last executing test programs: 13m6.652285942s ago: executing program 2 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 13m4.584441172s ago: executing program 2 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r2, @ANYBLOB="00000000dfffffffb6080000000000807b171c87c1a4b32fe1d55af8ea00000000bfa20000000000000702000000d98c7b48248383a12a7af9000000bb0500009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4}, 0x50) 13m3.660493016s ago: executing program 2 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) gettid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x15, 0x800000000004, @thr={&(0x7f00000003c0)="fc233d7af8931a0131ec8bf0dd6980fa89b7a27952e7ab36e83222a862aacf1fb119fd68836f425a6053361311c61690827d10e84d0e20634968b0d9c504c969dfcbaa870da78ab30726282edf706ae5997d8893eab69e593359f42f03e2685a3ad71865636c0c4821e324a81687aac5b208dafa448e21be61c5fbfe3ab41599b9ba7b22da5a5a9728f4fbfe3f9527b3ac7961c8566326cb1c116b0cebeb53e160241cb5cc88ce87b0a2205b34cac5e7d4ae107a4e33fedc", &(0x7f00000001c0)="810daf8c59701ccb62bdc64070dce2e14d0d94d349b55491178f995fc074ee"}}, &(0x7f0000bbdffc)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 12m59.005171966s ago: executing program 2 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) userfaultfd(0x801) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 12m56.442896285s ago: executing program 2 (id=279): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x2, 0x0, 0x0) 12m52.206997091s ago: executing program 2 (id=286): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 12m36.086234797s ago: executing program 32 (id=286): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 6m37.742444605s ago: executing program 3 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000001000000000000000080000000200000", @ANYRES32, @ANYBLOB="fcffffff08966fbaccf64e59fac7000000010000a7c1785034bc3d37738eb12763f42c9db564c84648ce882ee28e5bb1ffb4a72d8053b36760a6c5df8bd50e52e52e1e325fe02b8fba29e2b4f38dcd6c597e45aeb43af06045a1e73cb570667771808d838884527754be60e1459f60fbc0f6a50d505e23874f788b284c7fe56dbdff1be67a0bf2d20e09cd6738cdc789b11ed5bb6e751d52e3860844d601e9bc852c5ee6826d7aea311ed1e81c8c7e8e1e4ded3ddc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0xfff2, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4050) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x100}) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m35.465191727s ago: executing program 3 (id=1960): syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_vm_enough_memory\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0x10d7, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4, 0x6, "cf908e4229cef19e929eca7cbee2023dbe49a17287dde768b5fa3ca767f6f13f9cda20f02b48d9d14be259c3b84f6dc8bbfb013c5d4dce55bc18ff7cbae8fba0960aa6b0a25dfc66ca37b699818f1cef29fe753ba9a0820af28fc3538606b004e5c950f1bbd6"}, {0xfffffffffffffd68}, {0xc}}}]}]}, 0xf8}}, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @mcast1, 0x7ffffd}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) 6m34.249413518s ago: executing program 3 (id=1965): mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ptrace$setregset(0x4205, r1, 0x201, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) 6m33.86336062s ago: executing program 3 (id=1967): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000340)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa168b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f602845855d659a54a1691465838152254431ccfb26174ecdd3f52167974d5a5b841afbe7d825b9", 0x6e}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 6m28.646493464s ago: executing program 3 (id=1975): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000340)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa168b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f602845855d659a54a1691465838152254431ccfb26174ecdd3f52167974d5a5b841afbe7d825b9", 0x6e}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x86a) 6m23.040742539s ago: executing program 3 (id=1986): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) 6m7.482162323s ago: executing program 33 (id=1986): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) 41.653194461s ago: executing program 4 (id=2646): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000340)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa168b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f602845855d659a54a1691465838152254431ccfb26174ecdd3f52167974d5a5b841afbe7", 0x6b}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x86a) 36.413332435s ago: executing program 4 (id=2655): syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') mount$tmpfs(0x0, &(0x7f0000000f00)='.\x00', &(0x7f0000000f40), 0x89, &(0x7f0000001040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 35.4701699s ago: executing program 4 (id=2659): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000340)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa168b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f602845855d659a54a1691465838152254431ccfb26174ecdd3f52167974d5a5b841afbe7d825", 0x6d}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x86a) 31.605328384s ago: executing program 4 (id=2662): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x45, 0x0, 0x1}, {0x1c, 0x0, 0x0, 0xffffffd}, {0x6, 0x0, 0x0, 0x2}]}) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000040)=0x100, 0x40000001) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0xa, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}]}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000340)={&(0x7f0000000400)="b44e1027bdb18b12bfb7733a8e233c8295c9472f2564ebb508fe10bb9c434ef3fb442e627a23dfc19d337c541f39b1a9ac1b6f660fecef27733ad7f83693040000008626f9b9effb1cbe666c7cfe4842491958b5b18d25992da17d36e302046c23c911b43235488570746e3b5890d32a90444067762562d7bcb05b02e10a407901bcecffbd6d9757f501b7d0197cb696e2b4bc16644ec7be5581f20dd7b118e57901eb77df47470eaa2f024ba9de76af1c7fe92343dd951b306fc40168d30a5e97d3387aa4f7b5943510ff5a32c8b4eb2f9930cce7827083d85501d69e46d460f2ee7e193c32", 0xe6}}, 0x80) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001d00)="9977", 0x2}], 0x1}}], 0x1, 0x4) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'filter\x00', 0x0, [0x3, 0x5, 0xc190, 0x146b, 0x18]}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x4e, 0x14322, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 28.321655125s ago: executing program 4 (id=2667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 24.393275084s ago: executing program 4 (id=2673): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$incfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000000040), 0x1000804, 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 20.388096766s ago: executing program 6 (id=2678): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000001380)=[{0x6, 0x26, 0x9, 0x7fff0000}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 16.120403794s ago: executing program 6 (id=2679): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(r0, 0xb, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 16.118944374s ago: executing program 1 (id=2681): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000340)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa168b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f602845855d659a54a1691465", 0x53}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x86a) 14.772514603s ago: executing program 6 (id=2684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 14.282161951s ago: executing program 0 (id=2685): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000001380)=[{0x6, 0x26, 0x9, 0x7fff0000}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2000000000280000180034801400350064766d727030000000000000000000001400350062726964676530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) mount$incfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000000040), 0x1000804, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0xff}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x80, 0x7, 0xffff}, {0x3, 0xfffffffd, 0xae8}, 0x0, 0x3500, 0x2, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@local}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12.630214577s ago: executing program 5 (id=2687): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000001380)=[{0x6, 0x26, 0x9, 0x7fff0000}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2000000000280000180034801400350064766d727030000000000000000000001400350062726964676530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) mount$incfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000000040), 0x1000804, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0xff}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x80, 0x7, 0xffff}, {0x3, 0xfffffffd, 0xae8}, 0x0, 0x3500, 0x2, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@local}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.385807624s ago: executing program 34 (id=2673): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$incfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000000040), 0x1000804, 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 6.953010977s ago: executing program 0 (id=2689): syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') mount$tmpfs(0x0, &(0x7f0000000f00)='.\x00', &(0x7f0000000f40), 0x89, &(0x7f0000001040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 6.952211647s ago: executing program 1 (id=2690): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = timerfd_create(0x0, 0x80800) timerfd_settime(r3, 0x3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff1e) prlimit64(0x0, 0x8, &(0x7f0000000280)={0xe7, 0x7}, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe19) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) creat(&(0x7f0000000280)='./bus\x00', 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_snmp6\x00') arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) 6.918103339s ago: executing program 0 (id=2691): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) flock(r0, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r4, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="2c001280110001006272696467655f736c6176650000cd1a14000580080022008554b58fe386a1", @ANYRES32=0x0], 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000300)={0x0, 0x0}) sched_setscheduler(r7, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) flock(r5, 0x2) 6.917358689s ago: executing program 5 (id=2692): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) close(r0) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r1, r2, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) rt_tgsigqueueinfo(r1, r2, 0xd, &(0x7f0000000100)={0xe, 0x905, 0x4}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000003c0)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsold}, {@nobarrier}]}, 0xfa, 0x48d, &(0x7f0000000e00)="$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") 6.774743947s ago: executing program 5 (id=2693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000001000000000000000080000000200000", @ANYRES32, @ANYBLOB="fcffffff08966fbaccf64e59fac7000000010000a7c1785034bc3d37738eb12763f42c9db564c84648ce882ee28e5bb1ffb4a72d8053b36760a6c5df8bd50e52e52e1e325fe02b8fba29e2b4f38dcd6c597e45aeb43af06045a1e73cb570667771808d838884527754be60e1459f60fbc0f6a50d505e23874f788b284c7fe56dbdff1be67a0bf2d20e09cd6738cdc789b11ed5bb6e751d52e3860844d601e9bc852c5ee6826d7aea311ed1e81c8c7e8e1e4ded3ddc", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0xfff2, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4050) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x100}) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.243024748s ago: executing program 1 (id=2694): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) read$FUSE(r1, &(0x7f0000001f40)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000000100)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0x0) 5.781433005s ago: executing program 5 (id=2695): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, 0x0, 0x0, 0x890) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getsig(0x4202, r4, 0x8, &(0x7f00000010c0)) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001240)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x168, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x800, 0x4, [0x22f, 0x7, 0x2f, 0x20, 0x1e, 0x1f, 0x35, 0x1a, 0xd, 0x35, 0x3a, 0x25, 0x2a, 0x22, 0x27, 0x27], 0x0, 0x0, 0xfffffffffffffff9}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffff00, 'batadv_slave_1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x2f, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) unshare(0x62000000) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040400) write$UHID_INPUT(r7, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 5.675068131s ago: executing program 0 (id=2696): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000340)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa168b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f602845855d659a54a1691465838152254431ccfb26174ecdd3f52167974d5a5b841afbe7d825b9", 0x6e}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(0x0, 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x86a) 5.674377451s ago: executing program 1 (id=2697): syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_vm_enough_memory\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0x10d7, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4, 0x6, "cf908e4229cef19e929eca7cbee2023dbe49a17287dde768b5fa3ca767f6f13f9cda20f02b48d9d14be259c3b84f6dc8bbfb013c5d4dce55bc18ff7cbae8fba0960aa6b0a25dfc66ca37b699818f1cef29fe753ba9a0820af28fc3538606b004e5c950f1bbd6"}, {0xfffffffffffffd68}, {0xc}}}]}]}, 0xf8}}, 0x0) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @mcast1, 0x7ffffd}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) 4.991258161s ago: executing program 6 (id=2698): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000340)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa168b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f602845855d659a54a1691465838152254431ccfb26174ecdd3f5", 0x61}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x86a) 4.684880948s ago: executing program 1 (id=2699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000001380)=[{0x6, 0x26, 0x9, 0x7fff0000}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2000000000280000180034801400350064766d727030000000000000000000001400350062726964676530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) mount$incfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000000040), 0x1000804, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0xff}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x80, 0x7, 0xffff}, {0x3, 0xfffffffd, 0xae8}, 0x0, 0x3500, 0x2, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@local}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.344812838s ago: executing program 0 (id=2700): syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') mount$tmpfs(0x0, &(0x7f0000000f00)='.\x00', &(0x7f0000000f40), 0x89, &(0x7f0000001040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 4.344126868s ago: executing program 5 (id=2701): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000001380)=[{0x6, 0x26, 0x9, 0x7fff0000}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2000000000280000180034801400350064766d727030000000000000000000001400350062726964676530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) mount$incfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000000040), 0x1000804, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 78.268196ms ago: executing program 6 (id=2702): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_adjtime(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) uname(&(0x7f0000000040)=""/33) umount2(&(0x7f00000000c0)='./file0\x00', 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x8100, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 77.593676ms ago: executing program 0 (id=2703): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000001380)=[{0x6, 0x26, 0x9, 0x7fff0000}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2000000000280000180034801400350064766d727030000000000000000000001400350062726964676530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) mount$incfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000000040), 0x1000804, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 13.13546ms ago: executing program 6 (id=2704): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000001380)=[{0x6, 0x26, 0x9, 0x7fff0000}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2000000000280000180034801400350064766d727030000000000000000000001400350062726964676530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) mount$incfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000000040), 0x1000804, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0xff}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x80, 0x7, 0xffff}, {0x3, 0xfffffffd, 0xae8}, 0x0, 0x3500, 0x2, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@local}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12.11597ms ago: executing program 1 (id=2705): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000340)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa168b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f602845855d659a54a1691465838152254431ccfb26174ecdd3f5", 0x61}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x86a) 0s ago: executing program 5 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="31000000bf3f9f8008000a00"], 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.227' (ED25519) to the list of known hosts. [ 22.178297][ T28] audit: type=1400 audit(1769809952.005:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.181632][ T275] cgroup: Unknown subsys name 'net' [ 22.201087][ T28] audit: type=1400 audit(1769809952.005:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.228345][ T28] audit: type=1400 audit(1769809952.045:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.228721][ T275] cgroup: Unknown subsys name 'devices' [ 22.376588][ T275] cgroup: Unknown subsys name 'hugetlb' [ 22.382206][ T275] cgroup: Unknown subsys name 'rlimit' [ 22.487094][ T28] audit: type=1400 audit(1769809952.315:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.510311][ T28] audit: type=1400 audit(1769809952.315:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.535246][ T28] audit: type=1400 audit(1769809952.315:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.557546][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.567613][ T28] audit: type=1400 audit(1769809952.395:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.593075][ T28] audit: type=1400 audit(1769809952.395:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.619908][ T28] audit: type=1400 audit(1769809952.445:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.645504][ T28] audit: type=1400 audit(1769809952.445:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.645560][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.021033][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.028287][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.035863][ T285] device bridge_slave_0 entered promiscuous mode [ 24.043991][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.051109][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.058518][ T285] device bridge_slave_1 entered promiscuous mode [ 24.117358][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.124553][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.132052][ T284] device bridge_slave_0 entered promiscuous mode [ 24.139070][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.146177][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.153628][ T283] device bridge_slave_0 entered promiscuous mode [ 24.161913][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.169002][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.176501][ T283] device bridge_slave_1 entered promiscuous mode [ 24.195047][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.202189][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.209637][ T284] device bridge_slave_1 entered promiscuous mode [ 24.303495][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.310688][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.318219][ T287] device bridge_slave_0 entered promiscuous mode [ 24.336955][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.344013][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.351609][ T287] device bridge_slave_1 entered promiscuous mode [ 24.383772][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.390983][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.398507][ T286] device bridge_slave_0 entered promiscuous mode [ 24.408446][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.415551][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.422927][ T286] device bridge_slave_1 entered promiscuous mode [ 24.536120][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.543317][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.550690][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.557748][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.589546][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.596654][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.604018][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.611094][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.623871][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.630952][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.638260][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.645318][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.656058][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.663113][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.670438][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.677495][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.717722][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.725914][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.733083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.740766][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.747989][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.755250][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.762556][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.769925][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.777937][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.801742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.810040][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.817173][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.836043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.843485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.851007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.859414][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.866530][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.874959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.882401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.889956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.898335][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.905417][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.912798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.921111][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.928175][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.935704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.943917][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.950999][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.965128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.973403][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.980473][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.995070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.002704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.011212][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.018403][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.025947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.049861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.057978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.066175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.074139][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.082484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.090802][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.097892][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.105320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.113364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.146691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.155370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.164105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.172797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.189449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.197057][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.204763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.213081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.221446][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.228545][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.236039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.244675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.252993][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.261478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.269811][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.276886][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.284242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.292412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.300543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.313499][ T284] device veth0_vlan entered promiscuous mode [ 25.329169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.337757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.346051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.353994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.362203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.369973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.382729][ T283] device veth0_vlan entered promiscuous mode [ 25.393682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.402148][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.410682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.418890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.431281][ T285] device veth0_vlan entered promiscuous mode [ 25.442039][ T284] device veth1_macvtap entered promiscuous mode [ 25.449192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.456773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.464225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.472509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.481148][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.489698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.498181][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.506511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.514869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.522571][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.530258][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.541350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.549531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.560834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.568564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.582244][ T285] device veth1_macvtap entered promiscuous mode [ 25.593180][ T283] device veth1_macvtap entered promiscuous mode [ 25.600342][ T287] device veth0_vlan entered promiscuous mode [ 25.607385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.615923][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.624103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.632469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.640970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.649341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.657146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.665514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.678241][ T286] device veth0_vlan entered promiscuous mode [ 25.695523][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.703724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.711212][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.718927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.727373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.735951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.744772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.753105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.761549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.783166][ T287] device veth1_macvtap entered promiscuous mode [ 25.791112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.799540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.808294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.816816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.825597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.846125][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 25.854680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.862991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.873247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.881751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.923897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.944259][ T286] device veth1_macvtap entered promiscuous mode [ 26.019210][ T351] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.064164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.072778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.093740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.106072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.264664][ T334] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.464493][ T334] usb 2-1: Using ep0 maxpacket: 8 [ 26.471276][ T334] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.485061][ T334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.491826][ T334] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 26.972818][ T372] netlink: 'syz.4.8': attribute type 298 has an invalid length. [ 27.049930][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.070184][ T334] usb 2-1: config 0 descriptor?? [ 27.078697][ T381] xt_connbytes: Forcing CT accounting to be enabled [ 27.096985][ T383] loop2: detected capacity change from 0 to 128 [ 27.115941][ T378] kvm [377]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x60000006940 [ 27.127072][ T378] kvm [377]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x600000095f6 [ 27.138593][ T383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.149339][ T378] kvm [377]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x11e) = 0x600000063c4 [ 27.156934][ T383] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.168360][ T378] kvm [377]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x186) = 0x6000000a50e [ 27.177452][ T378] kvm [377]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x187) = 0x6000000f92a [ 27.189245][ T378] kvm [377]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x1d9) = 0x600000036e6 [ 27.229105][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 27.229123][ T28] audit: type=1400 audit(1769809957.055:124): avc: denied { write } for pid=382 comm="syz.2.13" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.268532][ T383] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 27.278781][ T341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 27.341176][ T28] audit: type=1400 audit(1769809957.095:125): avc: denied { add_name } for pid=382 comm="syz.2.13" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.387824][ T28] audit: type=1400 audit(1769809957.095:126): avc: denied { create } for pid=382 comm="syz.2.13" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.415888][ T28] audit: type=1400 audit(1769809957.115:127): avc: denied { write } for pid=340 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.436253][ T28] audit: type=1400 audit(1769809957.115:128): avc: denied { nlmsg_write } for pid=340 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.457818][ T28] audit: type=1400 audit(1769809957.245:129): avc: denied { write } for pid=382 comm="syz.2.13" name="encrypted_dir" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.485257][ T393] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 27.500669][ T28] audit: type=1400 audit(1769809957.245:130): avc: denied { add_name } for pid=382 comm="syz.2.13" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.517218][ T334] waltop 0003:172F:0038.0001: item fetching failed at offset 0/5 [ 27.550472][ T334] waltop: probe of 0003:172F:0038.0001 failed with error -22 [ 27.558082][ T28] audit: type=1400 audit(1769809957.315:131): avc: denied { create } for pid=382 comm="syz.2.13" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 27.586878][ T28] audit: type=1400 audit(1769809957.375:132): avc: denied { create } for pid=395 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.608000][ T28] audit: type=1400 audit(1769809957.385:133): avc: denied { setopt } for pid=395 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.608562][ T284] EXT4-fs (loop2): unmounting filesystem. [ 27.720261][ T334] usb 2-1: USB disconnect, device number 2 [ 28.689265][ T441] device syzkaller0 entered promiscuous mode [ 29.252305][ T452] capability: warning: `syz.4.34' uses deprecated v2 capabilities in a way that may be insecure [ 29.264435][ T358] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.444409][ T358] usb 3-1: Using ep0 maxpacket: 8 [ 29.450751][ T358] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.470478][ T358] usb 3-1: config 0 interface 0 has no altsetting 0 [ 29.482264][ T358] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 29.491882][ T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.512501][ T358] usb 3-1: config 0 descriptor?? [ 29.738027][ T450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.967492][ T358] waltop 0003:172F:0038.0002: item fetching failed at offset 0/5 [ 29.979424][ T358] waltop: probe of 0003:172F:0038.0002 failed with error -22 [ 30.167314][ T358] usb 3-1: USB disconnect, device number 2 [ 30.656956][ T489] loop4: detected capacity change from 0 to 512 [ 30.666720][ T489] EXT4-fs: Ignoring removed oldalloc option [ 30.753816][ T489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.762760][ T499] loop0: detected capacity change from 0 to 1024 [ 30.763486][ T499] ======================================================= [ 30.763486][ T499] WARNING: The mand mount option has been deprecated and [ 30.763486][ T499] and is ignored by this kernel. Remove the mand [ 30.763486][ T499] option from the mount to silence this warning. [ 30.763486][ T499] ======================================================= [ 30.806102][ T499] EXT4-fs: Ignoring removed orlov option [ 30.811839][ T499] EXT4-fs: Ignoring removed bh option [ 30.818566][ T489] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.842763][ T499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.868245][ T489] kvm: pic: non byte write [ 30.872791][ T489] kvm: pic: non byte read [ 30.877656][ T489] kvm: pic: non byte write [ 30.882660][ T489] kvm: pic: non byte write [ 30.887755][ T489] kvm: pic: non byte read [ 30.892208][ T489] kvm: pic: non byte write [ 30.896899][ T489] kvm: pic: non byte write [ 30.901555][ T489] kvm: pic: non byte read [ 30.906127][ T489] kvm: pic: non byte write [ 30.910738][ T489] kvm: pic: non byte write [ 30.915531][ T489] kvm: pic: non byte read [ 30.920174][ T489] kvm: pic: non byte write [ 30.926565][ T489] kvm: pic: non byte write [ 30.997652][ T515] tipc: Started in network mode [ 31.002759][ T515] tipc: Node identity ac14140f, cluster identity 4711 [ 31.009874][ T515] tipc: New replicast peer: 255.255.255.255 [ 31.031450][ T517] netlink: 104 bytes leftover after parsing attributes in process `syz.2.55'. [ 31.045450][ T287] EXT4-fs (loop4): unmounting filesystem. [ 31.051694][ T515] tipc: Enabled bearer , priority 10 [ 31.133070][ T519] loop1: detected capacity change from 0 to 128 [ 31.142076][ T519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.155517][ T519] EXT4-fs (loop1): Test dummy encryption mode enabled [ 31.401622][ T519] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.411210][ T519] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.442797][ T524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 31.815339][ T531] kvm: pic: non byte write [ 31.820618][ T285] EXT4-fs (loop1): unmounting filesystem. [ 31.893353][ T283] EXT4-fs (loop0): unmounting filesystem. [ 32.155302][ T297] tipc: Node number set to 2886997007 [ 33.070592][ T560] loop2: detected capacity change from 0 to 1024 [ 33.255408][ T346] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.299948][ T565] device syzkaller0 entered promiscuous mode [ 33.346109][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 33.346125][ T28] audit: type=1400 audit(1769809963.175:191): avc: denied { write } for pid=564 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.802039][ T28] audit: type=1400 audit(1769809963.625:192): avc: denied { bind } for pid=570 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.835402][ T28] audit: type=1400 audit(1769809963.655:193): avc: denied { listen } for pid=570 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.884418][ T28] audit: type=1400 audit(1769809963.655:194): avc: denied { accept } for pid=570 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.928737][ T28] audit: type=1400 audit(1769809963.685:195): avc: denied { read } for pid=570 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.997312][ T580] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 34.044414][ T28] audit: type=1400 audit(1769809963.735:196): avc: denied { shutdown } for pid=570 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.087332][ T28] audit: type=1400 audit(1769809963.915:197): avc: denied { ioctl } for pid=583 comm="syz.1.78" path="socket:[17624]" dev="sockfs" ino=17624 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.485204][ T591] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.683008][ T562] loop4: detected capacity change from 0 to 131072 [ 34.690720][ T562] F2FS-fs (loop4): Test dummy encryption mode enabled [ 34.704019][ T562] F2FS-fs (loop4): invalid crc value [ 34.711680][ T562] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.756528][ T562] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.814071][ T28] audit: type=1400 audit(1769809964.635:198): avc: denied { create } for pid=561 comm="syz.4.71" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.836140][ T562] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 34.846330][ T28] audit: type=1400 audit(1769809964.675:199): avc: denied { read append open } for pid=561 comm="syz.4.71" path="/15/file0/memory.events.local" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.901925][ T28] audit: type=1400 audit(1769809964.725:200): avc: denied { map } for pid=561 comm="syz.4.71" path="/15/file0/memory.events.local" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.100943][ T619] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.108242][ T619] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.341009][ T619] syz.3.88 (619) used greatest stack depth: 21664 bytes left [ 35.404661][ T635] loop2: detected capacity change from 0 to 512 [ 35.505656][ T635] EXT4-fs: Ignoring removed bh option [ 35.557621][ T635] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 35.630172][ T646] binder: 643:646 ioctl c0306201 2000000002c0 returned -14 [ 35.670842][ T635] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2200: inode #15: comm syz.2.94: corrupted in-inode xattr [ 35.700636][ T635] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.94: couldn't read orphan inode 15 (err -117) [ 35.721362][ T652] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 35.732472][ T635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.811645][ T284] EXT4-fs (loop2): unmounting filesystem. [ 35.912109][ T661] tipc: Started in network mode [ 35.917366][ T661] tipc: Node identity 4, cluster identity 4711 [ 35.923591][ T661] tipc: Node number set to 4 [ 36.064416][ T334] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.244552][ T334] usb 2-1: Using ep0 maxpacket: 8 [ 36.250665][ T334] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.263734][ T334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.270496][ T334] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 36.283962][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.301761][ T670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.309432][ T334] usb 2-1: config 0 descriptor?? [ 36.560742][ T656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 36.774170][ T334] waltop 0003:172F:0038.0003: item fetching failed at offset 0/5 [ 36.782162][ T334] waltop: probe of 0003:172F:0038.0003 failed with error -22 [ 36.975489][ T556] usb 2-1: USB disconnect, device number 3 [ 37.870903][ T682] syz.2.117 (682) used greatest stack depth: 20864 bytes left [ 38.184239][ T708] loop0: detected capacity change from 0 to 128 [ 38.200194][ T708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.286024][ T708] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.914432][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 38.914449][ T28] audit: type=1400 audit(1769809968.735:216): avc: denied { ioctl } for pid=706 comm="syz.0.118" path="socket:[17361]" dev="sockfs" ino=17361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.947118][ T716] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 39.066750][ T724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 39.080562][ T283] EXT4-fs (loop0): unmounting filesystem. [ 40.153838][ T753] netlink: 277 bytes leftover after parsing attributes in process `syz.3.129'. [ 40.784395][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.985534][ T19] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 41.018062][ T19] usb 2-1: config 0 has no interface number 0 [ 41.035357][ T759] device syzkaller0 entered promiscuous mode [ 41.043806][ T19] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.072679][ T19] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.082684][ T19] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.104626][ T19] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 41.124637][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.142090][ T19] usb 2-1: config 0 descriptor?? [ 41.312356][ T774] loop2: detected capacity change from 0 to 16 [ 41.347081][ T774] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 41.414109][ T775] loop4: detected capacity change from 0 to 128 [ 41.422357][ T775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.435311][ T775] EXT4-fs (loop4): Test dummy encryption mode enabled [ 41.536532][ T775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.787206][ T775] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.830874][ T780] loop0: detected capacity change from 0 to 16 [ 41.861231][ T780] erofs: (device loop0): mounted with root inode @ nid 36. [ 41.993168][ T28] audit: type=1400 audit(1769809971.765:217): avc: denied { write } for pid=773 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.274744][ T287] EXT4-fs (loop4): unmounting filesystem. [ 42.704544][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.713005][ T790] device bridge_slave_0 left promiscuous mode [ 42.719288][ T790] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.727741][ T790] device bridge_slave_1 left promiscuous mode [ 42.733927][ T790] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.839828][ T796] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2771471355/2771471356 [ 42.849986][ T796] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2771471355/2771471356 [ 42.873596][ T28] audit: type=1400 audit(1769809972.665:218): avc: denied { bind } for pid=793 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.970434][ T28] audit: type=1400 audit(1769809972.795:219): avc: denied { map } for pid=791 comm="syz.2.142" path="socket:[18214]" dev="sockfs" ino=18214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.994200][ T28] audit: type=1400 audit(1769809972.795:220): avc: denied { read } for pid=791 comm="syz.2.142" path="socket:[18214]" dev="sockfs" ino=18214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.437075][ T803] netlink: 60 bytes leftover after parsing attributes in process `syz.3.145'. [ 44.145840][ T19] usbhid 2-1:0.1: can't add hid device: -71 [ 44.152296][ T19] usbhid: probe of 2-1:0.1 failed with error -71 [ 44.163295][ T19] usb 2-1: USB disconnect, device number 4 [ 44.944448][ T28] audit: type=1400 audit(1769809974.765:221): avc: denied { getopt } for pid=809 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.271448][ T834] loop0: detected capacity change from 0 to 4096 [ 46.285044][ T837] binder: 836:837 ioctl c0306201 2000000002c0 returned -14 [ 46.292827][ T834] EXT4-fs (loop0): Test dummy encryption mode enabled [ 46.338632][ T834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.932821][ T864] tipc: Started in network mode [ 48.944448][ T864] tipc: Node identity 6a4e1c7ba449, cluster identity 4711 [ 48.951672][ T864] tipc: Enabled bearer , priority 0 [ 48.993929][ T864] device syzkaller0 entered promiscuous mode [ 49.003199][ T864] tipc: Resetting bearer [ 49.009971][ T863] tipc: Resetting bearer [ 49.016643][ T863] tipc: Disabling bearer [ 49.314122][ T28] audit: type=1400 audit(1769809979.135:222): avc: denied { read write } for pid=872 comm="syz.4.168" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.390378][ T28] audit: type=1400 audit(1769809979.175:223): avc: denied { open } for pid=872 comm="syz.4.168" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.567615][ T283] EXT4-fs (loop0): unmounting filesystem. [ 49.797649][ T887] loop0: detected capacity change from 0 to 256 [ 49.872179][ T887] FAT-fs (loop0): Directory bread(block 64) failed [ 49.878954][ T887] FAT-fs (loop0): Directory bread(block 65) failed [ 49.885778][ T887] FAT-fs (loop0): Directory bread(block 66) failed [ 49.892373][ T887] FAT-fs (loop0): Directory bread(block 67) failed [ 49.899284][ T887] FAT-fs (loop0): Directory bread(block 68) failed [ 49.905932][ T887] FAT-fs (loop0): Directory bread(block 69) failed [ 49.912727][ T887] FAT-fs (loop0): Directory bread(block 70) failed [ 49.919453][ T887] FAT-fs (loop0): Directory bread(block 71) failed [ 49.926327][ T887] FAT-fs (loop0): Directory bread(block 72) failed [ 49.933090][ T887] FAT-fs (loop0): Directory bread(block 73) failed [ 50.038340][ T28] audit: type=1400 audit(1769809979.795:224): avc: denied { mount } for pid=882 comm="syz.0.170" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.724746][ T893] loop2: detected capacity change from 0 to 512 [ 50.820169][ T893] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.174: inode has both inline data and extents flags [ 50.833705][ T893] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.174: couldn't read orphan inode 15 (err -117) [ 50.845985][ T893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.078698][ T28] audit: type=1400 audit(1769809980.905:225): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.144363][ C0] sched: RT throttling activated [ 51.389079][ T901] loop1: detected capacity change from 0 to 256 [ 51.488453][ T28] audit: type=1400 audit(1769809981.305:226): avc: denied { mounton } for pid=892 comm="syz.2.174" path="/35/file1/file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 51.940677][ T284] EXT4-fs (loop2): unmounting filesystem. [ 51.947118][ T28] audit: type=1400 audit(1769809981.315:227): avc: denied { setattr } for pid=892 comm="syz.2.174" name="work" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.023110][ T909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 52.105883][ T28] audit: type=1400 audit(1769809981.345:228): avc: denied { remove_name } for pid=892 comm="syz.2.174" name="#1" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.128497][ T28] audit: type=1400 audit(1769809981.345:229): avc: denied { rename } for pid=892 comm="syz.2.174" name="#1" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.289093][ T19] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 52.307953][ T28] audit: type=1400 audit(1769809981.345:230): avc: denied { unlink } for pid=892 comm="syz.2.174" name="#1" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.329978][ T28] audit: type=1400 audit(1769809981.345:231): avc: denied { unlink } for pid=892 comm="syz.2.174" name="#2" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.370628][ T28] audit: type=1400 audit(1769809981.405:232): avc: denied { append } for pid=902 comm="syz.0.176" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.407338][ T28] audit: type=1400 audit(1769809981.765:233): avc: denied { remove_name } for pid=284 comm="syz-executor" name="file2" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.470710][ T914] loop2: detected capacity change from 0 to 1024 [ 52.479201][ T914] EXT4-fs: Ignoring removed oldalloc option [ 52.488009][ T914] EXT4-fs: Ignoring removed bh option [ 52.502900][ T914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.526009][ T914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.621379][ T284] EXT4-fs (loop2): unmounting filesystem. [ 53.982574][ T939] loop4: detected capacity change from 0 to 4096 [ 53.990882][ T939] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.174587][ T19] usb 5-1: device not accepting address 2, error -71 [ 54.201010][ T939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.718694][ T287] EXT4-fs (loop4): unmounting filesystem. [ 55.809539][ T957] loop0: detected capacity change from 0 to 256 [ 55.827381][ T957] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 55.851596][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 55.851609][ T28] audit: type=1400 audit(1769809985.675:240): avc: denied { write } for pid=956 comm="syz.0.187" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.880605][ T935] loop1: detected capacity change from 0 to 40427 [ 55.893646][ T957] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 55.902907][ T957] exFAT-fs (loop0): Filesystem has been set read-only [ 55.910006][ T957] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813ddb8910 iblock : 8, err : -5) [ 55.920276][ T957] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 55.931060][ T28] audit: type=1400 audit(1769809985.715:241): avc: denied { add_name } for pid=956 comm="syz.0.187" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.963946][ T935] F2FS-fs (loop1): invalid crc value [ 55.973970][ T28] audit: type=1400 audit(1769809985.715:242): avc: denied { associate } for pid=956 comm="syz.0.187" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.998609][ T957] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 56.014897][ T957] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813ddb8910 iblock : 8, err : -5) [ 56.028412][ T28] audit: type=1400 audit(1769809985.715:243): avc: denied { read write } for pid=956 comm="syz.0.187" name="file1" dev="loop0" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.051883][ T28] audit: type=1400 audit(1769809985.715:244): avc: denied { open } for pid=956 comm="syz.0.187" path="/39/file1/file1" dev="loop0" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.075909][ T957] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 56.090962][ T28] audit: type=1400 audit(1769809985.785:245): avc: denied { read } for pid=954 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.124893][ T28] audit: type=1400 audit(1769809985.955:246): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.168813][ T935] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.274820][ T28] audit: type=1400 audit(1769809985.975:247): avc: denied { create } for pid=966 comm="syz.4.192" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.295433][ T28] audit: type=1400 audit(1769809985.975:248): avc: denied { write } for pid=966 comm="syz.4.192" name="file2" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.708937][ T28] audit: type=1400 audit(1769809985.975:249): avc: denied { open } for pid=966 comm="syz.4.192" path="/35/file2" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.755716][ T935] F2FS-fs (loop1): Start checkpoint disabled! [ 56.865920][ T935] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 58.705740][ T997] loop2: detected capacity change from 0 to 4096 [ 58.714847][ T997] EXT4-fs (loop2): Test dummy encryption mode enabled [ 58.780828][ T997] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.449075][ T284] EXT4-fs (loop2): unmounting filesystem. [ 60.514192][ T1011] binder: BINDER_SET_CONTEXT_MGR already set [ 60.539503][ T1011] binder: 1010:1011 ioctl 4018620d 200000004a80 returned -16 [ 61.090584][ T1026] loop4: detected capacity change from 0 to 256 [ 61.097352][ T1026] exfat: Deprecated parameter 'utf8' [ 61.102828][ T1026] exfat: Deprecated parameter 'utf8' [ 61.127487][ T1026] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 61.154305][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 61.154320][ T28] audit: type=1400 audit(1769809990.975:253): avc: denied { setopt } for pid=1025 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.627767][ T28] audit: type=1400 audit(1769809991.215:254): avc: denied { read } for pid=1028 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.702994][ T28] audit: type=1400 audit(1769809991.225:255): avc: denied { accept } for pid=1028 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.259851][ T1049] loop4: detected capacity change from 0 to 4096 [ 63.375602][ T1049] EXT4-fs (loop4): Test dummy encryption mode enabled [ 63.412968][ T1049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.611986][ T1058] binder: BINDER_SET_CONTEXT_MGR already set [ 63.645270][ T1058] binder: 1057:1058 ioctl 4018620d 200000004a80 returned -16 [ 64.114606][ T287] EXT4-fs (loop4): unmounting filesystem. [ 64.186799][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 64.195722][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 65.132099][ T28] audit: type=1400 audit(1769809994.955:256): avc: denied { write } for pid=1075 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.642360][ T1081] device syzkaller0 entered promiscuous mode [ 65.680837][ T1086] loop4: detected capacity change from 0 to 256 [ 65.765919][ T1086] FAT-fs (loop4): Directory bread(block 64) failed [ 65.774420][ T1086] FAT-fs (loop4): Directory bread(block 65) failed [ 65.781157][ T1086] FAT-fs (loop4): Directory bread(block 66) failed [ 65.789251][ T1081] tipc: Started in network mode [ 65.795292][ T1081] tipc: Node identity ee3365569adc, cluster identity 4711 [ 65.808885][ T28] audit: type=1400 audit(1769809995.635:257): avc: denied { accept } for pid=1065 comm="syz.2.218" path="socket:[18963]" dev="sockfs" ino=18963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.842319][ T1086] FAT-fs (loop4): Directory bread(block 67) failed [ 66.106546][ T1081] tipc: Enabled bearer , priority 0 [ 66.113788][ T1086] FAT-fs (loop4): Directory bread(block 68) failed [ 66.133392][ T1086] FAT-fs (loop4): Directory bread(block 69) failed [ 66.141523][ T1080] tipc: Resetting bearer [ 66.158042][ T1086] FAT-fs (loop4): Directory bread(block 70) failed [ 66.164729][ T1086] FAT-fs (loop4): Directory bread(block 71) failed [ 66.171299][ T1086] FAT-fs (loop4): Directory bread(block 72) failed [ 66.178153][ T1086] FAT-fs (loop4): Directory bread(block 73) failed [ 66.189607][ T1080] tipc: Disabling bearer [ 66.354105][ T1091] syz.1.222 (1091) used greatest stack depth: 19464 bytes left [ 66.886286][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.886286][ T8] loop4: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 66.900498][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.900498][ T8] loop4: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 66.930531][ T8] kworker/u4:0: attempt to access beyond end of device [ 66.930531][ T8] loop4: rw=1, sector=1960, nr_sectors = 7512 limit=256 [ 66.993197][ T1110] loop4: detected capacity change from 0 to 1024 [ 67.010966][ T1110] EXT4-fs: Ignoring removed bh option [ 67.025394][ T1110] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.032100][ T1110] EXT4-fs error (device loop4): ext4_quota_enable:7006: comm syz.4.230: inode #2304: comm syz.4.230: iget: illegal inode # [ 67.045442][ T1110] EXT4-fs (loop4): Remounting filesystem read-only [ 67.052005][ T1110] EXT4-fs error (device loop4): ext4_quota_enable:7009: comm syz.4.230: Bad quota inode: 2304, type: 2 [ 67.064119][ T1110] EXT4-fs (loop4): Remounting filesystem read-only [ 67.070874][ T1110] EXT4-fs warning (device loop4): ext4_enable_quotas:7050: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 67.086814][ T1110] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 67.093618][ T1110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.120072][ T1110] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.230: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 68.046925][ T287] EXT4-fs (loop4): unmounting filesystem. [ 68.095084][ T1115] loop0: detected capacity change from 0 to 131072 [ 68.102373][ T1115] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 68.125588][ T1115] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.266198][ T1115] F2FS-fs (loop0): invalid crc value [ 68.291526][ T1123] loop1: detected capacity change from 0 to 131072 [ 68.302816][ T1123] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 68.310747][ T1123] F2FS-fs (loop1): Test dummy encryption mode enabled [ 68.317595][ T1123] F2FS-fs (loop1): inline xattr size is out of range: 6 ~ 903 [ 68.693992][ T1115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.812294][ T1115] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 68.819610][ T1115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 69.902835][ T1138] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 69.940643][ T28] audit: type=1400 audit(1769809999.385:258): avc: denied { getopt } for pid=1132 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.044422][ T28] audit: type=1400 audit(1769809999.815:259): avc: denied { ioctl } for pid=1140 comm="syz.4.237" path="socket:[19038]" dev="sockfs" ino=19038 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.276607][ T1051] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 71.332403][ T28] audit: type=1400 audit(1769810001.155:260): avc: denied { getopt } for pid=1149 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.938843][ T1051] usb 2-1: Using ep0 maxpacket: 8 [ 71.944589][ T1165] device syzkaller0 entered promiscuous mode [ 72.146935][ T1051] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.160041][ T1051] usb 2-1: config 0 interface 0 has no altsetting 0 [ 72.166900][ T1051] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 72.176124][ T1051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.184999][ T1051] usb 2-1: config 0 descriptor?? [ 72.708576][ T1142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'. [ 73.238425][ T1051] waltop 0003:172F:0038.0004: item fetching failed at offset 0/5 [ 73.251364][ T1051] waltop: probe of 0003:172F:0038.0004 failed with error -22 [ 73.438958][ T694] usb 2-1: USB disconnect, device number 5 [ 73.705125][ T28] audit: type=1400 audit(1769810003.525:261): avc: denied { write } for pid=1181 comm="syz.2.249" name="fib_trie" dev="proc" ino=4026532406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.978405][ T1189] loop0: detected capacity change from 0 to 16 [ 74.103343][ T1189] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.827934][ T1195] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 74.837141][ T1195] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 75.139549][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 77.323105][ T28] audit: type=1400 audit(1769810005.545:262): avc: denied { bind } for pid=1200 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.413984][ T1214] loop4: detected capacity change from 0 to 512 [ 77.425875][ T1214] ext4: Unknown parameter 'smackfsdef' [ 77.455284][ T28] audit: type=1400 audit(1769810006.095:263): avc: denied { getopt } for pid=1199 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.124842][ T28] audit: type=1400 audit(1769810007.935:264): avc: denied { create } for pid=1205 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.943463][ T1228] loop4: detected capacity change from 0 to 2048 [ 79.267383][ T1228] loop4: p3 < > p4 < > [ 79.376463][ T28] audit: type=1400 audit(1769810009.205:265): avc: denied { map } for pid=1226 comm="syz.4.260" path="socket:[20067]" dev="sockfs" ino=20067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.410115][ T1228] loop4: partition table partially beyond EOD, truncated [ 79.418128][ T1228] loop4: p3 start 4284289 is beyond EOD, truncated [ 79.425271][ T28] audit: type=1400 audit(1769810009.235:266): avc: denied { read write } for pid=1226 comm="syz.4.260" path="socket:[20067]" dev="sockfs" ino=20067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.060438][ T28] audit: type=1400 audit(1769810010.885:267): avc: denied { associate } for pid=1265 comm="syz.3.271" name="memory.events" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 81.071136][ T1266] 9pnet_fd: Insufficient options for proto=fd [ 81.098561][ T28] audit: type=1400 audit(1769810010.885:268): avc: denied { mounton } for pid=1265 comm="syz.3.271" path="/file0" dev="rootfs" ino=19312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 81.231133][ T1272] loop4: detected capacity change from 0 to 16 [ 85.135045][ T1272] erofs: (device loop4): erofs_read_superblock: cannot read erofs superblock [ 85.669204][ T1282] xt_hashlimit: size too large, truncated to 1048576 [ 85.711907][ T1276] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 85.722093][ T1276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 85.736936][ T346] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.799578][ T28] audit: type=1400 audit(1769810015.625:269): avc: denied { mounton } for pid=1280 comm="syz.1.274" path="/proc/131/task" dev="proc" ino=20149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 88.322496][ T1299] loop2: detected capacity change from 0 to 512 [ 88.445166][ T1299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.581548][ T1305] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.599214][ T1305] overlayfs: failed to look up (tracing) for ino (-66) [ 88.714070][ T28] audit: type=1400 audit(1769810018.405:270): avc: denied { mount } for pid=1300 comm="syz.4.280" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 88.816337][ T1299] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.172226][ T1324] tipc: Enabled bearer , priority 10 [ 92.551676][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 92.558301][ T28] audit: type=1400 audit(1769810018.405:271): avc: denied { mounton } for pid=1300 comm="syz.4.280" path="/55/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.598266][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 92.601585][ T28] audit: type=1400 audit(1769810019.835:272): avc: denied { create } for pid=1312 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.004165][ T28] audit: type=1400 audit(1769810020.405:273): avc: denied { mounton } for pid=1298 comm="syz.2.279" path="/52/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.047728][ T28] audit: type=1400 audit(1769810020.975:274): avc: denied { getopt } for pid=1298 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.096469][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 93.124462][ T28] audit: type=1400 audit(1769810021.615:275): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 93.164577][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 93.171236][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 93.211610][ T28] audit: type=1400 audit(1769810022.375:276): avc: denied { rmdir } for pid=284 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.242722][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 93.264202][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 94.825813][ T1335] loop4: detected capacity change from 0 to 256 [ 94.832654][ T1335] FAT-fs (loop4): Unrecognized mount option "nodgts" or missing value [ 95.459535][ T346] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.476533][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 95.514234][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 95.579358][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 95.591026][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 95.634646][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 95.667092][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 95.800457][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 95.997542][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 96.032129][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 96.053526][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 96.204945][ T1348] Zero length message leads to an empty skb [ 97.153956][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 97.173948][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 97.180603][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 97.192507][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 97.297246][ T1352] loop1: detected capacity change from 0 to 512 [ 97.434280][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 97.865123][ T1352] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.292: bg 0: block 393: padding at end of block bitmap is not set [ 97.880483][ T1352] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 97.891758][ T1352] EXT4-fs (loop1): 2 truncates cleaned up [ 97.897700][ T1352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.650882][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 98.672139][ T1357] loop4: detected capacity change from 0 to 1024 [ 98.755005][ T1357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.767245][ T285] EXT4-fs (loop1): unmounting filesystem. [ 98.773121][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 98.790946][ T1354] loop0: detected capacity change from 0 to 4096 [ 98.815927][ T1357] EXT4-fs (loop4): Test dummy encryption mode enabled [ 98.823155][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 98.855262][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 98.878569][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 98.942000][ T1370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.296'. [ 99.000842][ T1357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.060312][ T1354] Quota error (device loop0): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 99.089059][ T1367] loop1: detected capacity change from 0 to 1024 [ 99.131170][ T1354] EXT4-fs warning (device loop0): ext4_enable_quotas:7050: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.208649][ T1367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.266621][ T1354] EXT4-fs (loop0): mount failed [ 99.283581][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.304737][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 99.311348][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 99.323211][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.344979][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 99.370295][ T1367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.393454][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.413040][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 99.425503][ T28] audit: type=1400 audit(1769810029.255:277): avc: denied { setopt } for pid=1355 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.433446][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.508666][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.581723][ T287] EXT4-fs (loop4): unmounting filesystem. [ 99.595695][ T334] kernel read not supported for file [userfaultfd] (pid: 334 comm: kworker/0:3) [ 99.597982][ T28] audit: type=1400 audit(1769810029.425:278): avc: denied { read } for pid=334 comm="kworker/0:3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20259 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.605261][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 99.647995][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.670275][ T1377] loop4: detected capacity change from 0 to 256 [ 99.684920][ T1377] exfat: Deprecated parameter 'utf8' [ 99.705847][ T1377] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 99.785189][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.808667][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 99.821509][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.822938][ T28] audit: type=1326 audit(1769810029.645:279): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1366 comm="syz.1.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f744699aeb9 code=0x0 [ 100.095316][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 100.276762][ T285] EXT4-fs (loop1): unmounting filesystem. [ 100.283163][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 100.364437][ T334] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.389672][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 100.421318][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 100.449714][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 101.202935][ T28] audit: type=1400 audit(1769810030.985:280): avc: denied { unlink } for pid=1385 comm="syz.1.302" name="#5" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.325393][ T28] audit: type=1400 audit(1769810030.995:281): avc: denied { remount } for pid=1385 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.357998][ T284] EXT4-fs: 16 callbacks suppressed [ 101.358016][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 101.370583][ T334] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 101.438737][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.495720][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 101.504684][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.535840][ T28] audit: type=1400 audit(1769810031.345:282): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 101.554581][ T334] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.705355][ T334] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.714626][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.908667][ T1404] loop4: detected capacity change from 0 to 1024 [ 103.695975][ T1406] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 103.705655][ T1406] FAT-fs (loop7): unable to read boot sector [ 106.434521][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 106.442174][ T28] audit: type=1400 audit(1769810033.515:283): avc: denied { mounton } for pid=1400 comm="syz.3.306" path="/80/file0" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.472112][ T284] EXT4-fs warning: 1 callbacks suppressed [ 106.472129][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 106.496001][ T284] EXT4-fs error: 13 callbacks suppressed [ 106.496023][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 106.523865][ T1404] EXT4-fs: Ignoring removed nobh option [ 106.530227][ T334] usb 1-1: config 0 descriptor?? [ 106.541105][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 106.547992][ T1404] EXT4-fs: failed to create workqueue [ 106.553493][ T1404] EXT4-fs (loop4): mount failed [ 106.602797][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 106.633289][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 106.648748][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 106.661591][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 106.686273][ T334] usb 1-1: can't set config #0, error -71 [ 106.697506][ T334] usb 1-1: USB disconnect, device number 2 [ 106.733014][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 106.796986][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 106.816952][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 106.823524][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 106.835287][ T284] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 106.856541][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 108.021053][ T28] audit: type=1400 audit(1769810037.845:284): avc: denied { read } for pid=1419 comm="syz.0.310" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.051584][ T28] audit: type=1400 audit(1769810037.845:285): avc: denied { open } for pid=1419 comm="syz.0.310" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.106900][ T28] audit: type=1400 audit(1769810037.845:286): avc: denied { ioctl } for pid=1419 comm="syz.0.310" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.641518][ T284] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 108.745069][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 108.865483][ T284] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 110.363892][ T284] EXT4-fs (loop2): unmounting filesystem. [ 110.400971][ T1441] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.410199][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.418209][ T1441] device bridge_slave_0 entered promiscuous mode [ 110.464289][ T1441] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.484755][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.511412][ T1441] device bridge_slave_1 entered promiscuous mode [ 110.547515][ T1278] tipc: Left network mode [ 110.584738][ T1462] mmap: syz.4.320 (1462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.659132][ T1466] loop4: detected capacity change from 0 to 512 [ 110.687068][ T28] audit: type=1400 audit(1769810040.515:287): avc: denied { mount } for pid=1465 comm="syz.4.322" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 110.862950][ T1441] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.870106][ T1441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.877444][ T1441] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.884519][ T1441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.945137][ T1477] 9pnet_fd: Insufficient options for proto=fd [ 110.962825][ T28] audit: type=1400 audit(1769810040.785:288): avc: denied { wake_alarm } for pid=1463 comm="syz.0.323" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.605467][ T1471] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 111.617487][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.625271][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.632544][ T1471] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 111.723587][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.760171][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.774449][ T28] audit: type=1400 audit(1769810041.605:289): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 111.870855][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.881433][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.884757][ T28] audit: type=1400 audit(1769810041.715:290): avc: denied { bind } for pid=1487 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.891983][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.916429][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.979981][ T1490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.081399][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.128843][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.145795][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.152937][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.163747][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.173725][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.184791][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.195269][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.272472][ T1441] device veth0_vlan entered promiscuous mode [ 112.285724][ T1441] device veth1_macvtap entered promiscuous mode [ 112.309900][ T1489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 112.319601][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.328370][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.337984][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.347468][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.356397][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.365064][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.373357][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.381513][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.390115][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.400543][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.409204][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.418794][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.426451][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.918931][ T1278] device bridge_slave_1 left promiscuous mode [ 113.932554][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.972296][ T1278] device bridge_slave_0 left promiscuous mode [ 113.978804][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.987566][ T1278] device veth1_macvtap left promiscuous mode [ 113.993674][ T1278] device veth0_vlan left promiscuous mode [ 114.076969][ T1507] loop5: detected capacity change from 0 to 256 [ 114.108368][ T1507] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.131101][ T1507] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 114.178241][ T1507] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 117.259780][ T1532] loop1: detected capacity change from 0 to 512 [ 118.415360][ T1532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.425271][ T1532] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.221159][ T285] EXT4-fs (loop1): unmounting filesystem. [ 120.744872][ T28] audit: type=1400 audit(1769810050.485:291): avc: denied { read } for pid=1545 comm="syz.0.340" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.228727][ T28] audit: type=1400 audit(1769810050.485:292): avc: denied { open } for pid=1545 comm="syz.0.340" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.254902][ T28] audit: type=1400 audit(1769810050.485:293): avc: denied { ioctl } for pid=1545 comm="syz.0.340" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.292905][ T1559] fuse: Bad value for 'fd' [ 123.509897][ T1565] loop1: detected capacity change from 0 to 256 [ 123.541139][ T28] audit: type=1400 audit(1769810051.115:294): avc: denied { mounton } for pid=1558 comm="syz.5.343" path="/4/file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 123.710907][ T28] audit: type=1400 audit(1769810053.495:295): avc: denied { write } for pid=1562 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.885403][ T1583] ------------[ cut here ]------------ [ 123.890971][ T1583] WARNING: CPU: 0 PID: 1583 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 123.900481][ T1583] Modules linked in: [ 123.904476][ T1583] CPU: 0 PID: 1583 Comm: syz.4.350 Not tainted syzkaller #0 [ 123.911795][ T1583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.921962][ T1583] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 123.927699][ T1583] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e a0 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 72 5e ff <0f> 0b e9 17 ff ff ff e8 0b 72 5e ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 123.947464][ T1583] RSP: 0018:ffffc9000e85fb20 EFLAGS: 00010283 [ 123.954642][ T1583] RAX: ffffffff8212f9f9 RBX: 1ffff11022c4b7e2 RCX: 0000000000080000 [ 123.962750][ T1583] RDX: ffffc90003371000 RSI: 0000000000000a6a RDI: 0000000000000a6b [ 123.970966][ T1583] RBP: ffffc9000e85fb50 R08: ffff8881161f2557 R09: 1ffff11022c3e4aa [ 123.979211][ T1583] R10: dffffc0000000000 R11: ffffed1022c3e4ab R12: ffff88811625bee0 [ 123.987249][ T1583] R13: 0000000000000000 R14: ffff8881161f24b0 R15: ffff88811625bf10 [ 123.995288][ T1583] FS: 00007fbdfe45e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 124.004278][ T1583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.011084][ T1583] CR2: 0000001b2ec18ff8 CR3: 000000010da29000 CR4: 00000000003506b0 [ 124.019168][ T1583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.027344][ T1583] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.035472][ T1583] Call Trace: [ 124.038797][ T1583] [ 124.041771][ T1583] ovl_do_remove+0x717/0xac0 [ 124.046458][ T1583] ? ovl_set_redirect+0x6c0/0x6c0 [ 124.051542][ T1583] ? selinux_inode_rmdir+0x22/0x30 [ 124.056754][ T1583] ovl_rmdir+0x1a/0x20 [ 124.060866][ T1583] vfs_rmdir+0x393/0x500 [ 124.065204][ T1583] incfs_kill_sb+0x105/0x220 [ 124.069849][ T1583] deactivate_locked_super+0xb5/0x120 [ 124.075293][ T1583] deactivate_super+0xaf/0xe0 [ 124.080014][ T1583] cleanup_mnt+0x474/0x500 [ 124.084504][ T1583] __cleanup_mnt+0x19/0x20 [ 124.089056][ T1583] task_work_run+0x1e1/0x250 [ 124.093706][ T1583] ? __cfi_task_work_run+0x10/0x10 [ 124.098897][ T1583] ? __x64_sys_umount+0x12d/0x170 [ 124.104161][ T1583] ? __cfi___x64_sys_umount+0x10/0x10 [ 124.109623][ T1583] exit_to_user_mode_loop+0x9b/0xb0 [ 124.114873][ T1583] exit_to_user_mode_prepare+0x87/0xd0 [ 124.120403][ T1583] syscall_exit_to_user_mode+0x1a/0x30 [ 124.125927][ T1583] do_syscall_64+0x58/0xa0 [ 124.130383][ T1583] ? clear_bhb_loop+0x30/0x80 [ 124.135301][ T1583] ? clear_bhb_loop+0x30/0x80 [ 124.140028][ T1583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.146014][ T1583] RIP: 0033:0x7fbdfd59aeb9 [ 124.150590][ T1583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.170307][ T1583] RSP: 002b:00007fbdfe45e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.178812][ T1583] RAX: 0000000000000000 RBX: 00007fbdfd815fa0 RCX: 00007fbdfd59aeb9 [ 124.186886][ T1583] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 124.194954][ T1583] RBP: 00007fbdfd608c1f R08: 0000000000000000 R09: 0000000000000000 [ 124.202970][ T1583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.211026][ T1583] R13: 00007fbdfd816038 R14: 00007fbdfd815fa0 R15: 00007ffed39b8778 [ 124.219075][ T1583] [ 124.222127][ T1583] ---[ end trace 0000000000000000 ]--- [ 124.300698][ T1583] ------------[ cut here ]------------ [ 124.306402][ T1583] WARNING: CPU: 1 PID: 1583 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 124.315946][ T1583] Modules linked in: [ 124.317230][ T1579] af_packet: tpacket_rcv: packet too big, clamped from 176 to 4294967272. macoff=96 [ 124.319879][ T1583] CPU: 1 PID: 1583 Comm: syz.4.350 Tainted: G W syzkaller #0 [ 124.338288][ T1583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.348509][ T1583] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 124.354235][ T1583] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e a0 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 72 5e ff <0f> 0b e9 17 ff ff ff e8 0b 72 5e ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 124.373946][ T1583] RSP: 0018:ffffc9000e85fb20 EFLAGS: 00010283 [ 124.380069][ T1583] RAX: ffffffff8212f9f9 RBX: 1ffff11022c4b7e2 RCX: 0000000000080000 [ 124.388116][ T1583] RDX: ffffc90003371000 RSI: 0000000000041601 RDI: 0000000000041602 [ 124.396129][ T1583] RBP: ffffc9000e85fb50 R08: ffff8881161f2557 R09: 1ffff11022c3e4aa [ 124.404197][ T1583] R10: dffffc0000000000 R11: ffffed1022c3e4ab R12: ffff88811625bee0 [ 124.412227][ T1583] R13: 0000000000000000 R14: ffff8881161f24b0 R15: ffff88811625bf10 [ 124.420397][ T1583] FS: 00007fbdfe45e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 124.429404][ T1583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.436080][ T1583] CR2: 0000001b2e81fff8 CR3: 000000010da29000 CR4: 00000000003506a0 [ 124.444138][ T1583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.452177][ T1583] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.460235][ T1583] Call Trace: [ 124.463606][ T1583] [ 124.466609][ T1583] ovl_do_remove+0x717/0xac0 [ 124.471273][ T1583] ? ovl_set_redirect+0x6c0/0x6c0 [ 124.476404][ T1583] ? selinux_inode_rmdir+0x22/0x30 [ 124.481575][ T1583] ovl_rmdir+0x1a/0x20 [ 124.485763][ T1583] vfs_rmdir+0x393/0x500 [ 124.490069][ T1583] incfs_kill_sb+0x198/0x220 [ 124.494855][ T1583] deactivate_locked_super+0xb5/0x120 [ 124.500402][ T1583] deactivate_super+0xaf/0xe0 [ 124.505174][ T1583] cleanup_mnt+0x474/0x500 [ 124.509673][ T1583] __cleanup_mnt+0x19/0x20 [ 124.514152][ T1583] task_work_run+0x1e1/0x250 [ 124.518824][ T1583] ? __cfi_task_work_run+0x10/0x10 [ 124.524090][ T1583] ? __x64_sys_umount+0x12d/0x170 [ 124.529192][ T1583] ? __cfi___x64_sys_umount+0x10/0x10 [ 124.534644][ T1583] exit_to_user_mode_loop+0x9b/0xb0 [ 124.539890][ T1583] exit_to_user_mode_prepare+0x87/0xd0 [ 124.545408][ T1583] syscall_exit_to_user_mode+0x1a/0x30 [ 124.551045][ T1583] do_syscall_64+0x58/0xa0 [ 124.555546][ T1583] ? clear_bhb_loop+0x30/0x80 [ 124.560281][ T1583] ? clear_bhb_loop+0x30/0x80 [ 124.565098][ T1583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.571057][ T1583] RIP: 0033:0x7fbdfd59aeb9 [ 124.575525][ T1583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.595292][ T1583] RSP: 002b:00007fbdfe45e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.603920][ T1583] RAX: 0000000000000000 RBX: 00007fbdfd815fa0 RCX: 00007fbdfd59aeb9 [ 124.611971][ T1583] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 124.620092][ T1583] RBP: 00007fbdfd608c1f R08: 0000000000000000 R09: 0000000000000000 [ 124.628138][ T1583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.636485][ T1583] R13: 00007fbdfd816038 R14: 00007fbdfd815fa0 R15: 00007ffed39b8778 [ 124.644626][ T1583] [ 124.647683][ T1583] ---[ end trace 0000000000000000 ]--- [ 128.013629][ T28] audit: type=1400 audit(1769810057.835:296): avc: denied { write } for pid=1633 comm="syz.1.358" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.781824][ T1642] capability: warning: `syz.3.354' uses 32-bit capabilities (legacy support in use) [ 129.043100][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.148318][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.155146][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.162038][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.168896][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.175657][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.182394][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.189244][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.196011][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.202758][ T1650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 129.426792][ T1652] loop1: detected capacity change from 0 to 256 [ 129.635247][ T1652] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.044473][ T28] audit: type=1326 audit(1769810059.815:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 130.098051][ T28] audit: type=1326 audit(1769810059.815:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 130.121793][ T28] audit: type=1326 audit(1769810059.815:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f646b557c51 code=0x7ffc0000 [ 130.145164][ T28] audit: type=1326 audit(1769810059.815:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f646b59bcc9 code=0x7ffc0000 [ 130.169128][ T28] audit: type=1326 audit(1769810059.815:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f646b557cbb code=0x7ffc0000 [ 130.240794][ T28] audit: type=1326 audit(1769810059.815:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 130.268569][ T28] audit: type=1326 audit(1769810059.815:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 130.382713][ T1672] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1038402415/1038402417 [ 131.425685][ T1674] tty tty22: ldisc open failed (-12), clearing slot 21 [ 131.435663][ T1675] tty tty22: ldisc open failed (-12), clearing slot 21 [ 131.737691][ T28] audit: type=1326 audit(1769810059.865:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 131.761988][ T28] audit: type=1326 audit(1769810059.905:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 131.876017][ T1662] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 131.905452][ T1685] netlink: 'syz.5.370': attribute type 13 has an invalid length. [ 131.913292][ T1685] netlink: 'syz.5.370': attribute type 17 has an invalid length. [ 131.996571][ T1687] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 132.028953][ T1687] loop1: detected capacity change from 0 to 512 [ 132.256214][ T1687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.265429][ T1687] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.967609][ T285] EXT4-fs (loop1): unmounting filesystem. [ 136.803498][ T1716] __vm_enough_memory: pid: 1716, comm: syz.5.375, no enough memory for the allocation [ 137.844247][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 137.844267][ T28] audit: type=1400 audit(1769810066.445:403): avc: denied { create } for pid=1702 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 137.885885][ T1718] loop1: detected capacity change from 0 to 256 [ 137.897514][ T28] audit: type=1400 audit(1769810066.625:404): avc: denied { remount } for pid=1702 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.918255][ T1718] exfat: Deprecated parameter 'namecase' [ 138.480947][ T1718] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 138.662589][ T1705] overlayfs: './file0' not a directory [ 139.061042][ T1733] overlayfs: missing 'lowerdir' [ 139.066324][ T28] audit: type=1400 audit(1769810068.885:405): avc: denied { mounton } for pid=1717 comm="syz.1.378" path="/60/file0/file0" dev="loop1" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.334377][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.477944][ T1744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 142.316540][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 142.617775][ T24] usb 1-1: device descriptor read/all, error -71 [ 142.638229][ T1758] tipc: Failed to remove unknown binding: 66,1,1/0:397835575/397835577 [ 142.749347][ T1758] tipc: Failed to remove unknown binding: 66,1,1/0:397835575/397835577 [ 142.774375][ T1758] tipc: Failed to remove unknown binding: 66,1,1/0:397835575/397835577 [ 142.797012][ T1767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1767 comm=syz.5.390 [ 144.363341][ T28] audit: type=1400 audit(1769810074.185:406): avc: denied { nlmsg_write } for pid=1783 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 145.024400][ T1051] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.454491][ T1051] usb 2-1: Using ep0 maxpacket: 16 [ 145.460947][ T1051] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.471276][ T1051] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.482063][ T1051] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.500051][ T1051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.508510][ T1051] usb 2-1: Product: syz [ 145.515778][ T1051] usb 2-1: Manufacturer: syz [ 145.521500][ T1051] usb 2-1: SerialNumber: syz [ 146.672485][ T28] audit: type=1400 audit(1769810076.125:407): avc: denied { setopt } for pid=1809 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.637176][ T1821] net_ratelimit: 3320 callbacks suppressed [ 147.637211][ T1821] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.005204][ T1051] usb 2-1: can't set config #1, error -71 [ 148.018392][ T1051] usb 2-1: USB disconnect, device number 6 [ 153.955208][ T1855] loop1: detected capacity change from 0 to 16 [ 153.985384][ T1855] erofs: (device loop1): mounted with root inode @ nid 36. [ 154.004543][ T1855] SELinux: (dev loop1, type erofs) getxattr errno 117 [ 154.113046][ T1855] fuse: Unknown parameter 'fd0x0000000000000004ÿÿÿÿÿÿÿÿ00000000000000000000' [ 154.189722][ T1865] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.412'. [ 154.307306][ T1869] loop1: detected capacity change from 0 to 512 [ 154.476734][ T1869] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 36864 [ 155.312684][ T28] audit: type=1400 audit(1769810084.885:408): avc: denied { write } for pid=1876 comm="syz.1.415" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 159.874052][ T28] audit: type=1400 audit(1769810089.435:409): avc: denied { sys_module } for pid=1924 comm="syz.4.429" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.418151][ T28] audit: type=1400 audit(1769810092.245:410): avc: denied { mount } for pid=1967 comm="syz.4.439" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.821121][ T1965] loop1: detected capacity change from 0 to 512 [ 162.900791][ T1965] EXT4-fs warning (device loop1): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 162.919355][ T1965] EXT4-fs warning (device loop1): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132787, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop15 [ 170.074401][ T28] audit: type=1400 audit(1769810097.835:411): avc: denied { read } for pid=1981 comm="syz.1.442" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.127500][ T1995] loop1: detected capacity change from 0 to 512 [ 170.179690][ T28] audit: type=1400 audit(1769810097.835:412): avc: denied { open } for pid=1981 comm="syz.1.442" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.214833][ T1995] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 170.248413][ T1995] EXT4-fs (loop1): 1 truncate cleaned up [ 170.254264][ T1995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.263592][ T1995] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.292941][ T1993] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 173.995165][ T1537] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 174.190910][ T1537] EXT4-fs error (device loop1): ext4_release_dquot:6834: comm kworker/u4:7: Failed to release dquot type 1 [ 174.261135][ T285] EXT4-fs (loop1): unmounting filesystem. [ 176.190609][ T2030] 9pnet_fd: Insufficient options for proto=fd [ 176.464230][ T2035] netlink: 25 bytes leftover after parsing attributes in process `syz.3.455'. [ 176.473190][ T2035] device gretap0 entered promiscuous mode [ 176.480358][ T2035] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.455'. [ 176.489710][ T2035] 0ªX¹¦Dö»: renamed from gretap0 [ 176.499970][ T2035] device 00ªX¹¦Dö» left promiscuous mode [ 176.743316][ T2037] syz.5.456 uses obsolete (PF_INET,SOCK_PACKET) [ 176.883434][ T2025] loop1: detected capacity change from 0 to 40427 [ 176.901462][ T2025] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 176.916319][ T2025] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 176.961391][ T2025] F2FS-fs (loop1): invalid crc value [ 177.291843][ T28] audit: type=1400 audit(1769810107.115:413): avc: denied { bind } for pid=2048 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.315729][ T2025] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 177.404609][ T2025] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 177.436545][ T2025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 177.501943][ T285] syz-executor: attempt to access beyond end of device [ 177.501943][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.699235][ T2060] loop1: detected capacity change from 0 to 128 [ 177.728520][ T2060] EXT4-fs (loop1): Test dummy encryption mode enabled [ 177.760748][ T2050] sock: sock_set_timeout: `syz.3.460' (pid 2050) tries to set negative timeout [ 177.770878][ T2060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.813445][ T2060] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.856121][ T2065] overlayfs: failed to clone upperpath [ 177.968974][ T2060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.976282][ T2060] IPv6: NLM_F_CREATE should be set when creating new route [ 178.036810][ T2060] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.044092][ T2060] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.164551][ T28] audit: type=1326 audit(1769810107.945:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.3.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f59aeb9 code=0x7ffc0000 [ 178.383355][ T28] audit: type=1326 audit(1769810107.945:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2064 comm="syz.3.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f59aeb9 code=0x7ffc0000 [ 178.623427][ T285] EXT4-fs (loop1): unmounting filesystem. [ 180.482067][ T2074] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.489505][ T2074] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.541287][ T2074] device bridge_slave_1 left promiscuous mode [ 180.564598][ T2074] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.579966][ T2074] device bridge_slave_0 left promiscuous mode [ 180.592503][ T2074] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.807174][ T2120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.131616][ T2120] device veth0_vlan left promiscuous mode [ 185.138259][ T2120] device veth0_vlan entered promiscuous mode [ 185.147280][ T2120] device veth1_macvtap left promiscuous mode [ 185.155298][ T2120] device veth1_macvtap entered promiscuous mode [ 187.293909][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.490486][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.498620][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.515642][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.522768][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.566325][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.662624][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.674915][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.682032][ T1537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.694514][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.723044][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 187.765617][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.776176][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 193.556902][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.572870][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.581586][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.591885][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.597333][ T2152] overlayfs: failed to clone upperpath [ 193.601389][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.613769][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.622302][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.630947][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.637744][ T2152] overlayfs: failed to clone upperpath [ 193.640837][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.675246][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.702498][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.711894][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.721689][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.730302][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.780283][ T2157] netlink: 168 bytes leftover after parsing attributes in process `syz.1.484'. [ 194.839992][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.892413][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.904270][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.914757][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.923763][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.933941][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.953196][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.443112][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.452291][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.477849][ T28] audit: type=1400 audit(1769810134.305:416): avc: denied { unmount } for pid=2198 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 204.778986][ T28] audit: type=1400 audit(1769810134.485:417): avc: denied { mount } for pid=2200 comm="syz.5.495" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 205.394725][ T2215] process 'syz.4.497' launched '/dev/fd/7' with NULL argv: empty string added [ 205.542938][ T2217] overlayfs: missing 'lowerdir' [ 206.388227][ T28] audit: type=1400 audit(1769810135.225:418): avc: denied { execute_no_trans } for pid=2210 comm="syz.4.497" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.675146][ T2229] device syz_tun entered promiscuous mode [ 208.753210][ T2229] device syz_tun left promiscuous mode [ 209.006171][ T2236] netlink: 'syz.1.501': attribute type 4 has an invalid length. [ 209.013967][ T2236] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.501'. [ 210.137081][ T2253] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2253 comm=syz.3.507 [ 212.299248][ T2261] netlink: 'syz.1.506': attribute type 13 has an invalid length. [ 212.322440][ T2261] gretap0: refused to change device tx_queue_len [ 212.329627][ T2261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 214.358436][ T28] audit: type=1400 audit(1769810143.015:419): avc: denied { read } for pid=2273 comm="syz.1.514" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 217.070594][ T2286] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.077875][ T2286] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.113752][ T28] audit: type=1400 audit(1769810143.015:420): avc: denied { open } for pid=2273 comm="syz.1.514" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 217.138214][ T28] audit: type=1400 audit(1769810143.015:421): avc: denied { ioctl } for pid=2273 comm="syz.1.514" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 217.173613][ T28] audit: type=1400 audit(1769810143.085:422): avc: denied { create } for pid=2255 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.236178][ T28] audit: type=1400 audit(1769810143.175:423): avc: denied { create } for pid=2269 comm="syz.5.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 218.771158][ T2313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'. [ 219.360348][ T2322] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2322 comm=syz.3.526 [ 219.419360][ T2336] netlink: 'syz.5.533': attribute type 1 has an invalid length. [ 219.563989][ T28] audit: type=1400 audit(1769810149.385:424): avc: denied { ioctl } for pid=2361 comm="syz.0.546" path="socket:[23628]" dev="sockfs" ino=23628 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.930640][ T2376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 219.956758][ T2379] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 220.010753][ T28] audit: type=1400 audit(1769810149.835:425): avc: denied { shutdown } for pid=2392 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.060180][ T2401] netlink: 80 bytes leftover after parsing attributes in process `syz.4.563'. [ 220.090456][ T2406] device batadv_slave_1 entered promiscuous mode [ 220.106983][ T2406] device batadv_slave_1 left promiscuous mode [ 220.153882][ T2423] overlayfs: './file1' not a directory [ 220.162764][ T2427] raw_sendmsg: syz.0.575 forgot to set AF_INET. Fix it! [ 221.154491][ T2439] overlayfs: missing 'lowerdir' [ 221.767307][ T28] audit: type=1400 audit(1769810151.595:426): avc: denied { getopt } for pid=2450 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.502355][ T28] audit: type=1326 audit(1769810151.855:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744699aeb9 code=0x7ffc0000 [ 222.539157][ T28] audit: type=1326 audit(1769810151.865:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744699aeb9 code=0x7ffc0000 [ 222.923466][ T2461] bridge0: port 3(vlan2) entered blocking state [ 222.929834][ T2461] bridge0: port 3(vlan2) entered disabled state [ 222.939232][ T2461] device vlan2 entered promiscuous mode [ 223.108822][ T28] audit: type=1400 audit(1769810152.935:429): avc: denied { sqpoll } for pid=2463 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 225.612673][ T28] audit: type=1400 audit(1769810155.435:430): avc: denied { setattr } for pid=2505 comm="syz.5.602" path="socket:[23273]" dev="sockfs" ino=23273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 225.639530][ T2515] netlink: 'syz.3.607': attribute type 32 has an invalid length. [ 225.673104][ T2520] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 230.885017][ T2574] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.777292][ T28] audit: type=1400 audit(1769810162.465:431): avc: denied { setopt } for pid=2610 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 232.875731][ T2630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 233.276007][ T2641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.653'. [ 233.749326][ T2641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 233.778498][ T2641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 233.986412][ T2679] netlink: 'syz.4.672': attribute type 32 has an invalid length. [ 234.009467][ T2685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.675'. [ 234.037109][ T28] audit: type=1400 audit(1769810163.865:432): avc: denied { read } for pid=2684 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.096238][ T2699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 234.124822][ T2699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 234.133670][ T2699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 235.509764][ T2732] overlayfs: missing 'lowerdir' [ 235.547421][ T2738] netlink: 184 bytes leftover after parsing attributes in process `syz.0.698'. [ 235.575739][ T2738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.698'. [ 235.647187][ T297] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 235.671479][ T2760] netlink: 'syz.4.709': attribute type 32 has an invalid length. [ 235.872249][ T2787] overlayfs: failed to clone upperpath [ 235.877943][ T297] usb 2-1: Using ep0 maxpacket: 8 [ 235.884642][ T297] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 235.892930][ T2787] overlayfs: failed to clone upperpath [ 235.930380][ T297] usb 2-1: config 0 has no interface number 0 [ 241.363150][ T297] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 241.405915][ T297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.442211][ T297] usb 2-1: Product: syz [ 241.451952][ T297] usb 2-1: Manufacturer: syz [ 241.461048][ T297] usb 2-1: SerialNumber: syz [ 241.479994][ T297] usb 2-1: config 0 descriptor?? [ 241.495666][ T297] usb 2-1: can't set config #0, error -71 [ 241.505464][ T297] usb 2-1: USB disconnect, device number 7 [ 241.667789][ T2804] tmpfs: Unknown parameter 'no' [ 241.697816][ T2811] rtc_cmos 00:00: Alarms can be up to one day in the future [ 241.715629][ T2814] __nla_validate_parse: 4 callbacks suppressed [ 241.715648][ T2814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.731'. [ 242.638395][ T2840] netlink: 48 bytes leftover after parsing attributes in process `syz.5.740'. [ 242.907867][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.945685][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 243.151767][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 243.161384][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.189252][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 243.220196][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.415569][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.473890][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.482701][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.491238][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.595003][ T2883] netlink: 372 bytes leftover after parsing attributes in process `syz.3.756'. [ 246.212738][ T2927] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 246.225441][ T2927] netlink: 'syz.5.774': attribute type 2 has an invalid length. [ 246.605820][ T2941] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 247.037018][ T2943] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 247.817964][ T2926] overlayfs: failed to clone upperpath [ 249.659107][ T2980] netlink: 'syz.0.786': attribute type 4 has an invalid length. [ 249.666892][ T2980] netlink: 1601 bytes leftover after parsing attributes in process `syz.0.786'. [ 249.778228][ T2986] netlink: 36 bytes leftover after parsing attributes in process `syz.3.794'. [ 249.787401][ T2986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.794'. [ 249.796409][ T2986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'. [ 249.817881][ T2986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'. [ 249.829161][ T2987] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 249.842195][ T2990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.798'. [ 249.900994][ T2994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.799'. [ 249.989973][ T3016] netlink: 292 bytes leftover after parsing attributes in process `syz.3.811'. [ 250.441311][ T28] audit: type=1400 audit(1769810180.265:433): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 250.714334][ T3070] netlink: 25 bytes leftover after parsing attributes in process `syz.4.823'. [ 250.723931][ T3070] device gretap0 entered promiscuous mode [ 250.761157][ T3070] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.823'. [ 250.770840][ T3070] 0ªX¹¦Dö»: renamed from gretap0 [ 250.778377][ T3070] device 00ªX¹¦Dö» left promiscuous mode [ 251.539643][ T3126] 9pnet_fd: Insufficient options for proto=fd [ 252.142473][ T3141] device gretap0 entered promiscuous mode [ 252.156807][ T3141] 0ªX¹¦Dö»: renamed from gretap0 [ 252.165962][ T3141] device 00ªX¹¦Dö» left promiscuous mode [ 252.586632][ T3170] overlayfs: failed to clone lowerpath [ 253.531983][ T3206] netlink: 'syz.5.895': attribute type 4 has an invalid length. [ 254.088951][ T3207] netlink: 'syz.5.895': attribute type 4 has an invalid length. [ 254.682123][ T3213] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 254.715243][ T3213] netlink: 'syz.1.896': attribute type 2 has an invalid length. [ 255.017698][ T3224] __nla_validate_parse: 3 callbacks suppressed [ 255.017719][ T3224] netlink: 25 bytes leftover after parsing attributes in process `syz.5.898'. [ 255.034104][ T3224] device gretap0 entered promiscuous mode [ 255.203764][ T3224] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.898'. [ 255.214069][ T3224] 0ªX¹¦Dö»: renamed from gretap0 [ 255.231393][ T3224] device 00ªX¹¦Dö» left promiscuous mode [ 256.966160][ T28] audit: type=1400 audit(1769810186.795:434): avc: denied { setopt } for pid=3287 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.024010][ T3294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.930'. [ 257.154373][ T297] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 257.967997][ T3308] netlink: 'syz.3.934': attribute type 4 has an invalid length. [ 257.975728][ T3308] netlink: 1601 bytes leftover after parsing attributes in process `syz.3.934'. [ 258.683388][ T297] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 258.700786][ T297] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.720487][ T297] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 258.750873][ T297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.758786][ T297] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 258.768329][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.777999][ T297] usb 2-1: config 0 descriptor?? [ 259.669113][ T3343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'. [ 260.070500][ T3352] netlink: 'syz.4.950': attribute type 4 has an invalid length. [ 260.078485][ T3352] netlink: 1601 bytes leftover after parsing attributes in process `syz.4.950'. [ 260.604789][ T297] chicony 0003:04F2:1123.0005: hidraw0: USB HID v0.04 Device [HID 04f2:1123] on usb-dummy_hcd.1-1/input0 [ 260.653175][ T297] usb 2-1: USB disconnect, device number 8 [ 260.747069][ T3360] fido_id[3360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 261.623414][ T3369] netlink: 'syz.3.955': attribute type 13 has an invalid length. [ 261.645677][ T3369] 0ªX¹¦Dö»: refused to change device tx_queue_len [ 261.652845][ T3369] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 264.050111][ T297] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 264.514349][ T297] usb 2-1: Using ep0 maxpacket: 8 [ 264.520682][ T297] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.534076][ T297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.541029][ T297] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 264.550644][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.560196][ T297] usb 2-1: config 0 descriptor?? [ 264.613653][ T3444] netlink: 124 bytes leftover after parsing attributes in process `syz.4.988'. [ 264.773702][ T3410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'. [ 265.222193][ T3462] tipc: Enabling of bearer rejected, failed to enable media [ 265.606114][ T3464] netlink: 'syz.0.992': attribute type 4 has an invalid length. [ 265.633738][ T3464] netlink: 'syz.0.992': attribute type 4 has an invalid length. [ 265.688535][ T3456] overlayfs: failed to clone upperpath [ 265.871201][ T297] usbhid 2-1:0.0: can't add hid device: -71 [ 265.882502][ T297] usbhid: probe of 2-1:0.0 failed with error -71 [ 265.896883][ T297] usb 2-1: USB disconnect, device number 9 [ 265.952579][ T3475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1000'. [ 267.780993][ T28] audit: type=1400 audit(1769810197.605:435): avc: denied { append } for pid=3512 comm="syz.1.1016" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 267.860845][ T3516] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 267.905015][ T3516] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 267.982399][ T3516] overlayfs: failed to clone upperpath [ 268.124304][ T28] audit: type=1400 audit(1769810197.945:436): avc: denied { create } for pid=3522 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.164131][ T3526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1021'. [ 268.221718][ T28] audit: type=1400 audit(1769810197.945:437): avc: denied { setopt } for pid=3522 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.241766][ T28] audit: type=1400 audit(1769810197.945:438): avc: denied { getopt } for pid=3522 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.852030][ T3560] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1034'. [ 269.861167][ T3560] device gretap0 entered promiscuous mode [ 269.878476][ T3560] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.1034'. [ 269.888276][ T3560] 0ªX¹¦Dö»: renamed from gretap0 [ 269.897579][ T3560] device 00ªX¹¦Dö» left promiscuous mode [ 271.255206][ T28] audit: type=1400 audit(1769810201.085:439): avc: denied { read } for pid=3611 comm="syz.1.1057" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 271.310537][ T28] audit: type=1400 audit(1769810201.135:440): avc: denied { ioctl } for pid=3613 comm="syz.1.1059" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 271.463496][ T28] audit: type=1400 audit(1769810201.285:441): avc: denied { connect } for pid=3625 comm="syz.1.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.809607][ T3642] bridge0: port 1(vlan2) entered blocking state [ 272.815977][ T3642] bridge0: port 1(vlan2) entered disabled state [ 272.824974][ T3642] device vlan2 entered promiscuous mode [ 272.830576][ T3642] device bridge_slave_0 entered promiscuous mode [ 273.950242][ T3672] netlink: 'syz.1.1078': attribute type 4 has an invalid length. [ 273.980481][ T3672] netlink: 'syz.1.1078': attribute type 4 has an invalid length. [ 274.339580][ T1849] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 274.360776][ T1849] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.475798][ T3685] fido_id[3685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.930155][ T3715] overlayfs: failed to resolve './file0': -2 [ 276.673591][ T3741] bridge0: port 3(vlan2) entered blocking state [ 276.680030][ T3741] bridge0: port 3(vlan2) entered disabled state [ 276.689077][ T3741] device vlan2 entered promiscuous mode [ 277.855417][ T3747] 9pnet_fd: Insufficient options for proto=fd [ 278.703424][ T3738] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 278.734463][ T28] audit: type=1400 audit(1769810208.565:442): avc: denied { relabelto } for pid=3737 comm="syz.5.1108" name="bus" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 278.791842][ T28] audit: type=1400 audit(1769810208.565:443): avc: denied { associate } for pid=3737 comm="syz.5.1108" name="bus" dev="tmpfs" ino=845 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_cron_spool_t:s0" [ 278.825345][ T28] audit: type=1400 audit(1769810208.615:444): avc: denied { create } for pid=3768 comm="syz.5.1123" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.846444][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 278.859224][ T28] audit: type=1400 audit(1769810208.615:445): avc: denied { read write } for pid=3768 comm="syz.5.1123" name="file1" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.892211][ T3773] overlayfs: failed to clone upperpath [ 278.904402][ T28] audit: type=1400 audit(1769810208.615:446): avc: denied { open } for pid=3768 comm="syz.5.1123" path="/158/file1" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.935937][ T28] audit: type=1400 audit(1769810208.615:447): avc: denied { watch watch_reads } for pid=3768 comm="syz.5.1123" path="/158/file1" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.960388][ T28] audit: type=1400 audit(1769810208.735:448): avc: denied { watch_reads } for pid=3772 comm="syz.0.1125" path="/210/file0" dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.034301][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 279.042526][ T24] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 279.060759][ T3791] xt_hashlimit: size too large, truncated to 1048576 [ 279.062777][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.085788][ T24] usb 2-1: Product: syz [ 279.094443][ T24] usb 2-1: Manufacturer: syz [ 279.104630][ T24] usb 2-1: SerialNumber: syz [ 279.120396][ T24] usb 2-1: config 0 descriptor?? [ 279.329069][ T3810] overlayfs: failed to clone upperpath [ 279.358066][ T3812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 279.416118][ T3818] overlayfs: failed to clone upperpath [ 279.434094][ T3820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1147'. [ 279.540823][ T3765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.551111][ T3765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.560561][ T24] usb 2-1: USB disconnect, device number 10 [ 280.008709][ T3837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'. [ 280.029268][ T3840] device 00ªX¹¦Dö» entered promiscuous mode [ 280.036486][ T3840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 280.046124][ T3840] device 00ªX¹¦Dö» left promiscuous mode [ 280.338588][ T3857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1164'. [ 281.205819][ T3883] bridge0: port 3(vlan2) entered blocking state [ 281.212158][ T3883] bridge0: port 3(vlan2) entered disabled state [ 281.221362][ T3883] device vlan2 entered promiscuous mode [ 282.664329][ T403] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 282.856618][ T403] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 282.914634][ T403] usb 2-1: config 0 has no interface number 0 [ 282.985217][ T403] usb 2-1: config 0 interface 41 has no altsetting 0 [ 283.050299][ T403] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 283.129394][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.240456][ T403] usb 2-1: Product: syz [ 283.281069][ T403] usb 2-1: Manufacturer: syz [ 283.331726][ T403] usb 2-1: SerialNumber: syz [ 283.811868][ T403] usb 2-1: config 0 descriptor?? [ 284.001499][ T3961] overlayfs: failed to clone upperpath [ 284.103410][ T3966] overlayfs: failed to clone upperpath [ 284.383743][ T3999] tipc: Enabling of bearer rejected, failed to enable media [ 284.462276][ T4007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1231'. [ 284.641953][ T403] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 285.138203][ T403] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 285.151690][ T403] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 285.164463][ T403] CoreChips: probe of 2-1:0.41 failed with error -71 [ 285.177100][ T403] usb 2-1: USB disconnect, device number 11 [ 285.187714][ T28] audit: type=1400 audit(1769810215.015:449): avc: denied { bind } for pid=4044 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.222622][ T28] audit: type=1400 audit(1769810215.045:450): avc: denied { name_bind } for pid=4044 comm="syz.0.1247" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 285.265063][ T28] audit: type=1400 audit(1769810215.045:451): avc: denied { node_bind } for pid=4044 comm="syz.0.1247" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 285.387297][ T4051] overlayfs: failed to clone upperpath [ 285.455675][ T4061] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 285.639870][ T28] audit: type=1400 audit(1769810215.465:452): avc: denied { setattr } for pid=4066 comm="syz.1.1258" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.669732][ T28] audit: type=1400 audit(1769810215.495:453): avc: denied { map } for pid=4068 comm="syz.1.1259" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 285.965902][ T28] audit: type=1400 audit(1769810215.795:454): avc: denied { audit_write } for pid=4091 comm="syz.0.1269" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 286.005941][ T4098] overlayfs: failed to clone upperpath [ 286.016069][ T4098] fuse: Bad value for 'fd' [ 286.083882][ T4112] overlayfs: failed to clone upperpath [ 286.186049][ T4128] overlayfs: failed to clone upperpath [ 286.979568][ T4141] overlayfs: failed to clone upperpath [ 287.059287][ T28] audit: type=1400 audit(1769810216.885:455): avc: denied { bind } for pid=4164 comm="syz.0.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.621046][ T4191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1313'. [ 288.752765][ T28] audit: type=1400 audit(1769810218.575:456): avc: denied { watch } for pid=4253 comm="syz.0.1339" path="/" dev="ramfs" ino=27632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 288.782093][ T28] audit: type=1400 audit(1769810218.605:457): avc: denied { execute } for pid=4253 comm="syz.0.1339" name="file0" dev="ramfs" ino=27633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 288.805750][ T28] audit: type=1400 audit(1769810218.605:458): avc: denied { execute_no_trans } for pid=4253 comm="syz.0.1339" path="/file0" dev="ramfs" ino=27633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 288.880345][ T4269] overlayfs: failed to clone upperpath [ 289.523185][ T4309] overlayfs: failed to clone upperpath [ 289.598469][ T4317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 289.660776][ T4322] tipc: Started in network mode [ 289.666026][ T4322] tipc: Node identity 7f000001, cluster identity 4711 [ 289.673317][ T4322] tipc: Enabled bearer , priority 10 [ 289.681949][ T4322] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 289.690353][ T4322] tipc: Enabled bearer , priority 10 [ 289.712530][ T4329] overlayfs: failed to set xattr on upper [ 290.633975][ T4367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1389'. [ 290.842917][ T403] tipc: Node number set to 2130706433 [ 292.311588][ T4402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1404'. [ 292.566203][ T4418] netlink: 'syz.5.1410': attribute type 2 has an invalid length. [ 292.584719][ T4418] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1410'. [ 293.237544][ T4428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1414'. [ 293.244215][ T4430] netlink: 'syz.3.1415': attribute type 13 has an invalid length. [ 293.272271][ T4430] tipc: Enabling of bearer rejected, failed to enable media [ 293.301796][ T4432] netlink: 'syz.3.1416': attribute type 32 has an invalid length. [ 293.336697][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 294.171961][ T28] audit: type=1400 audit(1769810223.995:459): avc: denied { setopt } for pid=4479 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 294.803432][ T4520] overlayfs: failed to clone upperpath [ 294.805018][ T4519] overlayfs: failed to clone upperpath [ 294.817452][ T4520] overlayfs: failed to clone upperpath [ 294.846497][ T4519] syz.5.1452 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 294.988470][ T4530] 8021q: VLANs not supported on tunl0 [ 295.185753][ T4525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1455'. [ 295.222879][ T4525] netem: unknown loss type 12 [ 295.234003][ T4525] netem: change failed [ 295.275555][ T4536] lo: Caught tx_queue_len zero misconfig [ 295.281321][ T4536] sch_tbf: burst 32852 is lower than device lo mtu (11337746) ! [ 295.771281][ T28] audit: type=1400 audit(1769810225.595:460): avc: denied { setopt } for pid=4545 comm="syz.0.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.794092][ T4588] netlink: 'syz.3.1480': attribute type 12 has an invalid length. [ 296.802577][ T4588] netlink: 'syz.3.1480': attribute type 29 has an invalid length. [ 296.812844][ T4588] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1480'. [ 296.826710][ T4588] netlink: 'syz.3.1480': attribute type 2 has an invalid length. [ 296.835408][ T4588] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 297.800690][ T4614] tipc: Started in network mode [ 297.805688][ T4614] tipc: Node identity ff, cluster identity 4711 [ 297.812106][ T4614] tipc: Enabling of bearer rejected, failed to enable media [ 297.859293][ T28] audit: type=1400 audit(1769810227.685:461): avc: denied { append } for pid=4620 comm="syz.0.1493" name="file0" dev="tmpfs" ino=1692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 297.884044][ T4621] block device autoloading is deprecated and will be removed. [ 297.936391][ T4627] overlayfs: failed to clone upperpath [ 297.974455][ T4632] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 299.318664][ T4648] netlink: 'syz.0.1503': attribute type 27 has an invalid length. [ 299.363028][ T4650] tipc: Enabling of bearer rejected, failed to enable media [ 299.626965][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.668860][ T4648] device veth0_vlan left promiscuous mode [ 299.683397][ T4648] device veth0_vlan entered promiscuous mode [ 299.701417][ T4648] device veth1_macvtap left promiscuous mode [ 299.716874][ T4648] device veth1_macvtap entered promiscuous mode [ 299.915708][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.930030][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.941277][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.951719][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.969522][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 299.988228][ T1537] bridge0: port 1(vlan2) entered blocking state [ 299.994570][ T1537] bridge0: port 1(vlan2) entered forwarding state [ 300.007703][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.016393][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.044839][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 300.059471][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.069111][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 300.087805][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.096825][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.114721][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.133114][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.141599][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.160012][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.168798][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.184689][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.194987][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.205218][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.213509][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.222077][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.240488][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.258884][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.278985][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.299061][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.314767][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.334843][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.362912][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.380823][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.394802][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.413372][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.434438][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.512717][ T28] audit: type=1400 audit(1769810230.335:462): avc: denied { write } for pid=4665 comm="syz.0.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 303.604738][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.639848][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.652967][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.665874][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.683765][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.696746][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.715441][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.755211][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.774680][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 303.801840][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4711 comm=syz.3.1523 [ 304.306706][ T4735] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1533'. [ 304.316229][ T4735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1533'. [ 304.325980][ T4735] tipc: MTU too low for tipc bearer [ 304.752818][ T4758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1543'. [ 306.181197][ T4786] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 307.658110][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1563'. [ 309.414211][ T4828] netlink: 'syz.1.1566': attribute type 298 has an invalid length. [ 310.082645][ T28] audit: type=1326 audit(1769810239.905:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.3.1570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f669f59aeb9 code=0x0 [ 313.555093][ T4892] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1587'. [ 313.593999][ T4892] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1587'. [ 313.857977][ T4898] device dummy0 entered promiscuous mode [ 313.894713][ T4898] device vlan2 entered promiscuous mode [ 317.596117][ T4945] netlink: 'syz.0.1604': attribute type 13 has an invalid length. [ 317.626349][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.656593][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 317.904786][ T28] audit: type=1400 audit(1769810247.735:464): avc: denied { read } for pid=4950 comm="syz.4.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.368262][ T4995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1618'. [ 320.816568][ T5004] cgroup: Setting release_agent not allowed [ 321.663835][ T5016] tipc: Enabling of bearer rejected, failed to enable media [ 322.882005][ T5031] netlink: 'syz.5.1628': attribute type 22 has an invalid length. [ 323.650677][ T5034] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1631'. [ 323.659793][ T5034] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1631'. [ 323.669073][ T5034] netlink: 'syz.5.1631': attribute type 5 has an invalid length. [ 323.678342][ T5034] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1631'. [ 323.691062][ T5039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1633'. [ 323.704424][ T5039] tipc: Enabled bearer , priority 10 [ 324.001295][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1636'. [ 324.299247][ T28] audit: type=1326 audit(1769810254.125:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.337437][ T28] audit: type=1326 audit(1769810254.125:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.393568][ T28] audit: type=1326 audit(1769810254.125:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.444055][ T28] audit: type=1326 audit(1769810254.125:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.494306][ T28] audit: type=1326 audit(1769810254.125:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.534305][ T28] audit: type=1326 audit(1769810254.125:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.594302][ T28] audit: type=1326 audit(1769810254.125:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.648425][ T28] audit: type=1326 audit(1769810254.125:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.674877][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 324.759193][ T28] audit: type=1326 audit(1769810254.125:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 324.793807][ T28] audit: type=1326 audit(1769810254.125:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646b59aeb9 code=0x7ffc0000 [ 327.339857][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 327.789132][ T5113] selinux_netlink_send: 40 callbacks suppressed [ 327.789164][ T5113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5113 comm=syz.5.1658 [ 328.118771][ T5113] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 329.806679][ T5132] overlayfs: failed to clone upperpath [ 330.595214][ T5139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1665'. [ 336.080127][ T5206] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1682'. [ 336.089495][ T5206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1682'. [ 336.642425][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 336.642455][ T28] audit: type=1400 audit(1769810266.335:519): avc: denied { create } for pid=5207 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 336.873125][ T28] audit: type=1400 audit(1769810266.335:520): avc: denied { write } for pid=5207 comm="syz.1.1683" path="socket:[30494]" dev="sockfs" ino=30494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 337.375185][ T5223] netem: incorrect ge model size [ 341.079246][ T5251] overlayfs: missing 'lowerdir' [ 344.080056][ T5271] overlayfs: failed to clone upperpath [ 345.471090][ T5282] team_slave_1: Caught tx_queue_len zero misconfig [ 349.682686][ T28] audit: type=1400 audit(1769810279.505:521): avc: denied { mount } for pid=5330 comm="syz.1.1714" name="/" dev="configfs" ino=13704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 354.701592][ T28] audit: type=1400 audit(1769810284.045:522): avc: denied { setattr } for pid=5382 comm="syz.1.1725" name="file0" dev="tmpfs" ino=1641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 357.442211][ T5411] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1734'. [ 359.890871][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'. [ 360.105205][ T5434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5434 comm=syz.1.1738 [ 361.990356][ T28] audit: type=1400 audit(1769810291.815:523): avc: denied { create } for pid=5454 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 362.012111][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 362.597981][ T5464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5464 comm=syz.3.1746 [ 367.830208][ T5474] 9pnet_fd: Insufficient options for proto=fd [ 369.595877][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1749'. [ 374.469910][ T5525] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 374.478705][ T5525] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 374.779832][ T28] audit: type=1400 audit(1769810304.555:524): avc: denied { watch } for pid=5521 comm="syz.5.1762" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 376.636811][ T28] audit: type=1400 audit(1769810306.455:525): avc: denied { ioctl } for pid=5550 comm="syz.0.1769" path="socket:[31163]" dev="sockfs" ino=31163 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 380.074620][ T5597] tmpfs: Unknown parameter 'nr_b' [ 380.873418][ T5602] netlink: 'syz.1.1782': attribute type 15 has an invalid length. [ 380.886761][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1782'. [ 381.864045][ T5628] netlink: 'syz.1.1791': attribute type 15 has an invalid length. [ 381.943694][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'. [ 382.294455][ T5634] netlink: 'syz.4.1794': attribute type 15 has an invalid length. [ 382.470305][ T5634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'. [ 383.258869][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 388.724896][ T28] audit: type=1400 audit(1769810318.555:526): avc: denied { create } for pid=5679 comm="syz.5.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 393.355298][ T28] audit: type=1400 audit(1769810323.105:527): avc: denied { map } for pid=5701 comm="syz.3.1813" path="socket:[32263]" dev="sockfs" ino=32263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 401.452261][ T5773] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1832'. [ 403.354450][ T5780] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 405.272445][ T28] audit: type=1400 audit(1769810333.185:528): avc: denied { relabelto } for pid=5758 comm="syz.3.1827" name="377" dev="tmpfs" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 405.299732][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 405.320802][ T5773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1832'. [ 405.401747][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 405.410959][ T28] audit: type=1400 audit(1769810333.185:529): avc: denied { associate } for pid=5758 comm="syz.3.1827" name="377" dev="tmpfs" ino=1999 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 405.421021][ T5773] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1832'. [ 405.446684][ T5773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1832'. [ 405.468086][ T5773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1832'. [ 406.473538][ T5794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1836'. [ 406.482773][ T28] audit: type=1400 audit(1769810336.295:530): avc: denied { write } for pid=286 comm="syz-executor" name="377" dev="tmpfs" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 406.538792][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'. [ 407.807293][ T5794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1836'. [ 407.816727][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'. [ 407.825758][ T5794] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1836'. [ 407.834888][ T5794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1836'. [ 407.843992][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1836'. [ 407.854683][ T28] audit: type=1400 audit(1769810336.295:531): avc: denied { remove_name } for pid=286 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 408.003568][ T5811] netlink: 'syz.4.1837': attribute type 4 has an invalid length. [ 408.191988][ T5792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1835'. [ 410.028944][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 410.053883][ T5792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1835'. [ 410.067101][ T28] audit: type=1400 audit(1769810336.295:532): avc: denied { rmdir } for pid=286 comm="syz-executor" name="377" dev="tmpfs" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 412.466994][ T5850] __nla_validate_parse: 4 callbacks suppressed [ 412.467015][ T5850] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1851'. [ 412.521163][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 412.530593][ T5850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1851'. [ 412.539737][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 412.550263][ T5850] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1851'. [ 412.559494][ T5850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1851'. [ 412.568704][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1851'. [ 414.257102][ T5867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1856'. [ 414.288946][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 414.298109][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1856'. [ 420.286565][ T5926] __nla_validate_parse: 11 callbacks suppressed [ 420.286586][ T5926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1870'. [ 420.367711][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 420.384297][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1870'. [ 420.700852][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 420.724528][ T5926] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1870'. [ 420.801572][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1870'. [ 420.819752][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1870'. [ 421.405111][ T5940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1872'. [ 421.447568][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 421.464756][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1872'. [ 440.619313][ T6074] __nla_validate_parse: 11 callbacks suppressed [ 440.619334][ T6074] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1905'. [ 440.804522][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'. [ 441.904665][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1905'. [ 441.972959][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'. [ 442.000648][ T6074] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1905'. [ 442.016374][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1905'. [ 442.034759][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1905'. [ 442.099814][ T6088] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1908'. [ 442.115424][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 442.125659][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'. [ 455.030431][ T6191] __nla_validate_parse: 11 callbacks suppressed [ 455.030453][ T6191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1931'. [ 455.085904][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 455.107022][ T6191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1931'. [ 455.125900][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 455.144890][ T6191] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1931'. [ 455.207158][ T6191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1931'. [ 455.227507][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'. [ 457.147049][ T6205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1935'. [ 457.167199][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 457.176566][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1935'. [ 465.177748][ T6286] __nla_validate_parse: 11 callbacks suppressed [ 465.177771][ T6286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1955'. [ 466.668947][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 466.680826][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1955'. [ 466.691535][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 466.702369][ T6286] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1955'. [ 467.000362][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1955'. [ 467.011612][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1955'. [ 469.293832][ T6316] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1960'. [ 469.674439][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'. [ 469.688711][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1960'. [ 474.385721][ T6370] __nla_validate_parse: 11 callbacks suppressed [ 474.385742][ T6370] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1972'. [ 474.401301][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 474.411748][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1972'. [ 474.420764][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 474.431474][ T6370] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1972'. [ 474.453535][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1972'. [ 474.463466][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1972'. [ 506.643767][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.684227][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.691867][ T6581] device bridge_slave_0 entered promiscuous mode [ 506.717704][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.432846][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.459818][ T6581] device bridge_slave_1 entered promiscuous mode [ 508.105959][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.114665][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.142564][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 508.181029][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 508.192077][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.199190][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.568000][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.578016][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.586713][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.595050][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.602117][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.676000][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 509.684549][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.692933][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 509.701394][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.750124][ T6581] device veth0_vlan entered promiscuous mode [ 509.762286][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 509.771635][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.780521][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.789081][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.797472][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.805312][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 511.939911][ T6661] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2035'. [ 511.950636][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 511.959943][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2035'. [ 511.971920][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 511.981959][ T6661] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2035'. [ 511.991242][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2035'. [ 512.000471][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2035'. [ 512.012748][ T6581] device veth1_macvtap entered promiscuous mode [ 512.035480][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 512.162408][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 512.175464][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 512.184818][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 512.812303][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 512.821194][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 512.829685][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.277783][ T28] audit: type=1400 audit(1769810444.025:533): avc: denied { read } for pid=6683 comm="syz.6.2039" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 515.467624][ T28] audit: type=1400 audit(1769810444.025:534): avc: denied { open } for pid=6683 comm="syz.6.2039" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 515.777604][ T28] audit: type=1400 audit(1769810444.045:535): avc: denied { ioctl } for pid=6683 comm="syz.6.2039" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 515.877089][ T2149] tipc: Disabling bearer [ 515.882683][ T2149] tipc: Disabling bearer [ 515.888573][ T2149] tipc: Disabling bearer [ 515.897532][ T2149] tipc: Left network mode [ 517.004063][ T6706] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2046'. [ 517.017140][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 517.026342][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2046'. [ 517.035542][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 517.044795][ T6706] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2046'. [ 519.246673][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2046'. [ 519.269821][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2046'. [ 523.330142][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2053'. [ 523.434013][ T6751] loop6: detected capacity change from 0 to 256 [ 523.444424][ T6751] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 523.455322][ T6751] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 523.466781][ T6751] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 532.598361][ T2149] device vlan2 left promiscuous mode [ 532.617097][ T2149] bridge0: port 3(vlan2) entered disabled state [ 533.680410][ T2149] device bridge_slave_1 left promiscuous mode [ 533.722242][ T2149] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.699702][ T2149] device bridge_slave_0 left promiscuous mode [ 534.706028][ T2149] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.240881][ T6832] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2071'. [ 535.249992][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 535.259803][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 535.269004][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 535.278438][ T6832] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2071'. [ 535.287584][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 535.296782][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2071'. [ 540.069167][ T6872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2081'. [ 540.085919][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 540.104315][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2081'. [ 546.422927][ T6919] __nla_validate_parse: 11 callbacks suppressed [ 546.422949][ T6919] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2091'. [ 546.439372][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 546.448391][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2091'. [ 546.457469][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 546.466543][ T6919] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2091'. [ 546.476071][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2091'. [ 546.485526][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2091'. [ 546.531221][ T6925] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2093'. [ 546.540705][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 546.549663][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2093'. [ 557.966359][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 557.973905][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 557.991707][ T7015] device veth0_vlan left promiscuous mode [ 557.998216][ T7015] device veth0_vlan entered promiscuous mode [ 558.007259][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 558.025804][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 558.084749][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 558.093032][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 558.111698][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 558.511777][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 558.548483][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 558.557333][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 558.572578][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.586257][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.608225][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 572.283742][ T7176] __nla_validate_parse: 11 callbacks suppressed [ 572.283766][ T7176] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2150'. [ 572.301167][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 572.311326][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2150'. [ 572.320960][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 573.315598][ T7176] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2150'. [ 573.346571][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2150'. [ 573.367147][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2150'. [ 577.826426][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2165'. [ 579.380746][ T7248] xt_hashlimit: max too large, truncated to 1048576 [ 579.471108][ T7249] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.478569][ T7249] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.495732][ T7249] device veth0_vlan left promiscuous mode [ 579.501890][ T7249] device veth0_vlan entered promiscuous mode [ 579.510749][ T7249] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 579.518896][ T7249] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 579.784927][ T2008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.793302][ T2008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.974690][ T2008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 585.333327][ T7279] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2175'. [ 585.352608][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 585.373246][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2175'. [ 585.404587][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 585.435719][ T7279] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2175'. [ 585.444900][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2175'. [ 585.453876][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2175'. [ 587.134643][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2180'. [ 587.247231][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 590.150684][ T7321] xt_hashlimit: max too large, truncated to 1048576 [ 602.450231][ T7395] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2204'. [ 602.471076][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'. [ 602.844550][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2204'. [ 602.857813][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'. [ 602.876114][ T7395] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2204'. [ 602.899056][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2204'. [ 602.933663][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2204'. [ 602.944544][ T7399] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2205'. [ 602.961434][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 603.036258][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2205'. [ 604.973220][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.035500][ T7433] device veth0_vlan left promiscuous mode [ 605.046511][ T7433] device veth0_vlan entered promiscuous mode [ 605.078576][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 606.249596][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 606.399936][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 606.417942][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 607.523310][ T7463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.530801][ T7463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 608.505347][ T7463] wireguard: wg1: Could not create IPv4 socket [ 608.511586][ T7463] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 608.527168][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 608.541530][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 615.908924][ T7524] __nla_validate_parse: 4 callbacks suppressed [ 615.908945][ T7524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2232'. [ 615.944298][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'. [ 615.956412][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2232'. [ 615.984824][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'. [ 616.016234][ T7524] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2232'. [ 616.047964][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2232'. [ 616.135655][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2232'. [ 618.601121][ T7547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2238'. [ 618.638801][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 618.681183][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2238'. [ 628.259728][ T7628] __nla_validate_parse: 5 callbacks suppressed [ 628.259747][ T7628] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2259'. [ 628.306112][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 628.332659][ T7630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2260'. [ 628.351908][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2259'. [ 628.361381][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 628.382396][ T7628] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2259'. [ 628.396645][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2259'. [ 628.406518][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2259'. [ 628.593353][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 628.601352][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 628.624492][ T7641] device veth0_vlan left promiscuous mode [ 628.630574][ T7641] device veth0_vlan entered promiscuous mode [ 628.640366][ T7641] bridge0: port 3(vlan2) entered blocking state [ 628.646689][ T7641] bridge0: port 3(vlan2) entered forwarding state [ 628.653818][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 628.662268][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 631.745868][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 631.795113][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 631.803991][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 631.812796][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 631.824743][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 631.833092][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 631.841961][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 631.924428][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 631.961977][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.972666][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 631.980570][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.325296][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.657179][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.710313][ T7667] device veth0_vlan left promiscuous mode [ 634.727193][ T7667] device veth0_vlan entered promiscuous mode [ 634.758164][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 635.265414][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.297352][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.312225][ T2149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 636.614703][ T7688] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 636.651533][ T7688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 636.887093][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2276'. [ 637.616485][ T7711] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2282'. [ 637.734433][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 637.754674][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2282'. [ 637.905075][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 637.977523][ T7711] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2282'. [ 638.108803][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2282'. [ 638.120509][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'. [ 638.783269][ T7718] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2284'. [ 638.841375][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2284'. [ 642.206399][ T7766] __nla_validate_parse: 12 callbacks suppressed [ 642.206419][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 642.251679][ T7766] xt_hashlimit: max too large, truncated to 1048576 [ 645.421745][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2306'. [ 645.665702][ T7810] xt_hashlimit: max too large, truncated to 1048576 [ 645.853155][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 645.862626][ T7811] wireguard: wg1: Could not create IPv4 socket [ 645.868900][ T7811] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 645.966900][ T7812] xt_hashlimit: max too large, truncated to 1048576 [ 646.033559][ T7814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2309'. [ 646.077044][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 646.103645][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2309'. [ 646.124581][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 646.137756][ T7814] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2309'. [ 646.286221][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2309'. [ 646.297774][ T7814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2309'. [ 647.068708][ T7831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2313'. [ 647.079254][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.190483][ T7835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 647.208004][ T7835] device veth0_vlan left promiscuous mode [ 647.214763][ T7835] device veth0_vlan entered promiscuous mode [ 647.225289][ T7835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 647.614656][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 647.698162][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 647.779360][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 648.046392][ T7846] fuse: Invalid rootmode [ 658.761973][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 658.785811][ T7894] device veth0_vlan left promiscuous mode [ 658.792375][ T7894] device veth0_vlan entered promiscuous mode [ 658.803268][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 659.014713][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 659.026911][ T7895] device veth0_vlan left promiscuous mode [ 659.033044][ T7895] device veth0_vlan entered promiscuous mode [ 659.040894][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 659.050004][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 659.073124][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 659.081461][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 659.089645][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 659.131653][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 659.140012][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 660.031577][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2339'. [ 660.165224][ T7925] xt_hashlimit: max too large, truncated to 1048576 [ 660.636414][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 660.662979][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 661.914803][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2344'. [ 661.962877][ T7945] device bridge_slave_0 left promiscuous mode [ 661.979387][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.459857][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 664.487060][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 666.959859][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 666.971481][ T8000] device veth0_vlan left promiscuous mode [ 666.978808][ T8000] device veth0_vlan entered promiscuous mode [ 666.987087][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 667.020091][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 667.064232][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 667.080359][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.134614][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.267383][ T8005] xt_hashlimit: max too large, truncated to 1048576 [ 667.631011][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2361'. [ 668.455465][ T8028] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2364'. [ 668.468906][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2364'. [ 668.487387][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2364'. [ 668.501707][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2364'. [ 668.522163][ T8028] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2364'. [ 669.093983][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2364'. [ 669.108858][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2364'. [ 669.592447][ T8039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 669.600330][ T8039] wireguard: wg1: Could not create IPv4 socket [ 669.606592][ T8039] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 672.238220][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2374'. [ 677.572083][ T8106] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2383'. [ 677.686108][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 678.106237][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2383'. [ 678.129476][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 678.334192][ T8106] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2383'. [ 678.353350][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2383'. [ 678.379605][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2383'. [ 678.885804][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 678.904221][ T8133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 680.889780][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'. [ 680.898469][ T8146] xt_hashlimit: max too large, truncated to 1048576 [ 681.518733][ T8155] xt_hashlimit: max too large, truncated to 1048576 [ 681.882083][ T8159] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2395'. [ 681.902480][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2395'. [ 686.868815][ T8196] __nla_validate_parse: 5 callbacks suppressed [ 686.868895][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2406'. [ 687.389900][ T8202] xt_hashlimit: max too large, truncated to 1048576 [ 689.183150][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 689.236611][ T8221] device veth0_vlan left promiscuous mode [ 689.246603][ T8221] device veth0_vlan entered promiscuous mode [ 689.275530][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 689.775678][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.903481][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 689.938655][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.062798][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 691.087809][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 693.051302][ T8261] fuse: Bad value for 'fd' [ 696.611663][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 696.619549][ T8297] wireguard: wg1: Could not create IPv4 socket [ 696.625841][ T8297] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 697.163344][ T8302] xt_hashlimit: max too large, truncated to 1048576 [ 710.176123][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 710.199932][ T8373] device veth0_vlan left promiscuous mode [ 710.206497][ T8373] device veth0_vlan entered promiscuous mode [ 710.217644][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 710.718525][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 710.783855][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 711.222586][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 711.235713][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 711.251542][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 711.444793][ T8382] xt_hashlimit: max too large, truncated to 1048576 [ 711.760319][ T8389] xt_hashlimit: max too large, truncated to 1048576 [ 712.565714][ T8395] netlink: 'syz.5.2453': attribute type 5 has an invalid length. [ 712.573718][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2453'. [ 713.200018][ T8406] xt_hashlimit: max too large, truncated to 1048576 [ 717.367656][ T8422] fuse: Unknown parameter '0x0000000000000003' [ 718.130669][ T8434] xt_hashlimit: max too large, truncated to 1048576 [ 719.209680][ T8454] netlink: 'syz.0.2467': attribute type 5 has an invalid length. [ 719.224694][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 724.675101][ T8477] xt_hashlimit: max too large, truncated to 1048576 [ 724.960368][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 724.978360][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 732.824877][ T8563] xt_hashlimit: max too large, truncated to 1048576 [ 734.644586][ T28] audit: type=1326 audit(1769810664.475:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8591 comm="syz.4.2502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd59aeb9 code=0x0 [ 742.220601][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 742.238581][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 744.151742][ T8647] xt_hashlimit: max too large, truncated to 1048576 [ 760.489929][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 762.314196][ T8730] xt_hashlimit: max too large, truncated to 1048576 [ 764.321122][ T28] audit: type=1326 audit(1769810694.145:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.5.2535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ac759aeb9 code=0x0 [ 764.578879][ T8751] xt_hashlimit: max too large, truncated to 1048576 [ 767.448223][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2548'. [ 773.554224][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 773.567707][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 777.184541][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 777.200472][ T8904] device veth0_vlan left promiscuous mode [ 777.206581][ T8904] device veth0_vlan entered promiscuous mode [ 777.215047][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 778.875484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 778.883929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 778.897333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 779.487416][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 779.530280][ T8927] device veth0_vlan left promiscuous mode [ 779.555339][ T8927] device veth0_vlan entered promiscuous mode [ 779.604880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 779.616164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 779.641716][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 787.311767][ T8984] xt_hashlimit: max too large, truncated to 1048576 [ 790.010553][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 790.047697][ T9022] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2608'. [ 790.917892][ T9029] xt_hashlimit: max too large, truncated to 1048576 [ 799.196719][ T9091] xt_hashlimit: max too large, truncated to 1048576 [ 799.265154][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 802.389761][ T9093] device veth0_vlan left promiscuous mode [ 802.421561][ T9093] device veth0_vlan entered promiscuous mode [ 802.559176][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 804.015610][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 804.024534][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 804.040164][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 805.001335][ T9120] xt_hashlimit: max too large, truncated to 1048576 [ 825.301296][ T9221] overlayfs: failed to clone lowerpath [ 831.945904][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 831.972567][ T9259] wireguard: wg1: Could not create IPv4 socket [ 832.078074][ T9261] overlayfs: failed to clone lowerpath [ 832.155378][ T9263] incfs: Error accessing: ./file1. [ 832.160699][ T9263] incfs: mount failed -2 [ 833.134658][ T9259] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 833.915013][ T9276] overlayfs: failed to clone lowerpath [ 833.991420][ T9278] incfs: Error accessing: ./file1. [ 833.996794][ T9278] incfs: mount failed -2 [ 836.611531][ T9289] overlayfs: failed to clone lowerpath [ 837.130080][ T9291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 837.737646][ T9291] device veth0_vlan left promiscuous mode [ 837.969625][ T9291] device veth0_vlan entered promiscuous mode [ 838.114449][ T9304] overlayfs: failed to clone lowerpath [ 838.192439][ T9307] incfs: Error accessing: ./file1. [ 838.197756][ T9307] incfs: mount failed -2 [ 839.248724][ T9291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 839.276594][ T28] audit: type=1400 audit(1769810769.105:538): avc: denied { read } for pid=9306 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 839.587512][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 839.600469][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 839.625074][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 840.270470][ T28] audit: type=1400 audit(1769810770.095:539): avc: denied { execmem } for pid=9322 comm="syz.6.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 840.889668][ T9333] overlayfs: failed to clone lowerpath Stopping sshd: stopped /usr/sbin/sshd (pid 194) OK [ 841.244175][ T9344] xt_hashlimit: max too large, truncated to 1048576 [ 844.243055][ T28] audit: type=1400 audit(1769810771.095:540): avc: denied { module_request } for pid=9335 comm="syz.0.2674" kmod="ipt_addrtype" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 Stopping crond: stopped /usr/sbin/crond (pid 187) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 141) [ 850.015438][ T28] audit: type=1400 audit(1769810779.845:541): avc: denied { search } for pid=9384 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 852.275899][ T9418] overlayfs: failed to clone lowerpath [ 852.355505][ T9420] incfs: Error accessing: ./file1. [ 852.360770][ T9420] incfs: mount failed -2 [ 855.694248][ T9421] overlayfs: failed to clone lowerpath [ 855.708987][ T9423] incfs: Error accessing: ./file1. [ 855.714291][ T9423] incfs: mount failed -2 [ 855.736166][ T28] audit: type=1400 audit(1769810782.195:542): avc: denied { create } for pid=9400 comm="syz.0.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 857.777570][ T28] audit: type=1400 audit(1769810782.195:543): avc: denied { write } for pid=9400 comm="syz.0.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 857.834073][ T28] audit: type=1400 audit(1769810782.195:544): avc: denied { nlmsg_write } for pid=9400 comm="syz.0.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 857.999363][ T28] audit: type=1400 audit(1769810785.605:545): avc: denied { write } for pid=142 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.162328][ T9437] xt_hashlimit: max too large, truncated to 1048576 [ 858.579000][ T28] audit: type=1400 audit(1769810785.615:546): avc: denied { remove_name } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.625254][ T28] audit: type=1400 audit(1769810785.615:547): avc: denied { unlink } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 858.765854][ T28] audit: type=1400 audit(1769810786.115:548): avc: denied { unlink } for pid=142 comm="dhcpcd" name="pid" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK [ 858.845367][ T28] audit: type=1400 audit(1769810786.165:549): avc: denied { setopt } for pid=9427 comm="syz.0.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 858.872693][ T28] audit: type=1400 audit(1769810787.695:550): avc: denied { read write } for pid=9425 comm="ip" path="/dev/console" dev="rootfs" ino=4527 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 Stopping iptables: [ 858.908773][ T28] audit: type=1400 audit(1769810788.735:551): avc: denied { read write } for pid=9451 comm="iptables" path="/dev/console" dev="rootfs" ino=4527 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 859.074137][ T9455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2697'. OK [ 859.224125][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 859.793427][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2697'. Stopping system message bus: [ 859.858323][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 859.873501][ T9455] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2697'. [ 859.885792][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2697'. [ 859.904829][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2697'. [ 860.591460][ T9485] overlayfs: failed to clone lowerpath [ 860.908788][ T9485] incfs: Error accessing: ./file1. [ 860.914776][ T9485] incfs: mount failed -2 [ 862.544743][ T9493] overlayfs: failed to clone lowerpath [ 862.704142][ T9496] incfs: Error accessing: ./file1. [ 862.709743][ T9496] incfs: mount failed -2 [ 864.556259][ T9497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 864.651524][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 864.651543][ T28] audit: type=1400 audit(1769810792.575:558): avc: denied { mount } for pid=9481 comm="syz.5.2701" name="/" dev="incremental-fs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 done [ 864.775179][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.782349][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.800329][ T9463] device bridge_slave_0 entered promiscuous mode [ 865.311860][ T9509] overlayfs: failed to clone lowerpath [ 865.483883][ T9511] incfs: Error accessing: ./file1. [ 865.489541][ T9511] incfs: mount failed -2 [ 867.399427][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.720154][ T9513] overlayfs: failed to clone lowerpath [ 867.797038][ T9515] incfs: Error accessing: ./file1. [ 867.802351][ T9515] incfs: mount failed -2 serialport: VM disconnected.