30] audit: type=1326 audit(1773696265.562:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 337.309592][ T8429] device syzkaller0 entered promiscuous mode [ 337.317156][ T8421] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 337.320780][ T30] audit: type=1326 audit(1773696265.562:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdb1d330799 code=0x7ffc0000 [ 337.350010][ T8421] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 337.687123][ T8451] overlayfs: failed to clone upperpath [ 339.322831][ T8473] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.463718][ T8503] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3097'. [ 340.610769][ T8539] overlayfs: failed to clone lowerpath [ 340.661792][ T8542] binder: BINDER_SET_CONTEXT_MGR already set [ 340.667921][ T8542] binder: 8541:8542 ioctl 4018620d 200000004a80 returned -16 [ 342.258805][ T8588] loop2: detected capacity change from 0 to 128 [ 342.266759][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 342.266933][ T30] audit: type=1400 audit(1773696270.802:652): avc: denied { shutdown } for pid=8584 comm="syz.2.3128" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.326522][ T8590] 9pnet: Insufficient options for proto=fd [ 342.602623][ T8601] tap0: tun_chr_ioctl cmd 1074025676 [ 342.617889][ T8601] tap0: owner set to 0 [ 342.659548][ T8603] loop3: detected capacity change from 0 to 256 [ 342.725529][ T8603] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 342.805385][ T8603] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.237662][ T8611] loop2: detected capacity change from 0 to 32768 [ 344.069558][ T8637] device syzkaller0 entered promiscuous mode [ 344.413091][ T8648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.150309][ T8673] kvm [8672]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 345.171797][ T30] audit: type=1400 audit(1773696273.732:653): avc: denied { execmem } for pid=8680 comm="syz.2.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 345.201246][ T8673] kvm [8672]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 345.220709][ T8673] kvm [8672]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 345.453454][ T8701] overlayfs: unrecognized mount option "verity=on" or missing value [ 345.510952][ T297] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 345.871023][ T297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.881681][ T297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.971061][ T297] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 345.980653][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 345.989150][ T297] usb 2-1: SerialNumber: syz [ 346.083632][ T8715] fuse: Bad value for 'rootmode' [ 346.145054][ T8726] loop2: detected capacity change from 0 to 128 [ 346.272291][ T297] usb 2-1: 0:2 : does not exist [ 346.294635][ T297] usb 2-1: USB disconnect, device number 15 [ 346.337499][ T8737] overlayfs: failed to clone upperpath [ 347.160299][ T8774] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3204'. [ 347.160340][ T8774] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 347.291235][ T30] audit: type=1400 audit(1773696275.852:654): avc: denied { mounton } for pid=8779 comm="syz.2.3207" path="/proc/1494/task" dev="proc" ino=51624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 347.323445][ T30] audit: type=1400 audit(1773696275.882:655): avc: denied { associate } for pid=8782 comm="syz.2.3207" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 347.422209][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3210'. [ 348.208009][ T8811] loop2: detected capacity change from 0 to 256 [ 350.544360][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3241'. [ 350.688387][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.714255][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.757037][ T8861] device bridge_slave_0 entered promiscuous mode [ 350.790088][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.808685][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.829774][ T8861] device bridge_slave_1 entered promiscuous mode [ 350.922080][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.929548][ T8861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.937547][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.944763][ T8861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.992661][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.003327][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.021112][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.049651][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.060132][ T1579] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.067860][ T1579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.076865][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.086140][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.093535][ T1579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.103886][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.121922][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.138916][ T8861] device veth0_vlan entered promiscuous mode [ 351.146785][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.156500][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.165736][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.177082][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.196744][ T8861] device veth1_macvtap entered promiscuous mode [ 351.204805][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.219760][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.238241][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.377818][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3261'. [ 351.466534][ T8929] loop1: detected capacity change from 0 to 128 [ 351.494630][ T30] audit: type=1400 audit(1773696280.052:656): avc: denied { append } for pid=8928 comm="syz.1.3267" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.540992][ T30] audit: type=1400 audit(1773696280.052:657): avc: denied { map } for pid=8928 comm="syz.1.3267" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.615553][ T30] audit: type=1400 audit(1773696280.052:658): avc: denied { execute } for pid=8928 comm="syz.1.3267" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.491681][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 352.500272][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.614958][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.627009][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.638779][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.650578][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.985195][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'. [ 353.000464][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3315'. [ 353.007804][ T30] audit: type=1400 audit(1773696281.552:659): avc: denied { remount } for pid=9032 comm="syz.3.3313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 353.033655][ T9037] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3315'. [ 353.045591][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3310'. [ 353.057539][ T9039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.431120][ T30] audit: type=1400 audit(1773696281.982:660): avc: denied { name_bind } for pid=9049 comm="syz.1.3321" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 353.662928][ T9054] xt_hashlimit: size too large, truncated to 1048576 [ 353.832227][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3323'. [ 354.395483][ T30] audit: type=1400 audit(1773696282.952:661): avc: denied { shutdown } for pid=9071 comm="syz.1.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 355.564697][ T9100] overlayfs: failed to resolve './file1': -2 [ 356.816609][ T30] audit: type=1400 audit(1773696285.372:662): avc: denied { watch } for pid=9115 comm="syz.3.3344" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 357.167412][ T9144] loop1: detected capacity change from 0 to 512 [ 357.215055][ T9144] FAT-fs (loop1): Unrecognized mount option "0x00000000000000050xffffffffffffffff" or missing value [ 358.134004][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3359'. [ 358.192684][ T9162] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3359'. [ 358.765640][ T9168] loop2: detected capacity change from 0 to 128 [ 360.674058][ T9204] loop2: detected capacity change from 0 to 256 [ 360.732494][ T30] audit: type=1400 audit(1773696289.292:663): avc: denied { create } for pid=9205 comm="syz.3.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 360.772545][ T30] audit: type=1400 audit(1773696289.322:664): avc: denied { remount } for pid=9207 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 360.780735][ T9208] overlayfs: upper fs does not support tmpfile. [ 360.795705][ T30] audit: type=1400 audit(1773696289.332:665): avc: denied { mounton } for pid=9207 comm="syz.4.3378" path="/559/file0/file0" dev="bpf" ino=52609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 360.869383][ T30] audit: type=1400 audit(1773696289.422:666): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 360.901688][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3382'. [ 360.924716][ T9220] overlayfs: unrecognized mount option "verity=on" or missing value [ 360.927587][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3382'. [ 361.450788][ T9257] device vlan3 entered promiscuous mode [ 361.456690][ T9257] device syz_tun entered promiscuous mode [ 361.900633][ T9275] loop1: detected capacity change from 0 to 256 [ 361.938552][ T9275] FAT-fs (loop1): Directory bread(block 64) failed [ 361.945482][ T9275] FAT-fs (loop1): Directory bread(block 65) failed [ 361.952704][ T9275] FAT-fs (loop1): Directory bread(block 66) failed [ 361.959469][ T9275] FAT-fs (loop1): Directory bread(block 67) failed [ 361.982688][ T9275] FAT-fs (loop1): Directory bread(block 68) failed [ 361.989904][ T9275] FAT-fs (loop1): Directory bread(block 69) failed [ 361.997231][ T9275] FAT-fs (loop1): Directory bread(block 70) failed [ 362.005677][ T9275] FAT-fs (loop1): Directory bread(block 71) failed [ 362.015808][ T9275] FAT-fs (loop1): Directory bread(block 72) failed [ 362.022832][ T9275] FAT-fs (loop1): Directory bread(block 73) failed [ 362.051986][ T9275] attempt to access beyond end of device [ 362.051986][ T9275] loop1: rw=524288, want=1196, limit=256 [ 362.080308][ T9288] loop3: detected capacity change from 0 to 256 [ 362.215965][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3412'. [ 362.230449][ T9288] IPv6: NLM_F_REPLACE set, but no existing node found! [ 362.313051][ T9295] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 362.351002][ T9295] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 362.394603][ T9295] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 362.458600][ T9304] loop2: detected capacity change from 0 to 128 [ 362.484784][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.492223][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.552283][ T9298] device bridge_slave_0 entered promiscuous mode [ 362.599355][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.606861][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.614674][ T9298] device bridge_slave_1 entered promiscuous mode [ 362.775525][ T9319] loop2: detected capacity change from 0 to 512 [ 362.811463][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.819036][ T9298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.826895][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.834662][ T9298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.844725][ T9319] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 363.202954][ T9319] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 363.223383][ T4460] device bridge_slave_1 left promiscuous mode [ 363.231104][ T9319] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 363.233665][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.249886][ T4460] device bridge_slave_0 left promiscuous mode [ 363.258008][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.274661][ T4460] device veth1_macvtap left promiscuous mode [ 363.294476][ T4460] device veth0_vlan left promiscuous mode [ 363.571242][ T9344] device bridge_slave_0 left promiscuous mode [ 363.577866][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.587458][ T9344] device bridge_slave_1 left promiscuous mode [ 363.595250][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.621279][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.649957][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.705062][ T9356] loop2: detected capacity change from 0 to 512 [ 363.716006][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.725403][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.747300][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.757017][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.766497][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.774279][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.783515][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.792986][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.802232][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.809522][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.825029][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.837000][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.853164][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.863828][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.881905][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.900599][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.926958][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.935710][ T3259] kernel write not supported for file bpf-prog (pid: 3259 comm: kworker/0:8) [ 363.936809][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.992209][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.000227][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.010021][ T9298] device veth0_vlan entered promiscuous mode [ 364.038917][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.080343][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.277104][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3450'. [ 364.307128][ T9382] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 364.317549][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3450'. [ 364.371253][ T9385] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3451'. [ 364.409930][ T9298] device veth1_macvtap entered promiscuous mode [ 364.431201][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 364.439615][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.449246][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.477286][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.508956][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.564379][ T9401] loop5: detected capacity change from 0 to 512 [ 364.575937][ T9403] loop3: detected capacity change from 0 to 128 [ 364.619490][ T9406] loop4: detected capacity change from 0 to 256 [ 364.740346][ T9416] loop5: detected capacity change from 0 to 8192 [ 364.755330][ T9421] loop4: detected capacity change from 0 to 512 [ 364.855109][ T9426] loop3: detected capacity change from 0 to 8192 [ 365.088037][ T9445] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 366.117981][ T9445] FAT-fs (loop3): Filesystem has been set read-only [ 367.209216][ T30] audit: type=1400 audit(1773696295.762:667): avc: denied { setattr } for pid=9532 comm="syz.2.3515" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.386165][ T9545] xt_hashlimit: size too large, truncated to 1048576 [ 367.423749][ T30] audit: type=1400 audit(1773696295.982:668): avc: denied { module_request } for pid=9544 comm="syz.2.3521" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 368.453399][ T9588] fuse: Bad value for 'fd' [ 369.070459][ T9621] loop2: detected capacity change from 0 to 8192 [ 369.096533][ T9621] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.169923][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 369.188952][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.309248][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 369.543192][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.567182][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.576570][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.586199][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.595193][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.604464][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.679219][ T9646] syz.4.3563 uses obsolete (PF_INET,SOCK_PACKET) [ 369.788582][ T9653] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3567'. [ 370.061905][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.069408][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.135098][ T9656] device bridge_slave_0 entered promiscuous mode [ 370.176036][ T9673] device batadv_slave_0 entered promiscuous mode [ 370.348500][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.407229][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.415307][ T9656] device bridge_slave_1 entered promiscuous mode [ 370.423856][ T4460] device bridge_slave_1 left promiscuous mode [ 370.431910][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.462211][ T4460] device bridge_slave_0 left promiscuous mode [ 370.468918][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.270902][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.292137][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.300026][ T9688] device bridge_slave_0 entered promiscuous mode [ 371.307933][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.315283][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.323199][ T9688] device bridge_slave_1 entered promiscuous mode [ 371.432726][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.441899][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.460612][ T30] audit: type=1400 audit(1773696300.012:669): avc: denied { remount } for pid=9709 comm="syz.5.3588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 371.501876][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.511510][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.520560][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.527956][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.537011][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.547486][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.557169][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.564391][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.591931][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.600253][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.609182][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.618174][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.628931][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.672659][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.683969][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.694179][ T9717] overlayfs: failed to clone upperpath [ 371.725325][ T9656] device veth0_vlan entered promiscuous mode [ 371.742609][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.753902][ T9720] overlayfs: failed to clone upperpath [ 371.759908][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.768938][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.778001][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.804451][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.813653][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.831591][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.841395][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.852983][ T9656] device veth1_macvtap entered promiscuous mode [ 371.877039][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.886050][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.895464][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.904343][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.911554][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.919775][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.929634][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.939070][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.946298][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.955313][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.023579][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.031827][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.044615][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.058713][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.068279][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.078019][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.113480][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.126276][ T9688] device veth0_vlan entered promiscuous mode [ 372.137260][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.155166][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.164518][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.180367][ T9753] loop4: detected capacity change from 0 to 256 [ 372.187237][ T9688] device veth1_macvtap entered promiscuous mode [ 372.206467][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.241771][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.257908][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.272819][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.488296][ T9777] device batadv_slave_0 entered promiscuous mode [ 372.550798][ T9769] loop6: detected capacity change from 0 to 128 [ 372.837677][ T9783] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 372.860936][ T9783] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 372.901604][ T9792] loop2: detected capacity change from 0 to 7 [ 372.911206][ T9792] loop2: [ 372.923430][ T101] loop2: [ 372.980819][ T9798] team_slave_1: mtu less than device minimum [ 373.051038][ T9808] loop6: detected capacity change from 0 to 128 [ 373.135954][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.143129][ T9808] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 373.144169][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.165613][ T9808] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 373.250923][ T30] audit: type=1400 audit(1773696301.802:670): avc: denied { mounton } for pid=9807 comm="syz.6.3630" path="/4/bus/file0" dev="loop6" ino=1048701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 373.295666][ T1579] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 373.628348][ T9849] loop1: detected capacity change from 0 to 7 [ 373.655456][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.666837][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 373.675764][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.686958][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 373.695103][ T326] loop1: unable to read partition table [ 373.867743][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.878921][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 373.888166][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.899293][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 373.907452][ T9849] loop1: unable to read partition table [ 373.915004][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.915662][ T9849] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 373.926452][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 373.948673][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.959725][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 373.968377][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.979420][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 373.988394][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.000097][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 374.008442][ C1] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.019475][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 374.925360][ T9890] device veth0_vlan left promiscuous mode [ 374.938546][ T9890] device veth0_vlan entered promiscuous mode [ 374.953935][ T9890] device veth1_macvtap left promiscuous mode [ 374.974716][ T9890] device veth1_macvtap entered promiscuous mode [ 375.030096][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.053978][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.072183][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.083186][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.090671][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.111184][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.135106][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.155293][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.162542][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.197304][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.206392][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 375.215346][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 375.230191][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 375.245423][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.261038][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 375.276609][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.311563][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.322457][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.333054][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.344931][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.355605][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 375.367017][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 375.377761][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.387980][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.397812][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.410325][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.420153][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.430576][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.461491][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.470273][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.485961][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.500437][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.521277][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.547120][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.591084][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.631318][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.648785][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 375.658011][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 376.165663][ T9938] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 376.175186][ T9938] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 378.339184][ T30] audit: type=1400 audit(1773696306.892:671): avc: denied { lock } for pid=10002 comm="syz.4.3703" path="socket:[56838]" dev="sockfs" ino=56838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 378.912074][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3711'. [ 379.541494][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3724'. [ 379.551569][T10052] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 379.976827][T10076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3734'. [ 380.020233][T10082] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 380.029383][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3737'. [ 380.058282][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3739'. [ 381.930543][T10221] xt_hashlimit: size too large, truncated to 1048576 [ 382.240285][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 382.300299][T10244] loop4: detected capacity change from 0 to 8192 [ 382.690760][T10261] overlayfs: failed to clone lowerpath [ 382.761421][ T30] audit: type=1326 audit(1773696311.322:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e967e799 code=0x7ffc0000 [ 382.791934][ T30] audit: type=1326 audit(1773696311.352:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e967e799 code=0x7ffc0000 [ 382.824281][ T30] audit: type=1326 audit(1773696311.382:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7e967e799 code=0x7ffc0000 [ 382.848837][ T30] audit: type=1326 audit(1773696311.382:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e967e799 code=0x7ffc0000 [ 382.881699][ T30] audit: type=1326 audit(1773696311.382:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e967e799 code=0x7ffc0000 [ 383.158440][ T30] audit: type=1400 audit(1773696311.712:677): avc: denied { read write } for pid=10299 comm="syz.4.3832" name="file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 383.204812][ T30] audit: type=1400 audit(1773696311.752:678): avc: denied { open } for pid=10299 comm="syz.4.3832" path="/57/file0/file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 384.134063][ T30] audit: type=1400 audit(1773696312.692:679): avc: denied { accept } for pid=10309 comm="syz.2.3835" path="socket:[58446]" dev="sockfs" ino=58446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 384.240454][T10320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.301849][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.451511][ T30] audit: type=1400 audit(1773696313.012:680): avc: denied { setattr } for pid=10334 comm="syz.3.3846" name="/" dev="configfs" ino=13200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.168039][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3857'. [ 386.892476][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3857'. [ 386.981427][T10383] loop5: detected capacity change from 0 to 256 [ 387.310538][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3887'. [ 387.320262][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3887'. [ 387.476583][T10454] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2105949209 (8423796836 ns) > initial count (3427808260 ns). Using initial count to start timer. [ 388.004743][T10488] 9pnet: Insufficient options for proto=fd [ 388.090159][ T30] audit: type=1400 audit(1773696316.642:681): avc: denied { lock } for pid=10503 comm="syz.3.3915" path="socket:[58295]" dev="sockfs" ino=58295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 388.120819][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3916'. [ 388.486884][T10556] 9pnet: Insufficient options for proto=fd [ 389.578152][T10605] xt_hashlimit: size too large, truncated to 1048576 [ 391.795730][ T30] audit: type=1326 audit(1773696320.352:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 391.848176][ T30] audit: type=1326 audit(1773696320.382:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 391.877113][ T30] audit: type=1326 audit(1773696320.382:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 391.907643][ T30] audit: type=1326 audit(1773696320.382:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 391.933135][ T30] audit: type=1326 audit(1773696320.382:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 391.988248][ T30] audit: type=1326 audit(1773696320.382:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 392.066375][ T30] audit: type=1326 audit(1773696320.382:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 392.106597][ T30] audit: type=1326 audit(1773696320.382:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 392.161173][ T30] audit: type=1326 audit(1773696320.382:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 392.224408][ T30] audit: type=1326 audit(1773696320.382:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.5.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e852ae799 code=0x7ffc0000 [ 392.741867][T10844] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 394.148164][T10935] loop5: detected capacity change from 0 to 256 [ 394.560808][T10948] fuse: Unknown parameter 'group_id00000000000000000000' [ 396.745014][T11035] netlink: 'syz.3.4147': attribute type 4 has an invalid length. [ 396.908919][T11060] device syz_tun entered promiscuous mode [ 396.918706][T11060] device syz_tun left promiscuous mode [ 397.119192][T11063] fuse: Bad value for 'user_id' [ 397.831945][T11065] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4162'. [ 398.249420][T11097] fuse: Bad value for 'user_id' [ 398.947644][T11116] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 399.022933][T11116] overlayfs: failed to set xattr on upper [ 399.059320][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 399.059340][ T30] audit: type=1326 audit(1773696327.612:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.146444][ T30] audit: type=1326 audit(1773696327.612:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.198908][T11140] xt_hashlimit: size too large, truncated to 1048576 [ 399.207172][T11140] xt_hashlimit: max too large, truncated to 1048576 [ 399.216090][ T30] audit: type=1326 audit(1773696327.612:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.260051][ T30] audit: type=1326 audit(1773696327.632:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.318719][ T30] audit: type=1326 audit(1773696327.632:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.400437][ T30] audit: type=1326 audit(1773696327.632:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.440295][ T30] audit: type=1326 audit(1773696327.632:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.465238][ T30] audit: type=1326 audit(1773696327.632:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.509740][ T30] audit: type=1326 audit(1773696327.632:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 399.614615][ T30] audit: type=1326 audit(1773696327.632:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11124 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e297e1799 code=0x7ffc0000 [ 400.189668][T11187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 400.199328][T11187] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 400.220324][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4213'. [ 400.479746][T11203] device ip6gre2 entered promiscuous mode [ 400.487194][ T2704] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.498992][T11203] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.507566][ T2704] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.515900][ T2704] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.524670][T11203] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.681967][T11215] loop7: detected capacity change from 0 to 16384 [ 400.719605][T11218] fuse: Bad value for 'user_id' [ 400.870983][ T2704] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 403.334253][ T2704] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 403.458579][T11245] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 403.478506][T11245] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 404.200962][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 406.540682][T11450] mmap: syz.3.4320 (11450): VmData 29196288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 408.241876][T11489] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 408.350760][T11495] 9pnet_virtio: no channels available for device syz [ 408.471967][T11505] binder: 11501:11505 ioctl c0306201 2000000001c0 returned -14 [ 408.904720][T11574] device syzkaller0 entered promiscuous mode [ 408.935333][T11574] tipc: Started in network mode [ 408.953517][T11574] tipc: Node identity 3e3b51841c21, cluster identity 4711 [ 408.985579][T11574] tipc: Enabled bearer , priority 0 [ 409.000078][T11571] tipc: Resetting bearer [ 409.008007][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 409.008026][ T30] audit: type=1400 audit(1773696337.562:741): avc: denied { mount } for pid=11590 comm="syz.2.4387" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 409.057336][T11571] tipc: Disabling bearer [ 409.142293][T11607] loop5: detected capacity change from 0 to 128 [ 409.228917][T11607] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 409.311723][T11607] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 409.863924][ T30] audit: type=1400 audit(1773696338.422:742): avc: denied { watch } for pid=11637 comm="syz.3.4406" path="/375/mnt" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 410.592517][T11663] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4417'. [ 411.000380][T11684] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.018404][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.044698][T11684] device bridge_slave_0 entered promiscuous mode [ 411.068364][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.101474][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.109401][T11684] device bridge_slave_1 entered promiscuous mode [ 411.204822][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.212271][T11684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.219987][T11684] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.227209][T11684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.352905][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.399123][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.401185][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 411.460001][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.557108][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.591173][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4441'. [ 411.601370][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 411.616788][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.633967][ T1579] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.641233][ T1579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.674115][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 411.683192][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.712873][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.720213][ T1579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.756013][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.772806][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.788683][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 411.802076][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.825281][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 411.835053][T11738] /dev/loop0: Can't open blockdev [ 411.841898][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.848602][T11736] xt_hashlimit: size too large, truncated to 1048576 [ 411.865024][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.874852][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.885759][T11684] device veth0_vlan entered promiscuous mode [ 411.894439][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.903046][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.920182][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 411.930595][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.942535][T11684] device veth1_macvtap entered promiscuous mode [ 411.959557][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.969693][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.982023][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.019870][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 412.043179][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 412.283616][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4466'. [ 412.381428][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4466'. [ 412.811289][T11793] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4473'. [ 413.546849][T11832] fuse: Invalid rootmode [ 414.375090][T11849] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4496'. [ 414.660559][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4499'. [ 414.946634][ T30] audit: type=1326 audit(1773696343.502:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 414.989428][ T30] audit: type=1326 audit(1773696343.532:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 415.015771][ T30] audit: type=1326 audit(1773696343.532:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 415.067642][ T30] audit: type=1326 audit(1773696343.532:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 415.108282][ T30] audit: type=1326 audit(1773696343.532:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 415.132696][ T30] audit: type=1326 audit(1773696343.532:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 415.156721][ T30] audit: type=1326 audit(1773696343.532:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 415.208908][T11881] fuse: Unknown parameter '00000000000000000000' [ 415.303611][ T30] audit: type=1326 audit(1773696343.532:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 415.358161][ T30] audit: type=1326 audit(1773696343.532:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7febe85b7799 code=0x7ffc0000 [ 415.569522][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 415.580441][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.624615][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 415.665434][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.722864][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.753293][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.783794][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 415.816238][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 415.840318][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 415.849779][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 415.992249][T11910] loop4: detected capacity change from 0 to 128 [ 416.014969][T11910] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 416.043778][T11910] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 416.093572][ T4460] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 416.140055][ T30] audit: type=1400 audit(1773696344.692:752): avc: denied { read write } for pid=11923 comm="syz.7.4528" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.199927][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4529'. [ 416.209447][T11928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4529'. [ 416.219349][T11928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4529'. [ 416.441112][ T20] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 416.485681][T11934] fuse: Unknown parameter '00000000000000000000' [ 416.723810][T11936] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 416.748073][T11936] device syzkaller0 entered promiscuous mode [ 416.811855][ T20] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.840683][ T20] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.922523][ T20] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.955117][ T20] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.923697][T11972] fuse: Unknown parameter '00000000000000000000' [ 418.980886][ T20] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 419.090884][ T308] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 419.131389][T11096] usb 8-1: USB disconnect, device number 2 [ 419.330907][ T308] usb 5-1: Using ep0 maxpacket: 16 [ 419.341002][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.352178][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.362617][ T20] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 419.372639][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.386223][ T20] usb 7-1: config 0 descriptor?? [ 419.431997][ T20] hub 7-1:0.0: USB hub found [ 419.451063][ T308] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 419.459645][ T308] usb 5-1: config 0 has no interface number 0 [ 419.465886][ T308] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 419.476546][ T308] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 419.641064][ T308] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 419.650534][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.658805][ T20] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 419.666824][ T308] usb 5-1: Product: syz [ 419.671267][ T308] usb 5-1: Manufacturer: syz [ 419.676164][ T308] usb 5-1: SerialNumber: syz [ 419.682731][ T308] usb 5-1: config 0 descriptor?? [ 419.700968][T11994] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 419.708232][T11994] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 419.922470][T11994] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 419.930098][T11994] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 420.131052][ T20] usbhid 7-1:0.0: can't add hid device: -71 [ 420.137312][ T20] usbhid: probe of 7-1:0.0 failed with error -71 [ 420.171068][ T308] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.182410][ T20] usb 7-1: USB disconnect, device number 2 [ 420.189269][ T308] asix: probe of 5-1:0.34 failed with error -71 [ 420.198351][ T308] usb 5-1: USB disconnect, device number 21 [ 420.350914][ T311] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 420.413896][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4573'. [ 420.590928][ T311] usb 8-1: Using ep0 maxpacket: 8 [ 420.711267][ T311] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 420.723032][ T311] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 420.733446][ T311] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.744018][ T311] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.758348][ T311] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.768235][ T311] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.850976][ T308] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 421.371026][ T308] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 421.380432][ T308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.388525][ T308] usb 7-1: Product: syz [ 421.393004][ T308] usb 7-1: Manufacturer: syz [ 421.397846][ T308] usb 7-1: SerialNumber: syz [ 421.403939][ T308] usb 7-1: config 0 descriptor?? [ 421.900904][ T9833] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 422.260977][ T9833] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 422.269298][ T9833] usb 5-1: config 0 has no interface number 0 [ 422.431012][ T9833] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 422.440760][ T9833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.448996][ T9833] usb 5-1: Product: syz [ 422.453556][ T9833] usb 5-1: Manufacturer: syz [ 422.458175][ T9833] usb 5-1: SerialNumber: syz [ 422.464801][ T9833] usb 5-1: config 0 descriptor?? [ 422.633827][T12095] tipc: Enabling of bearer rejected, media not registered [ 423.083648][ T9833] usb 8-1: USB disconnect, device number 3 [ 423.256044][T11096] usb 5-1: USB disconnect, device number 22 [ 423.309907][T12112] tmpfs: Unknown parameter 'usrquota' [ 423.450950][ T9833] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 423.595345][T11096] usb 7-1: USB disconnect, device number 3 [ 423.811031][ T9833] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.981054][ T9833] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 423.991043][ T9833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.999065][ T9833] usb 8-1: Product: syz [ 424.003370][ T9833] usb 8-1: Manufacturer: syz [ 424.008182][ T9833] usb 8-1: SerialNumber: syz [ 424.014409][ T9833] usb 8-1: config 0 descriptor?? [ 424.041185][ T9811] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 424.253385][ T311] usb 8-1: USB disconnect, device number 4 [ 424.401066][ T9811] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 424.410502][ T9811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.419736][ T9811] usb 5-1: config 0 descriptor?? [ 424.487385][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 424.487404][ T30] audit: type=1400 audit(1773696353.042:755): avc: denied { accept } for pid=12153 comm="syz.6.4631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 425.030915][ T311] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 425.110992][ T9811] usb 5-1: Cannot set autoneg [ 425.116308][ T9811] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 425.131529][ T9811] usb 5-1: USB disconnect, device number 23 [ 425.390954][ T311] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 425.399646][ T311] usb 8-1: config 0 has no interface number 0 [ 425.406467][ T311] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.571009][ T311] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 425.580338][ T311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.590452][ T311] usb 8-1: Product: syz [ 425.597006][ T311] usb 8-1: Manufacturer: syz [ 425.602065][ T311] usb 8-1: SerialNumber: syz [ 425.607897][ T311] usb 8-1: config 0 descriptor?? [ 425.628806][ T30] audit: type=1400 audit(1773696354.182:756): avc: denied { create } for pid=12247 comm="syz.6.4668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 425.657700][ T30] audit: type=1400 audit(1773696354.192:757): avc: denied { write } for pid=12247 comm="syz.6.4668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 425.681982][ T30] audit: type=1400 audit(1773696354.192:758): avc: denied { nlmsg_write } for pid=12247 comm="syz.6.4668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 425.853180][ T9833] usb 8-1: USB disconnect, device number 5 [ 425.925645][ T30] audit: type=1400 audit(1773696354.482:759): avc: denied { rename } for pid=12262 comm="syz.6.4675" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 426.120942][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 426.331033][T12369] overlayfs: failed to clone upperpath [ 426.639512][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4752'. [ 426.762668][T12444] netlink: 'syz.6.4765': attribute type 4 has an invalid length. [ 426.806599][T12444] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.127253][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4791'. [ 427.177222][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4796'. [ 427.198592][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4796'. [ 427.208474][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4796'. [ 427.301908][ T30] audit: type=1326 audit(1773696355.862:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12534 comm="syz.7.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc0aef799 code=0x7ffc0000 [ 427.349343][ T30] audit: type=1326 audit(1773696355.882:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12534 comm="syz.7.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc0aef799 code=0x7ffc0000 [ 427.456709][ T30] audit: type=1326 audit(1773696355.882:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12534 comm="syz.7.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc0aef799 code=0x7ffc0000 [ 427.605929][ T30] audit: type=1326 audit(1773696355.882:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12534 comm="syz.7.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc0aef799 code=0x7ffc0000 [ 427.707598][ T30] audit: type=1326 audit(1773696355.882:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12534 comm="syz.7.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fbcc0aef799 code=0x7ffc0000 [ 427.745907][T12561] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4816'. [ 429.710955][ T2094] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 429.950870][ T2094] usb 8-1: Using ep0 maxpacket: 32 [ 430.203807][T12650] device batadv_slave_1 entered promiscuous mode [ 430.212171][T12649] device batadv_slave_1 left promiscuous mode [ 430.240239][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 430.240258][ T30] audit: type=1400 audit(1773696358.792:769): avc: denied { create } for pid=12651 comm="syz.4.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 430.275666][ T30] audit: type=1400 audit(1773696358.802:770): avc: denied { connect } for pid=12651 comm="syz.4.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 430.390974][ T2094] usb 8-1: string descriptor 0 read error: -22 [ 430.397599][ T2094] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 430.407253][ T2094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.452328][ T2094] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 431.162204][ T2094] usb 8-1: USB disconnect, device number 6 [ 431.209327][ T30] audit: type=1400 audit(1773696359.762:771): avc: denied { create } for pid=12725 comm="syz.7.4891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 431.409635][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4903'. [ 431.460915][ T310] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 431.573409][T12769] overlayfs: failed to clone upperpath [ 431.710947][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 431.766312][T12793] xt_hashlimit: size too large, truncated to 1048576 [ 431.910996][ T310] usb 5-1: config 1 interface 0 has no altsetting 0 [ 432.071004][ T310] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 432.098904][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.121765][ T310] usb 5-1: Product: syz [ 432.134558][ T310] usb 5-1: Manufacturer: syz [ 432.148068][ T310] usb 5-1: SerialNumber: syz [ 432.276348][T12815] device syzkaller0 entered promiscuous mode [ 432.354446][ T30] audit: type=1400 audit(1773696360.912:772): avc: denied { bind } for pid=12822 comm="syz.6.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 432.896960][ T310] usbhid 5-1:1.0: can't add hid device: -71 [ 432.904011][ T310] usbhid: probe of 5-1:1.0 failed with error -71 [ 433.043314][ T310] usb 5-1: USB disconnect, device number 24 [ 433.829789][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4948'. [ 433.860934][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4948'. [ 433.886590][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4948'. [ 433.923801][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4948'. [ 434.480882][ T9811] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 434.553831][T12844] loop7: detected capacity change from 0 to 131072 [ 434.622068][T12844] F2FS-fs (loop7): invalid crc value [ 434.739341][T12844] F2FS-fs (loop7): Found nat_bits in checkpoint [ 434.775146][T12905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.791796][T12844] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 434.800121][T12844] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 434.921434][ T9811] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 434.941237][ T9811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.956034][ T9811] usb 7-1: config 0 descriptor?? [ 435.044409][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4978'. [ 435.112924][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4983'. [ 435.122214][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 435.131588][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4983'. [ 435.141933][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 435.387708][ T30] audit: type=1400 audit(1773696363.942:773): avc: denied { setopt } for pid=12983 comm="syz.4.5005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.417338][ T30] audit: type=1400 audit(1773696363.972:774): avc: denied { bind } for pid=12985 comm="syz.4.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 435.431547][T12986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5006'. [ 435.458931][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.466757][T12986] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.574030][T12988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12988 comm=syz.4.5007 [ 435.587646][ T9833] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 435.830983][ T9833] usb 8-1: Using ep0 maxpacket: 8 [ 435.951083][ T9833] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.962665][ T9833] usb 8-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 435.972334][ T9833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.982165][ T9833] usb 8-1: config 0 descriptor?? [ 436.020992][T13034] tipc: Started in network mode [ 436.028950][T13034] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 436.038736][T13034] tipc: Enabling of bearer rejected, failed to enable media [ 436.085027][T13036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=13036 comm=syz.3.5030 [ 436.111026][ T311] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 436.225548][ T2094] usb 8-1: USB disconnect, device number 7 [ 436.601024][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.613177][ T311] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 436.622913][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.640042][ T311] usb 5-1: config 0 descriptor?? [ 436.650663][T13098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=13098 comm=syz.2.5060 [ 436.750095][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.757728][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.819603][T13113] x_tables: duplicate underflow at hook 4 [ 436.868890][T13119] netlink: 'syz.7.5070': attribute type 27 has an invalid length. [ 437.031750][T13119] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.039464][T13119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.048849][T13119] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.056252][T13119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.075432][T13119] device veth0_vlan left promiscuous mode [ 437.083167][T13119] device veth0_vlan entered promiscuous mode [ 437.095504][T13119] device veth1_macvtap left promiscuous mode [ 437.103667][T13119] device veth1_macvtap entered promiscuous mode [ 437.111903][ T311] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 437.121017][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.131333][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.139603][ T311] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input6 [ 437.153275][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.174902][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.193966][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.209518][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.226987][ T60] usb 7-1: USB disconnect, device number 4 [ 437.236315][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.252030][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.260635][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.269700][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.279503][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.290313][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 437.293850][ T311] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 437.301165][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.319041][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 437.327863][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.336840][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.345798][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.354908][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.365581][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.390950][T13126] netlink: 'syz.6.5072': attribute type 5 has an invalid length. [ 437.530803][T13145] sock: sock_timestamping_bind_phc: sock not bind to device [ 437.577780][ T60] usb 5-1: USB disconnect, device number 25 [ 437.950668][T13213] device syzkaller0 entered promiscuous mode [ 438.042971][ T30] audit: type=1400 audit(1773696366.602:775): avc: denied { write } for pid=13225 comm="syz.6.5120" path="socket:[68987]" dev="sockfs" ino=68987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 438.115372][T13233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=13233 comm=syz.4.5123 [ 438.322817][T13267] device bridge_slave_0 left promiscuous mode [ 438.329286][T13267] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.338714][T13267] device bridge_slave_1 left promiscuous mode [ 438.354201][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.549430][T13292] tipc: Started in network mode [ 438.555632][T13292] tipc: Node identity ceb37d34c9ef, cluster identity 4711 [ 438.564837][T13292] tipc: Enabled bearer , priority 0 [ 438.606335][T13292] device syzkaller0 entered promiscuous mode [ 438.619932][T13291] tipc: Resetting bearer [ 438.645073][T13291] tipc: Disabling bearer [ 438.685212][T13305] ================================================================== [ 438.693906][T13305] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 438.702393][T13305] Read of size 8 at addr ffff888128a50dc0 by task syz.6.5158/13305 [ 438.710418][T13305] [ 438.712890][T13305] CPU: 0 PID: 13305 Comm: syz.6.5158 Tainted: G W syzkaller #0 [ 438.721977][T13305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.732185][T13305] Call Trace: [ 438.735739][T13305] [ 438.739121][T13305] __dump_stack+0x21/0x30 [ 438.743833][T13305] dump_stack_lvl+0x110/0x170 [ 438.748592][T13305] ? show_regs_print_info+0x20/0x20 [ 438.754030][T13305] ? load_image+0x3e0/0x3e0 [ 438.758713][T13305] print_address_description+0x7f/0x2c0 [ 438.764680][T13305] ? tc_setup_flow_action+0x870/0x3240 [ 438.770300][T13305] kasan_report+0xf1/0x140 [ 438.774977][T13305] ? tc_setup_flow_action+0x870/0x3240 [ 438.780862][T13305] __asan_report_load8_noabort+0x14/0x20 [ 438.787000][T13305] tc_setup_flow_action+0x870/0x3240 [ 438.792356][T13305] mall_replace_hw_filter+0x2cc/0x8b0 [ 438.798048][T13305] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 438.804299][T13305] ? mall_set_parms+0x520/0x520 [ 438.809542][T13305] ? tcf_exts_destroy+0xb0/0xb0 [ 438.814760][T13305] ? pcpu_alloc+0x1170/0x16e0 [ 438.819625][T13305] ? mall_set_parms+0x1e8/0x520 [ 438.824543][T13305] mall_change+0x544/0x760 [ 438.829196][T13305] ? __kasan_check_write+0x14/0x20 [ 438.834471][T13305] ? mall_get+0xa0/0xa0 [ 438.838696][T13305] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 438.844643][T13305] tc_new_tfilter+0x12e5/0x18e0 [ 438.849553][T13305] ? tcf_gate_entry_destructor+0x20/0x20 [ 438.855677][T13305] ? security_capable+0x87/0xb0 [ 438.860923][T13305] ? ns_capable+0x8c/0xf0 [ 438.865524][T13305] ? netlink_net_capable+0x125/0x160 [ 438.871062][T13305] ? tcf_gate_entry_destructor+0x20/0x20 [ 438.876939][T13305] rtnetlink_rcv_msg+0x871/0xce0 [ 438.882039][T13305] ? rtnetlink_bind+0x80/0x80 [ 438.886745][T13305] ? avc_has_perm_noaudit+0x391/0x490 [ 438.892253][T13305] ? memcpy+0x56/0x70 [ 438.896271][T13305] ? avc_has_perm_noaudit+0x30b/0x490 [ 438.902104][T13305] ? arch_stack_walk+0xee/0x140 [ 438.907143][T13305] ? avc_denied+0x1b0/0x1b0 [ 438.911933][T13305] ? stack_trace_save+0xa6/0xf0 [ 438.917193][T13305] ? avc_has_perm+0x163/0x250 [ 438.922201][T13305] ? avc_has_perm_noaudit+0x490/0x490 [ 438.927784][T13305] ? x64_sys_call+0x4b/0x9a0 [ 438.932504][T13305] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 438.938007][T13305] netlink_rcv_skb+0x1f5/0x440 [ 438.942889][T13305] ? rtnetlink_bind+0x80/0x80 [ 438.947824][T13305] ? netlink_ack+0xb50/0xb50 [ 438.952661][T13305] ? __netlink_lookup+0x387/0x3b0 [ 438.957916][T13305] rtnetlink_rcv+0x1c/0x20 [ 438.962626][T13305] netlink_unicast+0x876/0xa40 [ 438.967623][T13305] netlink_sendmsg+0x879/0xb80 [ 438.972808][T13305] ? netlink_getsockopt+0x530/0x530 [ 438.978035][T13305] ? do_futex+0xde8/0x2800 [ 438.982652][T13305] ? security_socket_sendmsg+0x82/0xa0 [ 438.988247][T13305] ? netlink_getsockopt+0x530/0x530 [ 438.993607][T13305] ____sys_sendmsg+0x5b7/0x8f0 [ 438.999031][T13305] ? __sys_sendmsg_sock+0x40/0x40 [ 439.004253][T13305] ? import_iovec+0x7c/0xb0 [ 439.009088][T13305] ___sys_sendmsg+0x236/0x2e0 [ 439.013939][T13305] ? __sys_sendmsg+0x280/0x280 [ 439.018877][T13305] ? sock_show_fdinfo+0xa0/0xa0 [ 439.023961][T13305] ? __fdget+0x1a1/0x230 [ 439.028356][T13305] __x64_sys_sendmsg+0x206/0x2f0 [ 439.033415][T13305] ? ___sys_sendmsg+0x2e0/0x2e0 [ 439.038659][T13305] ? __kasan_check_write+0x14/0x20 [ 439.044893][T13305] ? switch_fpu_return+0x15d/0x2c0 [ 439.050334][T13305] x64_sys_call+0x4b/0x9a0 [ 439.055040][T13305] do_syscall_64+0x4c/0xa0 [ 439.060309][T13305] ? clear_bhb_loop+0x50/0xa0 [ 439.065243][T13305] ? clear_bhb_loop+0x50/0xa0 [ 439.070541][T13305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 439.076628][T13305] RIP: 0033:0x7f7b9dca8799 [ 439.081188][T13305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.101494][T13305] RSP: 002b:00007f7b9c703028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.110297][T13305] RAX: ffffffffffffffda RBX: 00007f7b9df21fa0 RCX: 00007f7b9dca8799 [ 439.118679][T13305] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 439.126849][T13305] RBP: 00007f7b9dd3ec99 R08: 0000000000000000 R09: 0000000000000000 [ 439.135040][T13305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.143306][T13305] R13: 00007f7b9df22038 R14: 00007f7b9df21fa0 R15: 00007ffd743efbf8 [ 439.151519][T13305] [ 439.154676][T13305] [ 439.157176][T13305] Allocated by task 13305: [ 439.161606][T13305] __kasan_kmalloc+0xda/0x110 [ 439.166295][T13305] __kmalloc+0x13d/0x2c0 [ 439.170865][T13305] tcf_idr_create+0x5f/0x790 [ 439.175710][T13305] tcf_idr_create_from_flags+0x61/0x70 [ 439.181366][T13305] tcf_gact_init+0x342/0x570 [ 439.186786][T13305] tcf_action_init_1+0x3ff/0x6b0 [ 439.191955][T13305] tcf_action_init+0x233/0x7a0 [ 439.197033][T13305] tcf_exts_validate+0x24a/0x580 [ 439.202286][T13305] mall_set_parms+0x48/0x520 [ 439.207098][T13305] mall_change+0x478/0x760 [ 439.211532][T13305] tc_new_tfilter+0x12e5/0x18e0 [ 439.216484][T13305] rtnetlink_rcv_msg+0x871/0xce0 [ 439.221697][T13305] netlink_rcv_skb+0x1f5/0x440 [ 439.226759][T13305] rtnetlink_rcv+0x1c/0x20 [ 439.231305][T13305] netlink_unicast+0x876/0xa40 [ 439.236288][T13305] netlink_sendmsg+0x879/0xb80 [ 439.241357][T13305] ____sys_sendmsg+0x5b7/0x8f0 [ 439.246427][T13305] ___sys_sendmsg+0x236/0x2e0 [ 439.251295][T13305] __x64_sys_sendmsg+0x206/0x2f0 [ 439.256298][T13305] x64_sys_call+0x4b/0x9a0 [ 439.260938][T13305] do_syscall_64+0x4c/0xa0 [ 439.265670][T13305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 439.271624][T13305] [ 439.274140][T13305] Last potentially related work creation: [ 439.280159][T13305] kasan_save_stack+0x3a/0x60 [ 439.285351][T13305] __kasan_record_aux_stack+0xd2/0x100 [ 439.291261][T13305] kasan_record_aux_stack_noalloc+0xb/0x10 [ 439.297443][T13305] call_rcu+0x10b/0xf80 [ 439.301781][T13305] neigh_parms_release+0x1dd/0x220 [ 439.307448][T13305] addrconf_ifdown+0x1630/0x18d0 [ 439.312438][T13305] addrconf_notify+0x3bd/0xde0 [ 439.317739][T13305] raw_notifier_call_chain+0x90/0x100 [ 439.323442][T13305] unregister_netdevice_many+0x10a1/0x1aa0 [ 439.329387][T13305] vti6_exit_batch_net+0x273/0x2c0 [ 439.334761][T13305] cleanup_net+0x60a/0xae0 [ 439.339197][T13305] process_one_work+0x6be/0xba0 [ 439.344669][T13305] worker_thread+0xa59/0x1200 [ 439.349487][T13305] kthread+0x411/0x500 [ 439.354737][T13305] ret_from_fork+0x1f/0x30 [ 439.359266][T13305] [ 439.361760][T13305] The buggy address belongs to the object at ffff888128a50d00 [ 439.361760][T13305] which belongs to the cache kmalloc-192 of size 192 [ 439.376142][T13305] The buggy address is located 0 bytes to the right of [ 439.376142][T13305] 192-byte region [ffff888128a50d00, ffff888128a50dc0) [ 439.389897][T13305] The buggy address belongs to the page: [ 439.395580][T13305] page:ffffea0004a29400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128a50 [ 439.406384][T13305] flags: 0x4000000000000200(slab|zone=1) [ 439.412815][T13305] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100042c00 [ 439.422480][T13305] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 439.431713][T13305] page dumped because: kasan: bad access detected [ 439.438374][T13305] page_owner tracks the page as allocated [ 439.444127][T13305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 326, ts 150684014217, free_ts 150682131137 [ 439.461825][T13305] post_alloc_hook+0x192/0x1b0 [ 439.467135][T13305] prep_new_page+0x1c/0x110 [ 439.471809][T13305] get_page_from_freelist+0x2d3a/0x2dc0 [ 439.477923][T13305] __alloc_pages+0x1a2/0x460 [ 439.482529][T13305] new_slab+0xa1/0x4d0 [ 439.486771][T13305] ___slab_alloc+0x381/0x810 [ 439.491816][T13305] __slab_alloc+0x49/0x90 [ 439.496490][T13305] kmem_cache_alloc_trace+0x146/0x270 [ 439.502025][T13305] kernfs_fop_open+0x343/0xb30 [ 439.507143][T13305] do_dentry_open+0x834/0x1010 [ 439.512957][T13305] vfs_open+0x73/0x80 [ 439.517441][T13305] path_openat+0x26a6/0x2f20 [ 439.522781][T13305] do_filp_open+0x1e2/0x410 [ 439.529032][T13305] do_sys_openat2+0x15e/0x7f0 [ 439.534531][T13305] __x64_sys_openat+0x136/0x160 [ 439.540044][T13305] x64_sys_call+0x219/0x9a0 [ 439.544818][T13305] page last free stack trace: [ 439.550413][T13305] free_unref_page_prepare+0x542/0x550 [ 439.556083][T13305] free_unref_page+0xae/0x540 [ 439.560988][T13305] __free_pages+0x6c/0x100 [ 439.565522][T13305] free_pages+0x82/0x90 [ 439.569961][T13305] selinux_genfs_get_sid+0x20b/0x250 [ 439.575670][T13305] inode_doinit_with_dentry+0x87a/0xd80 [ 439.581383][T13305] selinux_d_instantiate+0x27/0x40 [ 439.586542][T13305] security_d_instantiate+0x9e/0xf0 [ 439.591885][T13305] d_splice_alias+0x6d/0x390 [ 439.596597][T13305] kernfs_iop_lookup+0x2c2/0x310 [ 439.601582][T13305] path_openat+0xfc9/0x2f20 [ 439.606130][T13305] do_filp_open+0x1e2/0x410 [ 439.610664][T13305] do_sys_openat2+0x15e/0x7f0 [ 439.615399][T13305] __x64_sys_openat+0x136/0x160 [ 439.620643][T13305] x64_sys_call+0x219/0x9a0 [ 439.625677][T13305] do_syscall_64+0x4c/0xa0 [ 439.630433][T13305] [ 439.632792][T13305] Memory state around the buggy address: [ 439.638461][T13305] ffff888128a50c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 439.647025][T13305] ffff888128a50d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.655288][T13305] >ffff888128a50d80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 439.663798][T13305] ^ [ 439.670267][T13305] ffff888128a50e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 439.678614][T13305] ffff888128a50e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 439.687048][T13305] ================================================================== [ 439.695195][T13305] Disabling lock debugging due to kernel taint [ 439.706632][T13311] __nla_validate_parse: 12 callbacks suppressed [ 439.706655][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5160'. [ 439.728952][ T30] audit: type=1400 audit(1773696368.282:776): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.773689][ T593] tipc: Left network mode [ 440.562390][ T593] device bridge_slave_1 left promiscuous mode [ 440.569028][ T593] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.577566][ T593] device bridge_slave_0 left promiscuous mode [ 440.583843][ T593] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.592946][ T593] device veth1_macvtap left promiscuous mode [ 440.599754][ T593] device veth0_vlan left promiscuous mode