last executing test programs: 8.65133001s ago: executing program 1 (id=15): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r5], 0x50}}, 0x2) 7.767432161s ago: executing program 1 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@empty, @in=@private=0xa010100, @in6=@empty, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x4) 7.756093198s ago: executing program 1 (id=50): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 7.153362357s ago: executing program 4 (id=81): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) 7.100838618s ago: executing program 4 (id=83): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.096958168s ago: executing program 4 (id=85): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ea77158eff3b91d035c6837e7602585420822c5c22c32caedcf977a6ddee49523d3febfb", 0x24}], 0x1}, 0x4002}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='n', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) 7.080972875s ago: executing program 4 (id=86): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001900)='./file1\x00', 0x14090, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32], 0xfd, 0x1512, &(0x7f0000005080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x62) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000008, 0x3032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x2cd}) r3 = socket(0x400000000010, 0x3, 0x0) getpeername$packet(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb00143c, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r5) ptrace(0x4208, r5) waitid(0x0, r5, 0x0, 0x20000000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x45ddd000) read$FUSE(r0, &(0x7f00000065c0)={0x2020}, 0xe) 6.849418726s ago: executing program 1 (id=91): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x20000848, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d61736369692c646973636172643d30303030303030303439a4ee948a3f930aa91a83d356303030303030303030303030", @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64], 0x1, 0x14fd, &(0x7f0000000340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0x154, 0x30, 0xffff, 0x0, 0x0, {}, [{0x140, 0x1, [@m_ife={0xe8, 0x12, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x200}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xe90c}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x74, 0x6, "91be7948a5000a54f76708331413a722c4364033118c9b8d9d50f49b41aad09b5ad785f229580c19f1a5f050d5daa4a56b0a5ae9d2cc2e38c2966bb201450dec260a2f74eab854f9ae96db677df5f2eee3293d38c7b8ffff2a4bf0de1000438dfd3499e9e7bbf2315b0b6b2acc556606"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.721272534s ago: executing program 1 (id=94): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x8000, 0x1, 0x5}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) timer_create(0x7, 0x0, &(0x7f00000005c0)=0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) timer_settime(r2, 0x0, &(0x7f0000000600)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000880)={{r3, &(0x7f0000000040)='data=journal', 0x200800, &(0x7f0000000640)={@align=0x6, {0xa3bd, 0x9, 0x8, 0x48a}}, 0x6, &(0x7f0000000000)={@_ha_fsid}, &(0x7f00000006c0)=0x5}, 0x1, &(0x7f0000000840)=[{0x3, 0x6, &(0x7f0000000700)='data=journal', &(0x7f0000000740)="960018c4054f437c2521689fd0458ca27df51c8002da10917099a77f1505f24551d982d58c1e60627542a2e3fdc521ddda653f496d675468a39e2288bcda47e7421a318f465adb57a6c083526eaf7395ac11908ca060ecb0fbc03f305e1f603b735a75093492b6252421cf846e786cd3e3419b828195a87d6cf6708a183c6cdc49d1166ffb28c5e757b6148de77233db92df7e9fbaf397f9a59938bcec72b4d6b9e03d8255114cc1768899eff41acab9d200ce2de8639a1ef79883fe0ae7736cf7f12fb0de25c37a7bbf6447946b77cb7d4abca993", 0xd5}]}) 6.672795906s ago: executing program 1 (id=95): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2d, 'cpu'}, {0x2b, 'pids'}]}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/235, 0xeb) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0xf) statx(r4, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 6.238437953s ago: executing program 4 (id=103): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000280)={0x7, 0x1, 0x0, 0x0, 0x18, "6218251a2b7e03f9"}) 6.152140668s ago: executing program 4 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.137760136s ago: executing program 32 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.100483354s ago: executing program 2 (id=168): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x4, 0x3000000, 0x6, 0x4f, 0x100, &(0x7f0000000500)="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"}) 3.100408583s ago: executing program 2 (id=169): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) 3.016906939s ago: executing program 2 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3.009181558s ago: executing program 2 (id=171): timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) 2.950316158s ago: executing program 2 (id=172): close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x3) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) unshare(0x22020400) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) 2.950073888s ago: executing program 2 (id=174): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.72838039s ago: executing program 0 (id=182): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) 2.72804305s ago: executing program 0 (id=184): socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x20000400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x88001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) 2.72773355s ago: executing program 0 (id=186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x60, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 2.676882802s ago: executing program 0 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) 2.676684872s ago: executing program 0 (id=188): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) 2.676559342s ago: executing program 0 (id=189): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 884.504159ms ago: executing program 3 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @initial, {0x0, 0xffc}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x70}}, 0x0) 884.352809ms ago: executing program 3 (id=223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80080) 884.184419ms ago: executing program 3 (id=224): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 884.010239ms ago: executing program 3 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c0007"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) 878.410598ms ago: executing program 3 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000900)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\xd8\xf2\xe6\"K1Y\xb5%2\xcb\xf5!\x8c\xd5I\xa3~w\b\x1ao\xbd\xa43z\xd5\xbe\x14\x05\x9b\x05\xf8\r?\x9f\xc6\x0e\xd8\xd3\xc4*\xbc\xf0\x1a\xd1Ob*\x8a\xbf\x92@\xb1\x9fq\xd5\x84\x12\xe2\xad5\x03\xec\xb0@\x7f\x9f}\x17\x87\v\xf0\x99\xf7\xc5\x82C\x14\xd3\x05\xba\xd6F-\x06\xfa\x81\x1a\x1eW', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 156.834916ms ago: executing program 5 (id=228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 156.555586ms ago: executing program 5 (id=229): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffff9a) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5b, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2}}}}}}}, 0x0) 156.373416ms ago: executing program 5 (id=230): capget(&(0x7f0000000480)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000000)={0x6, 0x7, 0x1e1c, 0xce6f, 0x2e25}) 156.190396ms ago: executing program 5 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 155.984406ms ago: executing program 5 (id=232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) 155.701866ms ago: executing program 5 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) openat(0xffffffffffffff9c, 0x0, 0x4241, 0x87) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) setresuid(0x0, 0xee00, 0x0) socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) gettid() openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) 0s ago: executing program 3 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 28.989968][ T24] audit: type=1400 audit(1772588186.970:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.990984][ T267] cgroup: Unknown subsys name 'net' [ 29.012713][ T24] audit: type=1400 audit(1772588186.970:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.040375][ T24] audit: type=1400 audit(1772588187.010:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.040682][ T267] cgroup: Unknown subsys name 'devices' [ 29.242412][ T267] cgroup: Unknown subsys name 'hugetlb' [ 29.248003][ T267] cgroup: Unknown subsys name 'rlimit' [ 29.414295][ T24] audit: type=1400 audit(1772588187.400:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.437546][ T24] audit: type=1400 audit(1772588187.400:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.462324][ T24] audit: type=1400 audit(1772588187.400:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.467870][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.494241][ T24] audit: type=1400 audit(1772588187.480:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.519778][ T24] audit: type=1400 audit(1772588187.480:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.557029][ T24] audit: type=1400 audit(1772588187.540:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.582599][ T24] audit: type=1400 audit(1772588187.540:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.608693][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.443639][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.450714][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.457974][ T276] device bridge_slave_0 entered promiscuous mode [ 30.464707][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.471797][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.479012][ T275] device bridge_slave_0 entered promiscuous mode [ 30.487492][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.494819][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.502090][ T275] device bridge_slave_1 entered promiscuous mode [ 30.515381][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.522671][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.530019][ T276] device bridge_slave_1 entered promiscuous mode [ 30.556155][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.563195][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.570738][ T279] device bridge_slave_0 entered promiscuous mode [ 30.580261][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.587527][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.594844][ T279] device bridge_slave_1 entered promiscuous mode [ 30.650518][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.657544][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.665053][ T277] device bridge_slave_0 entered promiscuous mode [ 30.673243][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.680263][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.687586][ T277] device bridge_slave_1 entered promiscuous mode [ 30.701264][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.708283][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.716173][ T278] device bridge_slave_0 entered promiscuous mode [ 30.741228][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.748268][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.755618][ T278] device bridge_slave_1 entered promiscuous mode [ 30.839590][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.846640][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.853993][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.861022][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.871702][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.878728][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.885987][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.893616][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.907817][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.914946][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.922187][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.929189][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.972568][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.979787][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.987120][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.994600][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.002917][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.010352][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.018599][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.051880][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.059216][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.066618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.075279][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.082300][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.090110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.098469][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.105486][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.112945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.120849][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.128663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.136845][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.143886][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.151340][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.159181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.167105][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.174465][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.181878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.189915][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.197218][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.209747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.231991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.239854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.248840][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.257096][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.264699][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.272865][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.281068][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.288070][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.295441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.303524][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.310541][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.317913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.326262][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.333280][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.340782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.355505][ T275] device veth0_vlan entered promiscuous mode [ 31.368033][ T279] device veth0_vlan entered promiscuous mode [ 31.374665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.383515][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.392008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.399356][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.407177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.415185][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.423104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.432762][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.440891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.452407][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.461121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.469243][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.476260][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.484156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.492559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.500825][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.507855][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.516026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.528511][ T275] device veth1_macvtap entered promiscuous mode [ 31.537306][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.545392][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.554032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.561905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.569850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.577934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.586091][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.598675][ T279] device veth1_macvtap entered promiscuous mode [ 31.611578][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.619693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.627812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.635768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.644287][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.653114][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.661398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.669935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.678269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.691241][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.699214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.717131][ T275] request_module fs-gadgetfs succeeded, but still no fs? [ 31.720046][ T277] device veth0_vlan entered promiscuous mode [ 31.731770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.739398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.747313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.755602][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.764303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.772619][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.780900][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.788834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.797008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.804641][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.816123][ T276] device veth0_vlan entered promiscuous mode [ 31.822468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.822689][ T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 31.830992][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.850610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.858935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.870963][ T278] device veth0_vlan entered promiscuous mode [ 31.877208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.885369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.899486][ T276] device veth1_macvtap entered promiscuous mode [ 31.912924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.922276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.931115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.939601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.948154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.965463][ T277] device veth1_macvtap entered promiscuous mode [ 31.974140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.005029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.025270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.040843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.051040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.059370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.068085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.083943][ T278] device veth1_macvtap entered promiscuous mode [ 32.101921][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.110150][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.118980][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.127508][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.143571][ T298] F2FS-fs (loop3): invalid crc value [ 32.147704][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.178375][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.188944][ T298] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 32.201842][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.238919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.272187][ T301] F2FS-fs (loop0): invalid crc value [ 32.282939][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.283106][ T301] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.359163][ T301] F2FS-fs (loop0): Start checkpoint disabled! [ 32.373384][ T313] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 32.380886][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.393689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.400618][ T313] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.407346][ T298] F2FS-fs (loop3): Start checkpoint disabled! [ 32.422485][ T313] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.432055][ T313] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 32.447373][ T301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 32.451024][ T313] EXT4-fs (loop4): Remounting filesystem read-only [ 32.484315][ T301] attempt to access beyond end of device [ 32.484315][ T301] loop0: rw=2049, want=45104, limit=40427 [ 32.491049][ T298] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 32.497771][ T301] attempt to access beyond end of device [ 32.497771][ T301] loop0: rw=2049, want=45224, limit=40427 [ 32.534693][ T313] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.5: Failed to acquire dquot type 0 [ 32.550668][ T301] attempt to access beyond end of device [ 32.550668][ T301] loop0: rw=2049, want=45104, limit=40427 [ 32.614613][ T313] EXT4-fs (loop4): 1 truncate cleaned up [ 32.660929][ T315] attempt to access beyond end of device [ 32.660929][ T315] loop0: rw=2049, want=40984, limit=40427 [ 32.680678][ T313] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072 [ 32.782466][ T54] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 32.860322][ T313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.925092][ T322] F2FS-fs (loop1): fault_injection options not supported [ 33.004418][ T322] F2FS-fs (loop1): invalid crc value [ 33.011687][ T322] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.048985][ T322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.082900][ T331] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 33.111231][ T331] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.190684][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.193191][ T331] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.7: Failed to acquire dquot type 0 [ 33.210776][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 33.310690][ T54] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 33.331231][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 33.340150][ T54] usb 3-1: SerialNumber: syz [ 33.363946][ T276] attempt to access beyond end of device [ 33.363946][ T276] loop1: rw=2049, want=45112, limit=40427 [ 33.401091][ T54] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 33.408001][ T54] usb-storage 3-1:1.0: USB Mass Storage device detected [ 33.435900][ T54] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 33.454197][ T54] scsi host1: usb-storage 3-1:1.0 [ 33.625541][ T350] capability: warning: `syz.1.10' uses deprecated v2 capabilities in a way that may be insecure [ 33.782723][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 33.807654][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.851126][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.859422][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.878013][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.910863][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.920193][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.954391][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.129814][ T367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15'. [ 34.139137][ T367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15'. [ 34.166930][ T24] kauditd_printk_skb: 96 callbacks suppressed [ 34.166940][ T24] audit: type=1400 audit(1772588192.158:166): avc: denied { write } for pid=368 comm="syz.3.17" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.167798][ T370] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.174609][ T24] audit: type=1400 audit(1772588192.158:167): avc: denied { open } for pid=368 comm="syz.3.17" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.269759][ T24] audit: type=1400 audit(1772588192.158:168): avc: denied { ioctl } for pid=368 comm="syz.3.17" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.295959][ T24] audit: type=1400 audit(1772588192.238:169): avc: denied { write } for pid=369 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.315601][ T24] audit: type=1400 audit(1772588192.258:170): avc: denied { read } for pid=378 comm="syz.4.20" name="event1" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.370652][ T24] audit: type=1400 audit(1772588192.258:171): avc: denied { open } for pid=378 comm="syz.4.20" path="/dev/input/event1" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.399292][ T24] audit: type=1400 audit(1772588192.388:172): avc: denied { ioctl } for pid=378 comm="syz.4.20" path="/dev/input/event1" dev="devtmpfs" ino=256 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.429785][ T24] audit: type=1400 audit(1772588192.408:173): avc: denied { write } for pid=383 comm="syz.3.22" path="socket:[15752]" dev="sockfs" ino=15752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.495160][ T394] 9pnet_virtio: no channels available for device syz [ 34.507294][ T24] audit: type=1400 audit(1772588192.498:174): avc: denied { unlink } for pid=391 comm="syz.0.26" name="#1" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.548692][ T24] audit: type=1400 audit(1772588192.528:175): avc: denied { name_bind } for pid=395 comm="syz.4.29" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.597400][ T411] bridge0: port 1(bridge_slave_0) entered listening state [ 34.792208][ T5] usb 3-1: USB disconnect, device number 2 [ 34.977047][ T468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=468 comm=syz.4.58 [ 35.048936][ T477] 9pnet_virtio: no channels available for device syz [ 35.395474][ T512] capability: warning: `syz.4.79' uses 32-bit capabilities (legacy support in use) [ 35.532725][ T529] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 35.608613][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.614666][ T542] exFAT-fs (loop4): Filesystem has been set read-only [ 35.621864][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 0, err : -5) [ 35.635491][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.641555][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 0, err : -5) [ 35.651588][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.657572][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 1, err : -5) [ 35.676226][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.684284][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 2, err : -5) [ 35.689979][ T549] ====================================================== [ 35.689979][ T549] WARNING: the mand mount option is being deprecated and [ 35.689979][ T549] will be removed in v5.15! [ 35.689979][ T549] ====================================================== [ 35.694520][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.731519][ T549] exfat: Unexpected value for 'discard' [ 35.734262][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 3, err : -5) [ 35.747362][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.753580][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 4, err : -5) [ 35.763762][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.769779][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 5, err : -5) [ 35.779801][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.785833][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 6, err : -5) [ 35.795974][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.802114][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 7, err : -5) [ 35.812174][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.818199][ T542] exFAT-fs (loop4): error, failed to bmap (inode : ffff88812d516e30 iblock : 0, err : -5) [ 35.828257][ T54] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 35.828337][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.842200][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.848175][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.854804][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.861189][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.867301][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.873328][ T542] exFAT-fs (loop4): error, broken FAT chain. [ 35.927818][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.934403][ T315] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.001815][ T554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.93'. [ 36.111980][ T554] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 36.120654][ T554] loop3: partition table partially beyond EOD, truncated [ 36.127907][ T554] loop3: p1 size 67108864 extends beyond EOD, truncated [ 36.135472][ T554] loop3: p2 start 150995200 is beyond EOD, truncated [ 36.142332][ T554] loop3: p3 start 327168 is beyond EOD, truncated [ 36.149165][ T554] loop3: p5 size 67108864 extends beyond EOD, truncated [ 36.156570][ T554] loop3: p6 start 150995200 is beyond EOD, truncated [ 36.224506][ T568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 36.240668][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.280594][ T54] usb 1-1: not running at top speed; connect to a high speed hub [ 36.360633][ T54] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.369335][ T54] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.380982][ T54] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.390417][ T54] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x4D, skipping [ 36.484167][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.491234][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.498507][ T581] device bridge_slave_0 entered promiscuous mode [ 36.505391][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.512577][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.520030][ T581] device bridge_slave_1 entered promiscuous mode [ 36.551893][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.558963][ T581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.566356][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.570595][ T54] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.573403][ T581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.582714][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.598044][ T54] usb 1-1: Product: syz [ 36.602522][ T54] usb 1-1: Manufacturer: syz [ 36.607389][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.614796][ T54] usb 1-1: SerialNumber: syz [ 36.615018][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.628101][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.639815][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.649015][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.662664][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.673565][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.681691][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.689082][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.697331][ T581] device veth0_vlan entered promiscuous mode [ 36.709282][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.718463][ T581] device veth1_macvtap entered promiscuous mode [ 36.736473][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.746623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.748505][ T586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 36.887599][ T603] tipc: Started in network mode [ 36.893724][ T603] tipc: Own node identity fa7327c2547a, cluster identity 4711 [ 36.901596][ T603] tipc: Enabled bearer , priority 0 [ 36.909495][ T603] syzkaller0: MTU too low for tipc bearer [ 36.916120][ T603] tipc: Disabling bearer [ 37.130566][ T54] usb 1-1: 0:2 : does not exist [ 37.140339][ T54] usb 1-1: USB disconnect, device number 2 [ 37.220628][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.470532][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 37.590626][ T20] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 37.599184][ T20] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 37.607821][ T20] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 37.616789][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.626489][ T20] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.636137][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.649350][ T20] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 37.658646][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.668265][ T20] usb 4-1: config 0 descriptor?? [ 37.921384][ T20] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.981033][ T469] Bluetooth: hci0: command 0x1003 tx timeout [ 37.987116][ T560] Bluetooth: hci0: sending frame failed (-49) [ 38.020613][ T295] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.130517][ C0] usblp0: nonzero read bulk status received: -71 [ 38.138230][ T469] usb 4-1: USB disconnect, device number 2 [ 38.150574][ T54] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 38.260559][ T295] usb 1-1: Using ep0 maxpacket: 32 [ 38.286587][ T660] tmpfs: Unsupported parameter 'mpol' [ 38.329268][ T608] usblp0: removed [ 38.380673][ T295] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 38.520567][ T54] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 38.528662][ T54] usb 6-1: config 0 has no interface number 0 [ 38.534812][ T54] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 38.545507][ T54] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 38.556322][ T54] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 38.567062][ T54] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 38.570611][ T295] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 38.580223][ T54] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 38.590357][ T295] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 38.599357][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.602157][ T54] usb 6-1: config 0 descriptor?? [ 38.607873][ T295] usb 1-1: Product: syz [ 38.624695][ T295] usb 1-1: Manufacturer: syz [ 38.629268][ T295] usb 1-1: SerialNumber: syz [ 38.630691][ T639] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 38.634843][ T295] usb 1-1: config 0 descriptor?? [ 38.642357][ T639] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 38.670601][ T629] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 38.690869][ T295] hub 1-1:0.0: bad descriptor, ignoring hub [ 38.696946][ T295] hub: probe of 1-1:0.0 failed with error -5 [ 38.883320][ T5] usb 6-1: USB disconnect, device number 2 [ 39.156412][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.163621][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.220607][ T295] usb 1-1: USB disconnect, device number 3 [ 39.356472][ T714] device syzkaller0 entered promiscuous mode [ 39.579772][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 39.579781][ T24] audit: type=1400 audit(1772588197.568:225): avc: denied { create } for pid=737 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 39.605553][ T24] audit: type=1400 audit(1772588197.578:226): avc: denied { bind } for pid=737 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.635868][ T24] audit: type=1400 audit(1772588197.578:227): avc: denied { read } for pid=737 comm="syz.2.172" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.653317][ T746] usb usb8: usbfs: process 746 (syz.3.175) did not claim interface 0 before use [ 39.658653][ T24] audit: type=1400 audit(1772588197.628:228): avc: denied { read } for pid=745 comm="syz.3.175" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.691163][ T24] audit: type=1400 audit(1772588197.628:229): avc: denied { open } for pid=745 comm="syz.3.175" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.714782][ T24] audit: type=1400 audit(1772588197.628:230): avc: denied { write } for pid=745 comm="syz.3.175" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.758896][ T24] audit: type=1400 audit(1772588197.748:231): avc: denied { bind } for pid=750 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.778653][ T24] audit: type=1400 audit(1772588197.748:232): avc: denied { setopt } for pid=750 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.060532][ T15] Bluetooth: hci0: command 0x1001 tx timeout [ 40.066717][ T744] Bluetooth: hci0: sending frame failed (-49) [ 40.150528][ T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.296997][ T783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.192'. [ 40.305852][ T783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.192'. [ 40.331377][ T787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.194'. [ 40.390576][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 40.510590][ T20] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 40.520375][ T20] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 40.530294][ T20] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 40.540250][ T20] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.553316][ T20] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 40.562503][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.690529][ T24] audit: type=1400 audit(1772588198.678:233): avc: denied { create } for pid=792 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.710662][ T24] audit: type=1400 audit(1772588198.678:234): avc: denied { write } for pid=792 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.250639][ T828] Illegal XDP return value 4294967282, expect packet loss! [ 41.654108][ T850] netlink: 6 bytes leftover after parsing attributes in process `syz.3.221'. [ 41.861782][ T863] 9pnet_virtio: no channels available for device ./bus [ 42.140549][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 42.582578][ T881] ================================================================== [ 42.591233][ T881] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 42.599358][ T881] Read of size 8 at addr ffff88810e941dc0 by task syz.3.234/881 [ 42.606951][ T881] [ 42.609271][ T881] CPU: 0 PID: 881 Comm: syz.3.234 Not tainted syzkaller #0 [ 42.616432][ T881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.626473][ T881] Call Trace: [ 42.629739][ T881] __dump_stack+0x21/0x24 [ 42.634047][ T881] dump_stack_lvl+0x1a7/0x208 [ 42.638709][ T881] ? show_regs_print_info+0x18/0x18 [ 42.643886][ T881] ? thaw_kernel_threads+0x220/0x220 [ 42.649145][ T881] print_address_description+0x7f/0x2c0 [ 42.654669][ T881] ? tc_setup_flow_action+0x842/0x3280 [ 42.660110][ T881] kasan_report+0xe2/0x130 [ 42.664508][ T881] ? flow_action_cookie_create+0x28/0x90 [ 42.670130][ T881] ? tc_setup_flow_action+0x842/0x3280 [ 42.675569][ T881] __asan_report_load8_noabort+0x14/0x20 [ 42.681176][ T881] tc_setup_flow_action+0x842/0x3280 [ 42.686437][ T881] ? __kmalloc+0x1a4/0x330 [ 42.690930][ T881] ? flow_rule_alloc+0x32/0x2c0 [ 42.695753][ T881] mall_replace_hw_filter+0x2cc/0x8a0 [ 42.701539][ T881] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 42.707588][ T881] ? mall_set_parms+0x410/0x410 [ 42.712420][ T881] ? tcf_exts_destroy+0xb0/0xb0 [ 42.717248][ T881] ? pcpu_alloc+0xf9b/0x16b0 [ 42.722006][ T881] ? mall_set_parms+0x19d/0x410 [ 42.726858][ T881] mall_change+0x546/0x760 [ 42.731276][ T881] ? __kasan_check_write+0x14/0x20 [ 42.736370][ T881] ? mall_get+0xa0/0xa0 [ 42.740512][ T881] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 42.746380][ T881] ? nla_strcmp+0xf4/0x140 [ 42.750862][ T881] tc_new_tfilter+0x1452/0x1a90 [ 42.755694][ T881] ? mall_get+0xa0/0xa0 [ 42.759916][ T881] ? tcf_gate_entry_destructor+0x20/0x20 [ 42.765539][ T881] ? security_capable+0x87/0xb0 [ 42.770365][ T881] ? ns_capable+0x8c/0xf0 [ 42.774669][ T881] ? netlink_net_capable+0x125/0x160 [ 42.780195][ T881] ? tcf_gate_entry_destructor+0x20/0x20 [ 42.785809][ T881] rtnetlink_rcv_msg+0x845/0xcc0 [ 42.790723][ T881] ? rtnetlink_bind+0x80/0x80 [ 42.795372][ T881] ? arch_stack_walk+0xee/0x140 [ 42.800198][ T881] ? stack_trace_save+0xa6/0xf0 [ 42.805019][ T881] ? stack_trace_snprint+0xf0/0xf0 [ 42.810107][ T881] ? avc_has_perm+0x168/0x3d0 [ 42.814758][ T881] ? memcpy+0x56/0x70 [ 42.818712][ T881] ? avc_has_perm+0x27f/0x3d0 [ 42.823364][ T881] ? __kasan_slab_alloc+0xbd/0xf0 [ 42.828368][ T881] ? slab_post_alloc_hook+0x5d/0x2f0 [ 42.833715][ T881] ? avc_has_perm_noaudit+0x260/0x260 [ 42.839152][ T881] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 42.844496][ T881] netlink_rcv_skb+0x1f5/0x440 [ 42.849238][ T881] ? rtnetlink_bind+0x80/0x80 [ 42.853900][ T881] ? netlink_ack+0xb70/0xb70 [ 42.858550][ T881] ? __netlink_lookup+0x387/0x3b0 [ 42.864105][ T881] rtnetlink_rcv+0x1c/0x20 [ 42.868510][ T881] netlink_unicast+0x876/0xa40 [ 42.873261][ T881] netlink_sendmsg+0x89c/0xb50 [ 42.878001][ T881] ? netlink_getsockopt+0x530/0x530 [ 42.883266][ T881] ? security_socket_sendmsg+0x82/0xa0 [ 42.888784][ T881] ? netlink_getsockopt+0x530/0x530 [ 42.893955][ T881] ____sys_sendmsg+0x5b7/0x8f0 [ 42.898696][ T881] ? __sys_sendmsg_sock+0x40/0x40 [ 42.903705][ T881] ? import_iovec+0x7c/0xb0 [ 42.908190][ T881] ___sys_sendmsg+0x236/0x2e0 [ 42.912838][ T881] ? __sys_sendmsg+0x280/0x280 [ 42.917579][ T881] ? alloc_file+0x82/0x540 [ 42.921969][ T881] ? __fdget+0x1a1/0x230 [ 42.926183][ T881] __x64_sys_sendmsg+0x1f9/0x2c0 [ 42.931107][ T881] ? __kasan_check_write+0x14/0x20 [ 42.936192][ T881] ? ___sys_sendmsg+0x2e0/0x2e0 [ 42.941631][ T881] ? __kasan_check_read+0x11/0x20 [ 42.946716][ T881] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 42.952512][ T881] do_syscall_64+0x31/0x40 [ 42.956903][ T881] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.962861][ T881] RIP: 0033:0x7ff18f595799 [ 42.967255][ T881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.986923][ T881] RSP: 002b:00007ff18dff0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.995316][ T881] RAX: ffffffffffffffda RBX: 00007ff18f80efa0 RCX: 00007ff18f595799 [ 43.003264][ T881] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 43.011214][ T881] RBP: 00007ff18f62bbd9 R08: 0000000000000000 R09: 0000000000000000 [ 43.019271][ T881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.027399][ T881] R13: 00007ff18f80f038 R14: 00007ff18f80efa0 R15: 00007ffc5ed48678 [ 43.035444][ T881] [ 43.037759][ T881] Allocated by task 881: [ 43.042511][ T881] __kasan_kmalloc+0xda/0x110 [ 43.047207][ T881] __kmalloc+0x1a4/0x330 [ 43.051560][ T881] tcf_idr_create+0x5f/0x790 [ 43.056138][ T881] tcf_idr_create_from_flags+0x61/0x70 [ 43.061664][ T881] tcf_gact_init+0x2e6/0x560 [ 43.066242][ T881] tcf_action_init_1+0x443/0x6e0 [ 43.071198][ T881] tcf_action_init+0x227/0x780 [ 43.076021][ T881] tcf_exts_validate+0x248/0x570 [ 43.080930][ T881] mall_set_parms+0x4b/0x410 [ 43.085574][ T881] mall_change+0x47a/0x760 [ 43.089962][ T881] tc_new_tfilter+0x1452/0x1a90 [ 43.094786][ T881] rtnetlink_rcv_msg+0x845/0xcc0 [ 43.099707][ T881] netlink_rcv_skb+0x1f5/0x440 [ 43.104618][ T881] rtnetlink_rcv+0x1c/0x20 [ 43.109015][ T881] netlink_unicast+0x876/0xa40 [ 43.113755][ T881] netlink_sendmsg+0x89c/0xb50 [ 43.118574][ T881] ____sys_sendmsg+0x5b7/0x8f0 [ 43.123317][ T881] ___sys_sendmsg+0x236/0x2e0 [ 43.127997][ T881] __x64_sys_sendmsg+0x1f9/0x2c0 [ 43.132904][ T881] do_syscall_64+0x31/0x40 [ 43.137401][ T881] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.143261][ T881] [ 43.145566][ T881] The buggy address belongs to the object at ffff88810e941d00 [ 43.145566][ T881] which belongs to the cache kmalloc-192 of size 192 [ 43.159688][ T881] The buggy address is located 0 bytes to the right of [ 43.159688][ T881] 192-byte region [ffff88810e941d00, ffff88810e941dc0) [ 43.173445][ T881] The buggy address belongs to the page: [ 43.179062][ T881] page:ffffea00043a5040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e941 [ 43.189362][ T881] flags: 0x4000000000000200(slab) [ 43.194360][ T881] raw: 4000000000000200 ffffea000437e180 0000000500000005 ffff888100043380 [ 43.203006][ T881] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 43.211554][ T881] page dumped because: kasan: bad access detected [ 43.218021][ T881] page_owner tracks the page as allocated [ 43.223736][ T881] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 96, ts 3667615135, free_ts 3667597375 [ 43.240312][ T881] prep_new_page+0x179/0x180 [ 43.245504][ T881] get_page_from_freelist+0x223b/0x23d0 [ 43.251025][ T881] __alloc_pages_nodemask+0x290/0x620 [ 43.256369][ T881] new_slab+0x84/0x3f0 [ 43.260413][ T881] ___slab_alloc+0x2a6/0x450 [ 43.264976][ T881] __slab_alloc+0x63/0xa0 [ 43.269280][ T881] kmem_cache_alloc_trace+0x1b0/0x2e0 [ 43.274709][ T881] kernfs_fop_open+0x343/0xb30 [ 43.279445][ T881] do_dentry_open+0x793/0x1090 [ 43.284269][ T881] vfs_open+0x73/0x80 [ 43.288220][ T881] path_openat+0x280f/0x31c0 [ 43.292884][ T881] do_filp_open+0x1e2/0x410 [ 43.297359][ T881] do_sys_openat2+0x19f/0x750 [ 43.302007][ T881] __x64_sys_openat+0x136/0x160 [ 43.306829][ T881] do_syscall_64+0x31/0x40 [ 43.311217][ T881] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.317246][ T881] page last free stack trace: [ 43.321902][ T881] free_unref_page_prepare+0x2b7/0x2d0 [ 43.327341][ T881] __free_pages+0x146/0x3b0 [ 43.331816][ T881] free_pages+0x82/0x90 [ 43.335942][ T881] selinux_genfs_get_sid+0x20b/0x250 [ 43.341202][ T881] inode_doinit_with_dentry+0x879/0xd70 [ 43.346744][ T881] selinux_d_instantiate+0x27/0x40 [ 43.351826][ T881] security_d_instantiate+0x9e/0xf0 [ 43.356996][ T881] d_splice_alias+0x6d/0x390 [ 43.361555][ T881] kernfs_iop_lookup+0x2c5/0x310 [ 43.366464][ T881] path_openat+0x1140/0x31c0 [ 43.371028][ T881] do_filp_open+0x1e2/0x410 [ 43.375507][ T881] do_sys_openat2+0x19f/0x750 [ 43.380413][ T881] __x64_sys_openat+0x136/0x160 [ 43.385235][ T881] do_syscall_64+0x31/0x40 [ 43.389642][ T881] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.395503][ T881] [ 43.397802][ T881] Memory state around the buggy address: [ 43.403651][ T881] ffff88810e941c80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 43.412038][ T881] ffff88810e941d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.420454][ T881] >ffff88810e941d80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 43.428508][ T881] ^ [ 43.434639][ T881] ffff88810e941e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.442676][ T881] ffff88810e941e80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 43.450707][ T881] ================================================================== [ 43.458740][ T881] Disabling lock debugging due to kernel taint [ 43.475376][ T295] usb 1-1: USB disconnect, device number 4 [ 46.700872][ C1] bridge0: port 1(bridge_slave_0) entered learning state