last executing test programs: 1m33.715303101s ago: executing program 3 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000002c0)={0xf000, 0x1000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m33.659532577s ago: executing program 3 (id=283): add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec0460f1c460041ae", 0x42}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m33.606161082s ago: executing program 3 (id=284): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x2000c080) syz_genetlink_get_family_id$nfc(&(0x7f0000002500), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002580), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1m33.594917943s ago: executing program 3 (id=285): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m33.52236626s ago: executing program 3 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x1000, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1m33.211498121s ago: executing program 3 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.211388291s ago: executing program 32 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.087458104s ago: executing program 5 (id=2076): pipe(&(0x7f0000001300)) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x2710}}, 0x100) 899.069202ms ago: executing program 4 (id=2081): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 817.67806ms ago: executing program 4 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000000), 0x2}, 0x20) 769.723714ms ago: executing program 4 (id=2086): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 769.549604ms ago: executing program 4 (id=2087): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@grpid}, {@barrier}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r0}, 0x18) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 720.500919ms ago: executing program 4 (id=2089): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 720.114269ms ago: executing program 4 (id=2090): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100031418110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 453.862956ms ago: executing program 0 (id=2099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 453.441846ms ago: executing program 0 (id=2100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000030000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 414.767939ms ago: executing program 0 (id=2104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 382.743863ms ago: executing program 0 (id=2106): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) flock(r2, 0x5) 317.417619ms ago: executing program 0 (id=2110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) 317.017629ms ago: executing program 0 (id=2111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 231.303358ms ago: executing program 2 (id=2119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 188.810531ms ago: executing program 2 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) 144.483456ms ago: executing program 1 (id=2123): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 144.249776ms ago: executing program 2 (id=2124): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 144.065976ms ago: executing program 1 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setresgid(0xee00, 0x0, 0x0) 143.739356ms ago: executing program 2 (id=2126): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 126.733208ms ago: executing program 5 (id=2127): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000030000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 121.633348ms ago: executing program 2 (id=2128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/18, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x888, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r0) 116.510408ms ago: executing program 1 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001340)=ANY=[@ANYBLOB="280000001800010000000000000000000a00000008000000e00000020c00088008000c0058"], 0x28}}, 0x0) 71.566783ms ago: executing program 5 (id=2130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 71.386353ms ago: executing program 1 (id=2131): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x0, 0x0}, 0x10) 71.139383ms ago: executing program 1 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r0) 38.571396ms ago: executing program 5 (id=2133): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 26.497278ms ago: executing program 5 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x10}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x74}}, 0x0) 3.34124ms ago: executing program 1 (id=2135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) 529.44µs ago: executing program 2 (id=2136): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=2137): pipe(&(0x7f0000001300)) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x2710}}, 0x100) kernel console output (not intermixed with test programs): fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.694451][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.712601][ T24] audit: type=1400 audit(1761162277.500:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.744144][ T24] audit: type=1400 audit(1761162277.560:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.769618][ T24] audit: type=1400 audit(1761162277.560:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.798360][ T24] audit: type=1400 audit(1761162277.640:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.823974][ T24] audit: type=1400 audit(1761162277.640:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.850186][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.562952][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.570062][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.577600][ T275] device bridge_slave_0 entered promiscuous mode [ 22.585269][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.592437][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.599839][ T275] device bridge_slave_1 entered promiscuous mode [ 22.671616][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.678828][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.686179][ T277] device bridge_slave_0 entered promiscuous mode [ 22.694067][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.701133][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.708484][ T277] device bridge_slave_1 entered promiscuous mode [ 22.752197][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.759280][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.766767][ T280] device bridge_slave_0 entered promiscuous mode [ 22.776188][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.783387][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.790772][ T280] device bridge_slave_1 entered promiscuous mode [ 22.804477][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.811562][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.818958][ T276] device bridge_slave_0 entered promiscuous mode [ 22.829741][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.836790][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.844059][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.851120][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.859240][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.866302][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.873880][ T276] device bridge_slave_1 entered promiscuous mode [ 22.939238][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.946283][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.953779][ T282] device bridge_slave_0 entered promiscuous mode [ 22.962494][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.969572][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.976999][ T282] device bridge_slave_1 entered promiscuous mode [ 23.024273][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.032874][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.041110][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.048968][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.073056][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.081313][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.088395][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.137888][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.145650][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.153803][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.163131][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.170178][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.177541][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.185631][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.192660][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.200056][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.217960][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.225838][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.250227][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.258292][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.266382][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.273504][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.281105][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.289377][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.296391][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.303933][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.311888][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.319939][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.339623][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.348156][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.355485][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.363968][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.371065][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.378410][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.386530][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.393571][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.401094][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.413887][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.421924][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.429969][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.438222][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.452795][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.465251][ T275] device veth0_vlan entered promiscuous mode [ 23.475941][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.484066][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.491608][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.501001][ T280] device veth0_vlan entered promiscuous mode [ 23.512159][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.520553][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.528517][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.536809][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.543851][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.551680][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.559387][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.566816][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.576144][ T275] device veth1_macvtap entered promiscuous mode [ 23.588626][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.597530][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.605619][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.612669][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.620195][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.628389][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.636432][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.644911][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.654266][ T280] device veth1_macvtap entered promiscuous mode [ 23.666399][ T277] device veth0_vlan entered promiscuous mode [ 23.674347][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.682009][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.690485][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.698841][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.707230][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.715092][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.723101][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.731396][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.738937][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.757080][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.765335][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.773833][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.782463][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.791137][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.799353][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.807719][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.815966][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.824350][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.832814][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.843417][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.851456][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.867552][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.874980][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.875313][ T275] request_module fs-gadgetfs succeeded, but still no fs? [ 23.882665][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.897673][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.907850][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.916082][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.925231][ T277] device veth1_macvtap entered promiscuous mode [ 23.932593][ T276] device veth0_vlan entered promiscuous mode [ 23.939233][ T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.945532][ T276] device veth1_macvtap entered promiscuous mode [ 23.964294][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.978762][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.987713][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.996071][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.004131][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.012636][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.021081][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.029500][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.040506][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.048499][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.058969][ T282] device veth0_vlan entered promiscuous mode [ 24.078245][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.089406][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.097567][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.105871][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.114650][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.133216][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.167263][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.184292][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.200474][ T282] device veth1_macvtap entered promiscuous mode [ 24.221093][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.250750][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.275627][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.801355][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.832397][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.945981][ T332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.989700][ T332] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4274882444 (136796238208 ns) > initial count (11109752672 ns). Using initial count to start timer. [ 25.032809][ T336] tmpfs: Unsupported parameter 'mpol' [ 26.227546][ T283] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.235124][ T25] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.559735][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.575555][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 26.575565][ T24] audit: type=1400 audit(1761162282.410:126): avc: denied { create } for pid=371 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.604468][ T24] audit: type=1400 audit(1761162282.410:127): avc: denied { write } for pid=371 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.624596][ T24] audit: type=1400 audit(1761162282.410:128): avc: denied { nlmsg_write } for pid=371 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.645775][ T24] audit: type=1400 audit(1761162282.450:129): avc: denied { create } for pid=373 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.672893][ T283] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 26.681656][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.691556][ T283] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 26.701880][ T25] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 26.710962][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.719140][ T283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 26.728407][ T283] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 26.739761][ T25] usb 4-1: config 0 descriptor?? [ 26.745001][ T283] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 26.846681][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 26.866801][ T283] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 26.876110][ T283] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 26.884576][ T283] usb 5-1: Product: syz [ 26.889343][ T283] usb 5-1: Manufacturer: syz [ 26.928026][ T283] cdc_wdm 5-1:1.0: skipping garbage [ 26.933554][ T283] cdc_wdm 5-1:1.0: skipping garbage [ 26.942188][ T283] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 26.976786][ T15] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 26.987557][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 26.998675][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 27.132337][ T5] usb 5-1: USB disconnect, device number 2 [ 27.176758][ T15] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 27.185925][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.194035][ T15] usb 1-1: Product: syz [ 27.198357][ T15] usb 1-1: Manufacturer: syz [ 27.202959][ T15] usb 1-1: SerialNumber: syz [ 27.208279][ T15] usb 1-1: config 0 descriptor?? [ 27.218087][ T25] hid-picolcd 0003:04D8:C002.0001: item fetching failed at offset 5/7 [ 27.226437][ T25] hid-picolcd 0003:04D8:C002.0001: device report parse failed [ 27.234034][ T25] hid-picolcd: probe of 0003:04D8:C002.0001 failed with error -22 [ 27.356796][ T283] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.420672][ T25] usb 4-1: USB disconnect, device number 2 [ 27.596752][ T283] usb 2-1: Using ep0 maxpacket: 32 [ 27.696704][ T24] audit: type=1400 audit(1761162283.480:130): avc: denied { sys_module } for pid=381 comm="syz.2.28" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 27.776759][ T283] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 27.784890][ T283] usb 2-1: config 0 has no interface number 0 [ 27.791197][ T283] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.802274][ T283] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.812314][ T385] udc-core: couldn't find an available UDC or it's busy [ 27.819288][ T385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.826912][ T283] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 27.835955][ T283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.856186][ T283] usb 2-1: config 0 descriptor?? [ 28.116693][ T15] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 28.457861][ T24] audit: type=1400 audit(1761162284.300:131): avc: denied { create } for pid=395 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.477812][ T24] audit: type=1400 audit(1761162284.300:132): avc: denied { bind } for pid=395 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.497102][ T24] audit: type=1400 audit(1761162284.320:133): avc: denied { setopt } for pid=395 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.606764][ T283] uclogic 0003:28BD:0094.0002: failed retrieving string descriptor #100: -71 [ 28.615630][ T283] uclogic 0003:28BD:0094.0002: failed retrieving pen parameters: -71 [ 28.623686][ T24] audit: type=1400 audit(1761162284.460:134): avc: denied { wake_alarm } for pid=399 comm="syz.2.34" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.624015][ T283] uclogic 0003:28BD:0094.0002: pen probing failed: -71 [ 28.651826][ T283] uclogic 0003:28BD:0094.0002: failed probing parameters: -71 [ 28.659740][ T283] uclogic: probe of 0003:28BD:0094.0002 failed with error -71 [ 28.679600][ T24] audit: type=1400 audit(1761162284.520:135): avc: denied { write } for pid=399 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.684548][ T283] usb 2-1: USB disconnect, device number 2 [ 28.768249][ T15] usb 5-1: unable to get BOS descriptor set [ 28.816769][ T15] usb 5-1: not running at top speed; connect to a high speed hub [ 28.929490][ T15] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 29.069160][ T283] usb 1-1: USB disconnect, device number 2 [ 29.207258][ T20] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.419044][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.428137][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.436103][ T15] usb 5-1: Product: syz [ 29.440450][ T15] usb 5-1: Manufacturer: syz [ 29.445048][ T15] usb 5-1: SerialNumber: syz [ 29.767150][ T387] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 29.820020][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 30.106867][ T15] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 30.115238][ T15] usb 5-1: USB disconnect, device number 3 [ 30.166747][ T20] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 30.175236][ T20] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 30.185333][ T20] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 30.290818][ T20] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 30.300858][ T20] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 30.314003][ T20] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 30.323161][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.058452][ T449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 31.232123][ T15] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.696719][ T15] usb 2-1: no configurations [ 31.701551][ T15] usb 2-1: can't read configurations, error -22 [ 31.722744][ T24] kauditd_printk_skb: 23 callbacks suppressed [ 31.722754][ T24] audit: type=1400 audit(1761162287.560:159): avc: denied { read write } for pid=473 comm="syz.4.59" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 31.752310][ T24] audit: type=1400 audit(1761162287.560:160): avc: denied { open } for pid=473 comm="syz.4.59" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 31.860324][ T15] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.878800][ T24] audit: type=1400 audit(1761162287.720:161): avc: denied { setopt } for pid=477 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.899240][ T24] audit: type=1400 audit(1761162287.720:162): avc: denied { write } for pid=477 comm="syz.0.61" path="socket:[16019]" dev="sockfs" ino=16019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.986673][ T5] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 32.008455][ T487] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 32.028607][ T487] kvm: pic: non byte read [ 32.033267][ T487] kvm: pic: level sensitive irq not supported [ 32.033370][ T487] kvm: pic: non byte read [ 32.044375][ T487] kvm: pic: level sensitive irq not supported [ 32.044420][ T487] kvm: pic: non byte read [ 32.055727][ T487] kvm: pic: level sensitive irq not supported [ 32.055770][ T487] kvm: pic: non byte read [ 32.062364][ T491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 32.066486][ T487] kvm: pic: level sensitive irq not supported [ 32.075212][ T487] kvm: pic: non byte read [ 32.075422][ T491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 32.081658][ T487] kvm: pic: level sensitive irq not supported [ 32.094793][ T487] kvm: pic: non byte read [ 32.106273][ T487] kvm: pic: level sensitive irq not supported [ 32.106320][ T487] kvm: pic: non byte read [ 32.117924][ T487] kvm: pic: level sensitive irq not supported [ 32.117975][ T487] kvm: pic: non byte read [ 32.131199][ T487] kvm: pic: level sensitive irq not supported [ 32.131280][ T487] kvm: pic: non byte read [ 32.142445][ T487] kvm: pic: level sensitive irq not supported [ 32.142513][ T487] kvm: pic: non byte read [ 32.153696][ T487] kvm: pic: level sensitive irq not supported [ 32.156711][ T15] usb 2-1: no configurations [ 32.167803][ T15] usb 2-1: can't read configurations, error -22 [ 32.170189][ T499] ====================================================== [ 32.170189][ T499] WARNING: the mand mount option is being deprecated and [ 32.170189][ T499] will be removed in v5.15! [ 32.170189][ T499] ====================================================== [ 32.174122][ T15] usb usb2-port1: attempt power cycle [ 32.205892][ T24] audit: type=1400 audit(1761162288.040:163): avc: denied { mount } for pid=498 comm="syz.2.70" name="/" dev="configfs" ino=13904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.228589][ T24] audit: type=1400 audit(1761162288.040:164): avc: denied { unlink } for pid=498 comm="syz.2.70" name="#1" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.250648][ T24] audit: type=1400 audit(1761162288.040:165): avc: denied { mount } for pid=498 comm="syz.2.70" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.272305][ T24] audit: type=1400 audit(1761162288.040:166): avc: denied { search } for pid=498 comm="syz.2.70" name="/" dev="configfs" ino=13904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.295679][ T24] audit: type=1400 audit(1761162288.090:167): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.396685][ T5] usb 5-1: config 0 has an invalid interface number: 139 but max is 0 [ 32.404865][ T5] usb 5-1: config 0 has no interface number 0 [ 32.411023][ T5] usb 5-1: config 0 interface 139 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 32.422017][ T5] usb 5-1: config 0 interface 139 altsetting 0 has an invalid endpoint with address 0xBD, skipping [ 32.432972][ T5] usb 5-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.498394][ T25] usb 4-1: USB disconnect, device number 3 [ 32.656719][ T5] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 32.665786][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.674029][ T15] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.825940][ T5] usb 5-1: Product: syz [ 32.830480][ T5] usb 5-1: Manufacturer: syz [ 32.835076][ T5] usb 5-1: SerialNumber: syz [ 32.850011][ T5] usb 5-1: config 0 descriptor?? [ 32.896933][ T474] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 32.930164][ T531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 32.959639][ T474] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 33.049629][ T24] audit: type=1400 audit(1761162288.890:168): avc: denied { name_bind } for pid=532 comm="syz.0.84" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 33.166876][ T15] usb 2-1: no configurations [ 33.171597][ T15] usb 2-1: can't read configurations, error -22 [ 33.183764][ T540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 33.291769][ T5] usb 5-1: USB disconnect, device number 4 [ 33.326651][ T15] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.875735][ T558] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.887096][ T558] FAT-fs (loop7): unable to read boot sector [ 34.023326][ T15] usb 2-1: device not accepting address 6, error -71 [ 34.030190][ T15] usb usb2-port1: unable to enumerate USB device [ 34.564066][ T568] EXT4-fs (loop4): Test dummy encryption mode enabled [ 34.708505][ T568] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 34.860327][ T568] System zones: 0-5 [ 35.267891][ T591] netlink: 56 bytes leftover after parsing attributes in process `syz.1.109'. [ 35.290473][ T593] netlink: 76 bytes leftover after parsing attributes in process `syz.1.110'. [ 35.342105][ T568] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 35.420635][ T568] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 35.479981][ T620] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4274882444 (136796238208 ns) > initial count (11109752672 ns). Using initial count to start timer. [ 35.548929][ T631] Disabled LAPIC found during irq injection [ 35.668693][ T633] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 35.932179][ T646] tipc: Enabling of bearer rejected, failed to enable media [ 35.938764][ T648] binder_alloc: binder_alloc_mmap_handler: 647 200000fff000-200001000000 already mapped failed -16 [ 36.186686][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.236662][ T54] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 36.326717][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.516690][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 36.646785][ T20] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 36.658178][ T20] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.668111][ T20] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.674761][ T20] usb 4-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 36.683826][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.692752][ T20] usb 4-1: config 0 descriptor?? [ 36.766709][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 36.806754][ T54] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 36.815886][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.824653][ T54] usb 5-1: config 0 descriptor?? [ 36.886717][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.897768][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.907561][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.920503][ T5] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 36.929591][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.938376][ T5] usb 3-1: config 0 descriptor?? [ 37.090211][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 37.090223][ T24] audit: type=1400 audit(1761162292.930:206): avc: denied { mounton } for pid=673 comm="syz.1.139" path="/21/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 37.159196][ T678] tipc: Enabling of bearer rejected, failed to enable media [ 37.178646][ T20] hid-generic 0003:05AC:8102.0003: unknown main item tag 0x0 [ 37.186095][ T20] hid-generic 0003:05AC:8102.0003: unknown main item tag 0x0 [ 37.193632][ T20] hid-generic 0003:05AC:8102.0003: unknown main item tag 0x0 [ 37.203103][ T20] hid-generic 0003:05AC:8102.0003: hidraw0: USB HID v0.03 Device [HID 05ac:8102] on usb-dummy_hcd.3-1/input0 [ 37.384465][ T303] usb 4-1: USB disconnect, device number 4 [ 37.400577][ T24] audit: type=1400 audit(1761162293.240:207): avc: denied { create } for pid=661 comm="syz.2.136" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.488749][ T24] audit: type=1400 audit(1761162293.330:208): avc: denied { unlink } for pid=275 comm="syz-executor" name="file2" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.511374][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 37.517359][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 37.525674][ T5] usb 3-1: USB disconnect, device number 2 [ 38.266774][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.311676][ T54] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 38.321752][ T54] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 38.332032][ T54] asix: probe of 5-1:0.0 failed with error -71 [ 38.345281][ T54] usb 5-1: USB disconnect, device number 5 [ 38.368284][ T24] audit: type=1400 audit(1761162294.210:209): avc: denied { connect } for pid=724 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.438070][ T731] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.584555][ T24] audit: type=1400 audit(1761162294.420:210): avc: denied { create } for pid=745 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.610264][ T24] audit: type=1400 audit(1761162294.450:211): avc: denied { write } for pid=745 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.667169][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.799371][ T24] audit: type=1400 audit(1761162294.640:212): avc: denied { read write } for pid=753 comm="syz.4.169" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.800817][ T758] input: syz1 as /devices/virtual/input/input4 [ 38.826763][ T24] audit: type=1400 audit(1761162294.640:213): avc: denied { open } for pid=753 comm="syz.4.169" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.853792][ T24] audit: type=1400 audit(1761162294.640:214): avc: denied { ioctl } for pid=753 comm="syz.4.169" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.906781][ T311] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 38.909666][ T24] audit: type=1400 audit(1761162294.690:215): avc: denied { bind } for pid=759 comm="syz.1.171" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.926057][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.955259][ T311] usb 3-1: Product: syz [ 38.960208][ T311] usb 3-1: Manufacturer: syz [ 38.965092][ T311] usb 3-1: SerialNumber: syz [ 39.032417][ T311] usb 3-1: config 0 descriptor?? [ 39.168993][ T311] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 39.175867][ T311] uvcvideo: No valid video chain found. [ 39.598104][ T15] usb 3-1: USB disconnect, device number 3 [ 40.313818][ T811] device syzkaller0 entered promiscuous mode [ 40.425468][ T815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 40.426732][ T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.916760][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.916777][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.166674][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 41.166746][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.171941][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 41.182900][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.276746][ T15] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 41.285973][ T15] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 41.286776][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.294020][ T15] usb 1-1: Manufacturer: syz [ 41.304685][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.313160][ T15] usb 1-1: config 0 descriptor?? [ 41.320275][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.335297][ T311] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 41.345924][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 41.355801][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 41.368761][ T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 41.378476][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.466806][ T20] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 41.475910][ T20] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 41.483964][ T20] usb 3-1: Manufacturer: syz [ 41.489335][ T20] usb 3-1: config 0 descriptor?? [ 41.539773][ T837] device syzkaller0 entered promiscuous mode [ 41.546916][ T311] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 41.590325][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 41.599191][ T311] usb 4-1: Product: syz [ 41.603532][ T311] usb 4-1: Manufacturer: syz [ 41.608678][ T311] usb 4-1: SerialNumber: syz [ 41.715345][ T311] usb 4-1: config 0 descriptor?? [ 41.757486][ T311] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 42.009118][ T15] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 42.016036][ T15] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 42.022938][ T15] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 42.029822][ T15] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 42.036698][ T15] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 42.043573][ T15] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 42.050715][ T15] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 42.058062][ T15] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 42.504185][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 42.504198][ T24] audit: type=1400 audit(1761162298.340:223): avc: denied { append } for pid=847 comm="syz.4.206" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.660819][ T24] audit: type=1400 audit(1761162298.500:224): avc: denied { mount } for pid=861 comm="syz.4.212" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.713435][ T24] audit: type=1400 audit(1761162298.550:225): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.066656][ T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 43.316634][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 43.466732][ T20] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 43.474984][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.485163][ T20] usb 5-1: config 0 has no interface number 0 [ 43.491292][ T20] usb 5-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 43.504493][ T20] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 43.513562][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.522254][ T20] usb 5-1: config 0 descriptor?? [ 43.567396][ T20] snd-usb-audio: probe of 5-1:0.126 failed with error -2 [ 43.609619][ T20] usb 3-1: USB disconnect, device number 4 [ 43.623011][ T311] usb 4-1: USB disconnect, device number 5 [ 43.631600][ T24] audit: type=1400 audit(1761162299.470:226): avc: denied { getopt } for pid=875 comm="syz.3.216" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.634346][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 43.652073][ T15] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 43.667063][ T15] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 43.674053][ T15] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 43.683935][ T15] usb 1-1: USB disconnect, device number 3 [ 43.696664][ T586] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 43.726420][ T878] fido_id[878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 43.777298][ T368] usb 5-1: USB disconnect, device number 6 [ 44.076711][ T586] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 44.085871][ T586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.094616][ T586] usb 2-1: config 0 descriptor?? [ 44.279774][ T24] audit: type=1400 audit(1761162300.120:227): avc: denied { ioctl } for pid=883 comm="syz.4.218" path="socket:[18582]" dev="sockfs" ino=18582 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.646655][ T5] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 44.886704][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 45.016708][ T5] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 45.030463][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.050921][ T5] usb 5-1: config 0 has no interface number 0 [ 45.064958][ T5] usb 5-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 45.087393][ T5] usb 5-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 45.196775][ T24] audit: type=1400 audit(1761162301.030:228): avc: denied { write } for pid=909 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.266828][ T5] usb 5-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 45.276049][ T5] usb 5-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 45.288931][ T5] usb 5-1: Product: syz [ 45.293173][ T5] usb 5-1: Manufacturer: syz [ 45.298191][ T5] usb 5-1: SerialNumber: syz [ 45.323458][ T5] usb 5-1: config 0 descriptor?? [ 45.601813][ T368] usb 5-1: USB disconnect, device number 7 [ 46.176675][ T586] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 46.186837][ T586] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 46.197169][ T586] asix: probe of 2-1:0.0 failed with error -71 [ 46.204125][ T586] usb 2-1: USB disconnect, device number 7 [ 46.806691][ T24] audit: type=1400 audit(1761162302.560:229): avc: denied { create } for pid=932 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.826936][ T24] audit: type=1400 audit(1761162302.560:230): avc: denied { setopt } for pid=932 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.872913][ T24] audit: type=1400 audit(1761162302.560:231): avc: denied { map } for pid=932 comm="syz.0.236" path="socket:[18668]" dev="sockfs" ino=18668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.908777][ T24] audit: type=1400 audit(1761162302.560:232): avc: denied { read accept } for pid=932 comm="syz.0.236" path="socket:[18668]" dev="sockfs" ino=18668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.056658][ T920] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 47.143559][ T949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'. [ 47.391377][ T947] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 47.576696][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.597850][ T920] usb 5-1: Using ep0 maxpacket: 16 [ 47.671827][ T920] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 48.243410][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 48.243423][ T24] audit: type=1400 audit(1761162304.080:237): avc: denied { append } for pid=973 comm="syz.1.248" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.556698][ T305] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.796677][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 48.816639][ T967] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.816759][ T920] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 48.833253][ T920] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 48.841841][ T920] usb 5-1: Product: syz [ 48.846005][ T920] usb 5-1: Manufacturer: syz [ 48.851451][ T920] usb 5-1: config 0 descriptor?? [ 48.916729][ T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.926986][ T305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.355996][ T305] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.365188][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.373650][ T920] usb 5-1: bad CDC descriptors [ 49.382108][ T920] usb 5-1: USB disconnect, device number 8 [ 49.396819][ T967] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.405924][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.406796][ T305] usb 2-1: Product: syz [ 49.413978][ T967] usb 3-1: Product: syz [ 49.422303][ T967] usb 3-1: Manufacturer: syz [ 49.426976][ T967] usb 3-1: SerialNumber: syz [ 49.428402][ T305] usb 2-1: Manufacturer: syz [ 49.437615][ T305] usb 2-1: SerialNumber: syz [ 49.766734][ T305] usb 2-1: 0:2 : does not exist [ 49.795831][ T305] usb 2-1: USB disconnect, device number 8 [ 49.826196][ T1010] binder: BINDER_SET_CONTEXT_MGR already set [ 49.832252][ T1010] binder: 1009:1010 ioctl 4018620d 200000004a80 returned -16 [ 50.277734][ T1032] device syzkaller0 entered promiscuous mode [ 50.668251][ T1037] exfat: Deprecated parameter 'namecase' [ 50.678854][ T1037] exfat: Deprecated parameter 'namecase' [ 50.681704][ T1043] binder: BINDER_SET_CONTEXT_MGR already set [ 50.693592][ T1037] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 50.709063][ T1043] binder: 1042:1043 ioctl 4018620d 200000004a80 returned -16 [ 50.717442][ T24] audit: type=1400 audit(1761162306.560:238): avc: denied { write } for pid=1036 comm="syz.4.271" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.739230][ T24] audit: type=1400 audit(1761162306.580:239): avc: denied { add_name } for pid=1036 comm="syz.4.271" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.789718][ T24] audit: type=1400 audit(1761162306.580:240): avc: denied { associate } for pid=1036 comm="syz.4.271" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.832906][ T24] audit: type=1400 audit(1761162306.580:241): avc: denied { write open } for pid=1036 comm="syz.4.271" path="/54/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.878413][ T24] audit: type=1400 audit(1761162306.580:242): avc: denied { remove_name } for pid=1036 comm="syz.4.271" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.922492][ T24] audit: type=1400 audit(1761162306.580:243): avc: denied { rename } for pid=1036 comm="syz.4.271" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.966377][ T24] audit: type=1400 audit(1761162306.620:244): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.101334][ T1060] device syzkaller0 entered promiscuous mode [ 51.286645][ T15] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.298103][ T1071] EXT4-fs (loop3): Test dummy encryption mode enabled [ 51.305968][ T1071] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue [ 51.318209][ T1071] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.344578][ T276] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /43/mnt/lost+found: directory fails checksum at offset 6144 [ 51.360016][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3104: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 51.373654][ T276] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /43/mnt/lost+found: directory fails checksum at offset 6144 [ 51.388716][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3104: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 51.402043][ T276] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /43/mnt/lost+found: directory fails checksum at offset 6144 [ 51.417314][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3104: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 51.430481][ T276] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /43/mnt/lost+found: directory fails checksum at offset 6144 [ 51.445553][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3104: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 51.458789][ T276] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /43/mnt/lost+found: directory fails checksum at offset 6144 [ 51.473860][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3104: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 51.541330][ T967] usb 3-1: USB disconnect, device number 5 [ 51.566670][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 51.682112][ T1085] device syzkaller0 entered promiscuous mode [ 51.706818][ T15] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 51.711465][ T24] audit: type=1400 audit(1761162307.550:245): avc: denied { mounton } for pid=1090 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.738211][ T15] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 51.751252][ T15] usb 2-1: config 0 interface 0 has no altsetting 0 [ 51.789401][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.796510][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.804538][ T1090] device bridge_slave_0 entered promiscuous mode [ 51.811701][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.819036][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.826560][ T1090] device bridge_slave_1 entered promiscuous mode [ 51.907968][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.915090][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.922399][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.929462][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.208291][ T24] audit: type=1400 audit(1761162308.610:246): avc: denied { name_bind } for pid=1095 comm="syz.2.296" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 53.261587][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.272280][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.307748][ T15] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 53.325184][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.333400][ T15] usb 2-1: Product: syz [ 53.337719][ T15] usb 2-1: Manufacturer: syz [ 53.342351][ T15] usb 2-1: SerialNumber: syz [ 53.415712][ T15] usb 2-1: config 0 descriptor?? [ 53.425229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.432717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.443960][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.452470][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.460739][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.467808][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.475514][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.484621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.493408][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.500473][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.566566][ T24] audit: type=1400 audit(1761162309.400:247): avc: denied { read } for pid=1106 comm="syz.0.298" name="usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.566908][ T1114] usb usb8: usbfs: process 1114 (syz.0.298) did not claim interface 0 before use [ 53.599987][ T24] audit: type=1400 audit(1761162309.400:248): avc: denied { open } for pid=1106 comm="syz.0.298" path="/dev/usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.686041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.692254][ T305] usb 2-1: USB disconnect, device number 9 [ 53.717266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.569904][ T1090] device veth0_vlan entered promiscuous mode [ 54.581991][ T1090] device veth1_macvtap entered promiscuous mode [ 54.602257][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.613181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.622242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.646850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.658301][ T1122] F2FS-fs (loop2): invalid crc value [ 54.690749][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.699217][ T1122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.706967][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.727481][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.739363][ T1122] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 54.739441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.748491][ T1122] F2FS-fs (loop2): Failed to read root inode [ 54.757888][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.770338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.778622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.787026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.795243][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.804607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.812295][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.812405][ T1135] syz.4.307 (1135): attempted to duplicate a private mapping with mremap. This is not supported. [ 54.838080][ T24] audit: type=1400 audit(1761162310.680:249): avc: denied { mounton } for pid=1090 comm="syz-executor" path="/root/syzkaller.z70R3z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.015493][ T315] device bridge_slave_1 left promiscuous mode [ 55.025457][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.037459][ T1139] erofs: (device loop5): mounted with root inode @ nid 36. [ 55.037551][ T315] device bridge_slave_0 left promiscuous mode [ 55.051023][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.059700][ T315] device veth1_macvtap left promiscuous mode [ 55.065837][ T315] device veth0_vlan left promiscuous mode [ 55.773141][ T24] audit: type=1400 audit(1761162311.610:250): avc: denied { read } for pid=1138 comm="syz.5.290" name="file2" dev="loop5" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.300251][ T24] audit: type=1400 audit(1761162311.610:251): avc: denied { open } for pid=1138 comm="syz.5.290" path="/0/file2/file2" dev="loop5" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.389729][ T1156] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.622828][ T1161] FAT-fs (loop5): error, clusters badly computed (0 != 128) [ 56.636460][ T1161] FAT-fs (loop5): Filesystem has been set read-only [ 56.641156][ T1170] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 56.643218][ T1161] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 56.806637][ T305] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 56.901943][ T1181] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.106680][ T303] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.122384][ T24] audit: type=1400 audit(1761162312.960:252): avc: denied { write } for pid=1189 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.610133][ T305] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.623155][ T303] usb 6-1: Using ep0 maxpacket: 16 [ 57.976741][ T305] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 57.985142][ T305] usb 1-1: config 6 has no interface number 0 [ 57.991886][ T305] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 58.010608][ T305] usb 1-1: config 6 interface 200 has no altsetting 0 [ 58.017588][ T303] usb 6-1: config 0 has no interfaces? [ 58.186770][ T303] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 58.196018][ T303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.209836][ T303] usb 6-1: Product: syz [ 58.214487][ T303] usb 6-1: Manufacturer: syz [ 58.219397][ T303] usb 6-1: SerialNumber: syz [ 58.227492][ T303] usb 6-1: config 0 descriptor?? [ 58.238334][ T1205] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 58.268899][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 58.286955][ T305] usb 1-1: string descriptor 0 read error: -22 [ 58.293312][ T305] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 58.311730][ T305] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 58.324164][ T1211] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.488670][ T303] usb 6-1: USB disconnect, device number 2 [ 58.500720][ T1216] F2FS-fs (loop4): fault_injection options not supported [ 58.509667][ T1216] F2FS-fs (loop4): invalid crc value [ 58.516236][ T1216] F2FS-fs (loop4): Found nat_bits in checkpoint [ 58.522608][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 58.547600][ T1216] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 58.575074][ T24] audit: type=1400 audit(1761162314.410:253): avc: denied { read write open } for pid=1213 comm="syz.4.336" path="/72/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.598743][ T24] audit: type=1400 audit(1761162314.410:254): avc: denied { ioctl } for pid=1213 comm="syz.4.336" path="/72/file1/file1" dev="loop4" ino=10 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.599079][ T280] attempt to access beyond end of device [ 58.599079][ T280] loop4: rw=2049, want=45104, limit=40427 [ 58.666718][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.677950][ T311] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 58.689476][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.701013][ T311] usb 3-1: config 0 descriptor?? [ 58.856670][ T303] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 59.216685][ T303] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.226950][ T303] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.386755][ T303] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.396083][ T303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.404329][ T303] usb 6-1: Product: syz [ 59.408758][ T303] usb 6-1: Manufacturer: syz [ 59.413505][ T303] usb 6-1: SerialNumber: syz [ 59.791436][ T303] usb 6-1: 0:2 : does not exist [ 59.985666][ T1104] usb 1-1: USB disconnect, device number 4 [ 60.164078][ T1239] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 61.305575][ T303] usb 6-1: USB disconnect, device number 3 [ 61.315313][ T311] usb 3-1: USB disconnect, device number 6 [ 61.927258][ T367] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 62.347947][ T297] udevd[297]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.456067][ T1275] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 62.766916][ T367] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.777260][ T367] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.790565][ T1286] erofs: (device loop5): mounted with root inode @ nid 36. [ 62.946990][ T367] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 63.017257][ T367] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 63.139952][ T367] usb 2-1: Product: syz [ 63.200217][ T367] usb 2-1: SerialNumber: syz [ 63.218977][ T367] usb 2-1: config 0 descriptor?? [ 63.392226][ T24] audit: type=1400 audit(63.365:255): avc: denied { create } for pid=1305 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.901160][ T1330] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 63.920568][ T24] audit: type=1400 audit(63.895:256): avc: denied { read } for pid=1329 comm="syz.4.376" name="file1" dev="loop4" ino=1048606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.066734][ T1308] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.336671][ T1308] usb 6-1: Using ep0 maxpacket: 32 [ 64.477032][ T1308] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.590209][ T25] usb 2-1: USB disconnect, device number 10 [ 64.604073][ T303] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 64.706720][ T1308] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.715803][ T1308] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.724547][ T1308] usb 6-1: Product: syz [ 64.729298][ T1308] usb 6-1: Manufacturer: syz [ 64.734479][ T1308] usb 6-1: SerialNumber: syz [ 64.763022][ T1308] usb 6-1: config 0 descriptor?? [ 64.786668][ T1320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 64.846635][ T303] usb 5-1: Using ep0 maxpacket: 32 [ 64.966717][ T303] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.977754][ T303] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.987632][ T303] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 65.000540][ T303] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.007238][ T303] usb 5-1: New USB device found, idVendor=1477, idProduct=1021, bcdDevice= 0.00 [ 65.010223][ T25] usb 6-1: USB disconnect, device number 4 [ 65.016424][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.030855][ T303] usb 5-1: config 0 descriptor?? [ 65.501158][ T303] hid-generic 0003:1477:1021.0005: hidraw0: USB HID v0.00 Device [HID 1477:1021] on usb-dummy_hcd.4-1/input0 [ 65.545974][ T1362] netlink: 'syz.2.385': attribute type 4 has an invalid length. [ 65.553853][ T1362] netlink: 17 bytes leftover after parsing attributes in process `syz.2.385'. [ 65.711044][ T20] usb 5-1: USB disconnect, device number 9 [ 65.794746][ T1366] exfat: Deprecated parameter 'namecase' [ 65.804581][ T1366] exfat: Deprecated parameter 'namecase' [ 65.838247][ T1366] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 65.849023][ T1366] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 66.640024][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.647315][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.660222][ T1389] device bridge_slave_1 left promiscuous mode [ 66.666429][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.674196][ T1389] device bridge_slave_0 left promiscuous mode [ 66.680495][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.893486][ T1392] cgroup: fork rejected by pids controller in /syz0 [ 66.903456][ T1393] device pim6reg1 entered promiscuous mode [ 67.355804][ T283] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.441811][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.449075][ T1414] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.459858][ T1414] device bridge_slave_0 entered promiscuous mode [ 67.482007][ T1414] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.489325][ T1414] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.532008][ T1414] device bridge_slave_1 entered promiscuous mode [ 67.730910][ T1414] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.738111][ T1414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.745579][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.752658][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.809496][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.824929][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.849493][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.870834][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.879297][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.891780][ T283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.902905][ T283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.909889][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.921865][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.930176][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.937659][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.951332][ T1414] device veth0_vlan entered promiscuous mode [ 67.975572][ T24] audit: type=1400 audit(67.925:257): avc: denied { read } for pid=1424 comm="syz.2.410" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.034550][ T24] audit: type=1400 audit(67.925:258): avc: denied { open } for pid=1424 comm="syz.2.410" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.058156][ T283] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 68.125001][ T283] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 68.165956][ T283] usb 6-1: Manufacturer: syz [ 68.197235][ T24] audit: type=1400 audit(67.925:259): avc: denied { ioctl } for pid=1424 comm="syz.2.410" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.211660][ T283] usb 6-1: config 0 descriptor?? [ 68.247079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.255784][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.267474][ T1414] device veth1_macvtap entered promiscuous mode [ 68.291645][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.300595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.311052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.360731][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.377932][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.391479][ T49] device bridge_slave_1 left promiscuous mode [ 68.398054][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.406211][ T49] device bridge_slave_0 left promiscuous mode [ 68.412618][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.422575][ T49] device veth1_macvtap left promiscuous mode [ 68.428751][ T49] device veth0_vlan left promiscuous mode [ 68.697553][ T283] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 68.706778][ T283] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 68.727135][ T1454] device syzkaller0 entered promiscuous mode [ 68.733831][ T283] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 68.749894][ T283] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 68.763097][ T283] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 68.773200][ T283] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 68.783294][ T283] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 68.793643][ T283] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 69.119381][ T24] audit: type=1400 audit(69.095:260): avc: denied { write } for pid=1470 comm="syz.2.428" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.174737][ T1475] device veth1_macvtap left promiscuous mode [ 69.506965][ T1486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.432'. [ 69.837836][ T1496] EXT4-fs (loop1): Test dummy encryption mode enabled [ 69.856531][ T1496] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 69.864795][ T1496] System zones: 0-5 [ 69.869449][ T1496] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 70.215838][ T24] audit: type=1400 audit(70.185:261): avc: denied { connect } for pid=1513 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.234648][ T24] audit: type=1400 audit(70.185:262): avc: denied { read } for pid=1513 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.312991][ T1516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.442'. [ 70.440323][ T24] audit: type=1400 audit(70.415:263): avc: denied { write } for pid=1513 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.460027][ T283] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 70.475930][ T283] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 70.491600][ T283] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -71 [ 70.516245][ T283] usb 6-1: USB disconnect, device number 5 [ 70.533537][ T1518] fido_id[1518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 71.153687][ T24] audit: type=1400 audit(71.125:264): avc: denied { read } for pid=1542 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.284717][ T1546] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.358042][ T1551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.451'. [ 71.459595][ T24] audit: type=1400 audit(71.325:265): avc: denied { bind } for pid=1539 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.558024][ T24] audit: type=1400 audit(71.335:266): avc: denied { setopt } for pid=1539 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.578921][ T1546] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.875585][ T1574] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4274882444 (136796238208 ns) > initial count (11109752672 ns). Using initial count to start timer. [ 71.944851][ T1578] Disabled LAPIC found during irq injection [ 72.036711][ T15] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 72.285455][ T1603] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.315482][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.322571][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.329913][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.336977][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.564468][ T1603] device bridge0 entered promiscuous mode [ 72.629254][ T1608] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4274882444 (136796238208 ns) > initial count (11109752672 ns). Using initial count to start timer. [ 72.647239][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.659758][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.723850][ T1619] Disabled LAPIC found during irq injection [ 72.746764][ T15] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 72.758624][ T15] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 72.767308][ T15] usb 2-1: Manufacturer: syz [ 72.779071][ T15] usb 2-1: config 0 descriptor?? [ 73.018561][ T24] audit: type=1400 audit(72.995:267): avc: denied { relabelfrom } for pid=1649 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.044921][ T24] audit: type=1400 audit(73.015:268): avc: denied { relabelto } for pid=1649 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.698079][ T15] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 73.708317][ T15] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 73.715180][ T15] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 73.722495][ T15] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 73.729435][ T15] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 73.736328][ T15] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 73.743323][ T15] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 73.774198][ T15] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 74.267324][ T1680] cgroup: syz.2.505 (1680) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 74.295276][ T1680] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 75.666715][ T15] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 75.674252][ T15] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 75.681511][ T15] pyra: probe of 0003:1E7D:2CF6.0007 failed with error -71 [ 75.699108][ T15] usb 2-1: USB disconnect, device number 11 [ 75.740662][ T1716] fido_id[1716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 76.200361][ T1755] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4274882444 (136796238208 ns) > initial count (11109752672 ns). Using initial count to start timer. [ 76.200437][ T1761] : renamed from bond_slave_0 [ 76.268820][ T1765] Disabled LAPIC found during irq injection [ 77.845471][ T1829] tipc: Enabling of bearer rejected, failed to enable media [ 77.862067][ T1829] device syzkaller0 entered promiscuous mode [ 78.039561][ T1835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.562'. [ 79.354713][ T1894] device veth1_macvtap left promiscuous mode [ 79.373345][ T1894] device macsec0 entered promiscuous mode [ 79.497598][ T1911] device syzkaller0 entered promiscuous mode [ 79.597455][ T1918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.592'. [ 80.698852][ T1947] xt_hashlimit: max too large, truncated to 1048576 [ 81.265528][ T1958] device pim6reg1 entered promiscuous mode [ 81.670681][ T1986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.625'. [ 82.202424][ T2000] device syzkaller0 entered promiscuous mode [ 82.639595][ T2050] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.646817][ T2050] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.688356][ T2050] device bridge_slave_1 left promiscuous mode [ 82.694943][ T2050] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.704166][ T2050] device bridge_slave_0 left promiscuous mode [ 82.710813][ T2050] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.582028][ T2076] device veth1_macvtap left promiscuous mode [ 83.595787][ T2076] device macsec0 entered promiscuous mode [ 84.399442][ T24] audit: type=1400 audit(84.375:269): avc: denied { mounton } for pid=2098 comm="syz.4.675" path="/135/file0" dev="incremental-fs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.465975][ T24] audit: type=1400 audit(84.375:270): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.490903][ T2106] device syzkaller0 entered promiscuous mode [ 85.163731][ T2137] device syzkaller0 entered promiscuous mode [ 85.198414][ T2139] device pim6reg1 entered promiscuous mode [ 85.705679][ T2174] device pim6reg1 entered promiscuous mode [ 87.650979][ T2243] netlink: 'syz.4.732': attribute type 16 has an invalid length. [ 87.658865][ T2243] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.732'. [ 87.757732][ T2254] tipc: Started in network mode [ 87.774080][ T2254] tipc: Own node identity 8adfb2dedf99, cluster identity 4711 [ 87.807968][ T2254] tipc: Enabled bearer , priority 0 [ 87.828838][ T2254] device syzkaller0 entered promiscuous mode [ 87.838079][ T2254] tipc: Resetting bearer [ 87.844525][ T2253] tipc: Resetting bearer [ 87.857508][ T2253] tipc: Disabling bearer [ 88.041898][ T2272] netlink: 'syz.1.744': attribute type 16 has an invalid length. [ 88.092295][ T2272] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.744'. [ 88.875378][ T2296] netlink: 'syz.1.755': attribute type 16 has an invalid length. [ 88.975438][ T2296] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.755'. [ 90.629042][ T2362] tipc: Started in network mode [ 90.690439][ T2362] tipc: Own node identity 225a0cd51336, cluster identity 4711 [ 90.699075][ T2362] tipc: Enabled bearer , priority 0 [ 90.705828][ T2367] device syzkaller0 entered promiscuous mode [ 90.724589][ T2362] tipc: Resetting bearer [ 90.739697][ T2361] tipc: Resetting bearer [ 90.754096][ T2361] tipc: Disabling bearer [ 92.444743][ T24] audit: type=1400 audit(92.415:271): avc: denied { read write } for pid=2428 comm="syz.1.813" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 92.468504][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 92.476185][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 92.484205][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.492039][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.500000][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.508665][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.516407][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.524233][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.532066][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.606987][ T24] audit: type=1400 audit(92.415:272): avc: denied { open } for pid=2428 comm="syz.1.813" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 92.614143][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.645930][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.653728][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.661502][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.669575][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.677482][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.685237][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.693275][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.713959][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.722200][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.730670][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.738890][ T15] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 92.749198][ T15] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 93.176697][ T2439] xt_hashlimit: max too large, truncated to 1048576 [ 93.609511][ T2440] fido_id[2440]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.629837][ T2446] tipc: Enabled bearer , priority 0 [ 93.656898][ T2446] device syzkaller0 entered promiscuous mode [ 93.665346][ T2446] tipc: Resetting bearer [ 93.671763][ T2445] tipc: Resetting bearer [ 93.672417][ T2445] tipc: Disabling bearer [ 93.774743][ T24] audit: type=1326 audit(93.745:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 93.814886][ T24] audit: type=1326 audit(93.745:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 93.879560][ T24] audit: type=1326 audit(93.745:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 93.911626][ T24] audit: type=1326 audit(93.745:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 93.938681][ T24] audit: type=1400 audit(93.745:277): avc: denied { create } for pid=2467 comm="syz.4.829" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.959185][ T24] audit: type=1326 audit(93.745:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 93.982262][ T24] audit: type=1326 audit(93.745:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 94.004930][ T24] audit: type=1400 audit(93.745:280): avc: denied { write } for pid=2467 comm="syz.4.829" name="file0" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.029139][ T2488] xt_hashlimit: max too large, truncated to 1048576 [ 94.059420][ T2471] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue [ 94.251862][ T2471] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.266895][ T2471] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 576 with error 28 [ 94.279538][ T2471] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.279538][ T2471] [ 94.289414][ T2471] EXT4-fs (loop4): Total free blocks count 0 [ 94.295524][ T2471] EXT4-fs (loop4): Free/Dirty block details [ 94.301490][ T2471] EXT4-fs (loop4): free_blocks=2415919104 [ 94.307442][ T2471] EXT4-fs (loop4): dirty_blocks=576 [ 94.312956][ T2471] EXT4-fs (loop4): Block reservation details [ 94.319225][ T2471] EXT4-fs (loop4): i_reserved_data_blocks=36 [ 95.686847][ T2627] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.694070][ T2627] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.710576][ T2627] device bridge_slave_1 left promiscuous mode [ 95.739714][ T2627] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.752501][ T2627] device bridge_slave_0 left promiscuous mode [ 95.759858][ T2627] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.710274][ T2655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.800197][ T2675] device veth1_macvtap left promiscuous mode [ 96.806447][ T2675] device macsec0 entered promiscuous mode [ 97.333703][ T2714] device pim6reg1 entered promiscuous mode [ 97.516699][ T24] kauditd_printk_skb: 628 callbacks suppressed [ 97.516712][ T24] audit: type=1400 audit(97.485:909): avc: denied { setopt } for pid=2717 comm="syz.0.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.747227][ T2738] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.767009][ T2738] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.797297][ T2738] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.943: corrupted in-inode xattr [ 97.830986][ T2738] EXT4-fs (loop5): Remounting filesystem read-only [ 97.852991][ T2738] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.871351][ T2751] overlayfs: failed to resolve './file0': -2 [ 97.878685][ T2738] EXT4-fs (loop5): 1 truncate cleaned up [ 97.884402][ T2738] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000006c,lazytime,errors=remount-ro,nodiscard, [ 98.066253][ T2774] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.073460][ T2774] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.083537][ T2774] device bridge_slave_1 left promiscuous mode [ 98.089983][ T2774] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.098179][ T2774] device bridge_slave_0 left promiscuous mode [ 98.104338][ T2774] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.335510][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.342757][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.363351][ T2801] device bridge0 left promiscuous mode [ 98.383730][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.390828][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.398135][ T2801] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.405167][ T2801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.436532][ T2801] device bridge0 entered promiscuous mode [ 98.851466][ T24] audit: type=1326 audit(98.825:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 98.902817][ T24] audit: type=1326 audit(98.855:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 98.957876][ T24] audit: type=1326 audit(98.855:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 98.992544][ T24] audit: type=1326 audit(98.855:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 99.061822][ T24] audit: type=1326 audit(98.855:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 99.450565][ T24] audit: type=1326 audit(98.855:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 99.494608][ T24] audit: type=1326 audit(98.855:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 99.519026][ T24] audit: type=1326 audit(98.855:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 99.544629][ T24] audit: type=1326 audit(98.855:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f12fdfe7fc9 code=0x7ffc0000 [ 99.722872][ T2908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 99.733681][ T2908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 100.037178][ T2927] device pim6reg1 entered promiscuous mode [ 101.346055][ T2983] tipc: Started in network mode [ 101.351352][ T2983] tipc: Own node identity 92f6c9b27247, cluster identity 4711 [ 101.359523][ T2983] tipc: Enabled bearer , priority 0 [ 101.371233][ T2983] device syzkaller0 entered promiscuous mode [ 101.394342][ T2983] tipc: Resetting bearer [ 101.402956][ T2980] tipc: Resetting bearer [ 101.411440][ T2980] tipc: Disabling bearer [ 101.729751][ T2994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 101.739302][ T2994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 103.495264][ T3135] xt_hashlimit: max too large, truncated to 1048576 [ 104.699035][ T3158] device pim6reg1 entered promiscuous mode [ 105.375762][ T3205] device pim6reg1 entered promiscuous mode [ 105.450573][ T3211] EXT4-fs (loop4): Ignoring removed nobh option [ 105.457102][ T3211] EXT4-fs (loop4): Ignoring removed bh option [ 105.463240][ T3211] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.150538][ T3211] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,nombcache,barrier,dioread_lock,stripe=0x0000000000000008,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 106.242380][ T3224] tipc: Started in network mode [ 106.247444][ T3224] tipc: Own node identity 0a06685ff41d, cluster identity 4711 [ 106.255030][ T3224] tipc: Enabled bearer , priority 0 [ 106.278351][ T3224] device syzkaller0 entered promiscuous mode [ 106.290614][ T3224] tipc: Resetting bearer [ 106.297153][ T3223] tipc: Resetting bearer [ 106.305422][ T3223] tipc: Disabling bearer [ 106.771875][ T3275] xt_hashlimit: size too large, truncated to 1048576 [ 108.251541][ T3341] binfmt_misc: register: failed to install interpreter file ./file0 [ 108.317235][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 108.317249][ T24] audit: type=1326 audit(108.295:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3340 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 108.377661][ T24] audit: type=1326 audit(108.295:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3340 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 108.472573][ T24] audit: type=1326 audit(108.335:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3340 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 108.507168][ T24] audit: type=1326 audit(108.335:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3340 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 108.538744][ T24] audit: type=1326 audit(108.335:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3340 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 108.635342][ T24] audit: type=1326 audit(108.335:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3340 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 108.710657][ T3369] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 109.827546][ T3397] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 109.835570][ T3397] EXT4-fs (loop2): Ignoring removed oldalloc option [ 109.842520][ T3397] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.870111][ T3397] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1207: Parent and EA inode have the same ino 15 [ 109.914652][ T3397] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1207: Parent and EA inode have the same ino 15 [ 109.935524][ T3397] EXT4-fs (loop2): 1 orphan inode deleted [ 109.941721][ T3397] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nomblk_io_submit,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,noblock_validity,,errors=continue [ 110.022540][ T3419] EXT4-fs (loop5): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 110.114114][ T3419] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1218'. [ 110.659580][ T3470] device macsec0 entered promiscuous mode [ 111.387617][ T3505] xt_hashlimit: max too large, truncated to 1048576 [ 111.882189][ T3524] 9pnet: Could not find request transport: tcp [ 112.410757][ T3558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1274'. [ 113.962725][ T3603] SELinux: Context is not valid (left unmapped). [ 114.180255][ T24] audit: type=1326 audit(114.155:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.226616][ T24] audit: type=1326 audit(114.185:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.307086][ T24] audit: type=1326 audit(114.185:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.501029][ T24] audit: type=1326 audit(114.185:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.559053][ T3639] device pim6reg1 entered promiscuous mode [ 114.578246][ T24] audit: type=1326 audit(114.185:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.602024][ T24] audit: type=1326 audit(114.185:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.625687][ T24] audit: type=1326 audit(114.185:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.649827][ T24] audit: type=1326 audit(114.185:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.680422][ T24] audit: type=1326 audit(114.185:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 114.703869][ T24] audit: type=1326 audit(114.185:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 118.794846][ T3785] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,discard,sysvgroups,norecovery,jqfmt=vfsv0,dioread_lock,nogrpid,grpquota,stripe=0x0000000000000044,,errors=continue [ 119.190817][ T24] kauditd_printk_skb: 32 callbacks suppressed [ 119.190830][ T24] audit: type=1400 audit(119.165:979): avc: denied { create } for pid=3821 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 119.218031][ T3816] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.225134][ T3816] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.241120][ T3816] device bridge0 left promiscuous mode [ 119.253012][ T3822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1385'. [ 119.266438][ T24] audit: type=1400 audit(119.215:980): avc: denied { write } for pid=3821 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 119.305916][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.313052][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.320617][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.327682][ T3824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.407122][ T3824] device bridge0 entered promiscuous mode [ 119.427633][ T3826] Zero length message leads to an empty skb [ 119.459762][ T3822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 119.598269][ T3838] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1390' sets config #1 [ 119.631897][ T3845] binfmt_misc: register: failed to install interpreter file ./file0 [ 119.651367][ T24] audit: type=1326 audit(119.625:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5551c6fc9 code=0x7ffc0000 [ 119.702676][ T24] audit: type=1326 audit(119.625:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fa5551c6fc9 code=0x7ffc0000 [ 119.731224][ T24] audit: type=1326 audit(119.625:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5551c6fc9 code=0x7ffc0000 [ 119.798833][ T24] audit: type=1326 audit(119.725:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 119.841199][ T24] audit: type=1326 audit(119.725:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 119.865366][ T24] audit: type=1326 audit(119.795:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 119.912356][ T24] audit: type=1326 audit(119.805:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 119.945032][ T24] audit: type=1326 audit(119.805:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576f859fc9 code=0x7ffc0000 [ 120.128792][ T3891] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 120.169839][ T3891] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3342: comm syz.2.1412: Allocating blocks 449-513 which overlap fs metadata [ 120.251542][ T3889] EXT4-fs (loop2): pa ffff88810ffc1000: logic 48, phys. 177, len 21 [ 120.259656][ T3889] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 4 [ 120.277221][ T3908] SELinux: policydb version 0 does not match my version range 15-33 [ 120.311820][ T3908] SELinux: failed to load policy [ 124.281401][ T4042] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 125.810675][ T4104] FAT-fs (loop4): Directory bread(block 64) failed [ 125.817399][ T4104] FAT-fs (loop4): Directory bread(block 65) failed [ 125.824076][ T4104] FAT-fs (loop4): Directory bread(block 66) failed [ 125.833398][ T4104] FAT-fs (loop4): Directory bread(block 67) failed [ 125.846674][ T4104] FAT-fs (loop4): Directory bread(block 68) failed [ 125.879441][ T4104] FAT-fs (loop4): Directory bread(block 69) failed [ 125.914676][ T4104] FAT-fs (loop4): Directory bread(block 70) failed [ 125.958573][ T4104] FAT-fs (loop4): Directory bread(block 71) failed [ 125.966816][ T4104] FAT-fs (loop4): Directory bread(block 72) failed [ 125.973382][ T4104] FAT-fs (loop4): Directory bread(block 73) failed [ 126.341315][ T4115] netlink: 'syz.1.1497': attribute type 4 has an invalid length. [ 126.439451][ T4117] netlink: 'syz.1.1497': attribute type 4 has an invalid length. [ 127.316677][ T4147] xt_hashlimit: max too large, truncated to 1048576 [ 127.533739][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 127.533753][ T24] audit: type=1400 audit(127.505:1009): avc: denied { write } for pid=4156 comm="syz.2.1514" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.580815][ T24] audit: type=1400 audit(127.545:1010): avc: denied { open } for pid=4156 comm="syz.2.1514" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.677800][ T4160] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.982356][ T24] audit: type=1326 audit(127.955:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1313fcfc9 code=0x7ffc0000 [ 128.044987][ T24] audit: type=1326 audit(127.985:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1313fcfc9 code=0x7ffc0000 [ 128.166639][ T24] audit: type=1326 audit(127.985:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe1313fcfc9 code=0x7ffc0000 [ 128.216617][ T24] audit: type=1326 audit(127.985:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1313fcfc9 code=0x7ffc0000 [ 128.372540][ T24] audit: type=1326 audit(127.985:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1313fcfc9 code=0x7ffc0000 [ 128.413787][ T4194] device pim6reg1 entered promiscuous mode [ 128.560723][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 128.572247][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.583176][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.591554][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.602467][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.612199][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.623134][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.631534][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.642439][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.650683][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.661580][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.669431][ T4205] loop9: unable to read partition table [ 128.669891][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.675296][ T4205] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 128.675296][ T4205] ) failed (rc=-5) [ 128.685979][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.686495][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.718052][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.726873][ T4208] xt_hashlimit: max too large, truncated to 1048576 [ 129.475671][ T4252] device pim6reg1 entered promiscuous mode [ 129.734657][ T24] audit: type=1400 audit(129.705:1016): avc: denied { map_create } for pid=4273 comm="syz.5.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.760926][ T4274] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 129.779441][ T24] audit: type=1400 audit(129.705:1017): avc: denied { module_request } for pid=4259 comm="syz.0.1555" kmod="fs-afs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 129.849237][ T24] audit: type=1400 audit(129.735:1018): avc: denied { create } for pid=4259 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.928491][ T4268] mmap: syz.4.1558 (4268) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 130.010262][ T4268] FAT-fs (loop4): Unrecognized mount option "allow_utime=00000000000000080000004" or missing value [ 130.181220][ T4287] EXT4-fs (loop2): Ignoring removed nobh option [ 130.235249][ T4287] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 130.279278][ T4287] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #3: comm syz.2.1564: mark_inode_dirty error [ 130.310631][ T4287] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 130.323653][ T4287] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.1564: mark_inode_dirty error [ 130.345507][ T4287] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1564: Failed to acquire dquot type 0 [ 130.362635][ T4287] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 130.376653][ T4287] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #16: comm syz.2.1564: mark_inode_dirty error [ 130.406835][ T4287] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 130.436733][ T4287] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #16: comm syz.2.1564: mark_inode_dirty error [ 130.466757][ T4287] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 130.475432][ T4287] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 130.496791][ T4287] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 130.516606][ T4287] EXT4-fs error (device loop2): ext4_truncate:4390: inode #16: comm syz.2.1564: mark_inode_dirty error [ 130.538942][ T4287] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 130.567295][ T4287] EXT4-fs (loop2): 1 truncate cleaned up [ 130.572977][ T4287] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue [ 132.050575][ T4366] tipc: Enabled bearer , priority 0 [ 132.117534][ T4365] tipc: Resetting bearer [ 132.129711][ T4365] tipc: Disabling bearer [ 132.309949][ T4396] process 'syz.2.1606' launched '/dev/fd/5' with NULL argv: empty string added [ 132.518252][ T4414] device syzkaller0 entered promiscuous mode [ 132.571085][ T24] kauditd_printk_skb: 46 callbacks suppressed [ 132.571099][ T24] audit: type=1326 audit(132.545:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1532e7efc9 code=0x7ffc0000 [ 132.610861][ T24] audit: type=1326 audit(132.575:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1532e7efc9 code=0x7ffc0000 [ 132.634209][ T24] audit: type=1326 audit(132.575:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f1532e7efc9 code=0x7ffc0000 [ 132.674242][ T24] audit: type=1326 audit(132.575:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1532e7efc9 code=0x7ffc0000 [ 132.698253][ T24] audit: type=1326 audit(132.575:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1532e7efc9 code=0x7ffc0000 [ 132.723244][ T24] audit: type=1400 audit(132.605:1068): avc: denied { remount } for pid=4423 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.803885][ T24] audit: type=1400 audit(132.775:1069): avc: denied { relabelfrom } for pid=4436 comm="syz.2.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.842490][ T24] audit: type=1400 audit(132.775:1070): avc: denied { relabelto } for pid=4436 comm="syz.2.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.892684][ T24] audit: type=1326 audit(132.865:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1532e7efc9 code=0x7ffc0000 [ 132.949235][ T24] audit: type=1326 audit(132.865:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1532e7efc9 code=0x7ffc0000 [ 133.089682][ T4455] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 133.294741][ T4455] FAT-fs (loop5): Filesystem has been set read-only [ 133.373449][ T4455] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 133.390568][ T4461] x_tables: duplicate underflow at hook 4 [ 134.310589][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'. [ 134.322965][ T4515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1661'. [ 134.332309][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1663'. [ 134.757991][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 135.188550][ T4560] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.1679: iget: bad extended attribute block 1 [ 135.216873][ T4560] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1679: couldn't read orphan inode 15 (err -117) [ 135.266993][ T4560] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,inlinecrypt,acl,noload,journal_dev=0x0000000000000200,nodiscard,,errors=continue [ 135.449840][ T4586] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.513039][ T4586] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 136.331276][ T4707] device pim6reg1 entered promiscuous mode [ 136.453271][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1754'. [ 136.743260][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'. [ 137.896333][ T4880] xt_hashlimit: max too large, truncated to 1048576 [ 138.261232][ T24] kauditd_printk_skb: 102 callbacks suppressed [ 138.261244][ T24] audit: type=1400 audit(138.235:1175): avc: denied { read } for pid=4899 comm="syz.5.1834" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.296133][ T24] audit: type=1400 audit(138.245:1176): avc: denied { open } for pid=4899 comm="syz.5.1834" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.320375][ T24] audit: type=1400 audit(138.265:1177): avc: denied { create } for pid=4899 comm="syz.5.1834" dev="anon_inodefs" ino=33487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.341851][ T24] audit: type=1400 audit(138.265:1178): avc: denied { ioctl } for pid=4899 comm="syz.5.1834" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33487 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.367639][ T24] audit: type=1400 audit(138.265:1179): avc: denied { read write } for pid=4899 comm="syz.5.1834" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.390969][ T24] audit: type=1400 audit(138.265:1180): avc: denied { open } for pid=4899 comm="syz.5.1834" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.414211][ T24] audit: type=1400 audit(138.265:1181): avc: denied { ioctl } for pid=4899 comm="syz.5.1834" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.481635][ T4909] device pim6reg1 entered promiscuous mode [ 138.489077][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.496181][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.503486][ T4911] device bridge0 left promiscuous mode [ 138.511993][ T4911] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.519081][ T4911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.526381][ T4911] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.533442][ T4911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.541024][ T4911] device bridge0 entered promiscuous mode [ 138.566115][ T24] audit: type=1404 audit(138.535:1182): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 138.580797][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 138.598759][ T24] audit: type=1400 audit(138.575:1183): avc: denied { read write } for pid=282 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.635331][ T24] audit: type=1400 audit(138.575:1184): avc: denied { read write } for pid=280 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.744859][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.752004][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.762030][ T4944] xt_hashlimit: max too large, truncated to 1048576 [ 138.772042][ T4943] device bridge0 left promiscuous mode [ 138.780900][ T4943] device bridge_slave_1 left promiscuous mode [ 138.790948][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.798543][ T4943] device bridge_slave_0 left promiscuous mode [ 138.804759][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.930434][ T4966] xt_hashlimit: max too large, truncated to 1048576 [ 139.028395][ T4991] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 139.214522][ T5035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 139.682399][ T5108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1932'. [ 139.721675][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 141.722517][ T5281] device wg2 entered promiscuous mode [ 142.914826][ T5357] xt_hashlimit: max too large, truncated to 1048576 [ 143.266996][ T24] kauditd_printk_skb: 810 callbacks suppressed [ 143.267009][ T24] audit: type=1400 audit(143.245:1995): avc: denied { map_create } for pid=5379 comm="syz.5.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.325809][ T24] audit: type=1400 audit(143.265:1996): avc: denied { prog_load } for pid=5379 comm="syz.5.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.370647][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 143.384006][ T24] audit: type=1400 audit(143.265:1997): avc: denied { map_create } for pid=5369 comm="syz.1.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.411375][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 143.423169][ T24] audit: type=1400 audit(143.265:1998): avc: denied { prog_load } for pid=5369 comm="syz.1.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.447061][ T24] audit: type=1400 audit(143.265:1999): avc: denied { map_create } for pid=5369 comm="syz.1.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.476270][ T24] audit: type=1400 audit(143.275:2000): avc: denied { read write } for pid=282 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 143.500246][ T24] audit: type=1400 audit(143.285:2001): avc: denied { prog_load } for pid=5382 comm="syz.2.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.544421][ T5401] netlink: 'syz.5.2063': attribute type 4 has an invalid length. [ 143.552423][ T24] audit: type=1400 audit(143.285:2002): avc: denied { read write } for pid=1090 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 143.579125][ T5401] netlink: 'syz.5.2063': attribute type 4 has an invalid length. [ 143.595759][ T24] audit: type=1400 audit(143.285:2003): avc: denied { map_create } for pid=5384 comm="syz.5.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.632933][ T24] audit: type=1400 audit(143.285:2004): avc: denied { prog_load } for pid=5384 comm="syz.5.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 144.456145][ T5491] xt_hashlimit: max too large, truncated to 1048576 [ 144.752861][ T5544] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.839557][ T5555] netem: incorrect gi model size [ 144.844624][ T5555] netem: change failed [ 144.910308][ T5568] ================================================================== [ 144.918447][ T5568] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 144.926600][ T5568] Read of size 8 at addr ffff8881105882c0 by task wޣ/5568 [ 144.934047][ T5568] [ 144.936397][ T5568] CPU: 1 PID: 5568 Comm: wޣ Not tainted syzkaller #0 [ 144.943420][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.953491][ T5568] Call Trace: [ 144.956789][ T5568] __dump_stack+0x21/0x24 [ 144.961142][ T5568] dump_stack_lvl+0x169/0x1d8 [ 144.965823][ T5568] ? show_regs_print_info+0x18/0x18 [ 144.971031][ T5568] ? thaw_kernel_threads+0x220/0x220 [ 144.976318][ T5568] print_address_description+0x7f/0x2c0 [ 144.981877][ T5568] ? tc_setup_flow_action+0x842/0x3280 [ 144.987343][ T5568] kasan_report+0xe2/0x130 [ 144.991765][ T5568] ? flow_action_cookie_create+0x28/0x90 [ 144.997517][ T5568] ? tc_setup_flow_action+0x842/0x3280 [ 145.002989][ T5568] __asan_report_load8_noabort+0x14/0x20 [ 145.008638][ T5568] tc_setup_flow_action+0x842/0x3280 [ 145.014023][ T5568] ? __kmalloc+0x1a7/0x330 [ 145.018450][ T5568] ? flow_rule_alloc+0x32/0x2c0 [ 145.023325][ T5568] mall_replace_hw_filter+0x293/0x810 [ 145.028713][ T5568] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 145.034783][ T5568] ? mall_set_parms+0x410/0x410 [ 145.039636][ T5568] ? tcf_exts_destroy+0xb0/0xb0 [ 145.044478][ T5568] ? pcpu_alloc+0xf8a/0x16b0 [ 145.049068][ T5568] ? mall_set_parms+0x19d/0x410 [ 145.053926][ T5568] mall_change+0x528/0x750 [ 145.058354][ T5568] ? __kasan_check_write+0x14/0x20 [ 145.063475][ T5568] ? mall_get+0xa0/0xa0 [ 145.067641][ T5568] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 145.073537][ T5568] ? nla_strcmp+0xf4/0x140 [ 145.077994][ T5568] tc_new_tfilter+0x13f6/0x1a10 [ 145.082851][ T5568] ? mall_get+0xa0/0xa0 [ 145.087023][ T5568] ? tcf_gate_entry_destructor+0x20/0x20 [ 145.092673][ T5568] ? security_capable+0x87/0xb0 [ 145.097554][ T5568] ? ns_capable+0x8c/0xf0 [ 145.101889][ T5568] ? netlink_net_capable+0x125/0x160 [ 145.107184][ T5568] ? tcf_gate_entry_destructor+0x20/0x20 [ 145.112831][ T5568] rtnetlink_rcv_msg+0x800/0xb90 [ 145.117778][ T5568] ? rtnetlink_bind+0x80/0x80 [ 145.122462][ T5568] ? arch_stack_walk+0xee/0x140 [ 145.127322][ T5568] ? stack_trace_save+0x98/0xe0 [ 145.132177][ T5568] ? stack_trace_snprint+0xf0/0xf0 [ 145.137305][ T5568] ? memcpy+0x56/0x70 [ 145.141296][ T5568] ? avc_has_perm+0x234/0x360 [ 145.145979][ T5568] ? __kasan_slab_alloc+0xbd/0xf0 [ 145.151023][ T5568] ? slab_post_alloc_hook+0x5d/0x2f0 [ 145.156316][ T5568] ? ___sys_sendmsg+0x1f0/0x260 [ 145.161183][ T5568] ? avc_has_perm_noaudit+0x240/0x240 [ 145.166564][ T5568] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 145.171943][ T5568] netlink_rcv_skb+0x1e0/0x430 [ 145.176711][ T5568] ? rtnetlink_bind+0x80/0x80 [ 145.181397][ T5568] ? netlink_ack+0xb80/0xb80 [ 145.186237][ T5568] ? __netlink_lookup+0x387/0x3b0 [ 145.191290][ T5568] rtnetlink_rcv+0x1c/0x20 [ 145.195716][ T5568] netlink_unicast+0x876/0xa40 [ 145.200491][ T5568] netlink_sendmsg+0x88d/0xb30 [ 145.205267][ T5568] ? schedule_preempt_disabled+0x20/0x20 [ 145.210915][ T5568] ? netlink_getsockopt+0x530/0x530 [ 145.216125][ T5568] ? security_socket_sendmsg+0x82/0xa0 [ 145.221597][ T5568] ? netlink_getsockopt+0x530/0x530 [ 145.226807][ T5568] ____sys_sendmsg+0x5a2/0x8c0 [ 145.231577][ T5568] ? __sys_sendmsg_sock+0x40/0x40 [ 145.236607][ T5568] ? import_iovec+0x7c/0xb0 [ 145.241119][ T5568] ___sys_sendmsg+0x1f0/0x260 [ 145.245805][ T5568] ? __sys_sendmsg+0x250/0x250 [ 145.250579][ T5568] ? __fdget+0x1a1/0x230 [ 145.254830][ T5568] __x64_sys_sendmsg+0x1e2/0x2a0 [ 145.259783][ T5568] ? __kasan_check_write+0x14/0x20 [ 145.264901][ T5568] ? ___sys_sendmsg+0x260/0x260 [ 145.269764][ T5568] ? __kasan_check_read+0x11/0x20 [ 145.274796][ T5568] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 145.280546][ T5568] do_syscall_64+0x31/0x40 [ 145.284975][ T5568] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.290876][ T5568] RIP: 0033:0x7f1532e7efc9 [ 145.295309][ T5568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.314913][ T5568] RSP: 002b:00007f15318e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.323349][ T5568] RAX: ffffffffffffffda RBX: 00007f15330d5fa0 RCX: 00007f1532e7efc9 [ 145.331336][ T5568] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 145.339835][ T5568] RBP: 00007f1532f01f91 R08: 0000000000000000 R09: 0000000000000000 [ 145.347811][ T5568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.355790][ T5568] R13: 00007f15330d6038 R14: 00007f15330d5fa0 R15: 00007fffbdc2ce18 [ 145.363763][ T5568] [ 145.366104][ T5568] Allocated by task 5568: [ 145.370443][ T5568] __kasan_kmalloc+0xda/0x110 [ 145.375143][ T5568] __kmalloc+0x1a7/0x330 [ 145.379387][ T5568] tcf_idr_create+0x5f/0x790 [ 145.383986][ T5568] tcf_idr_create_from_flags+0x61/0x70 [ 145.389451][ T5568] tcf_gact_init+0x2b4/0x520 [ 145.394044][ T5568] tcf_action_init_1+0x3e1/0x670 [ 145.398995][ T5568] tcf_action_init+0x1e6/0x700 [ 145.403770][ T5568] tcf_exts_validate+0x215/0x510 [ 145.408716][ T5568] mall_set_parms+0x4b/0x410 [ 145.413315][ T5568] mall_change+0x45c/0x750 [ 145.417757][ T5568] tc_new_tfilter+0x13f6/0x1a10 [ 145.422620][ T5568] rtnetlink_rcv_msg+0x800/0xb90 [ 145.427570][ T5568] netlink_rcv_skb+0x1e0/0x430 [ 145.432342][ T5568] rtnetlink_rcv+0x1c/0x20 [ 145.436762][ T5568] netlink_unicast+0x876/0xa40 [ 145.441526][ T5568] netlink_sendmsg+0x88d/0xb30 [ 145.446272][ T5568] ____sys_sendmsg+0x5a2/0x8c0 [ 145.451018][ T5568] ___sys_sendmsg+0x1f0/0x260 [ 145.455677][ T5568] __x64_sys_sendmsg+0x1e2/0x2a0 [ 145.460604][ T5568] do_syscall_64+0x31/0x40 [ 145.465013][ T5568] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.470897][ T5568] [ 145.473224][ T5568] Last potentially related work creation: [ 145.478935][ T5568] kasan_save_stack+0x3a/0x60 [ 145.483606][ T5568] __kasan_record_aux_stack+0xd2/0x100 [ 145.489053][ T5568] kasan_record_aux_stack_noalloc+0xb/0x10 [ 145.494842][ T5568] call_rcu+0x10e/0x1050 [ 145.499074][ T5568] neigh_parms_release+0x1cb/0x200 [ 145.504176][ T5568] addrconf_ifdown+0x15bb/0x1800 [ 145.509102][ T5568] addrconf_notify+0x3bd/0xe90 [ 145.513855][ T5568] raw_notifier_call_chain+0x90/0x100 [ 145.519221][ T5568] unregister_netdevice_many+0xf8b/0x1980 [ 145.524931][ T5568] sit_exit_batch_net+0x607/0x650 [ 145.529945][ T5568] cleanup_net+0x5fb/0xb70 [ 145.534363][ T5568] process_one_work+0x6e1/0xba0 [ 145.539198][ T5568] worker_thread+0xa6a/0x13b0 [ 145.543867][ T5568] kthread+0x346/0x3d0 [ 145.547924][ T5568] ret_from_fork+0x1f/0x30 [ 145.552324][ T5568] [ 145.554647][ T5568] The buggy address belongs to the object at ffff888110588200 [ 145.554647][ T5568] which belongs to the cache kmalloc-192 of size 192 [ 145.568687][ T5568] The buggy address is located 0 bytes to the right of [ 145.568687][ T5568] 192-byte region [ffff888110588200, ffff8881105882c0) [ 145.582293][ T5568] The buggy address belongs to the page: [ 145.587918][ T5568] page:ffffea0004416200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888110588e00 pfn:0x110588 [ 145.599437][ T5568] flags: 0x4000000000000200(slab) [ 145.604451][ T5568] raw: 4000000000000200 ffffea000442c000 0000000a0000000a ffff888100043380 [ 145.613022][ T5568] raw: ffff888110588e00 000000008010000d 00000001ffffffff 0000000000000000 [ 145.621588][ T5568] page dumped because: kasan: bad access detected [ 145.627984][ T5568] page_owner tracks the page as allocated [ 145.633696][ T5568] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1650, ts 73092086547, free_ts 73080865852 [ 145.649651][ T5568] prep_new_page+0x179/0x180 [ 145.654232][ T5568] get_page_from_freelist+0x2235/0x23d0 [ 145.659763][ T5568] __alloc_pages_nodemask+0x268/0x5f0 [ 145.665118][ T5568] new_slab+0x84/0x3f0 [ 145.669175][ T5568] ___slab_alloc+0x2a6/0x450 [ 145.673752][ T5568] __slab_alloc+0x63/0xa0 [ 145.678070][ T5568] __kmalloc+0x201/0x330 [ 145.682299][ T5568] kvmalloc_node+0x88/0x130 [ 145.686794][ T5568] pfifo_fast_init+0x112/0x7a0 [ 145.691541][ T5568] qdisc_create_dflt+0x136/0x3a0 [ 145.696459][ T5568] mq_init+0x2df/0x660 [ 145.700513][ T5568] qdisc_create_dflt+0x136/0x3a0 [ 145.705435][ T5568] dev_activate+0x118/0x11c0 [ 145.710004][ T5568] __dev_open+0x3aa/0x4c0 [ 145.714316][ T5568] __dev_change_flags+0x20a/0x6a0 [ 145.719343][ T5568] dev_change_flags+0x88/0x1a0 [ 145.724089][ T5568] page last free stack trace: [ 145.728752][ T5568] free_unref_page_prepare+0x2b7/0x2d0 [ 145.734203][ T5568] free_unref_page_list+0x12e/0x9b0 [ 145.739395][ T5568] release_pages+0xe38/0xe80 [ 145.743976][ T5568] free_pages_and_swap_cache+0x86/0xa0 [ 145.749419][ T5568] tlb_finish_mmu+0x175/0x300 [ 145.754077][ T5568] exit_mmap+0x2fc/0x540 [ 145.758302][ T5568] __mmput+0x93/0x2f0 [ 145.762264][ T5568] mmput+0x4e/0x150 [ 145.766059][ T5568] do_exit+0x9ae/0x2480 [ 145.770202][ T5568] do_group_exit+0x141/0x310 [ 145.774772][ T5568] __x64_sys_exit_group+0x3f/0x40 [ 145.779781][ T5568] do_syscall_64+0x31/0x40 [ 145.784186][ T5568] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.790066][ T5568] [ 145.792381][ T5568] Memory state around the buggy address: [ 145.798001][ T5568] ffff888110588180: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 145.806062][ T5568] ffff888110588200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 145.814109][ T5568] >ffff888110588280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 145.822159][ T5568] ^ [ 145.828299][ T5568] ffff888110588300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.836345][ T5568] ffff888110588380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 145.844385][ T5568] ================================================================== [ 145.852426][ T5568] Disabling lock debugging due to kernel taint Jan 1 00:02:25 syzkaller kern.alert kernel: [ 145.627984][ T5568] page_owner tracks the page as allocated Jan 1 00:02:25 syzkaller kern.alert kernel: [ 145.633696][ T5568] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1650, ts 73092086547, free_ts 73080865852 Jan 1 00:02:25 syzkaller kern.alert kernel: [ 145.724089][ T5568] page last free stack trace: