last executing test programs: 2.967841752s ago: executing program 4 (id=3852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x3}]}}}]}, 0x44}}, 0x0) 2.967719772s ago: executing program 4 (id=3853): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) clock_getres(0xffffffea, 0x0) 2.967575022s ago: executing program 4 (id=3854): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000001d0095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x174}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 853.194612ms ago: executing program 1 (id=3935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 852.748512ms ago: executing program 1 (id=3938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_clone(0x82020080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x101c400, &(0x7f0000000000)={[{@fat=@dos1xfloppy}, {@fat=@check_normal}]}, 0x0, 0x285, &(0x7f0000000880)="$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") 708.616003ms ago: executing program 4 (id=3948): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) truncate(&(0x7f0000000340)='./file2\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x3920e, r0, 0x3, 0x1, 0x3, 0x6}) 666.278477ms ago: executing program 4 (id=3953): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x410, &(0x7f0000000140)=ANY=[@ANYBLOB="696f636861727365743d61736369692c636865636b3d7374726963742c008dc72788a4fd1d7a9e96f5af8b1e45accead19436f26d694969a11ba75120b4d62f34885979931a363c752e585ec3604e30dbe2a796fc821132b494dde1c10c9dd6e964a204d3419f8429a34ad0f9eef6d8e64551e180300000043f138d74174cf31003d8e2e285a38f0c00baa5f773735f6e6eb3d29d249635d3f5317a9cd809294ebc15b04d444ccb0c1a90e8e0587fae4eefddd7e3d5c20a076101fd7f3ee5634000000000000fda9bc4dbfe77e9b101986ec88"], 0xfe, 0x340, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1f0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x41009432, 0x0) 606.706692ms ago: executing program 4 (id=3960): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000100)='./file1\x00', 0x3000046, &(0x7f0000000040)={[{@delalloc}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@block_validity}, {@dioread_lock}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x100}}, {@data_err_ignore}, {@grpjquota}, {@nobh}, {@data_err_ignore}, {@bh}, {@bh}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x66, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x4c, "66864a3c29ad77f9ab29809508d17e1c3e88ae355bafb69f1c781aded8ed11b0daa8f6259dfd439482d2a12615fe994b569d26b2bf87198548c88465c06d90bd2912e5d10ea133027f2a8103"}, &(0x7f0000000000)=0x70) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') recvfrom$unix(r4, &(0x7f0000000180)=""/128, 0x80, 0x20, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x3, 0x3, 0x8, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe7d, 0x0, 0x0, 0x0, 0x8}, @exit, @alu={0x4, 0x1, 0x3, 0x9, 0xb, 0xffffffffffffffe0, 0xffffffffffffffff}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x3d, r7}) syz_open_dev$tty1(0xc, 0x4, 0x1) 437.226775ms ago: executing program 1 (id=3974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000004000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000892809b70000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) 436.677515ms ago: executing program 1 (id=3977): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 403.631998ms ago: executing program 1 (id=3980): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ustat(0x6, &(0x7f0000000000)) 370.43975ms ago: executing program 1 (id=3985): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7a) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0xdf1) accept(r6, 0x0, 0x0) shutdown(r6, 0x1) write$UHID_INPUT(r5, &(0x7f00000019c0)={0xfc, {"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", 0xff72}}, 0x1006) clock_gettime(0x6, &(0x7f00000002c0)={0x0, 0x0}) io_pgetevents(r1, 0x2, 0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)={r7, r8+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x589f]}, 0x8}) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) io_destroy(r1) 295.707506ms ago: executing program 3 (id=3995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x1, 0x0, 0xfffffffffffffffd, 0x91de], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 268.537779ms ago: executing program 3 (id=3999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 234.955752ms ago: executing program 3 (id=4001): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0xfc, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0xf, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xcc, 0x2, [@TCA_BASIC_EMATCHES={0xc0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xc295}, {0x2, 0x5, 0x401, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x7, 0x80000000, 0x2, 0x7, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0xdb, 0x9, 0x151}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0x5, 0x5, 0x2, "55b04e12a1"}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x2, 0x0, 0x0, {{0x8}, "8b1166457a264998ad3e427117253bc7e25f2b88ea8bc788adf0c5dc54e449e8b9b68b3bbe944fde370e8fdcd934fa8ccf0cc5f740f8ed728ecc0964b1"}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 183.724626ms ago: executing program 3 (id=4006): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 123.79947ms ago: executing program 2 (id=4011): socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000100)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x8d) sendfile(r1, r1, 0x0, 0x7a680000) 123.38325ms ago: executing program 2 (id=4013): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 123.28677ms ago: executing program 0 (id=4014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x1a3) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000380)='\f', 0x1}], 0x1) 106.787342ms ago: executing program 2 (id=4015): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 72.176135ms ago: executing program 0 (id=4016): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc000000", @ANYRES32, @ANYBLOB="00042abd7000ffdbdf250300000048000180060001000200000005000200080000001400040000000000000000000000ffffac1414bb060001000a00000008000700", @ANYRES32, @ANYBLOB="0500020001000000060005004e21000008000400090000005000068014000400"], 0xbc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 71.902985ms ago: executing program 3 (id=4017): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccN\xbdg4\xee\x8c\xd7\x19jz\x05\x8ez\x97\x93D\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbe\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5Dz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x3) fcntl$addseals(r0, 0x409, 0xc) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r0, 0x2a344000) 71.688805ms ago: executing program 2 (id=4018): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) unshare(0x2040600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, 0x0, 0x4}, 0x20) 71.507925ms ago: executing program 0 (id=4019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x206}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000007c0)="d5d61a09ac5836f55425", 0xa}], 0x1}}], 0x1, 0x200c8059) 71.375985ms ago: executing program 2 (id=4020): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000380)=0xfde) 34.964667ms ago: executing program 0 (id=4021): syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x181) mount(0x0, &(0x7f0000000840)='./file0/../file0\x00', 0x0, 0x20230a0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2a05004, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) getdents64(r2, 0x0, 0x0) 34.778997ms ago: executing program 2 (id=4022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) 34.600857ms ago: executing program 3 (id=4023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x1, 0x0, 0xfffffffffffffffd, 0x91de], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 187.34µs ago: executing program 0 (id=4024): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) 0s ago: executing program 0 (id=4025): close(0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001dc0)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x200000001840, 0x0, 0x0, 0x200000001a2e, 0x200000001d42], 0x0, &(0x7f0000001800), 0x0}, 0x5da) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_create_resource$binfmt(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): 2] usb 1-1: SerialNumber: syz [ 143.060279][ T42] usb 1-1: bad CDC descriptors [ 143.180825][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 143.180840][ T30] audit: type=1326 audit(1756326257.889:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.186583][ T2631] serio: Serial port ptm1 [ 143.186994][ T30] audit: type=1326 audit(1756326257.889:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.238510][ T30] audit: type=1326 audit(1756326257.889:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.262495][ T30] audit: type=1326 audit(1756326257.889:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.292098][ T2633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 143.305510][ T30] audit: type=1326 audit(1756326257.889:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.329256][ T30] audit: type=1326 audit(1756326257.889:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.353872][ T30] audit: type=1326 audit(1756326257.889:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.390999][ T307] usb 1-1: USB disconnect, device number 19 [ 143.397107][ T30] audit: type=1326 audit(1756326257.889:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.422942][ T2637] loop1: detected capacity change from 0 to 512 [ 143.434781][ T30] audit: type=1326 audit(1756326257.889:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.460110][ T30] audit: type=1326 audit(1756326257.889:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2630 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 143.493862][ T2640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 143.519962][ T2637] EXT4-fs error (device loop1): ext4_acquire_dquot:6198: comm syz.1.774: Failed to acquire dquot type 1 [ 143.532109][ T2637] EXT4-fs (loop1): 1 truncate cleaned up [ 143.537801][ T2637] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 143.557685][ T2637] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.698616][ T2655] loop1: detected capacity change from 0 to 128 [ 143.769640][ T2655] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.327622][ T2667] xt_hashlimit: size too large, truncated to 1048576 [ 144.458654][ T2670] xt_hashlimit: size too large, truncated to 1048576 [ 144.933753][ T2675] syz.3.788[2675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.933835][ T2675] syz.3.788[2675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.166477][ T2681] loop1: detected capacity change from 0 to 256 [ 145.210999][ T2681] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 145.230402][ T2681] binfmt_misc: register: failed to install interpreter file ./file1 [ 145.760387][ T2696] loop1: detected capacity change from 0 to 512 [ 145.936823][ T2696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 145.967259][ T2696] System zones: 1-12 [ 146.041361][ T2696] EXT4-fs (loop1): 1 truncate cleaned up [ 146.085015][ T2696] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.167000][ T2712] syz.0.801[2712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.167080][ T2712] syz.0.801[2712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.065066][ T2716] syz.4.802[2716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.191565][ T2716] syz.4.802[2716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.488009][ T60] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 148.528052][ T42] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 148.650012][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 148.650028][ T30] audit: type=1326 audit(1756326263.359:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.698119][ T30] audit: type=1326 audit(1756326263.389:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.722907][ T30] audit: type=1326 audit(1756326263.389:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.747328][ T30] audit: type=1326 audit(1756326263.389:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.771270][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 148.776580][ T30] audit: type=1326 audit(1756326263.389:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.801127][ T30] audit: type=1326 audit(1756326263.389:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.828203][ T30] audit: type=1326 audit(1756326263.389:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.852732][ T30] audit: type=1326 audit(1756326263.389:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.880027][ T30] audit: type=1326 audit(1756326263.389:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.916530][ T30] audit: type=1326 audit(1756326263.389:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2731 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f9f559d4be9 code=0x7ffc0000 [ 148.941323][ T60] usb 2-1: config 0 has no interfaces? [ 148.947062][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.967784][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.035346][ T2749] syz.2.816[2749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.035426][ T2749] syz.2.816[2749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.150151][ T60] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 149.171244][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.188078][ T60] usb 2-1: Product: syz [ 149.192326][ T60] usb 2-1: Manufacturer: syz [ 149.196979][ T60] usb 2-1: SerialNumber: syz [ 149.206055][ T60] usb 2-1: config 0 descriptor?? [ 149.211257][ T42] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.228040][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.236486][ T42] usb 1-1: Product: syz [ 149.242082][ T42] usb 1-1: Manufacturer: syz [ 149.246725][ T42] usb 1-1: SerialNumber: syz [ 149.588683][ T42] usb 1-1: 0:2 : does not exist [ 149.668796][ T42] usb 1-1: USB disconnect, device number 20 [ 149.977567][ T2760] overlayfs: failed to clone upperpath [ 150.303950][ T2778] syz.4.828[2778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.304029][ T2778] syz.4.828[2778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.338067][ T60] usb 2-1: can't set config #0, error -71 [ 150.362169][ T60] usb 2-1: USB disconnect, device number 21 [ 150.369347][ T2782] overlayfs: failed to clone upperpath [ 150.388041][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 150.768590][ T42] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 150.779148][ T42] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 150.918408][ T42] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 150.928251][ T42] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 150.936455][ T42] usb 1-1: Product: syz [ 150.941000][ T60] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 150.950590][ T42] usb 1-1: SerialNumber: syz [ 151.032425][ T42] usb 1-1: bad CDC descriptors [ 151.243376][ T42] usb 1-1: USB disconnect, device number 21 [ 152.082616][ T2814] syz.3.842[2814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.082698][ T2814] syz.3.842[2814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.131427][ T2818] overlayfs: failed to clone upperpath [ 152.148404][ T60] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 152.168923][ T60] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 152.298113][ T60] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 152.307260][ T60] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 152.315566][ T60] usb 2-1: Product: syz [ 152.319996][ T60] usb 2-1: SerialNumber: syz [ 152.430751][ T60] usb 2-1: bad CDC descriptors [ 152.608714][ T60] usb 2-1: USB disconnect, device number 22 [ 153.105575][ T2852] overlayfs: failed to clone upperpath [ 153.360532][ T2869] netlink: 44 bytes leftover after parsing attributes in process `syz.4.860'. [ 153.530833][ T2856] loop0: detected capacity change from 0 to 40427 [ 153.551007][ T2856] F2FS-fs (loop0): Unrecognized mount option "/file0" or missing value [ 153.620382][ T2885] overlayfs: failed to clone upperpath [ 153.979700][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 153.979717][ T30] audit: type=1400 audit(1756326268.689:1881): avc: denied { create } for pid=2888 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 154.034299][ T2898] overlayfs: conflicting lowerdir path [ 154.197323][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.208058][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.222119][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.244217][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.261826][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.279404][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.294466][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.323176][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.342590][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.353336][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.363440][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.371207][ T1703] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 154.388813][ T1703] hid-generic 0006:0004:0009.000F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 154.435281][ T2910] fido_id[2910]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.515909][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.528332][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.546803][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.562019][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.578308][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.593634][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.605468][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.618219][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.631423][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.644426][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.662083][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.682277][ T1703] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 154.690537][ T1703] hid-generic 0006:0004:0009.0010: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 154.789467][ T2916] fido_id[2916]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.827593][ T2931] syz.0.884[2931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.827649][ T2931] syz.0.884[2931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.900742][ T30] audit: type=1400 audit(1756326269.599:1882): avc: denied { accept } for pid=2917 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 155.188063][ T20] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 155.413445][ T2943] syz.2.888[2943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.413501][ T2943] syz.2.888[2943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.468115][ T20] usb 2-1: device descriptor read/64, error -71 [ 155.500998][ T2950] syz.2.890[2950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.501083][ T2950] syz.2.890[2950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.608468][ T30] audit: type=1400 audit(1756326270.319:1883): avc: denied { read } for pid=2951 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.643499][ T2952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.891'. [ 155.673970][ T475] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 155.714899][ T30] audit: type=1400 audit(1756326270.349:1884): avc: denied { block_suspend } for pid=2951 comm="syz.4.891" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.755592][ T2957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'. [ 155.770927][ T2959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'. [ 156.139292][ T475] usb 1-1: Using ep0 maxpacket: 32 [ 156.206225][ T20] usb 2-1: device descriptor read/64, error -71 [ 157.958106][ T20] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 158.010383][ T475] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 158.028102][ T475] usb 1-1: config 0 has no interface number 0 [ 158.034414][ T475] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 158.044524][ T475] usb 1-1: config 0 interface 196 has no altsetting 0 [ 159.278897][ T30] audit: type=1400 audit(1756326273.959:1885): avc: denied { name_bind } for pid=2996 comm="syz.0.908" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 159.428081][ T475] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 159.437338][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.468327][ T475] usb 1-1: config 0 descriptor?? [ 159.488091][ T475] usb 1-1: can't set config #0, error -71 [ 159.504466][ T475] usb 1-1: USB disconnect, device number 22 [ 159.606711][ T2998] loop0: detected capacity change from 0 to 40427 [ 159.621901][ T30] audit: type=1400 audit(1756326274.329:1886): avc: denied { mounton } for pid=2996 comm="syz.0.908" path="/syzcgroup/unified/syz0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 159.622245][ T2998] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 159.709906][ T20] usb usb2-port1: attempt power cycle [ 159.769944][ T2998] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.781034][ T2998] F2FS-fs (loop0): invalid crc value [ 159.837261][ T2998] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.896755][ T2998] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.906247][ T2998] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.969138][ T30] audit: type=1400 audit(1756326274.679:1887): avc: denied { mounton } for pid=2996 comm="syz.0.908" path="/syzcgroup/unified/syz0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 160.063954][ T3023] fuse: Unknown parameter 'gYoup_id' [ 160.218186][ T20] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 160.430508][ T3036] syz.0.917[3036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.432654][ T30] audit: type=1107 audit(1756326275.139:1888): pid=3024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ò·' [ 160.438089][ T20] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 160.496891][ T20] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 160.628144][ T20] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 160.647586][ T20] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 160.655798][ T20] usb 2-1: Product: syz [ 160.665897][ T20] usb 2-1: SerialNumber: syz [ 160.708625][ T20] usb 2-1: bad CDC descriptors [ 160.912885][ T1703] usb 2-1: USB disconnect, device number 25 [ 162.568025][ T30] audit: type=1400 audit(1756326277.269:1889): avc: denied { mount } for pid=3069 comm="syz.1.936" name="/" dev="configfs" ino=13669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 162.594243][ T30] audit: type=1400 audit(1756326277.299:1890): avc: denied { search } for pid=3069 comm="syz.1.936" name="/" dev="configfs" ino=13669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.616741][ T30] audit: type=1400 audit(1756326277.299:1891): avc: denied { read } for pid=3069 comm="syz.1.936" name="/" dev="configfs" ino=13669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.639618][ T30] audit: type=1400 audit(1756326277.299:1892): avc: denied { open } for pid=3069 comm="syz.1.936" path="/" dev="configfs" ino=13669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.708188][ T20] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 162.943490][ T30] audit: type=1400 audit(1756326277.649:1893): avc: denied { write } for pid=3079 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.024258][ T30] audit: type=1400 audit(1756326277.729:1894): avc: denied { read } for pid=3079 comm="syz.3.938" path="socket:[24969]" dev="sockfs" ino=24969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.138102][ T20] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 163.151449][ T20] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 163.278135][ T20] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 163.298050][ T20] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 163.306095][ T20] usb 1-1: Product: syz [ 163.321496][ T20] usb 1-1: SerialNumber: syz [ 163.388492][ T20] usb 1-1: bad CDC descriptors [ 163.591147][ T60] usb 1-1: USB disconnect, device number 23 [ 164.158232][ T60] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 164.408088][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 164.528140][ T60] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 164.539368][ T60] usb 2-1: config 0 has no interface number 0 [ 164.546495][ T60] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 164.563356][ T60] usb 2-1: config 0 interface 196 has no altsetting 0 [ 164.728325][ T60] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 164.737520][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.745925][ T60] usb 2-1: Product: syz [ 164.750288][ T60] usb 2-1: Manufacturer: syz [ 164.755002][ T60] usb 2-1: SerialNumber: syz [ 164.760831][ T60] usb 2-1: config 0 descriptor?? [ 164.778079][ T3088] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.247877][ T3088] loop1: detected capacity change from 0 to 512 [ 165.485302][ T3088] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 165.561536][ T3088] EXT4-fs (loop1): Ignoring removed oldalloc option [ 166.145775][ T3088] EXT4-fs (loop1): 1 truncate cleaned up [ 166.152136][ T3088] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,nomblk_io_submit,oldalloc,bsdgroups,. Quota mode: writeback. [ 166.228093][ T60] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 166.245916][ T60] ipheth: probe of 2-1:0.196 failed with error -71 [ 166.262880][ T60] usb 2-1: USB disconnect, device number 26 [ 166.768040][ T60] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 166.803714][ T3161] loop1: detected capacity change from 0 to 128 [ 166.982654][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 166.982675][ T30] audit: type=1400 audit(1756326281.679:1896): avc: denied { create } for pid=3164 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 167.178085][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.188357][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.540054][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.550499][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.560473][ T60] usb 1-1: Product: syz [ 167.564887][ T60] usb 1-1: Manufacturer: syz [ 167.571257][ T60] usb 1-1: SerialNumber: syz [ 168.458143][ T60] usb 1-1: 0:2 : does not exist [ 168.496884][ T30] audit: type=1326 audit(1756326283.199:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 168.521167][ T30] audit: type=1326 audit(1756326283.199:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 168.544553][ T30] audit: type=1326 audit(1756326283.199:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 168.558130][ T60] usb 1-1: USB disconnect, device number 24 [ 168.568210][ T30] audit: type=1326 audit(1756326283.199:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 168.599186][ T30] audit: type=1326 audit(1756326283.199:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 168.623037][ T30] audit: type=1326 audit(1756326283.199:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 168.646811][ T30] audit: type=1326 audit(1756326283.199:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 168.670246][ T30] audit: type=1326 audit(1756326283.199:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 168.693505][ T30] audit: type=1326 audit(1756326283.199:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x7ffc0000 [ 169.014068][ T3199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.983'. [ 169.138078][ T20] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 169.341172][ T3204] CljH¸ë™ªŽºürAÊ[3204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.341471][ T3204] CljH¸ë™ªŽºürAÊ[3204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.259691][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.279697][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.287122][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.295899][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.303516][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.313264][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.321281][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.328892][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.336928][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.344801][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.352450][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.360008][ T26] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 170.367940][ T26] hid-generic 0006:0004:0009.0011: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 170.394510][ T3218] fido_id[3218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.461484][ T3222] loop1: detected capacity change from 0 to 128 [ 170.489779][ T3222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 170.497895][ T3222] System zones: 1-3, 19-19, 35-36 [ 170.504426][ T3222] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 170.515623][ T3222] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.518126][ T20] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 170.537158][ T20] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 170.668149][ T20] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 170.677282][ T20] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 170.685446][ T20] usb 1-1: Product: syz [ 170.689675][ T20] usb 1-1: SerialNumber: syz [ 170.728456][ T20] usb 1-1: bad CDC descriptors [ 170.931449][ T20] usb 1-1: USB disconnect, device number 25 [ 171.203397][ T3235] device wireguard0 entered promiscuous mode [ 171.321356][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.331724][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.339454][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.346904][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.354638][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.362222][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.378195][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.385736][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.393502][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.401087][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.408743][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.416199][ T20] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 171.424105][ T20] hid-generic 0006:0004:0009.0012: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 171.450194][ T3246] fido_id[3246]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.296527][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 172.296546][ T30] audit: type=1326 audit(1756326286.999:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3264 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663665bbe9 code=0x7ffc0000 [ 172.326450][ T30] audit: type=1326 audit(1756326286.999:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3264 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663665bbe9 code=0x7ffc0000 [ 172.350431][ T30] audit: type=1326 audit(1756326286.999:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3264 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f663665bbe9 code=0x7ffc0000 [ 172.405568][ T3272] loop1: detected capacity change from 0 to 512 [ 172.479504][ T3272] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000002" or missing value [ 172.517124][ T3274] mmap: syz.3.1009 (3274) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 172.561956][ T3272] loop1: detected capacity change from 0 to 128 [ 172.569261][ T3272] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 172.590670][ T3272] EXT4-fs (loop1): Unrecognized mount option "euid=00000000000000000000" or missing value [ 172.668036][ T475] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 172.766355][ T3285] loop1: detected capacity change from 0 to 128 [ 172.778667][ T3285] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.947293][ T3292] overlayfs: failed to clone upperpath [ 172.953700][ T30] audit: type=1400 audit(1756326287.659:1972): avc: denied { connect } for pid=3289 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.973528][ T475] usb 1-1: Using ep0 maxpacket: 32 [ 173.108115][ T475] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 173.116564][ T475] usb 1-1: config 0 has no interface number 0 [ 173.122725][ T475] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 173.132842][ T475] usb 1-1: config 0 interface 196 has no altsetting 0 [ 173.298485][ T475] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 173.307703][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.315959][ T475] usb 1-1: Product: syz [ 173.320344][ T475] usb 1-1: Manufacturer: syz [ 173.324980][ T475] usb 1-1: SerialNumber: syz [ 173.334137][ T475] usb 1-1: config 0 descriptor?? [ 173.358081][ T3270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.638760][ T475] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 173.656815][ T475] ipheth: probe of 1-1:0.196 failed with error -71 [ 173.671111][ T475] usb 1-1: USB disconnect, device number 26 [ 173.693559][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.701216][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.709383][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.716882][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.724590][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.732280][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.744156][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.761067][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.768700][ T30] audit: type=1400 audit(1756326288.469:1973): avc: denied { getopt } for pid=3316 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.793325][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.802257][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.815713][ T30] audit: type=1326 audit(1756326288.519:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3320 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 173.841093][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.853101][ T30] audit: type=1326 audit(1756326288.519:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3320 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 173.854931][ T26] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 173.900796][ T26] hid-generic 0006:0004:0009.0013: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 173.910609][ T30] audit: type=1326 audit(1756326288.519:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3320 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 173.963244][ T3333] fido_id[3333]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.988099][ T30] audit: type=1326 audit(1756326288.519:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3320 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 174.013385][ T30] audit: type=1326 audit(1756326288.519:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3320 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 174.045481][ T3341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 174.192821][ T3354] loop1: detected capacity change from 0 to 512 [ 174.411832][ T3354] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 174.428241][ T3354] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.797611][ T3362] syz.0.1040[3362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.797694][ T3362] syz.0.1040[3362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.813679][ T3362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3362 comm=syz.0.1040 [ 176.169678][ T3378] device wireguard0 entered promiscuous mode [ 178.746223][ T3443] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1071'. [ 178.786562][ T3443] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1071'. [ 182.311329][ T3474] 9pnet: Insufficient options for proto=fd [ 182.356343][ T3483] overlayfs: missing 'workdir' [ 182.371681][ T3483] syz.3.1084 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.498042][ T1703] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 183.778041][ T1703] usb 1-1: Using ep0 maxpacket: 32 [ 183.898083][ T1703] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 183.906527][ T1703] usb 1-1: config 0 has no interface number 0 [ 183.912690][ T1703] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 183.922749][ T1703] usb 1-1: config 0 interface 196 has no altsetting 0 [ 184.115576][ T1703] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 184.125113][ T1703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.319329][ T1703] usb 1-1: Product: syz [ 185.384604][ T1703] usb 1-1: Manufacturer: syz [ 185.426123][ T1703] usb 1-1: SerialNumber: syz [ 185.509425][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 185.534040][ T1703] usb 1-1: config 0 descriptor?? [ 185.556956][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.628340][ T3497] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.681344][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 185.787841][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.991776][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.068158][ T1703] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 186.087023][ T1703] ipheth: probe of 1-1:0.196 failed with error -71 [ 186.112522][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.184879][ T1703] usb 1-1: USB disconnect, device number 27 [ 186.211201][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.227377][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.565908][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 186.565924][ T30] audit: type=1400 audit(1756326301.269:2021): avc: denied { write } for pid=3554 comm="syz.0.1110" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.336504][ T3566] attempt to access beyond end of device [ 187.336504][ T3566] loop0: rw=2049, want=45104, limit=40427 [ 188.301485][ T3576] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1115'. [ 192.271220][ T30] audit: type=1400 audit(1756326306.979:2022): avc: denied { create } for pid=3622 comm="syz.0.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.343503][ T30] audit: type=1400 audit(1756326307.049:2023): avc: denied { mount } for pid=3616 comm="syz.4.1135" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 192.808064][ T30] audit: type=1400 audit(1756326307.509:2024): avc: denied { accept } for pid=3646 comm="syz.0.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 193.223322][ T3660] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 193.648477][ T3667] xt_hashlimit: size too large, truncated to 1048576 [ 193.954930][ T30] audit: type=1400 audit(1756326308.659:2025): avc: denied { create } for pid=3677 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.974669][ T30] audit: type=1326 audit(1756326308.689:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80838d1be9 code=0x7ffc0000 [ 193.999224][ T30] audit: type=1326 audit(1756326308.689:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f80838d1be9 code=0x7ffc0000 [ 194.023018][ T30] audit: type=1326 audit(1756326308.689:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80838d1be9 code=0x7ffc0000 [ 194.046908][ T30] audit: type=1326 audit(1756326308.689:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80838d1be9 code=0x7ffc0000 [ 194.100124][ T30] audit: type=1326 audit(1756326308.689:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f80838d1be9 code=0x7ffc0000 [ 194.124417][ T30] audit: type=1326 audit(1756326308.689:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80838d1be9 code=0x7ffc0000 [ 194.504924][ T3689] overlayfs: failed to clone upperpath [ 195.062772][ T3703] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 195.246633][ T3704] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1166'. [ 196.869845][ T3754] overlayfs: failed to resolve './file1': -2 [ 198.285369][ T3766] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.090834][ T3794] overlayfs: failed to resolve './file1': -2 [ 199.702929][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 199.702947][ T30] audit: type=1400 audit(1756326314.409:2125): avc: denied { nlmsg_read } for pid=3803 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.153330][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 200.162439][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 200.193732][ T3809] device bridge0 entered promiscuous mode [ 200.401443][ T30] audit: type=1400 audit(1756326315.089:2126): avc: denied { bind } for pid=3803 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.421093][ T30] audit: type=1400 audit(1756326315.089:2127): avc: denied { setopt } for pid=3803 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.440737][ T30] audit: type=1400 audit(1756326315.099:2128): avc: denied { setopt } for pid=3803 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.430785][ T3832] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.438188][ T3832] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.671770][ T30] audit: type=1400 audit(1756326316.379:2129): avc: denied { map } for pid=3831 comm="syz.3.1217" path="socket:[27958]" dev="sockfs" ino=27958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 201.707206][ T3832] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1217'. [ 201.728105][ T3832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1217'. [ 201.742599][ T3835] capability: warning: `syz.4.1218' uses 32-bit capabilities (legacy support in use) [ 201.786995][ T3835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3835 comm=syz.4.1218 [ 202.809876][ T3863] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 202.896492][ T3867] bridge: RTM_NEWNEIGH with invalid ether address [ 203.407100][ T3872] netlink: 'syz.3.1233': attribute type 27 has an invalid length. [ 203.466316][ T3880] netlink: 'syz.2.1237': attribute type 27 has an invalid length. [ 203.480944][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.488119][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.552041][ T3880] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 203.561361][ T30] audit: type=1400 audit(1756326318.269:2130): avc: denied { relabelto } for pid=3879 comm="syz.2.1237" name="263" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 203.573016][ T3880] device ip6gretap0 left promiscuous mode [ 203.587746][ T30] audit: type=1400 audit(1756326318.269:2131): avc: denied { associate } for pid=3879 comm="syz.2.1237" name="263" dev="tmpfs" ino=1428 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 203.621029][ T3880] device bridge0 left promiscuous mode [ 203.627056][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 203.655259][ T3880] device veth0_vlan left promiscuous mode [ 203.663976][ T3880] device veth0_vlan entered promiscuous mode [ 203.671335][ T3880] device veth1_macvtap left promiscuous mode [ 203.678734][ T3880] device veth1_macvtap entered promiscuous mode [ 203.686402][ T3880] device ip6gretap0 entered promiscuous mode [ 203.692896][ T3880] device bridge0 entered promiscuous mode [ 203.729558][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 203.737517][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.745347][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.753138][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.761859][ T2233] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.769384][ T2233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.808937][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.823130][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.834020][ T2233] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.841126][ T2233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.848834][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.857898][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 203.868956][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.877895][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 203.886703][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.895904][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.904818][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.913763][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.923603][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.932536][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.942199][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.951990][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.963066][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.972267][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.981888][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.991068][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.000252][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.009878][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.081559][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.091552][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.101053][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.109776][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.122896][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.131343][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.141288][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.150896][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.165034][ T3891] device veth3 entered promiscuous mode [ 204.175722][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.185500][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec2: link becomes ready [ 204.708908][ T30] audit: type=1400 audit(1756326319.419:2132): avc: denied { bind } for pid=3916 comm="syz.0.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.799713][ T30] audit: type=1400 audit(1756326319.449:2133): avc: denied { setopt } for pid=3916 comm="syz.0.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.854481][ T3927] overlayfs: failed to clone upperpath [ 204.938887][ T3931] process 'syz.0.1258' launched './file0' with NULL argv: empty string added [ 205.004899][ T30] audit: type=1400 audit(1756326319.709:2134): avc: denied { map } for pid=3935 comm="syz.0.1261" path="socket:[26946]" dev="sockfs" ino=26946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.061901][ T30] audit: type=1400 audit(1756326319.739:2135): avc: denied { read } for pid=3935 comm="syz.0.1261" path="socket:[26946]" dev="sockfs" ino=26946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.343377][ T3966] overlayfs: failed to clone upperpath [ 205.460237][ T30] audit: type=1326 audit(1756326320.169:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.1275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f559d4be9 code=0x0 [ 205.828583][ T30] audit: type=1400 audit(1756326320.539:2137): avc: denied { getopt } for pid=3995 comm="syz.1.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.905941][ T30] audit: type=1326 audit(1756326320.609:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.1.1294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e243be9 code=0x0 [ 206.020430][ T4030] overlayfs: failed to resolve './file0': -2 [ 206.044566][ T4034] overlayfs: failed to resolve './file0': -2 [ 206.176919][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 206.226268][ T4074] netlink: 'syz.1.1324': attribute type 4 has an invalid length. [ 206.254158][ T4078] overlayfs: failed to clone upperpath [ 206.445297][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 206.455911][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.475206][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 206.492869][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.501490][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.510811][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.519554][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.530378][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.550823][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 206.561953][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 206.616979][ T4135] overlayfs: failed to clone upperpath [ 206.627036][ T4135] overlayfs: failed to clone upperpath [ 206.707185][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 207.182531][ T30] audit: type=1400 audit(1756326321.889:2139): avc: denied { create } for pid=4188 comm="syz.0.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 207.358895][ T4202] device bridge_slave_0 left promiscuous mode [ 207.365016][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.373046][ T4206] mmap: syz.0.1385 (4206): VmData 161198080 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 207.781105][ T4260] overlayfs: failed to clone upperpath [ 207.874948][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 207.909447][ T4278] overlayfs: failed to clone upperpath [ 209.452419][ T4388] overlayfs: failed to clone upperpath [ 209.533875][ T4404] overlayfs: failed to clone upperpath [ 209.585556][ T4415] overlayfs: failed to clone upperpath [ 209.631107][ T4423] fuse: Bad value for 'fd' [ 209.657675][ T30] audit: type=1400 audit(1756326323.362:2140): avc: denied { connect } for pid=4430 comm="syz.4.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.718379][ T30] audit: type=1400 audit(1756326323.412:2141): avc: denied { watch_reads } for pid=4434 comm="syz.4.1489" path="/329/file0" dev="tmpfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.746279][ T30] audit: type=1400 audit(1756326323.422:2142): avc: denied { mount } for pid=4436 comm="syz.4.1491" name="/" dev="ramfs" ino=27560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 209.880628][ T30] audit: type=1400 audit(1756326323.592:2143): avc: denied { sys_admin } for pid=4465 comm="syz.3.1503" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 209.900525][ T4472] overlayfs: failed to resolve './file0': -2 [ 210.049529][ T4501] overlayfs: failed to clone upperpath [ 210.115478][ T30] audit: type=1400 audit(1756326323.822:2144): avc: denied { create } for pid=4502 comm="syz.4.1521" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.345306][ T4538] overlayfs: failed to clone upperpath [ 210.929669][ T4601] overlayfs: failed to clone lowerpath [ 210.936191][ T4601] overlayfs: failed to clone lowerpath [ 211.368368][ T30] audit: type=1400 audit(1756326325.082:2145): avc: denied { mounton } for pid=4620 comm="syz.0.1574" path="/248/file0" dev="tmpfs" ino=1396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 211.476623][ T4626] overlayfs: failed to clone upperpath [ 211.528636][ T4634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'. [ 211.861809][ T30] audit: type=1400 audit(1756326325.572:2146): avc: denied { read } for pid=4645 comm="syz.1.1586" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.143727][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.150851][ T4661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.169136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.178467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 212.524595][ T4696] overlayfs: failed to clone upperpath [ 212.664360][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1612'. [ 212.951899][ T4739] overlayfs: failed to clone upperpath [ 213.080545][ T30] audit: type=1400 audit(1756326326.792:2147): avc: denied { read } for pid=4751 comm="syz.4.1634" path="socket:[29025]" dev="sockfs" ino=29025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.257909][ T4771] overlayfs: failed to clone upperpath [ 213.305156][ T30] audit: type=1400 audit(1756326327.012:2148): avc: denied { mounton } for pid=4774 comm="syz.1.1645" path="/267/file0" dev="tmpfs" ino=1511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 213.447195][ T4796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1655'. [ 213.628098][ T30] audit: type=1400 audit(1756326327.252:2149): avc: denied { setopt } for pid=4794 comm="syz.0.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.677549][ T4809] overlayfs: failed to resolve './file0': -2 [ 213.749859][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.801476][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.822414][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.829536][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.094481][ T4856] overlayfs: failed to clone upperpath [ 214.138044][ T4864] overlayfs: failed to clone upperpath [ 214.148540][ T4864] overlayfs: failed to clone upperpath [ 214.189671][ T30] audit: type=1326 audit(1756326327.902:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 214.518880][ T4910] 9pnet: Insufficient options for proto=fd [ 214.728687][ T30] kauditd_printk_skb: 364 callbacks suppressed [ 214.728705][ T30] audit: type=1326 audit(1756326328.442:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.758791][ T30] audit: type=1326 audit(1756326328.442:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.782578][ T30] audit: type=1326 audit(1756326328.442:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.810378][ T30] audit: type=1326 audit(1756326328.442:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.834134][ T30] audit: type=1326 audit(1756326328.442:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.888026][ T30] audit: type=1326 audit(1756326328.442:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.919504][ T30] audit: type=1326 audit(1756326328.442:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.945429][ T30] audit: type=1326 audit(1756326328.442:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.969412][ T30] audit: type=1326 audit(1756326328.442:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 214.995102][ T30] audit: type=1326 audit(1756326328.442:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd320ac94a5 code=0x7ffc0000 [ 215.035326][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 215.064573][ T4945] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 215.084698][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 215.126155][ T4947] device ip6gretap0 left promiscuous mode [ 215.150317][ T4947] device veth0_vlan left promiscuous mode [ 215.156501][ T4947] device veth0_vlan entered promiscuous mode [ 215.164208][ T4947] device veth1_macvtap left promiscuous mode [ 215.171150][ T4947] device veth1_macvtap entered promiscuous mode [ 215.177935][ T4947] device ip6gretap0 entered promiscuous mode [ 215.185774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 215.198691][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.218396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.225821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.236961][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.244057][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.251840][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.260354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.273094][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.280197][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.288380][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.296888][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 215.305323][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.314329][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 215.322693][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.331138][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.343287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.353737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.371047][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.379667][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.388561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.397044][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.407296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.417012][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.425564][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.434127][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.442422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.467691][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.482213][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.498726][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.516959][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.525081][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.532679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4: link becomes ready [ 215.540944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.549889][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.558177][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.566426][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.574178][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.620075][ T4977] No source specified [ 215.670001][ T4988] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.688030][ T4990] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 215.701266][ T4994] overlayfs: failed to clone upperpath [ 215.753707][ T5009] overlayfs: failed to clone upperpath [ 215.768714][ T5010] overlayfs: failed to clone upperpath [ 215.952216][ T5053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'. [ 216.467457][ T5175] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1832'. [ 216.839062][ T5228] overlayfs: failed to clone upperpath [ 216.890039][ T5230] overlayfs: failed to clone upperpath [ 217.306503][ T5292] overlayfs: failed to clone upperpath [ 217.847652][ T5388] overlayfs: failed to clone upperpath [ 217.856820][ T5388] overlayfs: failed to clone upperpath [ 217.902430][ T5400] 9pnet: Insufficient options for proto=fd [ 218.380147][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 218.409075][ T5472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'. [ 218.554599][ T5499] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1986'. [ 218.636502][ T5514] overlayfs: failed to clone upperpath [ 218.823554][ T5530] overlayfs: failed to clone upperpath [ 219.131664][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 219.809413][ T5635] overlayfs: failed to clone upperpath [ 219.824970][ T5635] overlayfs: failed to clone lowerpath [ 220.479143][ T5703] overlayfs: failed to clone upperpath [ 220.948028][ T5787] overlayfs: failed to clone upperpath [ 221.046210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.062558][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.069678][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.543724][ T5877] overlayfs: failed to clone upperpath [ 221.639509][ T5895] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 221.686128][ T5899] overlayfs: failed to clone upperpath [ 221.768598][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 221.768622][ T30] audit: type=1400 audit(1756326335.482:2592): avc: denied { setopt } for pid=5914 comm="syz.0.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.807877][ T5920] overlayfs: failed to clone upperpath [ 221.918823][ T30] audit: type=1400 audit(1756326335.632:2593): avc: denied { mount } for pid=5938 comm="syz.3.2194" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 221.999984][ T5947] overlayfs: failed to clone upperpath [ 222.052444][ T5953] fuseblk: Unknown parameter '0000000000000000000000000000000000000000' [ 222.075617][ T30] audit: type=1400 audit(1756326335.782:2594): avc: denied { mounton } for pid=5954 comm="syz.3.2202" path=2F3530372FE91F7189591E9233614B dev="tmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 222.190307][ T30] audit: type=1400 audit(1756326335.902:2595): avc: denied { checkpoint_restore } for pid=5963 comm="syz.0.2206" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.435727][ T6037] overlayfs: failed to clone upperpath [ 222.471585][ T6046] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2240'. [ 222.575239][ T6071] overlayfs: failed to clone upperpath [ 222.589910][ T6075] overlayfs: failed to clone upperpath [ 223.356896][ T6239] overlayfs: failed to resolve './file0/file0': -2 [ 223.703889][ T6262] 9pnet: Insufficient options for proto=fd [ 223.883276][ T6271] overlayfs: failed to clone upperpath [ 224.037739][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 224.110904][ T6307] overlayfs: failed to clone upperpath [ 224.129146][ T30] audit: type=1400 audit(1756326337.842:2596): avc: denied { link } for pid=6303 comm="syz.2.2364" name="file1" dev="tmpfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 224.181981][ T30] audit: type=1400 audit(1756326337.842:2597): avc: denied { mounton } for pid=6303 comm="syz.2.2364" path="/464/file7" dev="tmpfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 224.335078][ T6350] device batadv_slave_0 entered promiscuous mode [ 224.348418][ T6349] device batadv_slave_0 left promiscuous mode [ 224.432566][ T6374] overlayfs: failed to clone upperpath [ 224.451077][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 224.496419][ T6388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2403'. [ 224.506943][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 224.582681][ T6412] overlayfs: failed to clone upperpath [ 224.619783][ T6422] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2418'. [ 224.654335][ T6426] overlayfs: failed to clone upperpath [ 224.998786][ T6499] overlayfs: failed to resolve './file1': -2 [ 225.009919][ T6505] overlayfs: failed to clone upperpath [ 225.522433][ T6566] 9pnet: Insufficient options for proto=fd [ 225.740078][ T6582] overlayfs: failed to clone upperpath [ 226.072053][ T30] audit: type=1400 audit(1756326339.772:2598): avc: denied { shutdown } for pid=6623 comm="syz.2.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.105246][ T6651] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2527'. [ 226.680893][ T6711] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 227.216639][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 227.341055][ T6763] xt_hashlimit: max too large, truncated to 1048576 [ 227.533546][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.540970][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.549138][ T6771] device bridge_slave_0 entered promiscuous mode [ 227.565863][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.573128][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.581050][ T6771] device bridge_slave_1 entered promiscuous mode [ 227.822222][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.829373][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.836698][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.843797][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.896446][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.904723][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.918143][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.938688][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.958756][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.965841][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.986663][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.998987][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.006073][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.046689][ T8] device bridge_slave_1 left promiscuous mode [ 228.058062][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.078200][ T8] device veth1_macvtap left promiscuous mode [ 228.084255][ T8] device veth0_vlan left promiscuous mode [ 228.105791][ T6845] overlayfs: failed to clone upperpath [ 228.317768][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.348664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.400177][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.419137][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.432918][ T6771] device veth0_vlan entered promiscuous mode [ 228.444331][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.452752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.479901][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.493287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.517809][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.529295][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.545093][ T6771] device veth1_macvtap entered promiscuous mode [ 228.576125][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.587904][ T6905] overlayfs: failed to clone upperpath [ 228.596868][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.610944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.665241][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.677345][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.695083][ T30] audit: type=1400 audit(1756326342.402:2599): avc: denied { mounton } for pid=6771 comm="syz-executor" path="/root/syzkaller.CHbE3L/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 228.795950][ T6936] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.923393][ T6959] overlayfs: failed to clone upperpath [ 228.930509][ T6957] kernel profiling enabled (shift: 17) [ 228.945109][ T6957] loop3: detected capacity change from 0 to 512 [ 229.030797][ T6957] EXT4-fs (loop3): Ignoring removed oldalloc option [ 229.047684][ T6957] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 229.062835][ T6957] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 229.087611][ T6957] EXT4-fs (loop3): failed to open journal device unknown-block(9,185) -6 [ 229.232588][ T7005] tmpfs: Unsupported parameter 'mpol' [ 229.242075][ T7009] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2691'. [ 229.267914][ T7009] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2691'. [ 229.284499][ T7012] overlayfs: failed to clone upperpath [ 229.447579][ T7027] loop3: detected capacity change from 0 to 8192 [ 229.463684][ T7045] overlayfs: failed to clone upperpath [ 230.766799][ T7126] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 230.798635][ T7126] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 230.866107][ T7146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2756'. [ 230.893150][ T7146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2756'. [ 231.135374][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2775'. [ 231.157691][ T7195] overlayfs: failed to clone upperpath [ 231.164071][ T7195] overlayfs: failed to clone upperpath [ 231.208809][ T30] audit: type=1400 audit(1756326344.922:2600): avc: denied { read } for pid=7191 comm="syz.3.2778" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 231.251435][ T30] audit: type=1400 audit(1756326344.922:2601): avc: denied { open } for pid=7191 comm="syz.3.2778" path="/16/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 231.294177][ T7211] loop3: detected capacity change from 0 to 128 [ 231.363706][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2792'. [ 231.373363][ T7211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 231.398215][ T7211] System zones: 1-3, 19-19, 35-36 [ 231.408750][ T7211] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 231.430063][ T7211] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.489579][ T7211] EXT4-fs warning (device loop3): ext4_group_extend:1823: can't shrink FS - resize aborted [ 231.538369][ T7233] overlayfs: failed to clone upperpath [ 231.575532][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 231.605460][ T7241] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 231.674447][ T7248] loop3: detected capacity change from 0 to 1024 [ 231.779197][ T7248] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 231.807553][ T7248] EXT4-fs (loop3): shut down requested (0) [ 231.814297][ T30] audit: type=1400 audit(1756326345.522:2602): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 231.838251][ T30] audit: type=1400 audit(1756326345.522:2603): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.860139][ T30] audit: type=1400 audit(1756326345.532:2604): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.888002][ T30] audit: type=1400 audit(1756326345.532:2605): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.921609][ T30] audit: type=1400 audit(1756326345.532:2606): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 231.943291][ T30] audit: type=1400 audit(1756326345.532:2607): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 231.976543][ T30] audit: type=1400 audit(1756326345.532:2608): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 232.134371][ T7305] loop3: detected capacity change from 0 to 128 [ 232.215665][ T7305] EXT4-fs (loop3): Test dummy encryption mode enabled [ 232.223871][ T7305] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,acl,,errors=continue. Quota mode: none. [ 232.236914][ T7305] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.265518][ T7305] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 232.511304][ T7327] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 232.519788][ T7327] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 233.103306][ T7363] loop3: detected capacity change from 0 to 128 [ 233.132720][ T7367] overlayfs: failed to clone upperpath [ 233.241122][ T7386] overlayfs: failed to clone upperpath [ 233.465874][ T7414] overlayfs: failed to clone upperpath [ 233.715195][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 233.715210][ T30] audit: type=1326 audit(1756326347.422:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.4.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 233.774410][ T7453] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 233.788032][ T30] audit: type=1326 audit(1756326347.452:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.4.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 233.868037][ T30] audit: type=1326 audit(1756326347.452:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.4.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd320a96be9 code=0x7ffc0000 [ 234.175904][ T30] audit: type=1326 audit(1756326347.882:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.3.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 234.254142][ T30] audit: type=1326 audit(1756326347.882:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.3.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 234.308003][ T30] audit: type=1326 audit(1756326347.882:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.3.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 234.336520][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.350492][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.368756][ T7473] device bridge_slave_0 entered promiscuous mode [ 234.398641][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.406240][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.417981][ T30] audit: type=1326 audit(1756326347.912:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.3.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 234.443880][ T7473] device bridge_slave_1 entered promiscuous mode [ 234.479315][ T30] audit: type=1326 audit(1756326348.042:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 234.505979][ T30] audit: type=1326 audit(1756326348.042:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 234.540906][ T30] audit: type=1326 audit(1756326348.042:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.3.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 234.752263][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.759374][ T7473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.766665][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.773713][ T7473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.839649][ T7517] netem: change failed [ 234.862477][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.875913][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.883967][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.895871][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.904258][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.904879][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 234.911328][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.927756][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 234.937709][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.955462][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.962753][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.182846][ T2233] device bridge_slave_1 left promiscuous mode [ 235.194264][ T2233] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.238715][ T2233] device bridge_slave_0 left promiscuous mode [ 235.273474][ T2233] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.307614][ T2233] device veth1_macvtap left promiscuous mode [ 235.321617][ T2233] device veth0_vlan left promiscuous mode [ 235.378530][ T7555] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2938'. [ 235.417258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.430536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.453219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.468013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.502489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.520587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.541245][ T7473] device veth0_vlan entered promiscuous mode [ 235.547660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.562102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.576262][ T7578] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2949'. [ 235.583472][ T7473] device veth1_macvtap entered promiscuous mode [ 235.593080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.601181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.615457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.624321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.633155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.651773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.660787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.672387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.681601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.772326][ T7587] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 235.834161][ T7604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7604 comm=syz.0.2958 [ 235.918734][ T7618] 9pnet: Could not find request transport: 0xffffffffffffffff [ 236.017280][ T7634] 9p: Unknown Cache mode f [ 236.114152][ T7651] loop3: detected capacity change from 0 to 1024 [ 236.198580][ T7651] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 236.249231][ T7680] loop4: detected capacity change from 0 to 1024 [ 236.360753][ T7680] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.401560][ T7680] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 236.572474][ T7738] loop3: detected capacity change from 0 to 512 [ 236.605477][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3023'. [ 236.647173][ T7738] EXT4-fs (loop3): Ignoring removed oldalloc option [ 236.658061][ T7738] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 236.671577][ T7749] SELinux: failed to load policy [ 236.694145][ T7738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.715130][ T7738] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 236.750259][ T7738] EXT4-fs (loop3): 1 truncate cleaned up [ 236.755945][ T7738] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 236.843084][ T7759] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.902986][ T7759] kvm: pic: non byte read [ 236.907667][ T7759] kvm: pic: level sensitive irq not supported [ 236.907729][ T7759] kvm: pic: non byte read [ 236.929158][ T7759] kvm: pic: level sensitive irq not supported [ 236.929242][ T7759] kvm: pic: non byte read [ 236.940304][ T7759] kvm: pic: level sensitive irq not supported [ 236.940383][ T7759] kvm: pic: non byte read [ 236.951389][ T7759] kvm: pic: level sensitive irq not supported [ 236.951462][ T7759] kvm: pic: non byte read [ 237.054520][ T7795] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3045'. [ 237.096090][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.103250][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.111239][ T7782] device bridge_slave_0 entered promiscuous mode [ 237.128378][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.135446][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.143318][ T7782] device bridge_slave_1 entered promiscuous mode [ 237.294221][ T7837] loop4: detected capacity change from 0 to 128 [ 237.305260][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.312462][ T7782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.319785][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.326825][ T7782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.339346][ T7837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 237.352476][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.360932][ T7837] System zones: 1-3, 19-19, 35-36 [ 237.366597][ T7837] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 237.380620][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.388532][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.388545][ T7837] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.444845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.453922][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.461024][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.468577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.476720][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.483777][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.497143][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.514946][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.556118][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.580333][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.591426][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.600895][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.611096][ T7782] device veth0_vlan entered promiscuous mode [ 237.625182][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.635635][ T7782] device veth1_macvtap entered promiscuous mode [ 237.647535][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.666373][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.691834][ T7871] 9pnet: Insufficient options for proto=fd [ 237.713063][ T7874] loop4: detected capacity change from 0 to 2048 [ 237.765198][ T7874] loop4: p2 < > p3 < > [ 237.769735][ T7874] loop4: partition table partially beyond EOD, truncated [ 237.789058][ T7874] loop4: p2 start 4278190080 is beyond EOD, truncated [ 237.801695][ T7881] loop2: detected capacity change from 0 to 128 [ 237.848960][ T7881] EXT4-fs warning (device loop2): ext4_fill_super:3971: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 237.862650][ T7881] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 237.863210][ T7064] udevd[7064]: incorrect jbd checksum on /dev/loop2 [ 237.904785][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.912040][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.941549][ T7884] device bridge_slave_0 entered promiscuous mode [ 237.966649][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.992786][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.040021][ T7884] device bridge_slave_1 entered promiscuous mode [ 238.051597][ T7903] loop3: detected capacity change from 0 to 512 [ 238.127289][ T7903] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 238.161445][ T7903] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.164984][ T7909] loop2: detected capacity change from 0 to 128 [ 238.235345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.255506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.273082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.301479][ T1836] attempt to access beyond end of device [ 238.301479][ T1836] loop2: rw=1, want=1041, limit=128 [ 238.313947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.334747][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.341846][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.350899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.359620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.367912][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.375078][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.416212][ T7919] loop2: detected capacity change from 0 to 512 [ 238.428608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.460514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.470889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.479405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.492800][ T7884] device veth0_vlan entered promiscuous mode [ 238.501227][ T7919] EXT4-fs (loop2): Ignoring removed orlov option [ 238.516811][ T7919] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 238.534751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.547729][ T7919] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 238.550153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.565783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.576161][ T7919] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.3089: corrupted in-inode xattr [ 238.599433][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.610959][ T7919] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3089: couldn't read orphan inode 15 (err -117) [ 238.628845][ T7884] device veth1_macvtap entered promiscuous mode [ 238.638710][ T7919] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 238.655111][ T7928] syz.1.3094[7928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.662329][ T45] device bridge_slave_1 left promiscuous mode [ 238.688295][ T7928] syz.1.3094[7928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.723970][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.753485][ T45] device bridge_slave_0 left promiscuous mode [ 238.759857][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.778169][ T45] device veth1_macvtap left promiscuous mode [ 238.784219][ T45] device veth0_vlan left promiscuous mode [ 238.809347][ T7937] SELinux: security policydb version 17 (MLS) not backwards compatible [ 238.831908][ T7937] SELinux: failed to load policy [ 238.924773][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 238.924790][ T30] audit: type=1400 audit(1756326352.632:2766): avc: denied { ioctl } for pid=7947 comm="syz.3.3103" path="socket:[38442]" dev="sockfs" ino=38442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.008059][ T7931] tipc: Started in network mode [ 239.013192][ T7931] tipc: Node identity ac141413, cluster identity 4711 [ 239.028392][ T7931] tipc: New replicast peer: 10.1.1.2 [ 239.039099][ T7931] tipc: Enabled bearer , priority 10 [ 239.048298][ T1726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.058606][ T1726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.269398][ T7974] loop0: detected capacity change from 0 to 512 [ 239.306815][ T7976] loop3: detected capacity change from 0 to 1024 [ 239.314632][ T7978] loop2: detected capacity change from 0 to 1024 [ 239.340634][ T7974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.352747][ T7976] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 239.366532][ T7978] EXT4-fs (loop2): Ignoring removed oldalloc option [ 239.394594][ T7974] EXT4-fs error (device loop0): ext4_init_orphan_info:586: inode #3: comm syz.0.3115: iget: special inode unallocated [ 239.413199][ T7974] EXT4-fs (loop0): Remounting filesystem read-only [ 239.422739][ T7974] EXT4-fs (loop0): get orphan inode failed [ 239.428740][ T7978] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 239.438441][ T7974] EXT4-fs (loop0): mount failed [ 239.455574][ T7976] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,i_version,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 239.508630][ T7976] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 239.524929][ T30] audit: type=1400 audit(1756326353.232:2767): avc: denied { ioctl } for pid=7977 comm="syz.2.3117" path="/13/file1/file1" dev="loop2" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.567455][ T7976] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 239.588667][ T7976] EXT4-fs (loop3): This should not happen!! Data will be lost [ 239.588667][ T7976] [ 239.598628][ T7976] EXT4-fs (loop3): Total free blocks count 0 [ 239.604620][ T7976] EXT4-fs (loop3): Free/Dirty block details [ 239.610729][ T7976] EXT4-fs (loop3): free_blocks=20480 [ 239.616030][ T7976] EXT4-fs (loop3): dirty_blocks=16 [ 239.621401][ T7976] EXT4-fs (loop3): Block reservation details [ 239.627637][ T7976] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 239.691019][ T8000] device wg2 entered promiscuous mode [ 239.735115][ T8004] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3126'. [ 239.813172][ T30] audit: type=1107 audit(1756326353.522:2768): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 240.036515][ T30] audit: type=1326 audit(1756326353.742:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 240.060506][ T341] tipc: Node number set to 2886997011 [ 240.091702][ T30] audit: type=1326 audit(1756326353.742:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 240.131349][ T30] audit: type=1326 audit(1756326353.782:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 240.177353][ T30] audit: type=1326 audit(1756326353.782:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 240.207616][ T30] audit: type=1326 audit(1756326353.782:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 240.238103][ T1709] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 240.270455][ T8046] loop0: detected capacity change from 0 to 128 [ 240.288886][ T30] audit: type=1326 audit(1756326353.782:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 240.340685][ T30] audit: type=1326 audit(1756326353.782:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 240.386083][ T8049] device wg2 entered promiscuous mode [ 240.418267][ T8046] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.429038][ T8046] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.531024][ T8056] loop3: detected capacity change from 0 to 512 [ 240.548065][ T1709] usb 3-1: device descriptor read/64, error -71 [ 240.555297][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.563666][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.571207][ T8048] device bridge_slave_0 entered promiscuous mode [ 240.578767][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.585813][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.593403][ T8048] device bridge_slave_1 entered promiscuous mode [ 240.610499][ T8056] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.624525][ T8056] EXT4-fs error (device loop3): ext4_fill_super:4830: inode #2: comm syz.3.3147: iget: special inode unallocated [ 240.636807][ T8056] EXT4-fs (loop3): get root inode failed [ 240.642785][ T8056] EXT4-fs (loop3): mount failed [ 240.692010][ T8063] loop0: detected capacity change from 0 to 128 [ 240.727397][ T8063] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 240.766012][ T8069] loop4: detected capacity change from 0 to 1024 [ 240.821993][ T8069] EXT4-fs (loop4): Ignoring removed bh option [ 240.836109][ T8083] loop3: detected capacity change from 0 to 2048 [ 240.845062][ T8086] loop0: detected capacity change from 0 to 512 [ 240.849537][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.858423][ T8048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.865755][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.872828][ T8048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.888744][ T6410] loop3: p3 p4 < > [ 240.893799][ T8069] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 240.920123][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.928033][ T6410] loop3: p3 start 301989888 is beyond EOD, truncated [ 240.928511][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.936859][ T8083] loop3: p3 p4 < > [ 240.943228][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.948528][ T8083] loop3: p3 start 301989888 is beyond EOD, truncated [ 240.959179][ T1709] usb 3-1: device descriptor read/64, error -71 [ 240.970895][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.006644][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.027350][ T8048] device veth0_vlan entered promiscuous mode [ 241.035749][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.045100][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.054022][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.066600][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.090836][ T6410] udevd[6410]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 241.104896][ T2233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.117754][ T8048] device veth1_macvtap entered promiscuous mode [ 241.142197][ T6410] udevd[6410]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 241.152349][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.164205][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.213298][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3168'. [ 241.228133][ T1709] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 241.248454][ T8111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8111 comm=syz.0.3168 [ 241.291288][ T8118] loop4: detected capacity change from 0 to 512 [ 241.293023][ T8121] loop0: detected capacity change from 0 to 1024 [ 241.333695][ T8118] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.345086][ T8121] EXT4-fs (loop0): Ignoring removed oldalloc option [ 241.345385][ T8118] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.377100][ T8118] EXT4-fs error (device loop4): ext4_do_update_inode:5235: inode #2: comm kfree: corrupted inode contents [ 241.392417][ T8128] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 241.405582][ T8118] EXT4-fs error (device loop4): ext4_dirty_inode:6071: inode #2: comm kfree: mark_inode_dirty error [ 241.421889][ T8118] EXT4-fs error (device loop4): ext4_do_update_inode:5235: inode #2: comm kfree: corrupted inode contents [ 241.425747][ T8121] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 241.456913][ T8118] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm kfree: mark_inode_dirty error [ 241.528128][ T1709] usb 3-1: device descriptor read/64, error -71 [ 241.550022][ T8141] tipc: Started in network mode [ 241.555059][ T8141] tipc: Node identity befeb66a5e4b, cluster identity 4711 [ 241.572115][ T8141] tipc: Enabled bearer , priority 0 [ 241.582593][ T8141] device syzkaller0 entered promiscuous mode [ 241.608337][ T8141] tipc: Resetting bearer [ 241.622375][ T1726] device bridge_slave_1 left promiscuous mode [ 241.642568][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.656710][ T1726] device bridge_slave_0 left promiscuous mode [ 241.666297][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.701451][ T1726] device veth1_macvtap left promiscuous mode [ 241.709738][ T1726] device veth0_vlan left promiscuous mode [ 241.833465][ T8140] tipc: Resetting bearer [ 241.847097][ T8140] tipc: Disabling bearer [ 241.938012][ T1709] usb 3-1: device descriptor read/64, error -71 [ 241.980541][ T8170] loop4: detected capacity change from 0 to 1024 [ 242.019252][ T8170] EXT4-fs (loop4): Ignoring removed orlov option [ 242.034723][ T8170] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 242.050222][ T8170] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 242.058145][ T1709] usb usb3-port1: attempt power cycle [ 242.162051][ T8174] tipc: Enabled bearer , priority 0 [ 242.170103][ T8174] +: renamed from syzkaller0 [ 242.175775][ T8174] tipc: Disabling bearer [ 242.498047][ T1709] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 242.580361][ T8197] loop3: detected capacity change from 0 to 128 [ 242.663725][ T8197] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.674636][ T8197] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.706763][ T1709] usb 3-1: device descriptor read/8, error -71 [ 242.855216][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.863206][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.871314][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.878902][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.886380][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.894048][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.903779][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.911385][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.918929][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.931788][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.939404][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.946817][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.954459][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.965915][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 242.988051][ T1709] usb 3-1: device descriptor read/8, error -71 [ 243.004616][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.012451][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.026942][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.034588][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.042530][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.058989][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.066532][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.074305][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.084067][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.101287][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.109109][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.117155][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.125442][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.134676][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.142130][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.149564][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.156956][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.164440][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.171838][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.179248][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.186639][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.194144][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.201951][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.209353][ T475] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 243.220884][ T475] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 243.284278][ T8235] loop3: detected capacity change from 0 to 512 [ 243.293172][ T8230] fido_id[8230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 243.330269][ T8235] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.3218: inline data xattr refers to an external xattr inode [ 243.346550][ T8235] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.3218: couldn't read orphan inode 12 (err -117) [ 243.371189][ T8235] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: none. [ 243.513735][ T8271] +: renamed from syzkaller0 [ 243.780526][ T8319] +: renamed from syzkaller0 [ 243.930101][ T30] kauditd_printk_skb: 262 callbacks suppressed [ 243.930127][ T30] audit: type=1400 audit(1756326357.642:3038): avc: denied { map_create } for pid=8354 comm="syz.0.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 243.957278][ T30] audit: type=1400 audit(1756326357.642:3039): avc: denied { map_create } for pid=8340 comm="syz.1.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 243.976969][ T30] audit: type=1400 audit(1756326357.642:3040): avc: denied { prog_load } for pid=8340 comm="syz.1.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 243.996184][ T30] audit: type=1400 audit(1756326357.642:3041): avc: denied { prog_load } for pid=8340 comm="syz.1.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 244.017177][ T30] audit: type=1400 audit(1756326357.642:3042): avc: denied { prog_load } for pid=8340 comm="syz.1.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 244.037855][ T30] audit: type=1400 audit(1756326357.642:3043): avc: denied { module_request } for pid=8340 comm="syz.1.3269" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 244.060503][ T30] audit: type=1400 audit(1756326357.642:3044): avc: denied { sys_module } for pid=8340 comm="syz.1.3269" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 244.082353][ T30] audit: type=1400 audit(1756326357.642:3045): avc: denied { prog_load } for pid=8354 comm="syz.0.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 244.102660][ T30] audit: type=1400 audit(1756326357.642:3046): avc: denied { name_bind } for pid=8354 comm="syz.0.3276" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 244.125529][ T30] audit: type=1400 audit(1756326357.662:3047): avc: denied { read write } for pid=7884 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 244.193093][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 244.203572][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 244.212399][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'. [ 244.421412][ T8422] netlink: 'syz.2.3308': attribute type 4 has an invalid length. [ 244.433573][ T8422] netlink: 'syz.2.3308': attribute type 4 has an invalid length. [ 245.120477][ T8603] serio: Serial port ptm1 [ 245.312917][ T8634] device veth1_vlan entered promiscuous mode [ 247.072880][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'. [ 247.081930][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'. [ 248.245387][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 248.977137][ T30] kauditd_printk_skb: 1117 callbacks suppressed [ 248.977154][ T30] audit: type=1400 audit(1756326362.682:4165): avc: denied { read write } for pid=7473 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.043318][ T30] audit: type=1400 audit(1756326362.692:4166): avc: denied { read write } for pid=8048 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.097548][ T30] audit: type=1400 audit(1756326362.722:4167): avc: denied { prog_load } for pid=8993 comm="syz.4.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.134405][ T30] audit: type=1400 audit(1756326362.722:4168): avc: denied { prog_load } for pid=8995 comm="syz.1.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.191874][ T30] audit: type=1400 audit(1756326362.722:4169): avc: denied { prog_load } for pid=8993 comm="syz.4.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.239587][ T30] audit: type=1400 audit(1756326362.722:4170): avc: denied { prog_load } for pid=8993 comm="syz.4.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.300111][ T30] audit: type=1400 audit(1756326362.732:4171): avc: denied { read write } for pid=8048 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.324744][ T30] audit: type=1400 audit(1756326362.732:4172): avc: denied { read write } for pid=7473 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.356712][ T9034] netlink: 'syz.4.3597': attribute type 4 has an invalid length. [ 249.377764][ T9034] netlink: 'syz.4.3597': attribute type 4 has an invalid length. [ 249.386825][ T30] audit: type=1400 audit(1756326362.782:4173): avc: denied { read write } for pid=8998 comm="syz.4.3581" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.429354][ T7473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.500508][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'. [ 249.725212][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3625'. [ 249.857610][ T9113] netlink: 57 bytes leftover after parsing attributes in process `syz.0.3635'. [ 250.072885][ T9152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9152 comm=syz.1.3654 [ 250.354235][ T9212] serio: Serial port ptm0 [ 250.690968][ T9238] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3691'. [ 251.164417][ T9342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9342 comm=syz.3.3742 [ 251.436328][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3782'. [ 252.084343][ T9523] device wireguard0 entered promiscuous mode [ 252.163404][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 252.174524][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 252.819342][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3857'. [ 253.142544][ T9619] device syzkaller0 entered promiscuous mode [ 253.934681][ T9673] netlink: 'syz.1.3897': attribute type 4 has an invalid length. [ 253.980925][ T30] kauditd_printk_skb: 1417 callbacks suppressed [ 253.980939][ T30] audit: type=1400 audit(1756326367.692:5586): avc: denied { read write } for pid=6771 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.012678][ T9678] netlink: 'syz.1.3897': attribute type 4 has an invalid length. [ 254.037854][ T30] audit: type=1400 audit(1756326367.732:5587): avc: denied { map_create } for pid=9679 comm="syz.0.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 254.079823][ T9687] device bridge0 entered promiscuous mode [ 254.085671][ T9687] device macsec1 entered promiscuous mode [ 254.091966][ T30] audit: type=1400 audit(1756326367.732:5588): avc: denied { prog_load } for pid=9679 comm="syz.0.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 254.116899][ T9687] bridge0: port 3(macsec1) entered blocking state [ 254.128000][ T9687] bridge0: port 3(macsec1) entered disabled state [ 254.144399][ T9687] device bridge0 left promiscuous mode [ 254.152188][ T30] audit: type=1400 audit(1756326367.742:5589): avc: denied { map_create } for pid=9681 comm="syz.3.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 254.218430][ T30] audit: type=1326 audit(1756326367.742:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.3.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 254.268018][ T30] audit: type=1326 audit(1756326367.742:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.3.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 254.339323][ T30] audit: type=1326 audit(1756326367.742:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.3.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 254.392068][ T30] audit: type=1400 audit(1756326367.742:5593): avc: denied { prog_load } for pid=9681 comm="syz.3.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 254.452110][ T30] audit: type=1326 audit(1756326367.742:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.3.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 254.484589][ T30] audit: type=1326 audit(1756326367.742:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.3.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f852ff1fbe9 code=0x7ffc0000 [ 255.126103][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 255.151906][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3970'. [ 255.581253][ T9935] ================================================================== [ 255.589205][ T9939] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 255.589443][ T9935] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 255.603755][ T9935] Read of size 8 at addr ffff888130c25ac0 by task syz.2.4022/9935 [ 255.611571][ T9935] [ 255.613896][ T9935] CPU: 1 PID: 9935 Comm: syz.2.4022 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 255.624043][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 255.634104][ T9935] Call Trace: [ 255.637388][ T9935] [ 255.640314][ T9935] __dump_stack+0x21/0x30 [ 255.644649][ T9935] dump_stack_lvl+0xee/0x150 [ 255.649237][ T9935] ? show_regs_print_info+0x20/0x20 [ 255.654432][ T9935] ? load_image+0x3a0/0x3a0 [ 255.658931][ T9935] print_address_description+0x7f/0x2c0 [ 255.664571][ T9935] ? tc_setup_flow_action+0x870/0x3240 [ 255.670024][ T9935] kasan_report+0xf1/0x140 [ 255.674444][ T9935] ? tc_setup_flow_action+0x870/0x3240 [ 255.679915][ T9935] __asan_report_load8_noabort+0x14/0x20 [ 255.685544][ T9935] tc_setup_flow_action+0x870/0x3240 [ 255.690829][ T9935] mall_replace_hw_filter+0x293/0x820 [ 255.696201][ T9935] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 255.702268][ T9935] ? mall_set_parms+0x520/0x520 [ 255.707116][ T9935] ? tcf_exts_destroy+0xb0/0xb0 [ 255.711966][ T9935] ? mall_set_parms+0x1e8/0x520 [ 255.716814][ T9935] mall_change+0x526/0x740 [ 255.721224][ T9935] ? __kasan_check_write+0x14/0x20 [ 255.726424][ T9935] ? mall_get+0xa0/0xa0 [ 255.730573][ T9935] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 255.736464][ T9935] tc_new_tfilter+0x12a2/0x1870 [ 255.741316][ T9935] ? tcf_gate_entry_destructor+0x20/0x20 [ 255.746945][ T9935] ? update_curr+0x40d/0x5b0 [ 255.751530][ T9935] ? security_capable+0x87/0xb0 [ 255.756374][ T9935] ? ns_capable+0x8c/0xf0 [ 255.760696][ T9935] ? netlink_net_capable+0x125/0x160 [ 255.765983][ T9935] ? tcf_gate_entry_destructor+0x20/0x20 [ 255.771616][ T9935] rtnetlink_rcv_msg+0x81b/0xb90 [ 255.776735][ T9935] ? rtnetlink_bind+0x80/0x80 [ 255.781406][ T9935] ? memcpy+0x56/0x70 [ 255.785383][ T9935] ? avc_has_perm_noaudit+0x2f4/0x460 [ 255.790748][ T9935] ? arch_stack_walk+0xee/0x140 [ 255.795592][ T9935] ? avc_denied+0x1b0/0x1b0 [ 255.800088][ T9935] ? stack_trace_save+0x98/0xe0 [ 255.804937][ T9935] ? avc_has_perm+0x158/0x240 [ 255.809606][ T9935] ? avc_has_perm_noaudit+0x460/0x460 [ 255.814971][ T9935] ? x64_sys_call+0x4b/0x9a0 [ 255.819571][ T9935] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 255.824946][ T9935] netlink_rcv_skb+0x1e0/0x430 [ 255.829705][ T9935] ? rtnetlink_bind+0x80/0x80 [ 255.834375][ T9935] ? netlink_ack+0xb60/0xb60 [ 255.838960][ T9935] ? __netlink_lookup+0x387/0x3b0 [ 255.843985][ T9935] rtnetlink_rcv+0x1c/0x20 [ 255.848397][ T9935] netlink_unicast+0x876/0xa40 [ 255.853157][ T9935] netlink_sendmsg+0x86a/0xb70 [ 255.857921][ T9935] ? netlink_getsockopt+0x530/0x530 [ 255.863119][ T9935] ? security_socket_sendmsg+0x82/0xa0 [ 255.868574][ T9935] ? netlink_getsockopt+0x530/0x530 [ 255.873764][ T9935] ____sys_sendmsg+0x5a2/0x8c0 [ 255.878560][ T9935] ? __sys_sendmsg_sock+0x40/0x40 [ 255.883844][ T9935] ? import_iovec+0x7c/0xb0 [ 255.888362][ T9935] ___sys_sendmsg+0x1f0/0x260 [ 255.893042][ T9935] ? __sys_sendmsg+0x250/0x250 [ 255.897806][ T9935] ? sock_show_fdinfo+0xa0/0xa0 [ 255.902656][ T9935] ? __fdget+0x1a1/0x230 [ 255.906898][ T9935] __x64_sys_sendmsg+0x1e2/0x2a0 [ 255.911831][ T9935] ? ___sys_sendmsg+0x260/0x260 [ 255.916680][ T9935] ? __kasan_check_write+0x14/0x20 [ 255.921784][ T9935] ? switch_fpu_return+0x15d/0x2c0 [ 255.926900][ T9935] x64_sys_call+0x4b/0x9a0 [ 255.931401][ T9935] do_syscall_64+0x4c/0xa0 [ 255.935816][ T9935] ? clear_bhb_loop+0x50/0xa0 [ 255.940498][ T9935] ? clear_bhb_loop+0x50/0xa0 [ 255.945178][ T9935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.951086][ T9935] RIP: 0033:0x7fa783263be9 [ 255.955496][ T9935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.975096][ T9935] RSP: 002b:00007fa781ccc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.983511][ T9935] RAX: ffffffffffffffda RBX: 00007fa78348afa0 RCX: 00007fa783263be9 [ 255.991482][ T9935] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 255.999455][ T9935] RBP: 00007fa7832e6e19 R08: 0000000000000000 R09: 0000000000000000 [ 256.007419][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.015381][ T9935] R13: 00007fa78348b038 R14: 00007fa78348afa0 R15: 00007ffe84dccb98 [ 256.023350][ T9935] [ 256.026365][ T9935] [ 256.028767][ T9935] Allocated by task 9935: [ 256.033080][ T9935] __kasan_kmalloc+0xda/0x110 [ 256.037751][ T9935] __kmalloc+0x13d/0x2c0 [ 256.041990][ T9935] tcf_idr_create+0x5f/0x790 [ 256.046575][ T9935] tcf_idr_create_from_flags+0x61/0x70 [ 256.052023][ T9935] tcf_gact_init+0x346/0x580 [ 256.056603][ T9935] tcf_action_init_1+0x3f7/0x6a0 [ 256.061528][ T9935] tcf_action_init+0x1e9/0x710 [ 256.066282][ T9935] tcf_exts_validate+0x217/0x520 [ 256.071208][ T9935] mall_set_parms+0x48/0x520 [ 256.075791][ T9935] mall_change+0x45a/0x740 [ 256.080201][ T9935] tc_new_tfilter+0x12a2/0x1870 [ 256.085046][ T9935] rtnetlink_rcv_msg+0x81b/0xb90 [ 256.089976][ T9935] netlink_rcv_skb+0x1e0/0x430 [ 256.094730][ T9935] rtnetlink_rcv+0x1c/0x20 [ 256.099136][ T9935] netlink_unicast+0x876/0xa40 [ 256.103893][ T9935] netlink_sendmsg+0x86a/0xb70 [ 256.108650][ T9935] ____sys_sendmsg+0x5a2/0x8c0 [ 256.113411][ T9935] ___sys_sendmsg+0x1f0/0x260 [ 256.118083][ T9935] __x64_sys_sendmsg+0x1e2/0x2a0 [ 256.123017][ T9935] x64_sys_call+0x4b/0x9a0 [ 256.127428][ T9935] do_syscall_64+0x4c/0xa0 [ 256.131838][ T9935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.137725][ T9935] [ 256.140038][ T9935] The buggy address belongs to the object at ffff888130c25a00 [ 256.140038][ T9935] which belongs to the cache kmalloc-192 of size 192 [ 256.154080][ T9935] The buggy address is located 0 bytes to the right of [ 256.154080][ T9935] 192-byte region [ffff888130c25a00, ffff888130c25ac0) [ 256.167693][ T9935] The buggy address belongs to the page: [ 256.173312][ T9935] page:ffffea0004c30940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130c25 [ 256.183540][ T9935] flags: 0x4000000000000200(slab|zone=1) [ 256.189175][ T9935] raw: 4000000000000200 ffffea0004955840 0000000200000002 ffff888100042c00 [ 256.197753][ T9935] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 256.206320][ T9935] page dumped because: kasan: bad access detected [ 256.212722][ T9935] page_owner tracks the page as allocated [ 256.218615][ T9935] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 106046440405, free_ts 95090978588 [ 256.234583][ T9935] post_alloc_hook+0x192/0x1b0 [ 256.239491][ T9935] prep_new_page+0x1c/0x110 [ 256.244012][ T9935] get_page_from_freelist+0x2cc5/0x2d50 [ 256.249566][ T9935] __alloc_pages+0x18f/0x440 [ 256.254161][ T9935] new_slab+0xa1/0x4d0 [ 256.258238][ T9935] ___slab_alloc+0x381/0x810 [ 256.262821][ T9935] __slab_alloc+0x49/0x90 [ 256.267142][ T9935] kmem_cache_alloc_trace+0x146/0x270 [ 256.272510][ T9935] kernfs_fop_open+0x343/0xb30 [ 256.277268][ T9935] do_dentry_open+0x834/0x1010 [ 256.282112][ T9935] vfs_open+0x73/0x80 [ 256.286086][ T9935] path_openat+0x2646/0x2f10 [ 256.290665][ T9935] do_filp_open+0x1b3/0x3e0 [ 256.295163][ T9935] do_sys_openat2+0x14c/0x7b0 [ 256.299840][ T9935] __x64_sys_openat+0x136/0x160 [ 256.304692][ T9935] x64_sys_call+0x219/0x9a0 [ 256.309191][ T9935] page last free stack trace: [ 256.314000][ T9935] free_unref_page_prepare+0x542/0x550 [ 256.319453][ T9935] free_unref_page+0xa2/0x550 [ 256.324120][ T9935] __free_pages+0x6c/0x100 [ 256.328527][ T9935] __vunmap+0x84d/0x9e0 [ 256.332672][ T9935] vfree+0x8b/0xc0 [ 256.336388][ T9935] kvfree+0x26/0x40 [ 256.340188][ T9935] pcpu_balance_free+0x751/0x8d0 [ 256.345127][ T9935] pcpu_balance_workfn+0x110d/0x1150 [ 256.350407][ T9935] process_one_work+0x6be/0xba0 [ 256.355252][ T9935] worker_thread+0xa59/0x1200 [ 256.359920][ T9935] kthread+0x411/0x500 [ 256.363981][ T9935] ret_from_fork+0x1f/0x30 [ 256.368395][ T9935] [ 256.370715][ T9935] Memory state around the buggy address: [ 256.376334][ T9935] ffff888130c25980: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 256.384387][ T9935] ffff888130c25a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.392438][ T9935] >ffff888130c25a80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 256.400485][ T9935] ^ [ 256.406622][ T9935] ffff888130c25b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.414688][ T9935] ffff888130c25b80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 256.422737][ T9935] ================================================================== [ 256.430786][ T9935] Disabling lock debugging due to kernel taint Aug 27 20:26:10 syzkaller kern.alert kernel: [ 256.212722][ T9935] page_owner tracks the page as allocated Aug 27 20:26:10 syzkaller kern.alert kernel: [ 256.218615][ T9935] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 106046440405, free_ts 95090978588 Aug 27 20:26:10 syzkaller kern.alert kernel: [ 256.309191][ T9935] page last free stack trace: