last executing test programs: 18.045564244s ago: executing program 1 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x75ea150a}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796104000000000000007e0000001bfe03000a58525dfd7e5a894dee21871415c664e2196c3ae18086e0a044cdd4485b19e4500c2d252f2c0f181d90a40357a9b0704a0b63d30717271120ded4d096effe8f31cbd5371a063d43b3a631f02e05a74ff488677455e2aa918c826f847f98b32c27cdd31b644ca327a7c380478af13db3116363540e6d996ae7fa736502cc41f5a2294581d3dd76d52b18fbde8066bb3d8d4dbb3f65688dfd423d5a0cb26be766504bdc4e5bfd164d7ecf12cb23c3b2cacd", @ANYRES32=0x0, @ANYBLOB="000099000800000064000000"], 0x1c}}, 0x0) 18.004039944s ago: executing program 1 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000904c0000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x18) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.978640365s ago: executing program 1 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) close(r0) 17.886430117s ago: executing program 1 (id=202): sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000001f00)=ANY=[@ANYRES64=0x0, @ANYRES16], 0x2, 0x2c1, &(0x7f00000008c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x4, 0x9) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f00000001c0)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mprotect(&(0x7f0000471000/0xa000)=nil, 0xa000, 0xb) creat(&(0x7f0000000040)='./file0\x00', 0x60) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r3, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xdb0078e66880d4ef, 0x8000, 0x4405, 0xb, 0x7fc, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 17.597633552s ago: executing program 1 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, 0x0) 17.441515235s ago: executing program 1 (id=205): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB="743df8afa63d66642c726664", @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',version=9p2000.L,noextend,k']) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 17.441100605s ago: executing program 32 (id=205): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB="743df8afa63d66642c726664", @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',version=9p2000.L,noextend,k']) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 5.301063395s ago: executing program 5 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010049000000010000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) chmod(&(0x7f0000000080)='./file0\x00', 0x104) 5.181818227s ago: executing program 5 (id=260): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.784147445s ago: executing program 5 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe5f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) chmod(&(0x7f0000000080)='./file0\x00', 0x104) 4.748664246s ago: executing program 5 (id=262): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getitimer(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.798820635s ago: executing program 5 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r1 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000280)=0x8000, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xf4821a76583184aa}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040844) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xa}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000880)={'#! ', '', [{0x20, 'sched_switch\x00'}, {0x20, 'vfat\x00'}], 0xa, "dc375becdc92c43152e8f0d42950fb54e95230f20d9a25aa8a1ab168cc0d45d1f97bbc9a00"/48}, 0x48) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x3) sendfile(r6, r7, &(0x7f0000000100)=0x6, 0x100000000010401) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.615876698s ago: executing program 5 (id=266): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x3, 0xb9, &(0x7f0000000580)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x86, 0x30, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x82}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0x0, "a60f0a"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x6, 0x8, "136c670ca9"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x4, 0x1}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0xb2, 0xd3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x1000, 0x1}, @as_header={0x7, 0x24, 0x1, 0x71, 0x3, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0xe6, 0x8, "8a99e2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x53, 0x4, 0x9, {0x7, 0x25, 0x1, 0x82, 0x40, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0xd, 0x3, {0x7, 0x25, 0x1, 0x1, 0x8, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x0, 0xff, 0x5a, 0xa3}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x6, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x40, @local}}}, 0x32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) 530.456589ms ago: executing program 3 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03569d8b5da2"], 0xfdef) 453.494751ms ago: executing program 3 (id=399): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 429.684251ms ago: executing program 3 (id=400): r0 = socket(0x2, 0x2, 0x1) unshare(0x22020400) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) 377.514072ms ago: executing program 3 (id=402): syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c, 0x0, @remote, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x2}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006, 0x8}, {@dev, 0x4}, {@dev}, {@local, 0x7}]}]}}}}}}}, 0x0) 373.516603ms ago: executing program 3 (id=404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) unshare(0x22020400) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 308.818374ms ago: executing program 3 (id=410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0200", "ec094ea7c597058c35040000000009000000000000000000bd47a3ad00", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 209.104775ms ago: executing program 0 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000050006000600000008000400000000000500060000000000080003"], 0x34}}, 0x0) 163.855006ms ago: executing program 2 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) 163.659537ms ago: executing program 0 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) unshare(0x2c020400) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) 163.242656ms ago: executing program 2 (id=425): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x1}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x7, 0x8000000, 0x10, @private2, @empty, 0x10, 0x7800, 0xe93c, 0xfff}}) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 135.338457ms ago: executing program 0 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) 94.130318ms ago: executing program 2 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 93.844218ms ago: executing program 4 (id=429): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 93.520728ms ago: executing program 0 (id=430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 93.411698ms ago: executing program 4 (id=431): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0xfffffe36, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xc, 0x6, 0x6, 0x20, 0x1ff, 0x9]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x80015) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 93.204688ms ago: executing program 0 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 41.677069ms ago: executing program 4 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c"], 0x2c}}, 0x0) 41.462309ms ago: executing program 4 (id=434): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 41.160879ms ago: executing program 0 (id=435): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000", 0x23}], 0x1, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'veth0_macvtap\x00', @random="75e4f653fcc2"}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0x188, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}, [@user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}, @mark={0xc, 0x15, {0x35075b, 0x6}}, @tfcpad={0x8, 0x16, 0xfffffff7}, @algo_auth={0x56, 0x1, {{'blake2s-160-x86\x00'}, 0x70, "478ac498365d9bcde3b7a85dc336"}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd29, 0x70bd2c, 0x70bd2c, 0x70bd28, 0x6, [0x6d, 0x0]}}]}, 0x188}}, 0x0) 40.991909ms ago: executing program 4 (id=436): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}}, 0x20}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 40.883789ms ago: executing program 2 (id=437): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000a80)="24d7bb647639e5792e98252db6ebde013de391838cdd9ddcf07af714198d730c72ad202f94171e43425072ee493490d406d214104645f08396", 0x39}], 0x1}}], 0x1, 0x0) 40.146869ms ago: executing program 4 (id=438): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in6=@remote, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x104, 0x800000000000000}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1ff}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 18.864309ms ago: executing program 2 (id=439): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001a40)=ANY=[@ANYBLOB="10000000eb03"], 0x420}}, 0x0) 0s ago: executing program 2 (id=440): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x7e5a, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.212630][ T30] audit: type=1400 audit(1758713248.676:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 19.408534][ T30] audit: type=1400 audit(1758713255.876:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.409702][ T273] cgroup: Unknown subsys name 'net' [ 19.411628][ T30] audit: type=1400 audit(1758713255.876:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.415733][ T30] audit: type=1400 audit(1758713255.886:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.415902][ T273] cgroup: Unknown subsys name 'devices' [ 19.571414][ T273] cgroup: Unknown subsys name 'hugetlb' [ 19.576999][ T273] cgroup: Unknown subsys name 'rlimit' [ 19.773415][ T30] audit: type=1400 audit(1758713256.246:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.796648][ T30] audit: type=1400 audit(1758713256.246:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.802015][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.821368][ T30] audit: type=1400 audit(1758713256.246:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.852980][ T30] audit: type=1400 audit(1758713256.306:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.878502][ T30] audit: type=1400 audit(1758713256.306:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.908365][ T30] audit: type=1400 audit(1758713256.386:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.933918][ T30] audit: type=1400 audit(1758713256.386:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.934074][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.185416][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.192478][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.200023][ T281] device bridge_slave_0 entered promiscuous mode [ 21.207794][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.214888][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.222248][ T281] device bridge_slave_1 entered promiscuous mode [ 21.309392][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.316461][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.323914][ T282] device bridge_slave_0 entered promiscuous mode [ 21.331683][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.338808][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.346228][ T282] device bridge_slave_1 entered promiscuous mode [ 21.378110][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.385170][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.392656][ T284] device bridge_slave_0 entered promiscuous mode [ 21.406109][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.413207][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.420654][ T284] device bridge_slave_1 entered promiscuous mode [ 21.447675][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.454959][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.462520][ T283] device bridge_slave_0 entered promiscuous mode [ 21.471379][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.478417][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.485759][ T283] device bridge_slave_1 entered promiscuous mode [ 21.523419][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.530482][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.537822][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.544853][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.552556][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.559576][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.567009][ T285] device bridge_slave_0 entered promiscuous mode [ 21.585011][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.592111][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.599467][ T285] device bridge_slave_1 entered promiscuous mode [ 21.714635][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.721691][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.728932][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.735967][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.743932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.752229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.760755][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.767894][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.776551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.783936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.812927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.822969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.836314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.864654][ T281] device veth0_vlan entered promiscuous mode [ 21.871004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.879327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.887527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.895146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.902869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.910977][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.917976][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.925358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.933693][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.940719][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.962665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.979008][ T281] device veth1_macvtap entered promiscuous mode [ 22.004822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.013012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.021528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.029542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.039428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.047742][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.054795][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.062460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.070623][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.077629][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.085009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.093129][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.100152][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.107535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.115540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.123507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.131469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.139316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.154236][ T285] device veth0_vlan entered promiscuous mode [ 22.160601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.169596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.177826][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.184858][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.192362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.199968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.207859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.216067][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.223111][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.230719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.238118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.245995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.254903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.263217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.274754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.282943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.293830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.302443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.310600][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.317629][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.328170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.336339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.357811][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 22.364920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.373583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.382156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.390343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.398371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.406647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.415980][ T285] device veth1_macvtap entered promiscuous mode [ 22.428980][ T284] device veth0_vlan entered promiscuous mode [ 22.437457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.442517][ T334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.445247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.469241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.478142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.487795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.496586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.504694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.518701][ T283] device veth0_vlan entered promiscuous mode [ 22.528633][ T282] device veth0_vlan entered promiscuous mode [ 22.547922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.556550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.564631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.573110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.581609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.589460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.597587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.605624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.613741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.622823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.631872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.640779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.650457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.659112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.006697][ T340] loop3: detected capacity change from 0 to 256 [ 23.046629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.055399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.064013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.072672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.153425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.166796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.693793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.703340][ T343] loop2: detected capacity change from 0 to 4096 [ 23.709956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.718297][ T284] device veth1_macvtap entered promiscuous mode [ 23.726412][ T283] device veth1_macvtap entered promiscuous mode [ 23.802095][ T343] EXT4-fs (loop2): Test dummy encryption mode enabled [ 23.812585][ T282] device veth1_macvtap entered promiscuous mode [ 23.821039][ T343] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 23.847285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.855602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.864099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.872498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.884321][ T343] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 23.898978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.908317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.917369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.926690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.935962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.103813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.116302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.124811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.133079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.413181][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 24.413225][ T30] audit: type=1400 audit(1758713260.846:125): avc: denied { unlink } for pid=361 comm="syz.1.2" name="#1" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 24.530894][ T30] audit: type=1400 audit(1758713261.006:126): avc: denied { write } for pid=370 comm="syz.2.10" laddr=fe80::3085:80ff:fe37:3687 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.649742][ T344] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.889689][ T344] usb 5-1: Using ep0 maxpacket: 16 [ 25.009784][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.020851][ T344] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 25.029931][ T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.094828][ T344] usb 5-1: config 0 descriptor?? [ 25.242058][ T382] syz.1.13[382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.242382][ T382] syz.1.13[382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.277425][ T382] loop1: detected capacity change from 0 to 128 [ 25.295675][ T30] audit: type=1400 audit(1758713261.696:127): avc: denied { create } for pid=379 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.347535][ T30] audit: type=1400 audit(1758713261.696:128): avc: denied { write } for pid=379 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.369114][ T30] audit: type=1400 audit(1758713261.696:129): avc: denied { read } for pid=379 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.517959][ T30] audit: type=1400 audit(1758713261.866:130): avc: denied { mount } for pid=379 comm="syz.1.13" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 25.738987][ T30] audit: type=1400 audit(1758713262.206:131): avc: denied { create } for pid=384 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.161782][ T387] loop2: detected capacity change from 0 to 256 [ 26.187947][ T344] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.4-1/input0 [ 26.272398][ T30] audit: type=1400 audit(1758713262.646:132): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.383415][ T344] usb 5-1: USB disconnect, device number 2 [ 26.412251][ T391] fido_id[391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 26.484186][ T393] loop1: detected capacity change from 0 to 256 [ 26.913267][ T30] audit: type=1400 audit(1758713263.386:133): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.945809][ T30] audit: type=1400 audit(1758713264.416:134): avc: denied { write } for pid=399 comm="syz.3.18" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.869342][ T410] syz.0.17[410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.869415][ T410] syz.0.17[410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.883030][ T410] loop0: detected capacity change from 0 to 128 [ 29.360524][ T417] loop1: detected capacity change from 0 to 256 [ 30.394146][ T431] loop2: detected capacity change from 0 to 256 [ 30.644622][ T432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 31.246165][ T432] syz.3.24 (432) used greatest stack depth: 20696 bytes left [ 32.363554][ T438] loop1: detected capacity change from 0 to 256 [ 32.469638][ C1] sched: RT throttling activated [ 32.493592][ T30] audit: type=1400 audit(1758713268.966:135): avc: denied { create } for pid=439 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.880604][ T440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28'. [ 33.025434][ T30] audit: type=1400 audit(1758713269.026:136): avc: denied { setopt } for pid=439 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.361003][ T419] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.387610][ T30] audit: type=1400 audit(1758713269.036:137): avc: denied { ioctl } for pid=439 comm="syz.2.28" path="socket:[15979]" dev="sockfs" ino=15979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.412278][ T30] audit: type=1400 audit(1758713269.356:138): avc: denied { write } for pid=439 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.506690][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 33.514905][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.523745][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.532065][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.540364][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.548646][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.558085][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.566405][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.669677][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.710277][ T420] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.719989][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.049829][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.060800][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.070761][ T26] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 34.079859][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.088286][ T26] usb 2-1: config 0 descriptor?? [ 34.093404][ T420] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 34.104276][ T420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.115293][ T42] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 34.124372][ T420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.134131][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.142677][ T420] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 34.190085][ T42] ums-cypress 1-1:1.0: USB Mass Storage device detected [ 34.229763][ T420] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 34.238824][ T420] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 34.249489][ T420] usb 3-1: Manufacturer: syz [ 34.254625][ T420] usb 3-1: config 0 descriptor?? [ 34.393536][ T60] usb 1-1: USB disconnect, device number 2 [ 34.490780][ T450] UDC core: couldn't find an available UDC or it's busy: -16 [ 34.498198][ T450] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.730442][ T420] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 34.737648][ T420] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 34.746357][ T420] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 34.799737][ T26] usb 2-1: language id specifier not provided by device, defaulting to English [ 34.937390][ T450] UDC core: couldn't find an available UDC or it's busy: -16 [ 34.944883][ T450] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 35.058500][ T30] audit: type=1400 audit(1758713271.526:139): avc: denied { create } for pid=449 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.078500][ T30] audit: type=1400 audit(1758713271.546:140): avc: denied { connect } for pid=449 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.098464][ T30] audit: type=1400 audit(1758713271.566:141): avc: denied { append } for pid=449 comm="syz.2.30" name="hiddev0" dev="devtmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.190193][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.230971][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input7 [ 35.243307][ T30] audit: type=1400 audit(1758713271.716:142): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=591 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.265714][ T30] audit: type=1400 audit(1758713271.716:143): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=591 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.266455][ T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input8 [ 35.301388][ T26] uclogic 0003:256C:006D.0002: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 35.319850][ T30] audit: type=1400 audit(1758713271.796:144): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=591 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.419692][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 35.425946][ T448] Bluetooth: hci0: sending frame failed (-49) [ 35.461230][ T394] usb 2-1: USB disconnect, device number 2 [ 35.559682][ T474] loop4: detected capacity change from 0 to 256 [ 35.576429][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.728468][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.740322][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 35.751436][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.771309][ T60] usb 1-1: config 0 descriptor?? [ 36.349686][ T26] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 36.469708][ T60] usb 1-1: language id specifier not provided by device, defaulting to English [ 36.494147][ T490] loop4: detected capacity change from 0 to 4096 [ 36.560488][ T490] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.569364][ T490] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 36.869676][ T20] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 36.883855][ T495] loop1: detected capacity change from 0 to 256 [ 36.920762][ T495] ======================================================= [ 36.920762][ T495] WARNING: The mand mount option has been deprecated and [ 36.920762][ T495] and is ignored by this kernel. Remove the mand [ 36.920762][ T495] option from the mount to silence this warning. [ 36.920762][ T495] ======================================================= [ 36.974539][ T495] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 36.989834][ T60] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 36.998903][ T60] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 37.007059][ T60] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 37.023764][ T60] usb 1-1: USB disconnect, device number 3 [ 37.229718][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 37.240826][ T20] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 37.250064][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.263073][ T20] usb 5-1: config 0 descriptor?? [ 37.269981][ T289] usb 3-1: USB disconnect, device number 2 [ 37.279716][ T490] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 37.509703][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 37.516879][ T448] Bluetooth: hci0: sending frame failed (-49) [ 37.542839][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 37.542852][ T30] audit: type=1400 audit(1758713274.016:191): avc: denied { read } for pid=501 comm="syz.2.45" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.543509][ T506] binder: 501:506 ioctl c0306201 0 returned -14 [ 37.550146][ T30] audit: type=1400 audit(1758713274.016:192): avc: denied { open } for pid=501 comm="syz.2.45" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.601044][ T30] audit: type=1400 audit(1758713274.016:193): avc: denied { ioctl } for pid=501 comm="syz.2.45" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.659701][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 37.665670][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 37.683368][ T20] usb 5-1: USB disconnect, device number 3 [ 37.730533][ T30] audit: type=1400 audit(1758713274.206:194): avc: denied { ioctl } for pid=504 comm="syz.0.46" path="socket:[16108]" dev="sockfs" ino=16108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.780245][ T508] loop0: detected capacity change from 0 to 1024 [ 37.828931][ T508] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 37.920134][ T508] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.46: bad orphan inode 11 [ 37.949437][ T508] EXT4-fs (loop0): Remounting filesystem read-only [ 37.958206][ T508] ext4_test_bit(bit=10, block=4) = 1 [ 37.963696][ T508] is_bad_inode(inode)=0 [ 37.967872][ T508] NEXT_ORPHAN(inode)=3254779904 [ 37.972897][ T508] max_ino=32 [ 37.976114][ T508] i_nlink=0 [ 37.980157][ T508] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 2: comm syz.0.46: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.994089][ T508] EXT4-fs (loop0): Remounting filesystem read-only [ 38.000773][ T508] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 38.008876][ T508] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 48: comm syz.0.46: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.023295][ T508] EXT4-fs (loop0): Remounting filesystem read-only [ 38.029960][ T508] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 38.038741][ T508] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.46: Failed to acquire dquot type 0 [ 38.050300][ T30] audit: type=1400 audit(1758713274.506:195): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.073016][ T508] EXT4-fs (loop0): Remounting filesystem read-only [ 38.079585][ T508] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 38.089308][ T508] EXT4-fs (loop0): Remounting filesystem read-only [ 38.096025][ T508] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #11: comm syz.0.46: mark_inode_dirty error [ 38.107486][ T508] EXT4-fs (loop0): Remounting filesystem read-only [ 38.120791][ T508] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 38.132550][ T508] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,errors=remount-ro,inlinecrypt,. Quota mode: none. [ 38.169711][ T60] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.409708][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 38.419689][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.529777][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.540804][ T60] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 38.550130][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.571537][ T60] usb 2-1: config 0 descriptor?? [ 38.816140][ T419] Bluetooth: hci1: Frame reassembly failed (-84) [ 38.943616][ T283] EXT4-fs error (device loop0): __ext4_get_inode_loc:4352: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 38.956871][ T283] EXT4-fs (loop0): Remounting filesystem read-only [ 38.963578][ T283] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 38.973200][ T283] EXT4-fs (loop0): Remounting filesystem read-only [ 38.979821][ T283] EXT4-fs error (device loop0): ext4_quota_off:6506: inode #3: comm syz-executor: mark_inode_dirty error [ 38.991487][ T283] EXT4-fs (loop0): Remounting filesystem read-only [ 39.009761][ T20] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 39.018999][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.072255][ T20] ums-cypress 5-1:1.0: USB Mass Storage device detected [ 39.325488][ T20] usb 5-1: USB disconnect, device number 4 [ 39.341136][ T60] wacom 0003:056A:003F.0005: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.1-1/input0 [ 39.545235][ T26] usb 2-1: USB disconnect, device number 3 [ 39.579761][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 39.896360][ T30] audit: type=1400 audit(1758713276.366:196): avc: denied { ioctl } for pid=527 comm="syz.4.52" path="socket:[16541]" dev="sockfs" ino=16541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.038945][ T532] loop0: detected capacity change from 0 to 256 [ 40.827364][ T546] loop0: detected capacity change from 0 to 128 [ 40.859767][ T420] Bluetooth: hci1: command 0x1003 tx timeout [ 40.866253][ T519] Bluetooth: hci1: sending frame failed (-49) [ 40.874976][ T546] EXT4-fs (loop0): Test dummy encryption mode enabled [ 40.886011][ T546] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 40.901639][ T546] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.916626][ T544] loop4: detected capacity change from 0 to 40427 [ 40.923557][ T30] audit: type=1400 audit(1758713277.396:197): avc: denied { create } for pid=545 comm="syz.0.57" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.924593][ T546] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 40.953466][ T30] audit: type=1400 audit(1758713277.426:198): avc: denied { read write open } for pid=545 comm="syz.0.57" path="/8/mnt/bus" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.984000][ T544] F2FS-fs (loop4): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 41.620876][ T45] Bluetooth: hci2: Frame reassembly failed (-84) [ 41.847976][ T556] loop1: detected capacity change from 0 to 40427 [ 41.980187][ T556] F2FS-fs (loop1): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 42.069754][ T420] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.429735][ T420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.440760][ T420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.450590][ T420] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 42.459620][ T420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.468314][ T420] usb 5-1: config 0 descriptor?? [ 42.949705][ T289] Bluetooth: hci1: command 0x1001 tx timeout [ 42.955814][ T554] Bluetooth: hci1: sending frame failed (-49) [ 43.049700][ T420] usbhid 5-1:0.0: can't add hid device: -71 [ 43.055773][ T420] usbhid: probe of 5-1:0.0 failed with error -71 [ 43.064402][ T420] usb 5-1: USB disconnect, device number 5 [ 43.683654][ T575] loop1: detected capacity change from 0 to 256 [ 44.734720][ T577] loop4: detected capacity change from 0 to 256 [ 44.842130][ T578] loop3: detected capacity change from 0 to 256 [ 45.566055][ T358] Bluetooth: hci1: command 0x1009 tx timeout [ 45.660514][ T289] Bluetooth: hci2: command 0x1003 tx timeout [ 46.249809][ T47] Bluetooth: hci2: sending frame failed (-49) [ 46.380375][ T583] loop1: detected capacity change from 0 to 256 [ 47.295426][ T592] loop4: detected capacity change from 0 to 1024 [ 47.361458][ T579] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 47.364052][ T592] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 47.386889][ T592] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.68: bad orphan inode 11 [ 47.397602][ T592] EXT4-fs (loop4): Remounting filesystem read-only [ 47.404804][ T592] ext4_test_bit(bit=10, block=4) = 1 [ 47.410602][ T592] is_bad_inode(inode)=0 [ 47.414786][ T592] NEXT_ORPHAN(inode)=3254779904 [ 47.420267][ T592] max_ino=32 [ 47.423696][ T592] i_nlink=0 [ 47.430330][ T592] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.68: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.444810][ T592] EXT4-fs (loop4): Remounting filesystem read-only [ 47.451924][ T592] __quota_error: 9 callbacks suppressed [ 47.451943][ T592] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 47.474293][ T598] loop1: detected capacity change from 0 to 128 [ 47.607923][ T592] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.68: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.701313][ T592] EXT4-fs (loop4): Remounting filesystem read-only [ 47.731894][ T592] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 47.772845][ T592] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.68: Failed to acquire dquot type 0 [ 47.825300][ T592] EXT4-fs (loop4): Remounting filesystem read-only [ 47.855663][ T592] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 47.900289][ T592] EXT4-fs (loop4): Remounting filesystem read-only [ 47.930845][ T592] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.68: mark_inode_dirty error [ 47.980162][ T592] EXT4-fs (loop4): Remounting filesystem read-only [ 48.009574][ T592] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 48.054946][ T592] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,errors=remount-ro,inlinecrypt,. Quota mode: none. [ 48.300161][ T344] Bluetooth: hci2: command 0x1001 tx timeout [ 48.308235][ T47] Bluetooth: hci2: sending frame failed (-49) [ 48.469734][ T579] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 48.478941][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.540027][ T579] ums-cypress 4-1:1.0: USB Mass Storage device detected [ 48.579989][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 48.658134][ T284] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 48.671397][ T284] EXT4-fs (loop4): Remounting filesystem read-only [ 48.677902][ T284] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 48.687557][ T284] EXT4-fs (loop4): Remounting filesystem read-only [ 48.694269][ T284] EXT4-fs error (device loop4): ext4_quota_off:6506: inode #3: comm syz-executor: mark_inode_dirty error [ 48.705887][ T284] EXT4-fs (loop4): Remounting filesystem read-only [ 48.742932][ T358] usb 4-1: USB disconnect, device number 2 [ 48.819678][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 48.939714][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.950821][ T6] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 48.960042][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.971402][ T6] usb 2-1: config 0 descriptor?? [ 49.359537][ T613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 49.511975][ T6] wacom 0003:056A:003F.0006: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.1-1/input0 [ 49.655041][ T617] xt_bpf: check failed: parse error [ 49.719722][ T6] usb 2-1: USB disconnect, device number 4 [ 50.117980][ T30] audit: type=1400 audit(1758713286.566:208): avc: denied { unlink } for pid=620 comm="syz.4.76" name="#3" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.332836][ T631] loop3: detected capacity change from 0 to 4096 [ 50.360887][ T631] EXT4-fs (loop3): Test dummy encryption mode enabled [ 50.379916][ T289] Bluetooth: hci2: command 0x1009 tx timeout [ 50.496305][ T631] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 51.049745][ T289] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 51.431334][ T30] audit: type=1400 audit(1758713287.906:209): avc: denied { getopt } for pid=649 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.480726][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.491711][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.501730][ T289] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.511001][ T289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.519945][ T289] usb 5-1: config 0 descriptor?? [ 51.812819][ T30] audit: type=1400 audit(1758713288.096:210): avc: denied { create } for pid=649 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.119712][ T289] usbhid 5-1:0.0: can't add hid device: -71 [ 52.125800][ T289] usbhid: probe of 5-1:0.0 failed with error -71 [ 52.142699][ T289] usb 5-1: USB disconnect, device number 6 [ 52.221022][ T663] loop1: detected capacity change from 0 to 40427 [ 52.242239][ T663] F2FS-fs (loop1): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 52.704615][ T669] loop3: detected capacity change from 0 to 40427 [ 52.884241][ T669] F2FS-fs (loop3): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 53.779682][ T579] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 54.292935][ T691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 54.299690][ T579] usb 4-1: Using ep0 maxpacket: 16 [ 54.419706][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.430650][ T579] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 54.439728][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.448362][ T579] usb 4-1: config 0 descriptor?? [ 55.203590][ T579] wacom 0003:056A:003F.0007: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.3-1/input0 [ 55.223836][ T30] audit: type=1400 audit(1758713291.696:211): avc: denied { setattr } for pid=703 comm="syz.0.99" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.381757][ T709] loop0: detected capacity change from 0 to 128 [ 55.413239][ T30] audit: type=1400 audit(1758713291.846:212): avc: denied { create } for pid=706 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.527351][ T579] usb 4-1: USB disconnect, device number 3 [ 55.649404][ T709] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.660606][ T709] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.182306][ T30] audit: type=1400 audit(1758713291.846:213): avc: denied { bind } for pid=706 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.780058][ T30] audit: type=1400 audit(1758713291.846:214): avc: denied { listen } for pid=706 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.800163][ T30] audit: type=1400 audit(1758713291.846:215): avc: denied { create } for pid=706 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.838226][ T30] audit: type=1400 audit(1758713291.846:216): avc: denied { setopt } for pid=706 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.858824][ T30] audit: type=1400 audit(1758713291.846:217): avc: denied { create } for pid=706 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.654974][ T30] audit: type=1400 audit(1758713293.676:218): avc: denied { read } for pid=725 comm="syz.3.106" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.694498][ T30] audit: type=1400 audit(1758713293.676:219): avc: denied { open } for pid=725 comm="syz.3.106" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.766672][ T420] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 58.804271][ T745] loop4: detected capacity change from 0 to 128 [ 58.859517][ T745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.880692][ T750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 58.901696][ T745] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.019729][ T420] usb 4-1: Using ep0 maxpacket: 8 [ 59.116212][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 59.129961][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.162699][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 59.194763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.219480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.244313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.268979][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.293555][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.349714][ T420] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 59.364880][ T420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.389200][ T420] usb 4-1: Product: syz [ 59.401634][ T420] usb 4-1: Manufacturer: syz [ 59.415194][ T420] usb 4-1: SerialNumber: syz [ 59.430261][ T420] usb 4-1: config 0 descriptor?? [ 59.677781][ T754] loop0: detected capacity change from 0 to 128 [ 59.698424][ T579] usb 4-1: USB disconnect, device number 4 [ 59.740168][ T754] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.750826][ T754] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.867717][ T752] loop1: detected capacity change from 0 to 40427 [ 59.922023][ T752] F2FS-fs (loop1): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 60.287443][ T767] loop2: detected capacity change from 0 to 256 [ 60.311443][ T767] exfat: Deprecated parameter 'namecase' [ 60.320190][ T767] exfat: Deprecated parameter 'utf8' [ 61.045192][ T767] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 61.924314][ T786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 62.500243][ T796] loop4: detected capacity change from 0 to 128 [ 62.543599][ T796] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.554302][ T796] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.195609][ T579] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.230565][ T802] 9pnet: Insufficient options for proto=fd [ 63.610687][ T808] loop2: detected capacity change from 0 to 128 [ 63.647769][ T808] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.658395][ T808] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.849849][ T579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.879519][ T579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.911259][ T579] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 63.942614][ T579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.088710][ T820] loop4: detected capacity change from 0 to 256 [ 64.498237][ T579] usb 1-1: config 0 descriptor?? [ 64.621754][ T814] loop1: detected capacity change from 0 to 40427 [ 64.632681][ T806] loop3: detected capacity change from 0 to 40427 [ 64.648728][ T814] F2FS-fs (loop1): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 64.701735][ T806] F2FS-fs (loop3): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 65.756734][ T838] overlayfs: failed to resolve './file1': -2 [ 66.019172][ T579] usb 1-1: language id specifier not provided by device, defaulting to English [ 66.168405][ T844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 66.185028][ T394] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 66.429736][ T579] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 66.438694][ T579] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 66.446364][ T579] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 67.357800][ T852] loop3: detected capacity change from 0 to 128 [ 67.392254][ T30] audit: type=1400 audit(1758713303.866:220): avc: denied { compute_member } for pid=855 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.814896][ T860] loop4: detected capacity change from 0 to 256 [ 67.822617][ T852] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.833216][ T852] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.669267][ T864] loop0: detected capacity change from 0 to 256 [ 69.112309][ T871] loop2: detected capacity change from 0 to 128 [ 69.143917][ T579] usb 1-1: USB disconnect, device number 4 [ 69.170545][ T871] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.181254][ T871] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.890606][ T877] loop4: detected capacity change from 0 to 128 [ 70.224254][ T877] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.235369][ T877] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.344808][ T394] usb 2-1: unable to read config index 0 descriptor/all [ 70.363804][ T394] usb 2-1: can't read configurations, error -71 [ 70.399267][ T880] loop3: detected capacity change from 0 to 40427 [ 71.555197][ T880] F2FS-fs (loop3): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 71.689685][ T579] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 71.947037][ T905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 73.617662][ T579] usb 1-1: device not accepting address 5, error -71 [ 73.795948][ T931] loop4: detected capacity change from 0 to 128 [ 74.521694][ T933] loop1: detected capacity change from 0 to 128 [ 74.931284][ T934] syz.0.161[934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.931625][ T934] syz.0.161[934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.986183][ T934] loop0: detected capacity change from 0 to 128 [ 76.388111][ T931] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.398812][ T931] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.988301][ T943] loop1: detected capacity change from 0 to 40427 [ 77.021835][ T943] F2FS-fs (loop1): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 77.096871][ T947] loop3: detected capacity change from 0 to 40427 [ 77.105789][ T947] F2FS-fs (loop3): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 77.306052][ T579] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.929764][ T579] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 77.945778][ T579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.971104][ T579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.992217][ T579] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 78.095944][ T966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 78.179863][ T579] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 78.189130][ T579] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 78.197305][ T579] usb 1-1: Manufacturer: syz [ 78.206654][ T579] usb 1-1: config 0 descriptor?? [ 78.231773][ T971] fuse: Bad value for 'fd' [ 78.464005][ T944] UDC core: couldn't find an available UDC or it's busy: -16 [ 78.483817][ T944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.770738][ T579] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 78.778137][ T579] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 78.788132][ T579] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 78.872223][ T978] loop1: detected capacity change from 0 to 256 [ 78.903207][ T978] exfat: Deprecated parameter 'namecase' [ 78.917113][ T978] exfat: Deprecated parameter 'utf8' [ 78.949472][ T980] loop4: detected capacity change from 0 to 128 [ 78.958750][ T978] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 79.000198][ T944] UDC core: couldn't find an available UDC or it's busy: -16 [ 79.031237][ T944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.338299][ T990] loop2: detected capacity change from 0 to 128 [ 80.035818][ T995] netlink: 192 bytes leftover after parsing attributes in process `syz.4.174'. [ 80.036328][ T995] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.106518][ T990] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.117193][ T990] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.243067][ T999] syz.3.178[999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.243270][ T999] syz.3.178[999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.260155][ T999] loop3: detected capacity change from 0 to 128 [ 83.318443][ T10] attempt to access beyond end of device [ 83.318443][ T10] loop4: rw=1048577, want=1041, limit=128 [ 83.371388][ T938] usb 1-1: USB disconnect, device number 6 [ 84.253879][ T1011] device wg2 entered promiscuous mode [ 84.477397][ T1018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 85.021144][ T1022] loop4: detected capacity change from 0 to 256 [ 85.410973][ T1032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 87.798218][ T1055] loop3: detected capacity change from 0 to 4096 [ 87.821221][ T1055] EXT4-fs (loop3): Test dummy encryption mode enabled [ 87.833502][ T1056] loop4: detected capacity change from 0 to 128 [ 87.906689][ T1055] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 87.937531][ T1056] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.948195][ T1056] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.419687][ T20] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 88.491549][ T1067] loop0: detected capacity change from 0 to 256 [ 88.585928][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 88.751891][ T1078] loop1: detected capacity change from 0 to 256 [ 88.829748][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 88.840877][ T20] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 88.850259][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.866744][ T20] usb 4-1: config 0 descriptor?? [ 88.889720][ T1055] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.961703][ T30] audit: type=1400 audit(1758713325.436:221): avc: denied { mounton } for pid=1077 comm="syz.1.202" path="/45/file1/file0" dev="loop1" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 89.019676][ T6] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.027661][ T282] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 89.035361][ T282] FAT-fs (loop1): Filesystem has been set read-only [ 89.042441][ T282] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 89.186562][ T30] audit: type=1400 audit(1758713325.656:222): avc: denied { mounton } for pid=1085 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 89.221014][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.228085][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.235603][ T1085] device bridge_slave_0 entered promiscuous mode [ 89.242509][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.249541][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.257141][ T1085] device bridge_slave_1 entered promiscuous mode [ 89.316389][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.323570][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.330862][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.337882][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.365290][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.373404][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.381035][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.392132][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.400321][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 89.400379][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.411214][ T6] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 89.418213][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.436949][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.446605][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.453685][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.464665][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.474333][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.575638][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.627170][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 89.628108][ T1085] device veth0_vlan entered promiscuous mode [ 89.633304][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 89.646760][ T20] usb 4-1: USB disconnect, device number 5 [ 89.652641][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.653134][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.667415][ T6] usb 3-1: config 0 descriptor?? [ 89.670360][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.681111][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.689776][ T1080] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 89.696897][ T1085] device veth1_macvtap entered promiscuous mode [ 89.720880][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.733070][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.741903][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.758270][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.769771][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.863712][ T419] device bridge_slave_1 left promiscuous mode [ 89.870383][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.879410][ T419] device bridge_slave_0 left promiscuous mode [ 89.887285][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.938934][ T1105] loop5: detected capacity change from 0 to 128 [ 89.952521][ T419] device veth1_macvtap left promiscuous mode [ 89.968491][ T419] device veth0_vlan left promiscuous mode [ 90.068676][ T1105] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.079689][ T1105] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.165533][ T6] hid-generic 0003:04F3:0755.000A: item fetching failed at offset 3/5 [ 90.176093][ T6] hid-generic: probe of 0003:04F3:0755.000A failed with error -22 [ 90.703662][ T344] usb 3-1: USB disconnect, device number 3 [ 90.720337][ T1112] loop3: detected capacity change from 0 to 128 [ 90.814259][ T1112] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.825290][ T1112] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.062289][ T1117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.210'. [ 91.994803][ T1137] loop4: detected capacity change from 0 to 128 [ 92.039834][ T1137] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.060315][ T1137] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.070710][ T344] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.450011][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.516702][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.617446][ T344] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.656174][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.683847][ T344] usb 1-1: config 0 descriptor?? [ 93.729710][ T344] usb 1-1: language id specifier not provided by device, defaulting to English [ 93.939669][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.259910][ T344] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 94.310271][ T344] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 94.371377][ T344] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 94.380028][ T344] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 94.387927][ T344] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 94.402983][ T344] usb 1-1: USB disconnect, device number 7 [ 94.494218][ T1166] overlayfs: failed to resolve './file1': -2 [ 94.709737][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.720679][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.750981][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.760253][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.775653][ T6] usb 3-1: config 0 descriptor?? [ 95.273041][ T1183] xt_bpf: check failed: parse error [ 95.769906][ T6] usb 3-1: language id specifier not provided by device, defaulting to English [ 96.949545][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input18 [ 96.967022][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input19 [ 96.982137][ T6] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 97.014058][ T6] usb 3-1: USB disconnect, device number 4 [ 97.060263][ T1206] fido_id[1206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 97.097475][ T1209] loop0: detected capacity change from 0 to 128 [ 97.274615][ T1209] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.285669][ T1209] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.770001][ T1215] loop5: detected capacity change from 0 to 128 [ 97.930197][ T1215] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.940932][ T1215] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.371814][ T1231] xt_bpf: check failed: parse error [ 98.429694][ T344] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.679665][ T344] usb 1-1: Using ep0 maxpacket: 16 [ 98.799737][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.830064][ T344] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 98.839121][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.877747][ T344] usb 1-1: config 0 descriptor?? [ 99.159787][ T1241] device wg2 entered promiscuous mode [ 99.430747][ T344] wacom 0003:056A:003F.000D: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.0-1/input0 [ 99.484292][ T420] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 100.216548][ T809] usb 1-1: USB disconnect, device number 8 [ 100.265412][ T1262] fuse: Bad value for 'fd' [ 100.369741][ T420] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 100.381270][ T420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.468304][ T420] ums-cypress 6-1:1.0: USB Mass Storage device detected [ 100.800489][ T420] usb 6-1: USB disconnect, device number 2 [ 100.967828][ T1278] loop0: detected capacity change from 0 to 128 [ 101.069945][ T1278] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.097223][ T1278] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.182507][ T1284] xt_bpf: check failed: parse error [ 102.870666][ T1307] loop3: detected capacity change from 0 to 40427 [ 102.892545][ T1309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 102.922664][ T1307] F2FS-fs (loop3): Unrecognized mount option "backgrouhd_gc=sync" or missing value [ 103.032061][ T1313] syz.5.265[1313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.032411][ T1313] syz.5.265[1313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.068672][ T1313] loop5: detected capacity change from 0 to 128 [ 104.179367][ T1320] fuse: Bad value for 'fd' [ 104.449671][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 104.670815][ T30] audit: type=1400 audit(1758713341.146:223): avc: denied { bind } for pid=1331 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.715391][ T30] audit: type=1400 audit(1758713341.186:224): avc: denied { bind } for pid=1336 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.809753][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.820934][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.835975][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.855552][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.860657][ T30] audit: type=1400 audit(1758713341.326:225): avc: denied { connect } for pid=1349 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.923366][ T30] audit: type=1400 audit(1758713341.396:226): avc: denied { write } for pid=1349 comm="syz.0.280" path="socket:[19115]" dev="sockfs" ino=19115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.950662][ T30] audit: type=1400 audit(1758713341.396:227): avc: denied { accept } for pid=1349 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.970458][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.979506][ T6] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.980332][ T30] audit: type=1400 audit(1758713341.396:228): avc: denied { read } for pid=1349 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.998394][ T6] usb 6-1: Manufacturer: syz [ 105.054039][ T6] usb 6-1: config 0 descriptor?? [ 105.060067][ T30] audit: type=1400 audit(1758713341.396:229): avc: denied { map } for pid=1349 comm="syz.0.280" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=19512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 105.090657][ T30] audit: type=1400 audit(1758713341.486:230): avc: denied { name_bind } for pid=1358 comm="syz.4.284" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 105.123020][ T30] audit: type=1400 audit(1758713341.486:231): avc: denied { node_bind } for pid=1358 comm="syz.4.284" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 105.181303][ T30] audit: type=1400 audit(1758713341.496:232): avc: denied { write } for pid=1362 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.282270][ T1420] netlink: 104 bytes leftover after parsing attributes in process `syz.4.313'. [ 105.313156][ T1315] UDC core: couldn't find an available UDC or it's busy: -16 [ 105.328494][ T1315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.580673][ T6] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 105.588313][ T6] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 105.606252][ T6] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 105.699090][ T1503] netlink: 220 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.751998][ T1526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 105.810714][ T1315] UDC core: couldn't find an available UDC or it's busy: -16 [ 105.824797][ T1315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.052054][ T1585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=1585 comm=syz.4.386 [ 106.479275][ T1666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 106.582056][ T1688] ================================================================== [ 106.590155][ T1688] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 106.599369][ T1688] Read of size 1 at addr ffff88810d122bf8 by task syz.0.435/1688 [ 106.607087][ T1688] [ 106.609425][ T1688] CPU: 0 PID: 1688 Comm: syz.0.435 Not tainted syzkaller #0 [ 106.616714][ T1688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.626778][ T1688] Call Trace: [ 106.630051][ T1688] [ 106.632988][ T1688] __dump_stack+0x21/0x30 [ 106.637322][ T1688] dump_stack_lvl+0xee/0x150 [ 106.641918][ T1688] ? show_regs_print_info+0x20/0x20 [ 106.647120][ T1688] ? load_image+0x3a0/0x3a0 [ 106.651619][ T1688] ? unwind_get_return_address+0x4d/0x90 [ 106.657243][ T1688] print_address_description+0x7f/0x2c0 [ 106.662777][ T1688] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 106.669266][ T1688] kasan_report+0xf1/0x140 [ 106.673666][ T1688] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 106.680154][ T1688] __asan_report_load1_noabort+0x14/0x20 [ 106.685778][ T1688] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 106.692092][ T1688] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 106.698226][ T1688] ? xfrm_netlink_rcv+0x72/0x90 [ 106.703062][ T1688] ? netlink_unicast+0x876/0xa40 [ 106.707981][ T1688] ? netlink_sendmsg+0x86a/0xb70 [ 106.712900][ T1688] ? ____sys_sendmsg+0x5a2/0x8c0 [ 106.717822][ T1688] ? ___sys_sendmsg+0x1f0/0x260 [ 106.722660][ T1688] ? x64_sys_call+0x4b/0x9a0 [ 106.727240][ T1688] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.733293][ T1688] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 106.739436][ T1688] xfrm_policy_inexact_insert+0x70/0x1130 [ 106.745143][ T1688] ? __get_hash_thresh+0x10c/0x420 [ 106.750236][ T1688] ? policy_hash_bysel+0x110/0x4f0 [ 106.755332][ T1688] xfrm_policy_insert+0x126/0x9a0 [ 106.760343][ T1688] ? xfrm_policy_construct+0x54f/0x1f00 [ 106.765876][ T1688] xfrm_add_policy+0x4d1/0x830 [ 106.770636][ T1688] ? xfrm_dump_sa_done+0xc0/0xc0 [ 106.775561][ T1688] xfrm_user_rcv_msg+0x45c/0x6e0 [ 106.780483][ T1688] ? xfrm_netlink_rcv+0x90/0x90 [ 106.785327][ T1688] ? avc_has_perm_noaudit+0x460/0x460 [ 106.790681][ T1688] ? x64_sys_call+0x4b/0x9a0 [ 106.795255][ T1688] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 106.800613][ T1688] netlink_rcv_skb+0x1e0/0x430 [ 106.805364][ T1688] ? xfrm_netlink_rcv+0x90/0x90 [ 106.810200][ T1688] ? netlink_ack+0xb60/0xb60 [ 106.814774][ T1688] ? wait_for_completion_killable_timeout+0x10/0x10 [ 106.821349][ T1688] ? __netlink_lookup+0x387/0x3b0 [ 106.826356][ T1688] xfrm_netlink_rcv+0x72/0x90 [ 106.831022][ T1688] netlink_unicast+0x876/0xa40 [ 106.835770][ T1688] netlink_sendmsg+0x86a/0xb70 [ 106.840516][ T1688] ? netlink_getsockopt+0x530/0x530 [ 106.845698][ T1688] ? sock_alloc_file+0xba/0x260 [ 106.850543][ T1688] ? security_socket_sendmsg+0x82/0xa0 [ 106.855993][ T1688] ? netlink_getsockopt+0x530/0x530 [ 106.861174][ T1688] ____sys_sendmsg+0x5a2/0x8c0 [ 106.865930][ T1688] ? __sys_sendmsg_sock+0x40/0x40 [ 106.870938][ T1688] ? import_iovec+0x7c/0xb0 [ 106.875425][ T1688] ___sys_sendmsg+0x1f0/0x260 [ 106.880085][ T1688] ? __sys_sendmsg+0x250/0x250 [ 106.884840][ T1688] ? __fdget+0x1a1/0x230 [ 106.889068][ T1688] __x64_sys_sendmsg+0x1e2/0x2a0 [ 106.893990][ T1688] ? ___sys_sendmsg+0x260/0x260 [ 106.898825][ T1688] ? __kasan_check_write+0x14/0x20 [ 106.903927][ T1688] ? switch_fpu_return+0x15d/0x2c0 [ 106.909024][ T1688] x64_sys_call+0x4b/0x9a0 [ 106.913425][ T1688] do_syscall_64+0x4c/0xa0 [ 106.917827][ T1688] ? clear_bhb_loop+0x50/0xa0 [ 106.922495][ T1688] ? clear_bhb_loop+0x50/0xa0 [ 106.927157][ T1688] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.933044][ T1688] RIP: 0033:0x7efee7ae7ec9 [ 106.937444][ T1688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.957032][ T1688] RSP: 002b:00007efee6550038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.965434][ T1688] RAX: ffffffffffffffda RBX: 00007efee7d3efa0 RCX: 00007efee7ae7ec9 [ 106.973389][ T1688] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 106.981344][ T1688] RBP: 00007efee7b6af91 R08: 0000000000000000 R09: 0000000000000000 [ 106.989300][ T1688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.997252][ T1688] R13: 00007efee7d3f038 R14: 00007efee7d3efa0 R15: 00007ffeee69d5f8 [ 107.005209][ T1688] [ 107.008209][ T1688] [ 107.010514][ T1688] Allocated by task 1688: [ 107.014817][ T1688] __kasan_kmalloc+0xda/0x110 [ 107.019484][ T1688] __kmalloc+0x13d/0x2c0 [ 107.023709][ T1688] sk_prot_alloc+0xed/0x320 [ 107.028192][ T1688] sk_alloc+0x38/0x430 [ 107.032240][ T1688] pfkey_create+0x12a/0x660 [ 107.036724][ T1688] __sock_create+0x38d/0x7a0 [ 107.041294][ T1688] __sys_socket+0xec/0x190 [ 107.045689][ T1688] __x64_sys_socket+0x7a/0x90 [ 107.050347][ T1688] x64_sys_call+0x8c5/0x9a0 [ 107.054838][ T1688] do_syscall_64+0x4c/0xa0 [ 107.059235][ T1688] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.065112][ T1688] [ 107.067415][ T1688] The buggy address belongs to the object at ffff88810d122800 [ 107.067415][ T1688] which belongs to the cache kmalloc-1k of size 1024 [ 107.081447][ T1688] The buggy address is located 1016 bytes inside of [ 107.081447][ T1688] 1024-byte region [ffff88810d122800, ffff88810d122c00) [ 107.094877][ T1688] The buggy address belongs to the page: [ 107.100490][ T1688] page:ffffea0004344800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d120 [ 107.110711][ T1688] head:ffffea0004344800 order:3 compound_mapcount:0 compound_pincount:0 [ 107.119012][ T1688] flags: 0x4000000000010200(slab|head|zone=1) [ 107.125072][ T1688] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 107.133635][ T1688] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 107.142192][ T1688] page dumped because: kasan: bad access detected [ 107.148576][ T1688] page_owner tracks the page as allocated [ 107.154262][ T1688] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 282, ts 22272198148, free_ts 22012593996 [ 107.172652][ T1688] post_alloc_hook+0x192/0x1b0 [ 107.177414][ T1688] prep_new_page+0x1c/0x110 [ 107.181917][ T1688] get_page_from_freelist+0x2cc5/0x2d50 [ 107.187454][ T1688] __alloc_pages+0x18f/0x440 [ 107.192036][ T1688] new_slab+0xa1/0x4d0 [ 107.196092][ T1688] ___slab_alloc+0x381/0x810 [ 107.200662][ T1688] __slab_alloc+0x49/0x90 [ 107.204973][ T1688] __kmalloc_track_caller+0x169/0x2c0 [ 107.210327][ T1688] __alloc_skb+0x21a/0x740 [ 107.214725][ T1688] inet6_rt_notify+0x287/0x470 [ 107.219474][ T1688] fib6_add+0x2279/0x3d10 [ 107.223783][ T1688] ip6_route_add+0x89/0x130 [ 107.228395][ T1688] addrconf_permanent_addr+0x5e8/0x8c0 [ 107.233853][ T1688] addrconf_notify+0x752/0xde0 [ 107.238604][ T1688] raw_notifier_call_chain+0x90/0x100 [ 107.243966][ T1688] __dev_notify_flags+0x28f/0x500 [ 107.248979][ T1688] page last free stack trace: [ 107.253629][ T1688] free_unref_page_prepare+0x542/0x550 [ 107.259073][ T1688] free_unref_page+0xa2/0x550 [ 107.263733][ T1688] __free_pages+0x6c/0x100 [ 107.268129][ T1688] __free_slab+0xe8/0x1e0 [ 107.272439][ T1688] __unfreeze_partials+0x160/0x190 [ 107.277534][ T1688] put_cpu_partial+0xc6/0x120 [ 107.282194][ T1688] __slab_free+0x1d4/0x290 [ 107.286613][ T1688] ___cache_free+0x104/0x120 [ 107.291193][ T1688] qlink_free+0x4d/0x90 [ 107.295343][ T1688] qlist_free_all+0x5f/0xb0 [ 107.299828][ T1688] kasan_quarantine_reduce+0x14a/0x170 [ 107.305302][ T1688] __kasan_slab_alloc+0x2f/0xf0 [ 107.310140][ T1688] slab_post_alloc_hook+0x4f/0x2b0 [ 107.315321][ T1688] kmem_cache_alloc+0xf7/0x260 [ 107.320072][ T1688] __alloc_skb+0xe0/0x740 [ 107.324397][ T1688] mld_newpack+0x13a/0x9d0 [ 107.328797][ T1688] [ 107.331099][ T1688] Memory state around the buggy address: [ 107.336704][ T1688] ffff88810d122a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.344745][ T1688] ffff88810d122b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.352782][ T1688] >ffff88810d122b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 107.360828][ T1688] ^ [ 107.368794][ T1688] ffff88810d122c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.376838][ T1688] ffff88810d122c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.384908][ T1688] ================================================================== [ 107.392946][ T1688] Disabling lock debugging due to kernel taint [ 108.240018][ T6] usb 6-1: USB disconnect, device number 3