last executing test programs: 16.071314703s ago: executing program 4 (id=170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 16.071139094s ago: executing program 4 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x0) 16.063682224s ago: executing program 4 (id=172): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000c00)=ANY=[@ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x300}, 0x0) 15.971445261s ago: executing program 4 (id=174): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0}, 0x0, &(0x7f00000010c0)='%pK \x00'}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/262, 0x106}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000e87000/0x4000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) truncate(0x0, 0x0) ptrace(0x10, 0x1) 4.823488408s ago: executing program 4 (id=377): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304000000ffffca88faca"], 0xdd12}], 0x1}, 0x0) 4.767397502s ago: executing program 4 (id=387): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0}, 0x0, &(0x7f00000010c0)='%pK \x00'}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/262, 0x106}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000e87000/0x4000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) truncate(0x0, 0x0) ptrace(0x10, 0x1) 4.531400662s ago: executing program 2 (id=391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000010000000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.531183222s ago: executing program 2 (id=392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 3.20145747s ago: executing program 3 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 3.127353596s ago: executing program 3 (id=402): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/96, 0x60}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x3}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = dup2(r7, r7) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000640)=ANY=[], 0x8) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fddbdf2500000000060006000000000008000500640101010800080004000800060006000300000008000110", @ANYRES32, @ANYBLOB="06000600010000000800090004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004044}, 0x4004000) socket$nl_xfrm(0x10, 0x3, 0x6) 2.969673279s ago: executing program 0 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000000200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x2, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}) 2.83212079s ago: executing program 2 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r3, 0x0) ftruncate(r3, 0xc17a) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 2.790786873s ago: executing program 2 (id=408): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x40, 0x9, 0x0, 0x0, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x2000, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa0000, 0x156) readlinkat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)=""/199, 0xc7) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_emit_ethernet(0x13f, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x109, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x0, 0x1c, "e6b128f1f07453ed8e501a180f87875cfd93599c7b7c7b7d463ebbf31ccd5f74e3a7bd3733a8d38f0021f7f22a63a326918b97acaf2687d503915f0120fc9cea280f423304842e5f2304bc7b1b47d8c6a318e457835f611cf3e007035abd56a797edfa270e2aff92da93d302c3fc522106289f83307474eddcb2967e7dcbd5276cb0c196103ca44ef46bd3656202c2bc3d40e885b91412e4ba9a32c5d3e4e2779ed8dbe23fc5811fbd9cf5786ae1b8547e473be21317ff5d380a9eb7481ac2809b20c81f3afaa68459402d5022fb0948085417e498576f0000000000000000"}]}}}}}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, r5, &(0x7f00000003c0)) 2.407379715s ago: executing program 2 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 2.405552705s ago: executing program 2 (id=410): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 2.258677877s ago: executing program 3 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x3b) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="aa", 0x1, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 2.210989461s ago: executing program 3 (id=412): syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x6a, 0x2, 0x9, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x40, 0xf160, 0x7}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1d, 0x8, 0x4, 0x3, 0x0, 0x1, 0xfffffffe, '\x00', r6, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x5}, 0x8f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) 1.935455853s ago: executing program 0 (id=413): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0}, 0x0) 1.931326083s ago: executing program 0 (id=414): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) chmod(&(0x7f0000000340)='./file0\x00', 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) statx(r0, &(0x7f0000000280)='./file0/file0\x00', 0x800, 0x400, &(0x7f0000000680)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.571501252s ago: executing program 1 (id=416): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffff12abaaaa01dd602e"], 0x0) 1.571293602s ago: executing program 1 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffff12abaaaa01dd602e5cea00343c00fc000000000000002000000000000000ff02000000000000030000000000000100030000bf3dff075f50629f53b0a431f9ee809987287b87c2"], 0x0) 1.571100922s ago: executing program 1 (id=418): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r3, 0x0) ftruncate(r3, 0xc17a) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1.559928923s ago: executing program 1 (id=419): bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005"], 0x80}}, 0x0) 1.548280044s ago: executing program 1 (id=420): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/96, 0x60}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x3}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = dup2(r7, r7) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000640)=ANY=[], 0x8) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fddbdf2500000000060006000000000008000500640101010800080004000800060006000300000008000110", @ANYRES32, @ANYBLOB="06000600010000000800090004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004044}, 0x4004000) socket$nl_xfrm(0x10, 0x3, 0x6) 1.143594087s ago: executing program 3 (id=421): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005880)='/proc/slabinfo\x00', 0x0, 0x0) ppoll(&(0x7f00000086c0)=[{r0}], 0x1, &(0x7f0000008740), 0x0, 0x0) 1.133721998s ago: executing program 3 (id=422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 787.007956ms ago: executing program 0 (id=423): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) unshare(0x22020400) ioctl$TUNSETOFFLOAD(r0, 0x4b47, 0x0) 670.302046ms ago: executing program 1 (id=424): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) 579.631413ms ago: executing program 0 (id=425): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1b, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 0s ago: executing program 0 (id=426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) fcntl$lock(r2, 0x7, &(0x7f0000000180)) flock(r1, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 25.673758][ T23] audit: type=1400 audit(1720018718.000:66): avc: denied { mounton } for pid=345 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.675721][ T345] cgroup1: Unknown subsys name 'net' [ 25.696414][ T23] audit: type=1400 audit(1720018718.000:67): avc: denied { mount } for pid=345 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.699668][ T23] audit: type=1400 audit(1720018718.020:68): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 25.702872][ T345] cgroup1: Unknown subsys name 'net_prio' [ 25.751788][ T345] cgroup1: Unknown subsys name 'devices' [ 25.758142][ T23] audit: type=1400 audit(1720018718.080:69): avc: denied { unmount } for pid=345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.892480][ T345] cgroup1: Unknown subsys name 'hugetlb' [ 25.898107][ T345] cgroup1: Unknown subsys name 'rlimit' [ 26.064416][ T23] audit: type=1400 audit(1720018718.390:70): avc: denied { setattr } for pid=345 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.087488][ T23] audit: type=1400 audit(1720018718.390:71): avc: denied { mounton } for pid=345 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.111997][ T23] audit: type=1400 audit(1720018718.390:72): avc: denied { mount } for pid=345 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.120105][ T347] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.143729][ T23] audit: type=1400 audit(1720018718.470:73): avc: denied { relabelto } for pid=347 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.169055][ T23] audit: type=1400 audit(1720018718.470:74): avc: denied { write } for pid=347 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.206609][ T23] audit: type=1400 audit(1720018718.530:75): avc: denied { read } for pid=345 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.241288][ T345] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.735684][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.742964][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.750554][ T353] device bridge_slave_0 entered promiscuous mode [ 26.770150][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.776982][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.784558][ T353] device bridge_slave_1 entered promiscuous mode [ 26.852085][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.858921][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.866510][ T358] device bridge_slave_0 entered promiscuous mode [ 26.881997][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.888826][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.896412][ T356] device bridge_slave_0 entered promiscuous mode [ 26.905083][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.911940][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.919327][ T358] device bridge_slave_1 entered promiscuous mode [ 26.933798][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.940772][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.948160][ T356] device bridge_slave_1 entered promiscuous mode [ 26.967453][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.974310][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.981818][ T355] device bridge_slave_0 entered promiscuous mode [ 26.999666][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.006504][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.014108][ T355] device bridge_slave_1 entered promiscuous mode [ 27.059275][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.066265][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.073750][ T357] device bridge_slave_0 entered promiscuous mode [ 27.080685][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.087513][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.094947][ T357] device bridge_slave_1 entered promiscuous mode [ 27.276592][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.283447][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.290677][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.297406][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.317808][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.324658][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.331785][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.338544][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.349710][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.356547][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.363693][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.370448][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.412683][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.419540][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.426652][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.433451][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.462054][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.468881][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.476044][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.482784][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.521610][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.528803][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.536214][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.543414][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.550450][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.557442][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.564507][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.571513][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.578534][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.586133][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.593143][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.600836][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.608059][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.620753][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.628785][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.635625][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.643525][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.651901][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.658717][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.687566][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.695797][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.702633][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.710267][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.718225][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.725063][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.732373][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.757114][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.765175][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.773308][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.781337][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.789265][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.796509][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.804034][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.811336][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.818569][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.827260][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.835184][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.843542][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.851791][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.858625][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.880119][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.888339][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.896996][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.903845][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.911220][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.919115][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.939428][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.947624][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.956095][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.963699][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.971329][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.980113][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.987851][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.995814][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.009552][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.017747][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.026123][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.032987][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.040372][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.049749][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.057725][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.064572][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.090135][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.098201][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.106456][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.116272][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.124364][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.131207][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.138501][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.147013][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.155083][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.161911][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.200136][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.208168][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.216859][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.225062][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.233366][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.241807][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.250002][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.258137][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.266472][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.274266][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.282135][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.290125][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.326359][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.334377][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.343230][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.351117][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.358795][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.367006][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.374930][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.383007][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.391487][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.399543][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.430328][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.438424][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.456699][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.465787][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.475215][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.483639][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.491926][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.500047][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.519366][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.527429][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.536035][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.544292][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.560154][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.568569][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.579323][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.587420][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.604690][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.619910][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.634786][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.643223][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.674655][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.683312][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.700973][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.709454][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.718390][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.151636][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.321568][ T418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 31.285689][ T436] syz.4.12 (436) used greatest stack depth: 22552 bytes left [ 31.769514][ T23] kauditd_printk_skb: 37 callbacks suppressed [ 31.769529][ T23] audit: type=1400 audit(1720018724.100:113): avc: denied { name_bind } for pid=461 comm="syz.0.26" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.797642][ T23] audit: type=1400 audit(1720018724.100:114): avc: denied { node_bind } for pid=461 comm="syz.0.26" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.509816][ T23] audit: type=1400 audit(1720018724.840:115): avc: denied { bind } for pid=481 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.533835][ T23] audit: type=1400 audit(1720018724.840:116): avc: denied { write } for pid=481 comm="syz.2.33" path="socket:[12874]" dev="sockfs" ino=12874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.656044][ T489] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 33.139310][ T23] audit: type=1400 audit(1720018725.470:117): avc: denied { create } for pid=501 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.179482][ T23] audit: type=1400 audit(1720018725.490:118): avc: denied { setopt } for pid=501 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.448241][ T23] audit: type=1400 audit(1720018725.770:119): avc: denied { relabelfrom } for pid=506 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.491366][ T23] audit: type=1400 audit(1720018725.770:120): avc: denied { relabelto } for pid=506 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.627873][ T23] audit: type=1400 audit(1720018725.950:121): avc: denied { ioctl } for pid=511 comm="syz.2.42" path="socket:[12965]" dev="sockfs" ino=12965 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.666863][ T23] audit: type=1400 audit(1720018725.950:122): avc: denied { bind } for pid=511 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.651919][ T540] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.887717][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.583755][ T627] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.586007][ T637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 36.836427][ T662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.99'. [ 36.845763][ T662] IPv6: NLM_F_REPLACE set, but no existing node found! [ 37.162588][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 37.162599][ T23] audit: type=1400 audit(1720018729.490:136): avc: denied { bind } for pid=692 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.285652][ T23] audit: type=1400 audit(1720018729.610:137): avc: denied { create } for pid=705 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.323782][ T23] audit: type=1400 audit(1720018729.610:138): avc: denied { write } for pid=705 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.471750][ T23] audit: type=1400 audit(1720018729.800:139): avc: denied { write } for pid=723 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.500792][ T726] syz.1.128 (726) used greatest stack depth: 21688 bytes left [ 37.533720][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.540824][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.577438][ T731] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.584308][ T731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.591467][ T731] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.598296][ T731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.619400][ T731] device bridge0 entered promiscuous mode [ 37.625848][ T23] audit: type=1400 audit(1720018729.950:140): avc: denied { setopt } for pid=735 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.699805][ T23] audit: type=1400 audit(1720018730.030:141): avc: denied { create } for pid=741 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.781497][ T23] audit: type=1400 audit(1720018730.110:142): avc: denied { read write } for pid=753 comm="syz.1.141" name="raw-gadget" dev="devtmpfs" ino=9244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.826641][ T23] audit: type=1400 audit(1720018730.120:143): avc: denied { write } for pid=749 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.867601][ T23] audit: type=1400 audit(1720018730.130:144): avc: denied { open } for pid=753 comm="syz.1.141" path="/dev/raw-gadget" dev="devtmpfs" ino=9244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.893773][ T23] audit: type=1400 audit(1720018730.130:145): avc: denied { ioctl } for pid=753 comm="syz.1.141" path="/dev/raw-gadget" dev="devtmpfs" ino=9244 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.079050][ T702] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.159006][ T709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.319031][ T702] usb 2-1: Using ep0 maxpacket: 8 [ 38.399047][ T709] usb 1-1: Using ep0 maxpacket: 8 [ 38.439099][ T702] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 38.448796][ T702] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 38.458366][ T702] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42157, setting to 1024 [ 38.469513][ T702] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 38.479414][ T702] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 38.492284][ T702] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 38.501152][ T702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.529122][ T709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 38.538731][ T709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 38.548259][ T709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42157, setting to 1024 [ 38.561185][ T709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 38.571117][ T709] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 38.583957][ T709] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 38.592985][ T709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.761388][ T357] syz-executor (357) used greatest stack depth: 20760 bytes left [ 38.818745][ T803] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.825810][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.833573][ T803] device bridge_slave_0 entered promiscuous mode [ 38.841463][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.848345][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.856713][ T803] device bridge_slave_1 entered promiscuous mode [ 38.967586][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.974474][ T803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.981631][ T803] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.988459][ T803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.030835][ T606] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.038007][ T606] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.066030][ T827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.175'. [ 39.067187][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.082774][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.097235][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.106011][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.115710][ T702] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.122936][ T702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.139985][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.149576][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.157861][ T484] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.164758][ T484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.182898][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.191437][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.200105][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.208153][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.219608][ T840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.180'. [ 39.251378][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.261014][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.285486][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.300260][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.319100][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.327348][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.351799][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.360833][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.370661][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.378686][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.459717][ T179] device bridge_slave_1 left promiscuous mode [ 39.467914][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.484182][ T179] device bridge_slave_0 left promiscuous mode [ 39.490583][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.863586][ T904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.210'. [ 40.250614][ T961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 40.788000][ T709] usb 2-1: USB disconnect, device number 2 [ 40.862607][ T702] usb 1-1: USB disconnect, device number 2 [ 41.045862][ T1071] device dummy0 entered promiscuous mode [ 41.070578][ T1070] device dummy0 left promiscuous mode [ 41.463363][ T1100] F2FS-fs (loop0): invalid crc value [ 41.481843][ T1100] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.530746][ T1100] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 42.012520][ T353] attempt to access beyond end of device [ 42.012520][ T353] loop0: rw=2049, want=45104, limit=40427 [ 42.106867][ T1118] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 42.117386][ T1118] overlayfs: upper fs does not support tmpfile. [ 42.124593][ T1118] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 42.135128][ T1115] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue [ 42.139345][ T1118] SELinux: (dev overlay, type overlay) has no security xattr handler [ 42.146630][ T1115] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038 (0x7fffffff) [ 42.178377][ T23] kauditd_printk_skb: 42 callbacks suppressed [ 42.178388][ T23] audit: type=1400 audit(1720018734.500:188): avc: denied { read } for pid=1113 comm="syz.2.309" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.207994][ T23] audit: type=1400 audit(1720018734.510:189): avc: denied { unmount } for pid=803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.227857][ T23] audit: type=1400 audit(1720018734.530:190): avc: denied { open } for pid=1113 comm="syz.2.309" path="/135/file0/file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.255170][ T23] audit: type=1400 audit(1720018734.530:191): avc: denied { ioctl } for pid=1113 comm="syz.2.309" path="/135/file0/file2" dev="loop2" ino=16 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.289293][ T1127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 42.298467][ T1127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 42.307460][ T1127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 42.439135][ T23] audit: type=1400 audit(1720018734.770:192): avc: denied { mounton } for pid=1145 comm="syz.2.322" path="/138/file0" dev="tmpfs" ino=17331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.461973][ T1146] 9pnet: Insufficient options for proto=fd [ 42.471355][ T1142] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 42.501546][ T23] audit: type=1400 audit(1720018734.830:193): avc: denied { remove_name } for pid=1139 comm="syz.3.320" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.524307][ T1142] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.569034][ T23] audit: type=1400 audit(1720018734.850:194): avc: denied { rename } for pid=1139 comm="syz.3.320" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.569801][ T1142] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4095 with max blocks 2 with error 28 [ 42.604281][ T23] audit: type=1400 audit(1720018734.850:195): avc: denied { unlink } for pid=1139 comm="syz.3.320" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.627379][ T1142] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.627379][ T1142] [ 42.638241][ T1142] EXT4-fs (loop3): Total free blocks count 0 [ 42.644753][ T1142] EXT4-fs (loop3): Free/Dirty block details [ 42.664230][ T1138] F2FS-fs (loop0): invalid crc value [ 42.669027][ T1142] EXT4-fs (loop3): free_blocks=2415919104 [ 42.674886][ T1142] EXT4-fs (loop3): dirty_blocks=32 [ 42.691241][ T23] audit: type=1400 audit(1720018735.020:196): avc: denied { read } for pid=1159 comm="syz.2.327" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.699992][ T1142] EXT4-fs (loop3): Block reservation details [ 42.716754][ T23] audit: type=1400 audit(1720018735.020:197): avc: denied { open } for pid=1159 comm="syz.2.327" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.724842][ T1142] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 42.746520][ T1138] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.794986][ T1138] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 42.802054][ T1138] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 42.829257][ T1138] attempt to access beyond end of device [ 42.829257][ T1138] loop0: rw=34817, want=77848, limit=40427 [ 42.844645][ T353] attempt to access beyond end of device [ 42.844645][ T353] loop0: rw=2049, want=45104, limit=40427 [ 42.881692][ T1167] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 42.888815][ T1167] EXT4-fs (loop2): can't mount with dioread_nolock if block size != PAGE_SIZE [ 43.001154][ T1170] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,usrquota,noinit_itable,,errors=continue [ 43.013811][ T1170] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 43.198987][ T709] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 43.258987][ T124] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 43.299939][ T1190] loop0: p2 p3 p4 [ 43.303693][ T1190] loop0: p2 start 452985600 is beyond EOD, truncated [ 43.310603][ T1190] loop0: p3 size 33554432 extends beyond EOD, truncated [ 43.318598][ T1190] loop0: p4 start 8388607 is beyond EOD, truncated [ 43.739076][ T709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.809111][ T124] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 43.818885][ T124] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 43.827982][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.869886][ T124] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 43.909098][ T709] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 43.917927][ T709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.926851][ T709] usb 4-1: Product: syz [ 43.930866][ T709] usb 4-1: Manufacturer: syz [ 43.935381][ T709] usb 4-1: SerialNumber: syz [ 43.940807][ T709] usb 4-1: config 0 descriptor?? [ 44.074008][ T1178] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 44.198404][ T1210] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 44.199223][ T709] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 44.223904][ T709] usb 4-1: USB disconnect, device number 2 [ 44.231630][ T124] usb 3-1: USB disconnect, device number 2 [ 44.471621][ T1215] incfs: ino conflict with backing FS 3 [ 44.737612][ T1222] process 'syz.1.345' launched './file1' with NULL argv: empty string added [ 45.110792][ T353] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 45.118524][ T353] FAT-fs (loop0): Filesystem has been set read-only [ 45.126248][ T353] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 45.250362][ T353] syz-executor (353) used greatest stack depth: 19544 bytes left [ 45.457632][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.465053][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.472930][ T1237] device bridge_slave_0 entered promiscuous mode [ 45.488974][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.495973][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.507404][ T1237] device bridge_slave_1 entered promiscuous mode [ 45.509041][ T107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 45.709595][ T1247] incfs: mount failed -22 [ 45.758980][ T107] usb 4-1: Using ep0 maxpacket: 16 [ 45.787965][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.794837][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.802048][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.808774][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.834227][ T1252] device pim6reg1 entered promiscuous mode [ 45.854102][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.862213][ T606] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.869635][ T606] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.880777][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.889122][ T107] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 45.889270][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.904659][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.914962][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.923676][ T606] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.930536][ T606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.949912][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.957923][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.979977][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.988257][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.003143][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.011458][ T179] device bridge_slave_1 left promiscuous mode [ 46.017570][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.025056][ T179] device bridge_slave_0 left promiscuous mode [ 46.031123][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.049095][ T107] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 46.058063][ T107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.065923][ T107] usb 4-1: Product: syz [ 46.070284][ T107] usb 4-1: Manufacturer: syz [ 46.074685][ T107] usb 4-1: SerialNumber: syz [ 46.084892][ T107] usb 4-1: config 0 descriptor?? [ 46.119088][ T709] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 46.130319][ T107] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 46.138482][ T107] usb 4-1: Detected FT232RL [ 46.144760][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.155276][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.209006][ T124] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 46.239981][ T1256] loop0: p2 p3 p4 [ 46.243734][ T1256] loop0: p2 start 452985600 is beyond EOD, truncated [ 46.250728][ T1256] loop0: p3 size 33554432 extends beyond EOD, truncated [ 46.258176][ T1256] loop0: p4 start 8388607 is beyond EOD, truncated [ 46.339327][ T107] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 46.379018][ T709] usb 3-1: Using ep0 maxpacket: 32 [ 46.619094][ T107] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 46.626240][ T107] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.769099][ T709] usb 3-1: config 2 has an invalid interface number: 228 but max is 2 [ 46.777090][ T709] usb 3-1: config 2 has an invalid interface number: 60 but max is 2 [ 46.785050][ T124] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 46.794631][ T709] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 46.803051][ T709] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 46.813109][ T709] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 46.824642][ T709] usb 3-1: config 2 has no interface number 0 [ 46.830785][ T709] usb 3-1: config 2 has no interface number 1 [ 46.836686][ T709] usb 3-1: config 2 interface 228 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 46.847348][ T709] usb 3-1: config 2 interface 228 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 46.857044][ T709] usb 3-1: config 2 interface 60 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 46.870036][ T709] usb 3-1: config 2 interface 60 has no altsetting 0 [ 46.876699][ T702] usb 4-1: USB disconnect, device number 3 [ 46.883282][ T702] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.892924][ T702] ftdi_sio 4-1:0.0: device disconnected [ 46.949305][ T124] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 46.958172][ T124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.966352][ T124] usb 2-1: Product: syz [ 46.970347][ T124] usb 2-1: Manufacturer: syz [ 46.974742][ T124] usb 2-1: SerialNumber: syz [ 46.980125][ T124] usb 2-1: config 0 descriptor?? [ 46.999072][ T1254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 47.039284][ T709] usb 3-1: New USB device found, idVendor=0403, idProduct=e88b, bcdDevice=70.1c [ 47.048358][ T709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.056231][ T709] usb 3-1: Product: syz [ 47.060376][ T709] usb 3-1: Manufacturer: syz [ 47.064783][ T709] usb 3-1: SerialNumber: syz [ 47.205676][ T1262] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 47.243607][ T124] usb 2-1: USB disconnect, device number 3 [ 47.256666][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.309414][ T1252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.581707][ T709] ftdi_sio 3-1:2.228: FTDI USB Serial Device converter detected [ 47.591757][ T709] usb 3-1: Detected FT2232C [ 47.596085][ T709] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 47.619283][ T709] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 47.639078][ T709] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 47.646573][ T709] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.689700][ T709] ftdi_sio 3-1:2.60: FTDI USB Serial Device converter detected [ 47.697547][ T709] usb 3-1: Detected FT2232C [ 47.719075][ T709] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 47.739101][ T709] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 47.746522][ T709] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 47.757389][ T709] usb 3-1: USB disconnect, device number 3 [ 47.764715][ T709] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 47.777594][ T709] ftdi_sio 3-1:2.228: device disconnected [ 47.785512][ T709] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 47.794964][ T709] ftdi_sio 3-1:2.60: device disconnected [ 47.839434][ T376] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.943283][ T23] kauditd_printk_skb: 69 callbacks suppressed [ 47.943296][ T23] audit: type=1400 audit(1720018740.270:267): avc: denied { ioctl } for pid=1281 comm="syz.2.366" path="socket:[19028]" dev="sockfs" ino=19028 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.012398][ T1284] incfs: mount failed -22 [ 48.027296][ T1237] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 48.038104][ T1237] FAT-fs (loop0): Filesystem has been set read-only [ 48.044670][ T1237] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 48.078990][ T606] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 48.237815][ T23] audit: type=1326 audit(1720018740.560:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37ddeb99 code=0x7ffc0000 [ 48.279770][ T23] audit: type=1326 audit(1720018740.560:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fcf37ddeb99 code=0x7ffc0000 [ 48.303171][ T376] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 48.315847][ T23] audit: type=1326 audit(1720018740.560:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37ddeb99 code=0x7ffc0000 [ 48.349034][ T23] audit: type=1326 audit(1720018740.590:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf37ddeb99 code=0x7ffc0000 [ 48.428703][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.435602][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.442530][ T606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.444081][ T1294] device bridge_slave_0 entered promiscuous mode [ 48.453218][ T606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.453251][ T606] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 48.477830][ T606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.486764][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.489998][ T606] usb 2-1: config 0 descriptor?? [ 48.498570][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.506107][ T1294] device bridge_slave_1 entered promiscuous mode [ 48.519193][ T376] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 48.530548][ T1301] [ 48.532693][ T1301] ********************************************************** [ 48.540276][ T376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.548091][ T376] usb 4-1: Product: syz [ 48.552362][ T376] usb 4-1: Manufacturer: syz [ 48.556690][ T376] usb 4-1: SerialNumber: syz [ 48.561395][ T1301] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 48.569374][ T1301] ** ** [ 48.577214][ T376] usb 4-1: config 0 descriptor?? [ 48.600403][ T1301] ** trace_printk() being used. Allocating extra memory. ** [ 48.609164][ T1272] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 48.617523][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.622421][ T1301] ** ** [ 48.624376][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.638707][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.641764][ T1301] ** This means that this is a DEBUG kernel and it is ** [ 48.645472][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.665213][ T1301] ** unsafe for production use. ** [ 48.679523][ T1301] ** ** [ 48.686974][ T1301] ** If you see this message and you are not debugging ** [ 48.694737][ T1301] ** the kernel, report this immediately to your vendor! ** [ 48.702202][ T1301] ** ** [ 48.709287][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.709661][ T1301] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 48.723717][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.723982][ T1301] ********************************************************** [ 48.737786][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.761476][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.769954][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.776783][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.784064][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.793220][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.800068][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.819498][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.827291][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.840486][ T179] device bridge_slave_1 left promiscuous mode [ 48.846436][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.853757][ T179] device bridge_slave_0 left promiscuous mode [ 48.859778][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.869866][ T376] usb 4-1: USB disconnect, device number 4 [ 48.946497][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.955950][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.970250][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.984605][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.998574][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.213368][ T1313] incfs: mount failed -22 [ 49.273887][ T1317] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 49.362519][ T23] audit: type=1326 audit(1720018741.690:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1323 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7430d5cb99 code=0x7ffc0000 [ 49.385843][ T23] audit: type=1326 audit(1720018741.690:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1323 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f7430d5cb99 code=0x7ffc0000 [ 49.411636][ T23] audit: type=1326 audit(1720018741.720:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1323 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7430d5cb99 code=0x7ffc0000 [ 49.435204][ T23] audit: type=1326 audit(1720018741.720:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1323 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7430d5cb99 code=0x7ffc0000 [ 49.465449][ T1321] loop2: p2 p3 p4 [ 49.469444][ T1321] loop2: p2 start 452985600 is beyond EOD, truncated [ 49.476532][ T1321] loop2: p3 size 33554432 extends beyond EOD, truncated [ 49.479008][ T23] audit: type=1400 audit(1720018741.800:276): avc: denied { setopt } for pid=1328 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.484995][ T1321] loop2: p4 start 8388607 is beyond EOD, truncated [ 49.513609][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.531854][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.707038][ T1311] device bridge_slave_0 entered promiscuous mode [ 49.741974][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.748817][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.763868][ T1311] device bridge_slave_1 entered promiscuous mode [ 49.851192][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.858231][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.865443][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.872291][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.926817][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.934433][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.942153][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.958198][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.971607][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.979978][ T709] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.986815][ T709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.000013][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.008344][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.015200][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.056187][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.067295][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.098319][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.113461][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.131224][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.159517][ T1294] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 50.171952][ T1294] FAT-fs (loop0): Filesystem has been set read-only [ 50.178590][ T1294] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 50.200614][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.214776][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.319926][ T431] device bridge_slave_1 left promiscuous mode [ 50.326267][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.333921][ T431] device bridge_slave_0 left promiscuous mode [ 50.339970][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.464394][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.471563][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.478906][ T1345] device bridge_slave_0 entered promiscuous mode [ 50.489975][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.497870][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.505816][ T1345] device bridge_slave_1 entered promiscuous mode [ 50.571253][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.578145][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.585267][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.592110][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.624423][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.633542][ T605] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.641451][ T605] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.690164][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.710906][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.717736][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.725427][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.733500][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.740357][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.759099][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.768770][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.799155][ T702] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.814461][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.838416][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.865361][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.883072][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.948181][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.969207][ T606] usbhid 2-1:0.0: can't add hid device: -71 [ 50.976536][ T606] usbhid: probe of 2-1:0.0 failed with error -71 [ 51.000427][ T606] usb 2-1: USB disconnect, device number 4 [ 51.049022][ T702] usb 3-1: Using ep0 maxpacket: 8 [ 51.084029][ T1365] incfs: mount failed -22 [ 51.169060][ T702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.279261][ T702] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 51.290643][ T702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 51.308844][ T702] usb 3-1: SerialNumber: syz [ 51.324465][ T702] usb 3-1: config 0 descriptor?? [ 51.389748][ T702] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 51.697855][ T702] usb 3-1: USB disconnect, device number 4 [ 51.939490][ T431] device bridge_slave_1 left promiscuous mode [ 51.946051][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.953773][ T431] device bridge_slave_0 left promiscuous mode [ 51.969075][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.034813][ T355] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f) [ 52.043279][ T355] FAT-fs (loop1): Filesystem has been set read-only [ 52.059016][ T355] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f) [ 52.432564][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.439530][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.446979][ T1398] device bridge_slave_0 entered promiscuous mode [ 52.454129][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.461059][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.470530][ T1398] device bridge_slave_1 entered promiscuous mode [ 52.623521][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.630400][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.637516][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.644277][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.685144][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.692657][ T606] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.699840][ T606] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.710163][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.718231][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.725078][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.749005][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.757234][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.765944][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.772807][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.780855][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.788813][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.796770][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.804923][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.833487][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.842318][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.852488][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.860914][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.881801][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.890147][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.908095][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.916858][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.926132][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.934773][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.948657][ T1411] loop3: p2 p3 p4 [ 52.952906][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.963382][ T1411] loop3: p2 start 452985600 is beyond EOD, truncated [ 52.970255][ T1411] loop3: p3 size 33554432 extends beyond EOD, truncated [ 52.988053][ T1411] loop3: p4 start 8388607 is beyond EOD, truncated [ 53.110347][ T431] device bridge_slave_1 left promiscuous mode [ 53.116320][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.124219][ T431] device bridge_slave_0 left promiscuous mode [ 53.136044][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.349051][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.393511][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.406673][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.415916][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.429501][ T1421] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 53.440888][ T24] usb 3-1: config 0 descriptor?? [ 53.480884][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 54.239373][ T702] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 54.273515][ T1345] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 54.281416][ T1345] FAT-fs (loop0): Filesystem has been set read-only [ 54.287914][ T1345] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 54.488996][ T702] usb 4-1: Using ep0 maxpacket: 32 [ 54.533173][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.540037][ T1449] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.547355][ T1449] device bridge_slave_0 entered promiscuous mode [ 54.554276][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.561226][ T1449] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.568567][ T1449] device bridge_slave_1 entered promiscuous mode [ 54.619217][ T702] usb 4-1: config index 0 descriptor too short (expected 65065, got 18) [ 54.627473][ T702] usb 4-1: config 119 has an invalid descriptor of length 204, skipping remainder of the config [ 54.630060][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.638361][ T702] usb 4-1: config 119 has 0 interfaces, different from the descriptor's value: 23 [ 54.644567][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.644713][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.667583][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.700479][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.707896][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.715148][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.726792][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.735216][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.742079][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.756042][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.764314][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.771172][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.783843][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.792076][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.803714][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.809374][ T702] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 54.813499][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.820479][ T702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.836033][ T702] usb 4-1: Product: syz [ 54.840598][ T702] usb 4-1: Manufacturer: syz [ 54.845027][ T702] usb 4-1: SerialNumber: syz [ 54.856366][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.864875][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.877406][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.885845][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.901153][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.909629][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.929062][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.937161][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.945711][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.953847][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.962379][ T431] device bridge_slave_1 left promiscuous mode [ 54.968446][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.975910][ T431] device bridge_slave_0 left promiscuous mode [ 54.981985][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.077329][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 55.077341][ T23] audit: type=1400 audit(1720018747.400:282): avc: denied { map } for pid=1455 comm="syz.0.426" path="/dev/zero" dev="devtmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 55.115606][ T1442] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 55.123376][ T1442] #PF: supervisor instruction fetch in kernel mode [ 55.129705][ T1442] #PF: error_code(0x0010) - not-present page [ 55.135525][ T1442] PGD 1e1aa3067 P4D 1e1aa3067 PUD 1ed65e067 PMD 0 [ 55.141871][ T1442] Oops: 0010 [#1] PREEMPT SMP KASAN [ 55.146908][ T1442] CPU: 1 PID: 1442 Comm: syz.3.422 Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 55.156535][ T1442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 55.166442][ T1442] RIP: 0010:0x86 [ 55.169819][ T1442] Code: Bad RIP value. [ 55.173714][ T1442] RSP: 0018:ffff8881e646f308 EFLAGS: 00010086 [ 55.179615][ T1442] RAX: ffff8881e646f338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 55.187422][ T1442] RDX: ffffc90002f55000 RSI: 0000000000001cec RDI: 0000000000001ced [ 55.195235][ T1442] RBP: 0000000000000fd0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 55.203046][ T1442] R10: ffff8881e7bd5e80 R11: 0000000000000002 R12: ffffffff846015d0 [ 55.210858][ T1442] R13: fffffe0000000fd8 R14: ffff8881db448000 R15: fffffe0000000fdb [ 55.218669][ T1442] FS: 00007f742ffde6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 55.227433][ T1442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.233857][ T1442] CR2: 000000000000005c CR3: 00000001eb1d9000 CR4: 00000000003426a0 [ 55.241668][ T1442] Call Trace: [ 55.244807][ T1442] ? __die+0xb4/0x100 [ 55.248622][ T1442] ? no_context+0xbda/0xe50 [ 55.252955][ T1442] ? apic_timer_interrupt+0xa/0x20 [ 55.257918][ T1442] ? is_prefetch+0x4b0/0x4b0 [ 55.262326][ T1442] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 55.267718][ T1442] ? __do_page_fault+0xa7d/0xbb0 [ 55.272485][ T1442] ? vmx_spec_ctrl_restore_host+0x83/0xfd [ 55.278038][ T1442] ? __bad_area_nosemaphore+0xc0/0x460 [ 55.283345][ T1442] ? page_fault+0x2f/0x40 [ 55.287497][ T1442] ? call_function_interrupt+0x20/0x20 [ 55.292812][ T1442] ? vmx_handle_exit_irqoff+0x45/0x220 [ 55.298087][ T1442] ? check_preemption_disabled+0x91/0x320 [ 55.303650][ T1442] ? handle_external_interrupt_irqoff+0x148/0x2f0 [ 55.309895][ T1442] ? handle_external_interrupt_irqoff+0x12a/0x2f0 [ 55.316139][ T1442] ? call_function_interrupt+0x20/0x20 [ 55.321435][ T1442] ? vcpu_enter_guest+0x2d06/0x9f70 [ 55.326481][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.332029][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.337578][ T1442] ? debug_smp_processor_id+0x20/0x20 [ 55.342793][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.348341][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.353983][ T1442] ? local_bh_enable+0x20/0x20 [ 55.358582][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.364144][ T1442] ? update_load_avg+0x40f/0x1210 [ 55.368999][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.374552][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.380109][ T1442] ? debug_smp_processor_id+0x20/0x20 [ 55.385311][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.390869][ T1442] ? debug_smp_processor_id+0x20/0x20 [ 55.396077][ T1442] ? debug_smp_processor_id+0x20/0x20 [ 55.401292][ T1442] ? llist_add_batch+0x91/0xb0 [ 55.405887][ T1442] ? generic_exec_single+0x280/0x3e0 [ 55.411008][ T1442] ? smp_call_function_single+0x4a0/0x4a0 [ 55.416563][ T1442] ? __schedule+0xb0d/0x1320 [ 55.420993][ T1442] ? smp_call_function_single+0x388/0x4a0 [ 55.426542][ T1442] ? loaded_vmcs_clear+0x80/0x80 [ 55.431321][ T1442] ? generic_smp_call_function_single_interrupt+0x10/0x10 [ 55.438261][ T1442] ? check_preemption_disabled+0x9f/0x320 [ 55.443902][ T1442] ? loaded_vmcs_clear+0x80/0x80 [ 55.448676][ T1442] ? debug_smp_processor_id+0x20/0x20 [ 55.453884][ T1442] ? vmx_read_l1_tsc_offset+0x6e/0x1e0 [ 55.459178][ T1442] ? kvm_read_l1_tsc+0x85/0xc0 [ 55.463778][ T1442] ? hrtimer_try_to_cancel+0x37b/0x380 [ 55.469072][ T1442] ? restart_apic_timer+0x303/0x900 [ 55.474118][ T1442] ? debug_smp_processor_id+0x20/0x20 [ 55.479323][ T1442] ? kvm_arch_vcpu_ioctl_run+0x748/0x18d0 [ 55.484873][ T1442] ? kvm_vcpu_ioctl+0x7f9/0xd10 [ 55.489560][ T1442] ? create_vcpu_fd+0x120/0x120 [ 55.494239][ T1442] ? do_futex+0x13c1/0x19f0 [ 55.498585][ T1442] ? hrtimer_try_to_cancel+0x37b/0x380 [ 55.503882][ T1442] ? do_nanosleep+0x567/0x690 [ 55.508389][ T1442] ? create_vcpu_fd+0x120/0x120 [ 55.513077][ T1442] ? do_vfs_ioctl+0x742/0x1720 [ 55.517679][ T1442] ? ioctl_preallocate+0x250/0x250 [ 55.522621][ T1442] ? hrtimer_nanosleep+0x374/0x450 [ 55.527570][ T1442] ? nanosleep_copyout+0x120/0x120 [ 55.532518][ T1442] ? __fget+0x407/0x490 [ 55.536520][ T1442] ? fget_many+0x20/0x20 [ 55.540589][ T1442] ? switch_fpu_return+0x1d4/0x410 [ 55.545536][ T1442] ? security_file_ioctl+0x7d/0xa0 [ 55.550482][ T1442] ? __x64_sys_ioctl+0xd4/0x110 [ 55.555171][ T1442] ? do_syscall_64+0xca/0x1c0 [ 55.559687][ T1442] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 55.565583][ T1442] Modules linked in: [ 55.569324][ T1442] CR2: 0000000000000086 [ 55.573319][ T1442] ---[ end trace 204608ebf30b6b34 ]--- [ 55.578606][ T1442] RIP: 0010:0x86 [ 55.581992][ T1442] Code: Bad RIP value. [ 55.585891][ T1442] RSP: 0018:ffff8881e646f308 EFLAGS: 00010086 [ 55.591796][ T1442] RAX: ffff8881e646f338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 55.599606][ T1442] RDX: ffffc90002f55000 RSI: 0000000000001cec RDI: 0000000000001ced [ 55.607420][ T1442] RBP: 0000000000000fd0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 55.615229][ T1442] R10: ffff8881e7bd5e80 R11: 0000000000000002 R12: ffffffff846015d0 [ 55.623040][ T1442] R13: fffffe0000000fd8 R14: ffff8881db448000 R15: fffffe0000000fdb [ 55.630852][ T1442] FS: 00007f742ffde6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 55.639703][ T1442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.646127][ T1442] CR2: 000000000000005c CR3: 00000001eb1d9000 CR4: 00000000003426a0 [ 55.653939][ T1442] Kernel panic - not syncing: Fatal exception [ 55.660096][ T1442] Kernel Offset: disabled [ 55.664219][ T1442] Rebooting in 86400 seconds..