last executing test programs: 28m56.5109925s ago: executing program 2 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3e}, 0x28) socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="08400000000000001400350067656e65766531000000000000000000080013"], 0x3c}, 0x1, 0x0, 0x0, 0x44011}, 0x0) 28m54.520760649s ago: executing program 2 (id=40): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x2}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200000, 0x101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) setgroups(0x4000000000000106, &(0x7f0000000180)) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 28m51.030810197s ago: executing program 2 (id=47): bpf$MAP_CREATE(0x0, 0x0, 0x48) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) 28m48.221818293s ago: executing program 2 (id=51): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x14) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x880, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 28m47.283300761s ago: executing program 2 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000006c0)="040000", 0x3) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000201010400000000000000000a02000a0800034000000406080015"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x60) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) 28m46.979945437s ago: executing program 2 (id=58): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x350, 0x1d8, 0x1d8, 0x350, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xffff, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x122, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x4, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x9, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xe, 0xff, 0x0, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x80, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0xc}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7f, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0x90, 0x94}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x0, 0x2e, 0x30]}}, &(0x7f0000001940)=""/4096, 0x2d, 0x1000, 0x1, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="717207000034b7e81d0f9b15400400", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',k']) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r7, &(0x7f0000000340)=[{{0x0, 0xea60}, 0x11, 0x7f}], 0x18) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x44854}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121600000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x308, 0x3f8, 0x308, 0x308, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000600), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @remote, 0xffffffff, 0x0, 'wg1\x00', 'rose0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x1, 0x4, 0x0, 0x6], 0x5, 0x4}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7f}}}, {{@ip={@local, @empty, 0xffffff00, 0x0, 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x21, 0x0, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x19}}}, {{@ip={@private=0xa010100, @empty, 0xffffffff, 0xff, 'dvmrp0\x00', 'dvmrp0\x00', {0xff}, {}, 0x89, 0x2, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x18}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x400, 0x8, 0x1, 0x95, 0xa5}}}, {{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'macsec0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6erspan0\x00', {0x2, 0x6, 0x7, 0x0, 0x7, 0x7ff, 0xfffffa72, 0x18, 0xf8}, {0x3}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8dd54b38fc84a6ee, 0x0, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xff000000, 'pim6reg0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x1, 0x2, 0x2c}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x9, 0xf, [0x3c, 0x1c, 0x3d, 0x27, 0x1f, 0x1a, 0x11, 0xa, 0x20, 0x8, 0x2b, 0x28, 0x1, 0x1f, 0x2, 0x3e], 0x0, 0x3, 0x100000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8) 28m46.528555876s ago: executing program 32 (id=58): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x350, 0x1d8, 0x1d8, 0x350, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xffff, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x122, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x4, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x9, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xe, 0xff, 0x0, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x80, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0xc}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7f, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0x90, 0x94}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x0, 0x2e, 0x30]}}, &(0x7f0000001940)=""/4096, 0x2d, 0x1000, 0x1, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="717207000034b7e81d0f9b15400400", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',k']) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r7, &(0x7f0000000340)=[{{0x0, 0xea60}, 0x11, 0x7f}], 0x18) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x44854}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121600000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x308, 0x3f8, 0x308, 0x308, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000600), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @remote, 0xffffffff, 0x0, 'wg1\x00', 'rose0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x1, 0x4, 0x0, 0x6], 0x5, 0x4}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7f}}}, {{@ip={@local, @empty, 0xffffff00, 0x0, 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x21, 0x0, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x19}}}, {{@ip={@private=0xa010100, @empty, 0xffffffff, 0xff, 'dvmrp0\x00', 'dvmrp0\x00', {0xff}, {}, 0x89, 0x2, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x18}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x400, 0x8, 0x1, 0x95, 0xa5}}}, {{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'macsec0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6erspan0\x00', {0x2, 0x6, 0x7, 0x0, 0x7, 0x7ff, 0xfffffa72, 0x18, 0xf8}, {0x3}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8dd54b38fc84a6ee, 0x0, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xff000000, 'pim6reg0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x1, 0x2, 0x2c}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x9, 0xf, [0x3c, 0x1c, 0x3d, 0x27, 0x1f, 0x1a, 0x11, 0xa, 0x20, 0x8, 0x2b, 0x28, 0x1, 0x1f, 0x2, 0x3e], 0x0, 0x3, 0x100000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8) 27m28.928342164s ago: executing program 4 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r3, &(0x7f0000000380)=""/142, 0x8e, 0x2) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m27.136862959s ago: executing program 4 (id=211): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x100) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r3, r5, 0x0) 27m24.910507063s ago: executing program 4 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) dup2(r5, r5) 27m23.964905501s ago: executing program 4 (id=218): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000fba4f7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000002180)='./file0\x00', &(0x7f0000002200)=ANY=[@ANYBLOB="ed"]) 27m20.674260496s ago: executing program 4 (id=220): setfsgid(0xee00) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = syz_open_procfs(r0, &(0x7f0000000100)='stack\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) 27m20.532047539s ago: executing program 4 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r3, &(0x7f0000000380)=""/142, 0x8e, 0x2) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m19.782466634s ago: executing program 33 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r3, &(0x7f0000000380)=""/142, 0x8e, 0x2) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m56.479959008s ago: executing program 5 (id=1966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) creat(0x0, 0xc9028ba210c11f88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) read(r4, &(0x7f0000000580)=""/194, 0xc2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pipe2$9p(0x0, 0x0) 14m53.588939135s ago: executing program 5 (id=1972): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$eJzs27tvHEUYAPBv9+yEvLAJ4ZEHYAiIiIcdOwFS0IBAogAJiSaUxnaikEuMYiORKAIHoVCiSPSIEom/gAoaBFRItNCjSBFKQ6A6tL7d3CN359fZC9zvJ609szPrmc+zcze7exfAwBrLfiQRuyPi14gYqWdbK4zVf926eXnmr5uXZ5Ko1d76I1mu9+fNyzNF1eK4XXnmSBqRfpLEwQ7tLly8dHa6Wp27kOcnFs+9N7Fw8dKzZ85Nn547PXd+6sSJ48cmX3h+6rm+xHlP1tcDH84f2v/a29femDl57Z0fv06K+Nvi6JOxXoVP1Gp9bq5ce5rSyVCJHWFNKhGRDdfw8vwfiUo0Bm8kXv241M4Bm6qW61K8VAP+x5IouwdAOYo3+uz6t9i2bvVRvhsv1S+Asrhv5Vu9ZCjSvM5w2/VtP41FxMmlv7/ItljxPoQLawBg477N1j/PdFr/pXF/U72782dDo/mzlL0RcW9E7IuI+yKW6z4QEQ+usf22hyTbI6Jt/ZNeX19kq5Ot/17Mn221rv+K1V+MVvLcnuX4h5NTZ6pzR/P/yZEY3p7lJ3u08d0rv3zWrax5/ZdtWfvFWjDvx/Wh7a3HzE4vTm8k5mY3rkQcGOoUf3J7tZlExP6IOLDONs489dWhbmUrx99DH5bDtS8jnqyP/1K0xV9Iej+fnLgrqnNHJ4qz4k4//Xz1zW7tbyj+PsjGf2fH8/92/KNJ8/PahbW3cfW3T7te04yv6/xv7NiW//5genHxwmTEtuT1eqeb9081ji3yRf0s/iOHO8//vdH4TxyMiOwkfigiHo6IR/KxezQiHouIwz3i/+Hlx9/tVvZvGP/ZtvEfba3SNv6NxLZo39M5UTn7/Tetf7GRXN3r3/HaSNPhvV7/ivNhNf1a39kMAAAA/z1pROyOJB2/nU7T8fH6Z/j3xc60Or+w+PSp+ffPz9a/IzAaw2lxp2uk6X7oZH5ZX+Sn2vLH8vvGn1d2LOfHZ+ars2UHDwNuV6f5X6mX/V4pu3fApvOxMhhc5j8MLvMfBpf5D4Orw/zfUUY/gK3X6f3/oxL6AWy9tvnvsR8MENf/MLjMfxhczfM/KbEfwJZa2BErf0leQuKORKQ961zZeBPFOboF4SSbPAt2b0qf8yncWpQs1Xev5Q/WOhSV9IIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQZ/8EAAD//xL/3co=") open(0x0, 0x86442, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r1, 0x0, 0x20094) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 14m51.27791156s ago: executing program 5 (id=1980): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="02000000d39f9f3bb95dec0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000cd62c760d19ac7527f5bcba29ae8684410fbd559403cd6ad9588e73fb89bd85b453d350030273b0390343338cbedcda38af6b44ef031d23bff0e18ffbb916dd8"], 0x80}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 14m49.264503939s ago: executing program 5 (id=1988): syz_open_dev$loop(0x0, 0x7, 0x180862) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x80086601, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r0) sync() 14m46.592315911s ago: executing program 5 (id=1994): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x10040, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") 14m42.778338145s ago: executing program 5 (id=2002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x1}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x90}}], 0x2, 0x40) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000"], 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) inotify_init1(0x800) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 14m42.711720486s ago: executing program 34 (id=2002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x1}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x90}}], 0x2, 0x40) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000"], 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) inotify_init1(0x800) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.892879224s ago: executing program 7 (id=4312): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x1}, @global=@item_012={0x2, 0x1, 0x1, "42d3"}, @global=@item_012={0x2, 0x1, 0x2, "1b2c"}]}}, 0x0}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 3.776112377s ago: executing program 0 (id=4316): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 3.765288627s ago: executing program 0 (id=4317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000a40)={0x38, r2, 0x205, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.751905777s ago: executing program 0 (id=4319): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) 3.735658768s ago: executing program 0 (id=4321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x80000000000000a, 0x2, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a00000000000000", 0x6c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, 0x0, 0x0) 2.641892049s ago: executing program 0 (id=4324): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40054) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200798b9c73e2000000b8040202400001020301090224000101005001030000000207"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.437939223s ago: executing program 1 (id=4326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.563385559s ago: executing program 1 (id=4327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000740)={0x30, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) 1.500150611s ago: executing program 1 (id=4329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) close(r1) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x2000004, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.500010431s ago: executing program 1 (id=4330): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 1.499944151s ago: executing program 1 (id=4331): unshare(0x2040400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xc, 0x1, 0x20a9, 0x3, 0x2, 0x1}) 1.477059942s ago: executing program 1 (id=4333): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002480)={0x44, &(0x7f0000002500)=ANY=[@ANYBLOB="40146f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="401583"], 0x0, 0x0, 0x0, 0x0}) 1.287243875s ago: executing program 0 (id=4336): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 1.283641165s ago: executing program 3 (id=4339): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)={0x200}) 1.241811336s ago: executing program 3 (id=4340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="66baa00066b86b4266ef66ba6b0066b8e200f30fc7f8440f20c0350f000000440f22c0c4e2b1488c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4e}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 840.178294ms ago: executing program 7 (id=4341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x10000, 0x3, 0xad, 0xf, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x4000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x6, 0x5, 0x6, 0x3}, {0x80a0000, 0x1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x0, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0x4, 0x2000, 0xd, 0xf7, 0x5, 0x88, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x3, 0x7, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0xeeee8000, 0xc, 0x7, 0x0, 0x3, 0x1, 0x3, 0xf6, 0x80, 0x3, 0x6}, {0x8000000, 0x1, 0x9, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0xdddd0000, 0x1}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0x3000, [0x5, 0x5, 0x15e, 0x2]}) 786.235295ms ago: executing program 7 (id=4342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) unshare(0x64000600) 762.611806ms ago: executing program 7 (id=4343): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 754.027655ms ago: executing program 7 (id=4344): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x4, 0x1c000000, 0x2, "0062ba7d820740ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 704.127556ms ago: executing program 7 (id=4345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() wait4(r0, 0x0, 0x1, &(0x7f0000000380)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioprio_set$pid(0x3, r0, 0x2004) 400.773332ms ago: executing program 6 (id=4347): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x1000016, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r1}}]}) 388.673513ms ago: executing program 6 (id=4348): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x0, 0x100000a, 0x8, 0x0, 0x0, 0x9f}) capset(&(0x7f0000000bc0)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 370.075433ms ago: executing program 6 (id=4349): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 334.160053ms ago: executing program 6 (id=4350): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000)=0x2, 0x4) 334.017613ms ago: executing program 6 (id=4351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4804, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 333.888713ms ago: executing program 3 (id=4352): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x80140, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 333.536143ms ago: executing program 6 (id=4353): socket$inet6(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x400000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x13, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) shutdown(r0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x18) readlink(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 318.100324ms ago: executing program 3 (id=4354): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x8, 0x2371}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x2f, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 263.969405ms ago: executing program 3 (id=4355): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000006100)='./file0\x00', 0x0, 0x2000) 0s ago: executing program 3 (id=4356): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x5, 0x28, 0xe4d, 0x2, 0x7fb, 0x3861, 0x7, 0x3ff, 0x2, 0xffff, 0x200, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): nk becomes ready [ 1547.868513][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1547.876949][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1547.885226][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1547.892979][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1547.900408][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1547.908374][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1547.916742][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1547.925065][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1547.932922][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1547.940677][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1547.948346][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1547.966280][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1547.974425][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1547.982134][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1547.990124][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1547.999168][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1548.015622][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1548.023366][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1548.031316][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1548.039203][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1548.046851][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1548.054551][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1548.062296][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1548.070245][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1548.078341][T15328] netlink: 'syz.3.3357': attribute type 27 has an invalid length. [ 1548.129700][T15328] device vlan0 left promiscuous mode [ 1548.135106][T15328] device syz_tun left promiscuous mode [ 1548.419254][ T7524] ip6_tunnel: K xmit: Local address not yet configured! [ 1548.426790][ T7524] ip6_tunnel: K xmit: Local address not yet configured! [ 1548.448869][ T7524] ip6_tunnel: K xmit: Local address not yet configured! [ 1548.480287][T15335] device ip6gretap0 left promiscuous mode [ 1548.517707][T15335] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1548.529975][T15335] device veth1_macvtap left promiscuous mode [ 1548.536848][T15335] device veth1_macvtap entered promiscuous mode [ 1548.544953][T15335] device ip6gretap0 entered promiscuous mode [ 1548.552824][T15340] netlink: 'syz.1.3359': attribute type 13 has an invalid length. [ 1548.560782][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1548.568277][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1548.575610][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1548.582954][T15340] 0猉功D: refused to change device tx_queue_len [ 1548.589419][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1548.597020][T15340] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1548.612736][T15341] netlink: 'syz.7.3358': attribute type 4 has an invalid length. [ 1548.620546][T15341] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1548.645647][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1548.654173][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1548.662722][T15360] fuse: root generation should be zero [ 1548.669802][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1548.678284][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1548.686659][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1548.695450][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1548.704148][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1548.712781][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1548.728353][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1548.737419][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1548.745884][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1548.754647][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1548.763314][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1548.771041][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1548.779234][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1548.788735][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1548.798157][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1549.244545][T14005] ip6_tunnel: K xmit: Local address not yet configured! [ 1549.252171][T13884] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1549.624511][ T7524] ip6_tunnel: K xmit: Local address not yet configured! [ 1550.073127][T13884] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1550.099887][T13884] Bluetooth: hci0: Frame reassembly failed (-84) [ 1551.735857][T15401] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 1552.170765][T10970] Bluetooth: hci0: command 0x1003 tx timeout [ 1552.301834][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1552.531674][T10979] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1557.009833][T15436] overlayfs: conflicting lowerdir path [ 1558.605613][T15440] input: syz1 as /devices/virtual/input/input28 [ 1558.840366][T15446] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3382'. [ 1560.297926][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1561.374341][T15456] overlayfs: failed to resolve './file7': -2 [ 1563.262790][T15463] device syzkaller0 entered promiscuous mode [ 1563.598754][T15481] bridge0: port 4(gretap0) entered blocking state [ 1563.605261][T15481] bridge0: port 4(gretap0) entered disabled state [ 1563.616999][T15481] device gretap0 entered promiscuous mode [ 1564.051243][T15491] netlink: 1000 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1564.109983][ T28] audit: type=1400 audit(1820.053:1922): avc: denied { ioctl } for pid=15490 comm="syz.1.3391" path="/dev/uhid" dev="devtmpfs" ino=267 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1564.740444][T15496] loop7: detected capacity change from 0 to 512 [ 1564.790232][T15496] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.3392: casefold flag without casefold feature [ 1565.000267][ T28] audit: type=1400 audit(1820.773:1923): avc: denied { getopt } for pid=15490 comm="syz.1.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1565.015442][T15496] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3392: couldn't read orphan inode 15 (err -117) [ 1565.047039][T15496] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1565.165528][ T9322] EXT4-fs (loop7): unmounting filesystem. [ 1566.424941][T15516] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3396'. [ 1567.900621][ T28] audit: type=1400 audit(1823.905:1924): avc: denied { read } for pid=15524 comm="syz.1.3401" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1568.002306][T15544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3403'. [ 1568.447051][T15550] netlink: 'syz.3.3403': attribute type 3 has an invalid length. [ 1568.462533][T15550] netlink: 'syz.3.3403': attribute type 3 has an invalid length. [ 1568.485554][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3403'. [ 1568.559165][T15552] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3404'. [ 1568.571192][T15552] syz.6.3404[15552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1568.571262][T15552] syz.6.3404[15552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1571.725775][ T28] audit: type=1326 audit(1825.696:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa02cb8eba9 code=0x0 [ 1571.827617][ T28] audit: type=1400 audit(1827.496:1926): avc: denied { write } for pid=15563 comm="syz.7.3408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1573.251485][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3412'. [ 1573.461310][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3412'. [ 1575.591970][ T28] audit: type=1400 audit(1831.441:1927): avc: denied { setattr } for pid=15583 comm="syz.1.3410" name="NETLINK" dev="sockfs" ino=62331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1575.650113][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1576.235663][T15610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1579.731067][T15616] sch_fq: defrate 4294967295 ignored. [ 1581.158188][T15637] sch_fq: defrate 0 ignored. [ 1581.228881][T15637] loop7: detected capacity change from 0 to 4096 [ 1581.235732][T15637] EXT4-fs: Ignoring removed mblk_io_submit option [ 1583.001676][T15638] gre0: MTU too low for tipc bearer [ 1583.006969][T15638] tipc: Enabling of bearer rejected, failed to enable media [ 1583.019640][T15637] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1583.112199][T15637] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1584.157013][ T9322] EXT4-fs (loop7): unmounting filesystem. [ 1587.978257][T15663] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1587.987709][T15663] FAT-fs (loop7): unable to read boot sector [ 1588.118211][ T28] audit: type=1400 audit(1844.998:1928): avc: denied { mounton } for pid=15648 comm="syz.3.3427" path="/565/file0" dev="tmpfs" ino=3247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1588.428584][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3432'. [ 1592.132649][T15701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3438'. [ 1592.245402][T15695] loop7: detected capacity change from 0 to 1024 [ 1592.252235][T15695] EXT4-fs: Ignoring removed orlov option [ 1592.354319][T15695] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1592.703019][T15715] /dev/loop0: Can't open blockdev [ 1592.709457][T15715] overlayfs: './file0' not a directory [ 1592.939245][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1592.952130][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1592.962899][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1592.979432][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1592.990463][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1593.004675][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1593.060181][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1593.081954][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1593.089649][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1593.112673][T15695] EXT4-fs (loop7): unmounting filesystem. [ 1593.119924][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1593.143083][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1593.150722][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1593.170272][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1593.219067][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1593.280349][T15699] device veth1_macvtap left promiscuous mode [ 1593.293195][T15699] device veth1_macvtap entered promiscuous mode [ 1593.319662][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1593.327764][T15699] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1593.378621][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1593.389018][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1593.399552][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1593.410111][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1593.420287][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1593.430616][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1593.440568][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1593.450360][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1593.460332][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1593.472277][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1593.482458][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1593.492260][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1593.502210][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1593.512209][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1593.522241][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1593.532504][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1593.542622][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1593.552279][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1593.561720][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1593.570787][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1593.586845][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1593.596988][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1593.606961][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1593.616856][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1593.626708][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1593.635746][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1593.645025][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1593.654218][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1593.663081][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1593.672165][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1593.680435][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1593.689964][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1593.699210][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1593.708253][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1593.717399][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1593.726826][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1593.736053][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1593.759617][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1593.768087][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1593.781400][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1593.789433][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1593.798077][ T4116] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1593.806357][ T4116] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1593.831332][T14005] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1593.867612][T15728] loop7: detected capacity change from 0 to 1024 [ 1593.901560][T15728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1594.031577][T15728] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.3444: Invalid block bitmap block 0 in block_group 0 [ 1594.046802][T15728] Quota error (device loop7): write_blk: dquota write failed [ 1594.061318][T15728] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1594.191257][T15728] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.3444: Failed to acquire dquot type 0 [ 1594.221569][T15728] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.3444: Freeing blocks not in datazone - block = 0, count = 4096 [ 1594.269309][T15728] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.3444: Invalid inode bitmap blk 0 in block_group 0 [ 1594.302412][T15728] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 1594.323761][T15728] EXT4-fs (loop7): 1 orphan inode deleted [ 1594.329754][T15728] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1594.553813][ T6565] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 1594.583109][ T6565] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:12: Failed to release dquot type 0 [ 1594.601537][ T4116] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1594.674633][T15745] netlink: 'syz.1.3446': attribute type 27 has an invalid length. [ 1594.691804][T14005] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1595.061519][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1595.073353][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1595.085166][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1595.097540][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1595.109794][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1595.117635][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1595.125426][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1595.132549][ T6565] tipc: Subscription rejected, illegal request [ 1595.143678][ T9322] EXT4-fs (loop7): unmounting filesystem. [ 1595.146950][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1595.167956][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1595.181756][T15744] device veth1_macvtap left promiscuous mode [ 1595.188237][T15744] device veth1_macvtap entered promiscuous mode [ 1595.196646][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1595.209729][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1595.218256][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1595.226974][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1595.235741][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1595.244433][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1595.253231][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1595.262154][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1595.270596][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1595.279620][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1595.287852][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1595.296330][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1595.304632][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1595.313220][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1595.322129][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1595.330997][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1595.339369][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1595.348089][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1595.356362][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1595.364731][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1595.373285][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1595.381649][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1595.390060][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1595.398442][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1595.406688][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1595.414934][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1595.422623][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1595.430168][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1595.662270][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1595.678345][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1595.685979][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1595.693547][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1595.701273][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1595.709076][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1595.717077][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1595.725017][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1595.732579][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1595.740268][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1595.747804][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1595.755583][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1595.763166][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1595.779881][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1595.855724][T15771] netlink: 'syz.0.3450': attribute type 13 has an invalid length. [ 1595.864281][T15771] gretap0: refused to change device tx_queue_len [ 1595.870911][T15771] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1595.888277][T15349] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1595.896197][T15349] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1595.910026][T15747] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1596.060233][T15349] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1596.550007][T15747] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1598.121974][T15809] loop7: detected capacity change from 0 to 512 [ 1598.197497][T15809] EXT4-fs: Ignoring removed mblk_io_submit option [ 1598.230797][T15809] EXT4-fs: Ignoring removed bh option [ 1598.528690][T15809] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1598.603935][T15809] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1598.666543][T15809] EXT4-fs (loop7): 1 truncate cleaned up [ 1598.692554][T15809] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1599.234500][T15809] bridge0: port 4(gretap0) entered blocking state [ 1599.240979][T15809] bridge0: port 4(gretap0) entered forwarding state [ 1599.247688][T15809] bridge0: port 3(syz_tun) entered blocking state [ 1599.254180][T15809] bridge0: port 3(syz_tun) entered forwarding state [ 1599.261215][T15809] device bridge0 left promiscuous mode [ 1599.297944][T15809] device veth0_vlan left promiscuous mode [ 1599.304023][T15809] device veth0_vlan entered promiscuous mode [ 1599.315921][T15809] device veth1_macvtap left promiscuous mode [ 1599.323207][T15809] device veth1_macvtap entered promiscuous mode [ 1599.341118][T15809] device bridge0 entered promiscuous mode [ 1599.405698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1599.417414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 1599.434390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1599.450257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1599.526096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1599.585297][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.592419][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.697158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1599.718432][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1599.748107][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.755297][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.803988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1599.813186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1599.821454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1599.830022][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1599.838275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1599.846599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1599.854867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1599.875334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1599.908440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1599.974366][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1600.069369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1600.077889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1600.086018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1600.094282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1600.107723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1600.116278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1600.124512][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1600.132797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1600.141648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1600.149857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1600.158074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1600.165556][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1600.173068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1600.181487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1600.189794][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1600.197613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1600.205595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1600.216864][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1600.225382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1600.233381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1600.241141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1600.248977][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1600.256657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1600.264499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1600.272555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1600.305469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1600.314936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1600.352448][ T9322] EXT4-fs (loop7): unmounting filesystem. [ 1601.295030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1601.330022][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1601.357747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1601.366433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1601.376089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 1601.731688][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1601.739553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth21: link becomes ready [ 1601.747537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1601.755575][ T913] ip6_tunnel: K xmit: Local address not yet configured! [ 1601.762955][ T913] ip6_tunnel: K xmit: Local address not yet configured! [ 1601.777245][ T913] ip6_tunnel: K xmit: Local address not yet configured! [ 1601.881910][T15835] netlink: 'syz.0.3462': attribute type 27 has an invalid length. [ 1601.890128][ T7531] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1601.961632][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1601.985131][T15832] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1602.005073][T15832] device veth0_vlan left promiscuous mode [ 1602.085121][T15832] device veth0_vlan entered promiscuous mode [ 1602.100011][T15832] device veth1_macvtap left promiscuous mode [ 1602.111470][T15832] device veth1_macvtap entered promiscuous mode [ 1602.147179][ T28] audit: type=1400 audit(1859.165:1929): avc: denied { map } for pid=15851 comm="syz.7.3467" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1602.252331][T15832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1602.351438][T15747] ip6_tunnel: K xmit: Local address not yet configured! [ 1602.359024][T15747] ip6_tunnel: K xmit: Local address not yet configured! [ 1602.362588][T14005] ip6_tunnel: K xmit: Local address not yet configured! [ 1602.373448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1602.376886][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1602.382420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1602.397483][ T7531] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1602.398966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1602.406940][ T7531] usb 4-1: config 128 has an invalid interface number: 59 but max is 0 [ 1602.420844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1602.421743][ T7531] usb 4-1: config 128 has no interface number 0 [ 1602.436367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1602.447506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1602.459429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1602.471103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1602.495216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1602.505840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1602.518524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1602.529186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1602.538899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1602.559483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1602.566266][ T7531] usb 4-1: config 128 interface 59 has no altsetting 0 [ 1602.567799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1602.574910][ T913] ip6_tunnel: K xmit: Local address not yet configured! [ 1602.581682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1602.595832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1602.596748][ T7531] usb 4-1: string descriptor 0 read error: -22 [ 1602.603703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1602.609413][ T7531] usb 4-1: New USB device found, idVendor=a2f1, idProduct=6ed8, bcdDevice=bc.ba [ 1602.622457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1602.626150][ T7531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.633717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1602.643246][ T7531] usb-storage 4-1:128.59: USB Mass Storage device detected [ 1602.648999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1603.815852][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1604.137003][T15882] loop7: detected capacity change from 0 to 128 [ 1604.318312][T15885] overlayfs: failed to resolve './file1': -2 [ 1605.051044][T15882] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1605.475210][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1605.475229][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1605.554965][T14005] usb 4-1: USB disconnect, device number 9 [ 1606.412157][ T9322] EXT4-fs (loop7): unmounting filesystem. [ 1606.452038][T15905] loop7: detected capacity change from 0 to 512 [ 1606.458881][T15905] EXT4-fs: Ignoring removed mblk_io_submit option [ 1606.542950][T15905] EXT4-fs: Ignoring removed bh option [ 1606.555351][T15905] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1606.572353][T15905] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1606.754569][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1606.950518][T15916] bridge0: port 1(vlan0) entered blocking state [ 1606.956857][T15916] bridge0: port 1(vlan0) entered disabled state [ 1607.187465][T15905] EXT4-fs (loop7): 1 truncate cleaned up [ 1607.202034][T15905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1608.913690][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1609.754290][T15926] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1610.644248][ T28] audit: type=1400 audit(1867.649:1930): avc: denied { rename } for pid=15904 comm="syz.7.3478" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.709987][ T28] audit: type=1400 audit(1867.649:1931): avc: denied { ioctl } for pid=15904 comm="syz.7.3478" path="socket:[63789]" dev="sockfs" ino=63789 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1613.103451][ T9322] EXT4-fs (loop7): unmounting filesystem. [ 1613.391280][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1615.310450][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1615.999611][T15971] syz.3.3493[15971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1615.999685][T15971] syz.3.3493[15971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1616.074043][T15969] loop7: detected capacity change from 0 to 8192 [ 1619.864270][ T28] audit: type=1400 audit(1876.214:1932): avc: denied { write } for pid=15999 comm="syz.7.3500" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1619.917961][ T28] audit: type=1400 audit(1876.414:1933): avc: denied { read } for pid=15999 comm="syz.7.3500" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1619.942886][ T28] audit: type=1400 audit(1876.924:1934): avc: denied { unmount } for pid=9322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1619.966636][ T28] audit: type=1400 audit(1876.934:1935): avc: denied { read write } for pid=9322 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1619.991792][ T28] audit: type=1400 audit(1876.934:1936): avc: denied { open } for pid=9322 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1620.071597][ T28] audit: type=1400 audit(1876.934:1937): avc: denied { ioctl } for pid=9322 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1620.096877][ T28] audit: type=1400 audit(1876.984:1938): avc: denied { bpf } for pid=16011 comm="syz.6.3502" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1620.118529][ T28] audit: type=1400 audit(1876.984:1939): avc: denied { map_create } for pid=16011 comm="syz.6.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1620.166316][ T28] audit: type=1400 audit(1876.994:1940): avc: denied { prog_load } for pid=16012 comm="syz.7.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1620.413004][ T28] audit: type=1400 audit(1876.994:1941): avc: denied { perfmon } for pid=16012 comm="syz.7.3503" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1620.571676][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1620.708945][T16024] loop7: detected capacity change from 0 to 256 [ 1621.372267][T14005] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1621.728137][T14005] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.743610][T14005] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1621.761959][T14005] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1621.771220][T14005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.780065][T14005] usb 2-1: Product: syz [ 1621.784374][T14005] usb 2-1: Manufacturer: syz [ 1621.789208][T14005] usb 2-1: SerialNumber: syz [ 1621.795087][T14005] usb 2-1: config 0 descriptor?? [ 1623.408865][T16050] loop7: detected capacity change from 0 to 16 [ 1623.525992][T16050] erofs: (device loop7): erofs_superblock_csum_verify: invalid checksum 0x12974ba0, 0x2a6de271 expected [ 1623.559296][T16053] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 1624.848097][T16061] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1624.926299][T16061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1625.452422][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 1625.452465][ T28] audit: type=1400 audit(1881.366:1978): avc: denied { unlink } for pid=16049 comm="syz.7.3513" name="#1a1" dev="tmpfs" ino=1728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1625.459975][T14005] usb 2-1: USB disconnect, device number 8 [ 1625.484833][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1625.498484][ T28] audit: type=1400 audit(1881.366:1979): avc: denied { mount } for pid=16049 comm="syz.7.3513" name="/" dev="overlay" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1625.636375][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1625.654581][ T28] audit: type=1400 audit(1881.887:1980): avc: denied { wake_alarm } for pid=16055 comm="syz.0.3510" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1625.816179][ T28] audit: type=1400 audit(1882.420:1981): avc: denied { read } for pid=16052 comm="syz.3.3514" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1625.846977][ T28] audit: type=1400 audit(1882.420:1982): avc: denied { open } for pid=16052 comm="syz.3.3514" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1625.870694][ T28] audit: type=1400 audit(1882.480:1983): avc: denied { read } for pid=16052 comm="syz.3.3514" dev="nsfs" ino=4026532469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1625.941677][ T28] audit: type=1400 audit(1882.480:1984): avc: denied { open } for pid=16052 comm="syz.3.3514" path="net:[4026532469]" dev="nsfs" ino=4026532469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1625.983703][ T28] audit: type=1400 audit(1882.480:1985): avc: denied { create } for pid=16052 comm="syz.3.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1626.112044][ T28] audit: type=1400 audit(1882.560:1986): avc: denied { unmount } for pid=9322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1626.171509][T16078] netlink: 'syz.0.3518': attribute type 13 has an invalid length. [ 1626.185598][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1626.199012][ T28] audit: type=1400 audit(1882.850:1987): avc: denied { create } for pid=16071 comm="syz.6.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1626.223532][T16078] gretap0: refused to change device tx_queue_len [ 1626.239363][T16078] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1626.257194][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3520'. [ 1626.424841][T16088] device veth0 entered promiscuous mode [ 1626.618267][T16087] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1626.628717][T16087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1626.650507][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1626.664373][T16094] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1626.675764][ T7640] Bluetooth: hci0: Frame reassembly failed (-84) [ 1626.708233][T16086] device veth0 left promiscuous mode [ 1628.344758][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1628.362622][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1628.372322][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1628.381795][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1628.745556][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1629.785027][T10970] Bluetooth: hci0: command 0x1003 tx timeout [ 1629.805574][T10979] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1630.383702][T16124] netlink: 'syz.0.3531': attribute type 1 has an invalid length. [ 1630.391909][T16124] netlink: 'syz.0.3531': attribute type 2 has an invalid length. [ 1631.945947][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1634.694024][T16134] : renamed from vlan0 [ 1635.414906][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1635.415041][ T28] audit: type=1326 audit(1892.340:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16144 comm="syz.7.3537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64b18eba9 code=0x0 [ 1635.636654][T16153] netlink: 'syz.0.3533': attribute type 13 has an invalid length. [ 1635.673576][T16153] gretap0: refused to change device tx_queue_len [ 1635.692629][T16153] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1635.846856][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3538'. [ 1635.899250][ T28] audit: type=1400 audit(1892.930:2009): avc: denied { read write } for pid=16157 comm="syz.0.3538" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1636.811971][T16168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1636.910044][ T28] audit: type=1400 audit(1893.730:2010): avc: denied { mounton } for pid=16161 comm="syz.6.3540" path="/653/file0" dev="tmpfs" ino=3790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1637.106781][ T28] audit: type=1400 audit(1894.140:2011): avc: denied { open } for pid=16157 comm="syz.0.3538" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1637.136141][ T28] audit: type=1400 audit(1894.160:2012): avc: denied { ioctl } for pid=16157 comm="syz.0.3538" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1637.496428][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 1637.940547][T16181] bridge0: port 1(vlan0) entered blocking state [ 1637.946899][T16181] bridge0: port 1(vlan0) entered disabled state [ 1638.005939][T16180] loop7: detected capacity change from 0 to 512 [ 1638.690642][T16180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1638.771833][T16180] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1638.781304][T16180] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3542: bg 0: block 248: padding at end of block bitmap is not set [ 1638.795980][T16180] Quota error (device loop7): write_blk: dquota write failed [ 1638.803389][T16180] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1638.813310][T16180] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.3542: Failed to acquire dquot type 1 [ 1639.803096][ T28] audit: type=1400 audit(1895.740:2013): avc: denied { ioctl } for pid=16178 comm="syz.0.3544" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=63339 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1640.070337][T16180] EXT4-fs (loop7): 1 truncate cleaned up [ 1640.082622][ T28] audit: type=1400 audit(1897.120:2014): avc: denied { create } for pid=16195 comm="syz.1.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1640.102009][ T28] audit: type=1400 audit(1897.120:2015): avc: denied { bind } for pid=16195 comm="syz.1.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1640.121440][T16180] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1640.160684][ T9322] EXT4-fs (loop7): unmounting filesystem. [ 1640.174303][T16202] netlink: 'syz.0.3547': attribute type 4 has an invalid length. [ 1640.184900][T16202] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3547'. [ 1640.521723][T16219] netlink: 'syz.0.3551': attribute type 13 has an invalid length. [ 1640.679091][T16219] gretap0: refused to change device tx_queue_len [ 1640.686463][T16219] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1640.803838][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1640.819753][ T28] audit: type=1400 audit(1897.600:2020): avc: denied { ioctl } for pid=16207 comm="syz.7.3549" path="socket:[63380]" dev="sockfs" ino=63380 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1640.958668][ T28] audit: type=1400 audit(1897.990:2021): avc: denied { mount } for pid=16221 comm="syz.1.3552" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1641.551458][ T28] audit: type=1400 audit(1898.190:2022): avc: denied { create } for pid=16221 comm="syz.1.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1641.571449][ T28] audit: type=1400 audit(1898.470:2023): avc: denied { write } for pid=16221 comm="syz.1.3552" path="socket:[63396]" dev="sockfs" ino=63396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1641.599391][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1641.612497][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1641.621259][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1641.629716][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1641.638625][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1641.647288][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1641.655097][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1641.663335][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1641.671057][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1641.682588][T16228] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1641.775283][ T28] audit: type=1400 audit(1898.550:2024): avc: denied { name_bind } for pid=16223 comm="syz.6.3553" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1641.785467][T15351] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1641.809281][T16231] loop7: detected capacity change from 0 to 128 [ 1641.889678][ T28] audit: type=1400 audit(1898.730:2025): avc: denied { bind } for pid=16223 comm="syz.6.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1641.910308][T16231] FAT-fs (loop7): Unrecognized mount option "18446744073709551615y沾篕銯`4h Z" or missing value [ 1641.931058][ T28] audit: type=1400 audit(1898.730:2026): avc: denied { write } for pid=16223 comm="syz.6.3553" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1641.953249][ T28] audit: type=1400 audit(1898.960:2027): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1642.164732][ T28] audit: type=1400 audit(1899.060:2028): avc: denied { read } for pid=16234 comm="syz.3.3556" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1642.198459][ T28] audit: type=1400 audit(1899.060:2029): avc: denied { open } for pid=16234 comm="syz.3.3556" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1642.308193][T16244] bridge0: port 1(vlan0) entered blocking state [ 1642.324757][T16244] bridge0: port 1(vlan0) entered disabled state [ 1642.331941][T16244] device vlan0 entered promiscuous mode [ 1642.337724][T16244] device bridge_slave_0 entered promiscuous mode [ 1642.346056][T16244] bridge0: mtu less than device minimum [ 1642.530332][T15351] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1642.586695][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3555'. [ 1642.605080][T16250] device veth23 entered promiscuous mode [ 1642.948761][T16262] loop7: detected capacity change from 0 to 512 [ 1642.959623][T16262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1643.166851][T16262] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1643.184746][T16262] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3561: bg 0: block 248: padding at end of block bitmap is not set [ 1643.237264][T16262] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.3561: Failed to acquire dquot type 1 [ 1643.256111][T16262] EXT4-fs (loop7): 1 truncate cleaned up [ 1643.271386][T16262] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1643.429759][ T2595] Bluetooth: hci0: Frame reassembly failed (-84) [ 1643.829362][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1643.901636][T16277] netlink: 'syz.3.3565': attribute type 13 has an invalid length. [ 1643.918594][T16277] gretap0: refused to change device tx_queue_len [ 1643.927454][T16277] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1644.682178][ T9322] EXT4-fs (loop7): unmounting filesystem. [ 1644.863794][T16290] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1646.288203][T10979] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1646.294424][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 1646.294439][ T28] audit: type=1400 audit(1901.850:2091): avc: denied { mount } for pid=16283 comm="syz.1.3567" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1646.326898][ T28] audit: type=1400 audit(1901.870:2092): avc: denied { mounton } for pid=16283 comm="syz.1.3567" path="/726/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1646.390693][ T28] audit: type=1400 audit(1901.950:2093): avc: denied { connect } for pid=16287 comm="syz.7.3570" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1646.462522][ T28] audit: type=1400 audit(1903.480:2094): avc: denied { create } for pid=16295 comm="syz.7.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1646.491920][ T28] audit: type=1326 audit(1903.490:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1646.515023][ T28] audit: type=1326 audit(1903.490:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.1.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1646.615476][ T28] audit: type=1400 audit(1903.570:2097): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1647.105550][ T28] audit: type=1400 audit(1903.760:2098): avc: denied { setopt } for pid=16295 comm="syz.7.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1647.198163][T16310] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1647.263482][T16312] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1647.272680][ T28] audit: type=1400 audit(1904.300:2099): avc: denied { mount } for pid=16300 comm="syz.1.3574" name="/" dev="configfs" ino=14689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1647.327159][T16312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1647.656022][T16316] overlayfs: failed to resolve './file1': -2 [ 1649.222301][ T28] audit: type=1400 audit(1906.240:2100): avc: denied { getopt } for pid=16320 comm="syz.3.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1649.516426][T16329] netlink: 'syz.7.3579': attribute type 13 has an invalid length. [ 1649.526800][T16329] gretap0: refused to change device tx_queue_len [ 1649.534130][T16329] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1649.657820][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3577'. [ 1649.666886][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3577'. [ 1651.171026][T16344] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1651.184361][T16344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1651.336746][T15351] ip6_tunnel: K xmit: Local address not yet configured! [ 1651.902276][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1651.902292][ T28] audit: type=1400 audit(1908.930:2108): avc: denied { create } for pid=16362 comm="syz.7.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1651.969314][ T28] audit: type=1400 audit(1909.000:2109): avc: denied { write } for pid=16364 comm="syz.1.3589" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1651.971805][T16365] netem: invalid attributes len -24 [ 1651.992038][ T28] audit: type=1400 audit(1909.000:2110): avc: denied { map } for pid=16364 comm="syz.1.3589" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1652.083256][T16368] device lo entered promiscuous mode [ 1652.089768][T16368] device tunl0 entered promiscuous mode [ 1652.096231][T16368] device gre0 entered promiscuous mode [ 1652.103469][T16368] device erspan0 entered promiscuous mode [ 1652.111218][T16368] device ip_vti0 entered promiscuous mode [ 1652.117913][T16368] device ip6_vti0 entered promiscuous mode [ 1652.124659][T16368] device sit0 entered promiscuous mode [ 1652.131097][T16368] device ip6tnl0 entered promiscuous mode [ 1652.139100][T16368] device ip6gre0 entered promiscuous mode [ 1652.150226][T16368] device ip6gretap0 entered promiscuous mode [ 1652.160898][T16368] device dummy0 entered promiscuous mode [ 1652.168694][T16368] device veth0 entered promiscuous mode [ 1652.178851][T16368] device veth1 entered promiscuous mode [ 1652.187535][T16368] device wg0 entered promiscuous mode [ 1652.195019][T16368] device wg1 entered promiscuous mode [ 1652.202785][T16368] device wg2 entered promiscuous mode [ 1652.210345][T16368] device veth0_to_bridge entered promiscuous mode [ 1652.222145][T16368] device veth1_to_bridge entered promiscuous mode [ 1652.234220][T16368] device veth0_to_bond entered promiscuous mode [ 1652.242634][T16368] device bond_slave_0 entered promiscuous mode [ 1652.251116][T16368] device veth1_to_bond entered promiscuous mode [ 1652.259806][T16368] device bond_slave_1 entered promiscuous mode [ 1652.268171][T16368] device veth0_to_team entered promiscuous mode [ 1652.276927][T16368] device team_slave_0 entered promiscuous mode [ 1652.285469][T16368] device veth1_to_team entered promiscuous mode [ 1652.294044][T16368] device team_slave_1 entered promiscuous mode [ 1652.302658][T16368] device veth0_to_batadv entered promiscuous mode [ 1652.311196][T16368] device batadv_slave_0 entered promiscuous mode [ 1652.319949][T16368] device xfrm0 entered promiscuous mode [ 1652.326105][T16368] device veth0_to_hsr entered promiscuous mode [ 1652.364069][T16368] device hsr_slave_0 entered promiscuous mode [ 1652.373103][T16368] device veth1_to_hsr entered promiscuous mode [ 1652.382549][T16368] device hsr_slave_1 entered promiscuous mode [ 1652.391674][T16368] device veth1_virt_wifi entered promiscuous mode [ 1652.400809][T16368] device veth0_virt_wifi entered promiscuous mode [ 1652.410108][T16368] device veth1_vlan entered promiscuous mode [ 1652.419343][T16368] device veth0_vlan left promiscuous mode [ 1652.425129][T16368] device veth0_vlan entered promiscuous mode [ 1652.446429][T16368] device  entered promiscuous mode [ 1652.456023][T16368] device vlan1 entered promiscuous mode [ 1652.467545][T16368] device veth0_macvtap entered promiscuous mode [ 1652.476908][T16368] device macsec0 entered promiscuous mode [ 1652.493566][T16368] device veth2 entered promiscuous mode [ 1652.502320][T16368] device veth3 entered promiscuous mode [ 1652.510674][T16368] device macsec1 entered promiscuous mode [ 1652.520125][T16368] device veth4 entered promiscuous mode [ 1652.528529][T16368] device veth5 entered promiscuous mode [ 1652.537171][T16368] device K entered promiscuous mode [ 1652.545244][T16368] device veth6 entered promiscuous mode [ 1652.553456][T16368] device veth7 entered promiscuous mode [ 1652.561920][T16368] device veth8 entered promiscuous mode [ 1652.570478][T16368] device veth9 entered promiscuous mode [ 1652.578751][T16368] device bridge1 entered promiscuous mode [ 1652.587210][T16368] device veth10 entered promiscuous mode [ 1652.595856][T16368] device veth11 entered promiscuous mode [ 1652.604431][T16368] device gre1 entered promiscuous mode [ 1652.612249][T16368] device veth12 entered promiscuous mode [ 1652.620749][T16368] device veth13 entered promiscuous mode [ 1652.629603][T16368] device veth14 entered promiscuous mode [ 1652.638322][T16368] device veth15 entered promiscuous mode [ 1652.647028][T16368] device veth16 entered promiscuous mode [ 1652.655726][T16368] device veth17 entered promiscuous mode [ 1652.664477][T16368] device veth18 entered promiscuous mode [ 1652.673452][T16368] device veth19 entered promiscuous mode [ 1652.682367][T16368] device veth20 entered promiscuous mode [ 1652.690975][T16368] device veth21 entered promiscuous mode [ 1652.699722][T16368] device bridge2 entered promiscuous mode [ 1652.707928][T16368] device bridge3 entered promiscuous mode [ 1652.716340][T16368] device sit1 entered promiscuous mode [ 1652.725146][T16368] device bridge4 entered promiscuous mode [ 1652.734034][T16368] device ip6tnl1 entered promiscuous mode [ 1652.744520][T16368] device macsec0.0 entered promiscuous mode [ 1652.756860][T16368] device veth22 entered promiscuous mode [ 1652.769148][T16368] device erspan0.1 entered promiscuous mode [ 1652.823301][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1652.839636][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1652.852406][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 1652.882982][ T28] audit: type=1400 audit(1909.100:2111): avc: denied { connect } for pid=16362 comm="syz.7.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1652.898457][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1652.912023][ T28] audit: type=1400 audit(1909.870:2112): avc: denied { associate } for pid=16370 comm="syz.6.3591" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1652.915846][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1653.646624][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth23: link becomes ready [ 1654.271619][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 1654.340187][T16375] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1654.349717][T16388] netlink: 'syz.6.3593': attribute type 13 has an invalid length. [ 1654.357867][T16375] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1654.357983][T16388] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1654.376193][T16388] gretap0: refused to change device tx_queue_len [ 1654.382793][T16388] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1654.428364][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1654.492998][T15349] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1654.508159][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1654.805441][T16399] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16399 comm=syz.6.3594 [ 1654.859681][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1654.874095][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1658.425901][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1658.905780][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1659.467371][ T28] audit: type=1400 audit(1915.840:2113): avc: denied { ioctl } for pid=16435 comm="syz.3.3605" path="socket:[64477]" dev="sockfs" ino=64477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1659.618961][ T28] audit: type=1400 audit(1915.850:2114): avc: denied { bind } for pid=16435 comm="syz.3.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1659.637923][ T28] audit: type=1400 audit(1916.600:2115): avc: denied { read } for pid=16448 comm="syz.6.3606" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1659.731806][ T28] audit: type=1400 audit(1916.600:2116): avc: denied { open } for pid=16448 comm="syz.6.3606" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1660.105515][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1660.744644][T16458] xt_CT: No such helper "snmp_trap" [ 1660.760213][ T28] audit: type=1400 audit(1916.630:2117): avc: denied { ioctl } for pid=16448 comm="syz.6.3606" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1660.790143][ T28] audit: type=1400 audit(1916.760:2118): avc: denied { create } for pid=16451 comm="syz.1.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1661.047412][T16464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3611'. [ 1661.078104][T16464] tc_dump_action: action bad kind [ 1661.249343][T16468] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1661.801304][ T28] audit: type=1400 audit(1918.490:2119): avc: denied { bind } for pid=16466 comm="syz.6.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1661.861672][T16471] xt_TCPMSS: Only works on TCP SYN packets [ 1661.884129][ T28] audit: type=1400 audit(1918.490:2120): avc: denied { name_bind } for pid=16466 comm="syz.6.3612" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1661.977716][ T28] audit: type=1400 audit(1918.500:2121): avc: denied { node_bind } for pid=16466 comm="syz.6.3612" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1662.017486][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3611'. [ 1664.049676][T16481] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1664.072244][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3614'. [ 1664.081608][T15349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1664.097573][ T28] audit: type=1400 audit(1921.130:2122): avc: denied { map } for pid=16473 comm="syz.7.3610" path="socket:[65118]" dev="sockfs" ino=65118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1664.198466][T16499] netlink: 'syz.0.3618': attribute type 3 has an invalid length. [ 1664.206577][T16499] netlink: 'syz.0.3618': attribute type 3 has an invalid length. [ 1664.444590][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3619'. [ 1664.453712][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3619'. [ 1664.495523][T15349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1664.791567][T14005] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1664.804537][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1664.804552][ T28] audit: type=1400 audit(1921.840:2124): avc: denied { mount } for pid=16511 comm="syz.6.3621" name="/" dev="incremental-fs" ino=3889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1664.889550][ T28] audit: type=1400 audit(1921.920:2125): avc: denied { map } for pid=16511 comm="syz.6.3621" path="socket:[65175]" dev="sockfs" ino=65175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1665.225684][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1666.184230][ T28] audit: type=1400 audit(1922.070:2126): avc: denied { read } for pid=16511 comm="syz.6.3621" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1666.344859][ T28] audit: type=1400 audit(1922.070:2127): avc: denied { open } for pid=16511 comm="syz.6.3621" path="/670/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1666.516158][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1666.629459][ T28] audit: type=1400 audit(1922.110:2128): avc: denied { ioctl } for pid=16511 comm="syz.6.3621" path="/670/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1667.003673][ T28] audit: type=1400 audit(1923.240:2129): avc: denied { unmount } for pid=1372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1667.025732][ T28] audit: type=1400 audit(1923.450:2130): avc: denied { write } for pid=16521 comm="syz.6.3624" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1667.052809][ T28] audit: type=1400 audit(1923.650:2131): avc: denied { read } for pid=16521 comm="syz.6.3624" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1667.075989][ T28] audit: type=1400 audit(1923.650:2132): avc: denied { open } for pid=16521 comm="syz.6.3624" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1667.077486][T14005] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1667.136021][T14005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.145604][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1667.167258][T14005] usb 2-1: config 0 descriptor?? [ 1667.355262][T16536] overlayfs: failed to resolve './file7': -2 [ 1667.498167][T14005] usb 2-1: string descriptor 0 read error: -71 [ 1667.618210][T14005] usb 2-1: Cannot read MAC address [ 1667.636771][T14005] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 1667.671457][T16542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3628'. [ 1669.918857][T14005] usb 2-1: USB disconnect, device number 9 [ 1669.999360][T16545] xt_TCPMSS: Only works on TCP SYN packets [ 1671.260642][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3628'. [ 1671.748670][T16561] tun0: tun_chr_ioctl cmd 1074025675 [ 1671.754233][T16561] tun0: persist enabled [ 1671.759313][T16561] tun0: tun_chr_ioctl cmd 1074025675 [ 1671.764668][T16561] tun0: persist enabled [ 1671.771343][ T28] audit: type=1400 audit(1928.800:2133): avc: denied { getopt } for pid=16552 comm="syz.3.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.864150][T16565] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1672.332343][T14005] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1672.366562][T16572] bridge0: port 5(vlan0) entered blocking state [ 1672.372844][T16572] bridge0: port 5(vlan0) entered disabled state [ 1674.600521][T14005] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1676.008078][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3639'. [ 1677.332153][T16614] device lo left promiscuous mode [ 1677.337687][T16614] device tunl0 left promiscuous mode [ 1677.343414][T16614] device gre0 left promiscuous mode [ 1677.350019][T16614] device ip_vti0 left promiscuous mode [ 1677.356136][T16614] device ip6_vti0 left promiscuous mode [ 1677.363566][T16614] device sit0 left promiscuous mode [ 1677.369407][T16614] device ip6tnl0 left promiscuous mode [ 1677.375660][T16614] device ip6gre0 left promiscuous mode [ 1677.381985][T16614] device ip6gretap0 left promiscuous mode [ 1677.388457][T16614] device dummy0 left promiscuous mode [ 1677.394507][T16614] device veth0 left promiscuous mode [ 1677.400412][T16614] device veth1 left promiscuous mode [ 1677.406288][T16614] device wg0 left promiscuous mode [ 1677.411798][T16614] device wg1 left promiscuous mode [ 1677.417454][T16614] device wg2 left promiscuous mode [ 1677.423025][T16614] device veth0_to_bridge left promiscuous mode [ 1677.430120][T16614] device veth1_to_bridge left promiscuous mode [ 1677.437207][T16614] device veth0_to_bond left promiscuous mode [ 1677.443757][T16614] device bond_slave_0 left promiscuous mode [ 1677.450177][T16614] device veth1_to_bond left promiscuous mode [ 1677.463421][T16614] device bond_slave_1 left promiscuous mode [ 1677.470541][T16614] device veth0_to_team left promiscuous mode [ 1677.476942][T16614] device team_slave_0 left promiscuous mode [ 1677.483186][T16614] device veth1_to_team left promiscuous mode [ 1677.490294][T16614] device team_slave_1 left promiscuous mode [ 1677.496652][T16614] device veth0_to_batadv left promiscuous mode [ 1677.503183][T16614] device batadv_slave_0 left promiscuous mode [ 1677.506061][ T28] audit: type=1400 audit(1934.310:2134): avc: denied { read } for pid=16611 comm="syz.6.3645" name="usbmon4" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1677.509696][T16614] device xfrm0 left promiscuous mode [ 1677.537962][T16614] device veth0_to_hsr left promiscuous mode [ 1677.544302][T16614] device hsr_slave_0 left promiscuous mode [ 1677.590121][ T28] audit: type=1400 audit(1934.310:2135): avc: denied { open } for pid=16611 comm="syz.6.3645" path="/dev/usbmon4" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1677.614376][T16614] device veth1_to_hsr left promiscuous mode [ 1677.621131][T16614] device hsr_slave_1 left promiscuous mode [ 1677.627788][T16614] device veth1_virt_wifi left promiscuous mode [ 1677.634821][T16614] device veth0_virt_wifi left promiscuous mode [ 1677.641909][T16614] device veth1_vlan left promiscuous mode [ 1677.649471][T16614] device  left promiscuous mode [ 1677.655822][T16614] device vlan1 left promiscuous mode [ 1677.663721][T16614] device veth0_macvtap left promiscuous mode [ 1677.671592][T16614] device veth2 left promiscuous mode [ 1677.677553][T16614] device veth3 left promiscuous mode [ 1677.683496][T16614] device macsec1 left promiscuous mode [ 1677.689874][T16614] device veth4 left promiscuous mode [ 1677.695947][T16614] device veth5 left promiscuous mode [ 1677.701943][T16614] device K left promiscuous mode [ 1677.707606][T16614] device veth6 left promiscuous mode [ 1677.713499][T16614] device veth7 left promiscuous mode [ 1677.719514][T16614] device veth8 left promiscuous mode [ 1677.725479][T16614] device veth9 left promiscuous mode [ 1677.731480][T16614] device bridge1 left promiscuous mode [ 1677.737828][T16614] device veth10 left promiscuous mode [ 1677.744049][T16614] device veth11 left promiscuous mode [ 1677.749874][T16614] device gre1 left promiscuous mode [ 1677.755485][T16614] device veth12 left promiscuous mode [ 1677.761426][T16614] device veth13 left promiscuous mode [ 1677.767218][T16614] device veth14 left promiscuous mode [ 1677.773005][T16614] device veth15 left promiscuous mode [ 1677.778830][T16614] device veth16 left promiscuous mode [ 1677.784572][T16614] device veth17 left promiscuous mode [ 1677.790464][T16614] device veth18 left promiscuous mode [ 1677.796242][T16614] device veth19 left promiscuous mode [ 1677.802169][T16614] device veth20 left promiscuous mode [ 1677.807943][T16614] device veth21 left promiscuous mode [ 1677.813581][T16614] device bridge2 left promiscuous mode [ 1677.819314][T16614] device bridge3 left promiscuous mode [ 1677.825032][T16614] device sit1 left promiscuous mode [ 1677.830514][T16614] device bridge4 left promiscuous mode [ 1677.836261][T16614] device ip6tnl1 left promiscuous mode [ 1677.841969][T16614] device macsec0.0 left promiscuous mode [ 1677.847617][T16614] device macsec0 left promiscuous mode [ 1677.853473][T16614] device veth22 left promiscuous mode [ 1677.859143][T16614] device veth23 left promiscuous mode [ 1677.864758][T16614] device erspan0.1 left promiscuous mode [ 1677.870397][T16614] device erspan0 left promiscuous mode [ 1677.888770][T15349] ip6_tunnel: K xmit: Local address not yet configured! [ 1677.939024][T16628] serio: Serial port ptm0 [ 1677.946555][T14005] ip6_tunnel: K xmit: Local address not yet configured! [ 1678.013177][T16631] xt_TCPMSS: Only works on TCP SYN packets [ 1678.036107][T16632] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16632 comm=syz.0.3646 [ 1678.814839][T14005] ip6_tunnel: K xmit: Local address not yet configured! [ 1679.309391][ T28] audit: type=1400 audit(1936.340:2136): avc: denied { mount } for pid=16651 comm="syz.7.3654" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1679.588753][T16655] incfs: Backing dir is not set, filesystem can't be mounted. [ 1679.596346][ T28] audit: type=1400 audit(1936.620:2137): avc: denied { mounton } for pid=16651 comm="syz.7.3654" path="/325/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1679.637285][T16655] incfs: mount failed -2 [ 1679.852517][ T28] audit: type=1400 audit(1936.880:2138): avc: denied { unmount } for pid=9322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1680.453339][ T28] audit: type=1400 audit(1937.480:2139): avc: denied { setopt } for pid=16674 comm="syz.0.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1680.546309][T16678] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 1681.039279][ T28] audit: type=1400 audit(1938.070:2140): avc: denied { read } for pid=16683 comm="syz.6.3663" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1681.865725][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1681.875344][T16691] overlayfs: conflicting lowerdir path [ 1682.266793][T16695] overlayfs: failed to resolve './file0': -2 [ 1683.047470][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3661'. [ 1683.158002][ T28] audit: type=1400 audit(1940.190:2141): avc: denied { bind } for pid=16703 comm="syz.6.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1683.214052][T16675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16675 comm=syz.0.3661 [ 1683.252609][T16710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3666'. [ 1683.262285][T16710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16710 comm=syz.3.3666 [ 1683.396436][T16714] netlink: 'syz.1.3668': attribute type 13 has an invalid length. [ 1683.405130][T16714] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1683.418835][T16714] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1683.427992][T16714] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1683.786351][T16714] 0猉功D: refused to change device tx_queue_len [ 1683.793972][T16714] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1683.795816][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1683.801673][T16714] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1684.897346][ T28] audit: type=1400 audit(1941.600:2142): avc: denied { setopt } for pid=16719 comm="syz.3.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1686.077379][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3673'. [ 1686.238602][ T28] audit: type=1400 audit(1943.250:2143): avc: denied { append } for pid=16736 comm="syz.3.3676" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1686.416860][T16746] overlayfs: workdir and upperdir must be separate subtrees [ 1686.437480][T16746] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1687.875274][ T28] audit: type=1400 audit(1944.900:2144): avc: denied { create } for pid=16761 comm="syz.1.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1687.911917][ T28] audit: type=1326 audit(1944.940:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1688.012595][ T28] audit: type=1326 audit(1944.970:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1688.035683][ T28] audit: type=1326 audit(1944.970:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1688.069792][ T28] audit: type=1326 audit(1944.970:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1688.071152][T16776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1688.093538][ T28] audit: type=1326 audit(1944.970:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1688.214719][T16783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16783 comm=syz.0.3680 [ 1688.396488][ T28] audit: type=1326 audit(1944.970:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1688.420470][ T28] audit: type=1326 audit(1944.970:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1688.744799][ T28] audit: type=1326 audit(1944.970:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1690.024786][ T28] audit: type=1326 audit(1944.970:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1690.048905][ T28] audit: type=1326 audit(1944.970:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1690.090997][ T28] audit: type=1326 audit(1944.970:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1690.144587][ T28] audit: type=1326 audit(1944.970:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1690.185664][ T28] audit: type=1326 audit(1944.970:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1690.223361][ T28] audit: type=1326 audit(1944.970:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1690.263908][ T28] audit: type=1326 audit(1944.980:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e38eba9 code=0x7ffc0000 [ 1691.777168][T16821] netlink: 'syz.1.3690': attribute type 13 has an invalid length. [ 1691.785113][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1691.793768][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1691.801212][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1691.891387][T16821] 0猉功D: refused to change device tx_queue_len [ 1691.897906][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1691.905586][T16821] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1691.921579][T16825] netlink: 'syz.6.3692': attribute type 13 has an invalid length. [ 1692.096057][T16825] gretap0: refused to change device tx_queue_len [ 1692.102698][T16825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1692.165650][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3694'. [ 1695.115688][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3699'. [ 1698.073205][T16890] netlink: 'syz.6.3707': attribute type 13 has an invalid length. [ 1698.716320][T16890] gretap0: refused to change device tx_queue_len [ 1698.722938][T16890] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1699.011420][T16905] netlink: 'syz.1.3708': attribute type 27 has an invalid length. [ 1700.087939][T16911] overlayfs: missing 'lowerdir' [ 1700.497331][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1700.497352][ T28] audit: type=1400 audit(1958.200:2182): avc: denied { remount } for pid=16897 comm="syz.7.3709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1700.518289][T16910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3710'. [ 1700.543331][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1700.551242][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1700.559089][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1700.566832][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1700.593400][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1700.709964][T16905] syz.1.3708 (16905): /proc/16905/oom_adj is deprecated, please use /proc/16905/oom_score_adj instead. [ 1700.889637][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1701.004917][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1701.500229][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1701.510392][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1701.523362][T16916] device veth1_macvtap left promiscuous mode [ 1701.563007][T16916] device veth1_macvtap entered promiscuous mode [ 1701.572881][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1701.590416][T16916] bridge0: port 1(vlan0) entered blocking state [ 1701.597346][T16916] bridge0: port 1(vlan0) entered forwarding state [ 1701.604619][T16916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1701.637497][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1701.646425][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1701.655053][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1701.972455][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1702.015637][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1702.023777][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1702.032313][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1702.040894][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1702.049226][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1702.079292][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1702.088139][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1702.096636][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1702.106064][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1702.115630][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1702.124898][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1702.135345][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1702.148793][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1702.175803][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1702.184951][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1702.194654][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1702.210873][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1702.226478][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1702.245755][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1702.253769][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1702.282350][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1702.302995][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1702.353957][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1702.361642][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1702.369664][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1702.377239][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1702.384773][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1702.392693][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1702.400293][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1702.407938][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1702.415650][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1702.423277][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1702.430930][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1702.438598][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1702.446214][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1702.453781][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1702.479786][T16947] overlayfs: conflicting lowerdir path [ 1702.492663][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.1: link becomes ready [ 1702.880726][T16954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16954 comm=syz.1.3718 [ 1703.049779][ T28] audit: type=1400 audit(1961.080:2183): avc: denied { module_load } for pid=16955 comm="syz.7.3719" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1703.075634][T16956] Invalid ELF header magic: != ELF [ 1703.141789][ T28] audit: type=1400 audit(1961.170:2184): avc: denied { create } for pid=16955 comm="syz.7.3719" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1704.350931][ T9322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1704.357818][ T9322] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1704.367215][ T28] audit: type=1326 audit(1962.370:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1704.390157][ T9322] audit: backlog limit exceeded [ 1705.481621][ T28] audit: type=1326 audit(1962.370:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1705.504546][ T28] audit: type=1326 audit(1962.370:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1705.527391][ T28] audit: type=1326 audit(1962.370:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1705.565639][ T28] audit: type=1326 audit(1962.370:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1705.680834][ T28] audit: type=1326 audit(1962.370:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1706.850010][ T28] audit: type=1326 audit(1962.370:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1706.938342][ T28] audit: type=1326 audit(1962.370:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1706.965589][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3726'. [ 1706.975167][ T28] audit: type=1326 audit(1962.370:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1706.999156][ T28] audit: type=1326 audit(1962.370:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1707.022959][ T28] audit: type=1326 audit(1962.370:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1707.046111][ T28] audit: type=1326 audit(1962.370:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1707.127724][ T28] audit: type=1326 audit(1962.370:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.0.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85258eba9 code=0x50000 [ 1711.366921][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 1711.366939][ T28] audit: type=1400 audit(1969.260:2252): avc: denied { read write } for pid=17051 comm="syz.1.3743" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1711.458588][ T28] audit: type=1400 audit(1969.260:2253): avc: denied { open } for pid=17051 comm="syz.1.3743" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1711.918707][T17078] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1711.927564][T17078] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1711.939202][T17078] overlayfs: missing 'lowerdir' [ 1712.166635][ T28] audit: type=1400 audit(1969.930:2254): avc: denied { create } for pid=17072 comm="syz.1.3752" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1712.248946][ T28] audit: type=1400 audit(1970.280:2255): avc: denied { write } for pid=17087 comm="syz.0.3755" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1712.285829][ T28] audit: type=1400 audit(1970.300:2256): avc: denied { ioctl } for pid=17087 comm="syz.0.3755" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1712.400102][ T28] audit: type=1400 audit(1970.420:2257): avc: denied { create } for pid=17089 comm="syz.0.3756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 1712.585733][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1713.265454][ T28] audit: type=1400 audit(1970.420:2258): avc: denied { connect } for pid=17089 comm="syz.0.3756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 1713.377872][ T28] audit: type=1400 audit(1970.420:2259): avc: denied { write } for pid=17089 comm="syz.0.3756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 1713.406768][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 1713.426246][T17112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1713.500968][ T28] audit: type=1400 audit(1970.420:2260): avc: denied { sendto } for pid=17089 comm="syz.0.3756" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 1713.812516][ T28] audit: type=1400 audit(1970.430:2261): avc: denied { write } for pid=17091 comm="syz.3.3757" path="socket:[67419]" dev="sockfs" ino=67419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1714.042981][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3766'. [ 1714.084250][T17126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17126 comm=syz.0.3766 [ 1714.760752][T17140] netlink: 'syz.3.3772': attribute type 13 has an invalid length. [ 1715.306765][T17140] gretap0: refused to change device tx_queue_len [ 1715.313342][T17140] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1716.658664][T17156] overlayfs: failed to resolve './file7': -2 [ 1717.776036][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1717.776053][ T28] audit: type=1400 audit(1975.810:2265): avc: denied { create } for pid=17163 comm="syz.3.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1717.996215][T17178] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 1718.079710][T17180] netlink: 'syz.0.3783': attribute type 13 has an invalid length. [ 1718.345948][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1718.394135][T17180] gretap0: refused to change device tx_queue_len [ 1718.401392][T17180] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1718.442790][ T28] audit: type=1400 audit(1976.040:2266): avc: denied { relabelto } for pid=17163 comm="syz.3.3780" name="cgroup.procs" dev="cgroup" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 1718.938687][T17182] netlink: 'syz.7.3778': attribute type 27 has an invalid length. [ 1719.014222][ T28] audit: type=1400 audit(1976.040:2267): avc: denied { associate } for pid=17163 comm="syz.3.3780" name="cgroup.procs" dev="cgroup" ino=265 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 1719.653005][T17182] bridge0: port 4(gretap0) entered disabled state [ 1719.674614][T17182] bridge0: port 3(syz_tun) entered disabled state [ 1719.682942][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.690254][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.736693][ T28] audit: type=1400 audit(1977.770:2268): avc: denied { setopt } for pid=17196 comm="syz.0.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1719.922637][T17190] bridge0: port 4(gretap0) entered blocking state [ 1719.929137][T17190] bridge0: port 4(gretap0) entered forwarding state [ 1719.935845][T17190] bridge0: port 3(syz_tun) entered blocking state [ 1719.942263][T17190] bridge0: port 3(syz_tun) entered forwarding state [ 1720.092247][T17190] device bridge0 left promiscuous mode [ 1720.111534][T17190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.118647][T17190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.130745][T17190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.137851][T17190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.218094][T17190] device veth0_vlan left promiscuous mode [ 1720.227442][T17190] device veth0_vlan entered promiscuous mode [ 1720.241840][T17190] device veth1_macvtap left promiscuous mode [ 1720.253073][T17190] device veth1_macvtap entered promiscuous mode [ 1720.289719][T17190] device bridge0 entered promiscuous mode [ 1720.362285][T17193] netlink: 'syz.1.3785': attribute type 13 has an invalid length. [ 1720.370345][T17193] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1720.378081][T17193] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1720.385393][T17193] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1720.392764][T17193] 0猉功D: refused to change device tx_queue_len [ 1720.399211][T17193] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1720.406803][T17193] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1720.422858][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1720.451220][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1720.461161][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1720.471814][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1720.487879][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1720.497238][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1720.506804][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1721.429905][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1721.438744][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1721.447274][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1721.455779][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1721.464781][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1721.474260][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1721.483777][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1721.499874][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1721.508000][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1721.516090][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1721.524263][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1721.532954][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1721.540967][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1721.548964][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1721.557950][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1721.566173][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth20: link becomes ready [ 1721.574045][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth22: link becomes ready [ 1721.583850][T15351] ip6_tunnel: K xmit: Local address not yet configured! [ 1721.591780][T15351] ip6_tunnel: K xmit: Local address not yet configured! [ 1721.605766][ T349] ip6_tunnel: K xmit: Local address not yet configured! [ 1721.921357][T13844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1721.935509][T13844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1721.964733][T13844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1721.974489][ T349] ip6_tunnel: K xmit: Local address not yet configured! [ 1722.640169][T15351] ip6_tunnel: K xmit: Local address not yet configured! [ 1722.647144][T13185] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1722.656250][T17235] netlink: 'syz.1.3796': attribute type 13 has an invalid length. [ 1722.664147][T17235] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1722.672308][T17235] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1722.679681][T17235] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1722.687693][T17235] 0猉功D: refused to change device tx_queue_len [ 1722.694011][T17235] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1722.702148][T17235] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1722.703922][T17247] netlink: 'syz.0.3802': attribute type 1 has an invalid length. [ 1723.325460][T17252] netlink: 'syz.3.3801': attribute type 13 has an invalid length. [ 1723.406915][T17252] gretap0: refused to change device tx_queue_len [ 1723.415913][T17252] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1724.515868][T17265] netlink: 'syz.0.3806': attribute type 27 has an invalid length. [ 1724.585115][T17265] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1724.651195][T17265] device veth1_macvtap left promiscuous mode [ 1724.678285][T17265] device veth1_macvtap entered promiscuous mode [ 1724.910872][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1724.919713][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1725.008239][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1725.121206][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1725.142416][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1725.151158][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1725.159597][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1725.167963][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1725.198120][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1725.218305][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1725.235808][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1725.254623][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1725.264702][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1725.284894][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1725.305100][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1725.315196][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1725.335559][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1725.353763][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1725.365782][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1725.375263][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1725.467839][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1725.499209][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1725.648691][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1725.707434][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1725.734054][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1725.757451][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1725.780788][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1725.788211][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1725.788232][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1725.844955][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1725.869031][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1725.891876][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1725.915817][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1725.939990][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1725.964757][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1725.988690][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1726.012107][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1726.025495][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1726.031748][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1726.065610][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1726.083631][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1726.091736][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1726.146581][T17298] netlink: 'syz.7.3815': attribute type 4 has an invalid length. [ 1726.159815][T17298] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3815'. [ 1726.185129][T15351] ip6_tunnel: K xmit: Local address not yet configured! [ 1726.215479][T15351] ip6_tunnel: K xmit: Local address not yet configured! [ 1726.222699][T15351] ip6_tunnel: K xmit: Local address not yet configured! [ 1727.084049][T15747] ip6_tunnel: K xmit: Local address not yet configured! [ 1727.388812][T15747] ip6_tunnel: K xmit: Local address not yet configured! [ 1727.553333][T17347] syz.0.3836[17347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1727.553406][T17347] syz.0.3836[17347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1727.614480][ T28] audit: type=1400 audit(1985.640:2269): avc: denied { nlmsg_read } for pid=17351 comm="syz.7.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1727.719161][T17359] netlink: 'syz.6.3841': attribute type 3 has an invalid length. [ 1728.255494][T17367] netlink: 'syz.0.3838': attribute type 13 has an invalid length. [ 1728.416002][T17367] gretap0: refused to change device tx_queue_len [ 1728.422597][T17367] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1728.693450][T17374] overlayfs: failed to resolve './file0': -2 [ 1728.700330][T17373] netlink: 'syz.0.3845': attribute type 4 has an invalid length. [ 1729.494575][T17387] overlayfs: failed to resolve './file0': -2 [ 1729.501107][T17388] netlink: 'syz.0.3850': attribute type 13 has an invalid length. [ 1729.529381][T17388] gretap0: refused to change device tx_queue_len [ 1729.536892][T17388] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1730.105521][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1730.131482][T17406] netlink: 'syz.3.3855': attribute type 13 has an invalid length. [ 1730.517626][T17406] gretap0: refused to change device tx_queue_len [ 1730.524213][T17406] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1731.696804][T17445] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3863'. [ 1731.716981][T17442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17442 comm=syz.6.3863 [ 1732.386604][T17466] netlink: 'syz.7.3873': attribute type 13 has an invalid length. [ 1732.777777][T17466] gretap0: refused to change device tx_queue_len [ 1732.787726][T17466] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1733.346171][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1733.445187][T17507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17507 comm=syz.3.3890 [ 1733.562274][T17511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17511 comm=syz.6.3884 [ 1734.301350][ T28] audit: type=1400 audit(1992.330:2270): avc: denied { bind } for pid=17527 comm="syz.1.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1734.345444][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1734.345533][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1734.374583][ T28] audit: type=1400 audit(1992.400:2271): avc: denied { connect } for pid=17536 comm="syz.3.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1734.505576][ T28] audit: type=1400 audit(1992.400:2272): avc: denied { write } for pid=17536 comm="syz.3.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1735.923854][T17577] syz.7.3920[17577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1735.923936][T17577] syz.7.3920[17577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1735.956355][ T28] audit: type=1400 audit(1993.990:2273): avc: denied { read write } for pid=17585 comm="syz.3.3923" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1735.992303][ T28] audit: type=1400 audit(1993.990:2274): avc: denied { open } for pid=17585 comm="syz.3.3923" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1736.058575][T17589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17589 comm=syz.0.3913 [ 1737.545457][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1737.893088][ T28] audit: type=1400 audit(1995.920:2275): avc: denied { read } for pid=17626 comm="syz.3.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1738.516557][T17641] tipc: Started in network mode [ 1738.541225][T17641] tipc: Node identity , cluster identity 4711 [ 1738.560995][T17641] tipc: Failed to set node id, please configure manually [ 1738.583709][T17641] tipc: Enabling of bearer rejected, failed to enable media [ 1738.750764][T17643] hub 1-0:1.0: USB hub found [ 1738.765928][T17643] hub 1-0:1.0: 1 port detected [ 1738.912341][ T28] audit: type=1400 audit(1996.940:2276): avc: denied { ioctl } for pid=17658 comm="syz.7.3951" path="socket:[69478]" dev="sockfs" ino=69478 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1738.984580][T17663] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3948'. [ 1739.250764][T17670] netlink: 'syz.3.3952': attribute type 13 has an invalid length. [ 1739.432590][T17670] gretap0: refused to change device tx_queue_len [ 1739.439283][T17670] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1740.168405][T17681] netlink: 'syz.0.3957': attribute type 13 has an invalid length. [ 1740.389936][T17681] gretap0: refused to change device tx_queue_len [ 1740.396705][T17681] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1740.953104][T17716] netlink: 'syz.1.3970': attribute type 13 has an invalid length. [ 1740.961753][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1740.976707][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1740.984068][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1742.087610][T17716] 0猉功D: refused to change device tx_queue_len [ 1742.094390][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1742.103218][T17716] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1742.122635][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3971'. [ 1742.140821][T17722] netlink: 'syz.7.3973': attribute type 13 has an invalid length. [ 1742.157333][T17722] gretap0: refused to change device tx_queue_len [ 1742.166816][T17722] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1742.358193][T17733] overlayfs: null uuid detected in lower fs '/syz6', falling back to xino=off,index=off,nfs_export=off. [ 1742.393208][ T28] audit: type=1400 audit(2000.420:2277): avc: denied { append } for pid=17738 comm="syz.6.3978" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1743.025530][T13844] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1743.205550][T13844] usb 4-1: Using ep0 maxpacket: 32 [ 1743.211921][T13844] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1743.220245][T13844] usb 4-1: config 0 has no interface number 0 [ 1743.226387][T13844] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1743.236451][T13844] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1743.244585][T13844] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1743.253830][T13844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.261995][T13844] usb 4-1: Product: syz [ 1743.266305][T13844] usb 4-1: Manufacturer: syz [ 1743.270889][T13844] usb 4-1: SerialNumber: syz [ 1743.276157][T13844] usb 4-1: config 0 descriptor?? [ 1743.281334][T17777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1743.459080][ T28] audit: type=1400 audit(2001.430:2278): avc: denied { getopt } for pid=17806 comm="syz.7.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1743.596668][T17819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4004'. [ 1743.774645][T13844] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 1743.927656][T13844] usb 4-1: USB disconnect, device number 10 [ 1743.985635][T13844] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1744.315045][T17846] netlink: 'syz.0.4018': attribute type 13 has an invalid length. [ 1744.325871][T17846] gretap0: refused to change device tx_queue_len [ 1744.333127][T17846] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1744.703387][T17856] netlink: 'syz.1.4024': attribute type 13 has an invalid length. [ 1744.711573][T17856] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1744.721088][T17856] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1744.728891][T17856] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1744.737233][T17856] 0猉功D: refused to change device tx_queue_len [ 1744.743718][T17856] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1744.751795][T17856] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1746.116521][T17879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4031'. [ 1747.898949][T17913] netlink: 'syz.7.4045': attribute type 13 has an invalid length. [ 1748.473889][T17913] gretap0: refused to change device tx_queue_len [ 1748.480859][T17913] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1748.655429][ T28] audit: type=1400 audit(2006.660:2279): avc: denied { getopt } for pid=17924 comm="syz.6.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1748.835442][T13844] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1748.885438][T15351] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1748.985422][T15757] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1749.015399][T13844] usb 1-1: Using ep0 maxpacket: 32 [ 1749.021519][T13844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.032488][T13844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1749.042257][T13844] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1749.051377][T13844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.060069][T13844] usb 1-1: config 0 descriptor?? [ 1749.076515][T15351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.086742][T15351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1749.096328][T15351] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1749.105473][T15351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1749.113465][T15351] usb 4-1: SerialNumber: syz [ 1749.166434][T15757] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1749.173140][T15757] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1749.182242][T15757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.190860][T15757] usb 2-1: config 0 descriptor?? [ 1749.320485][T15351] usb 4-1: invalid UAC_HEADER (v1) [ 1749.326689][T15351] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1749.334223][T15351] usb 4-1: USB disconnect, device number 11 [ 1749.468153][T13844] kone 0003:1E7D:2CED.0005: unknown main item tag 0x2 [ 1749.474988][T13844] kone 0003:1E7D:2CED.0005: collection stack underflow [ 1749.482042][T13844] kone 0003:1E7D:2CED.0005: item 0 1 0 12 parsing failed [ 1749.489230][T13844] kone 0003:1E7D:2CED.0005: parse failed [ 1749.494898][T13844] kone: probe of 0003:1E7D:2CED.0005 failed with error -22 [ 1749.598792][T15757] zeroplus 0003:0C12:0005.0006: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0 [ 1749.610130][T15757] zeroplus 0003:0C12:0005.0006: no inputs found [ 1749.681901][T15757] usb 1-1: USB disconnect, device number 11 [ 1749.705485][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1749.802914][T13844] usb 2-1: USB disconnect, device number 10 [ 1749.969679][T17948] netlink: 'syz.3.4061': attribute type 13 has an invalid length. [ 1749.979994][T17948] gretap0: refused to change device tx_queue_len [ 1749.986901][T17948] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1750.434114][T17958] netlink: 'syz.0.4065': attribute type 13 has an invalid length. [ 1750.444642][T17958] gretap0: refused to change device tx_queue_len [ 1750.451882][T17958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1750.805470][T13844] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1750.985670][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1750.987033][T13844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1751.003985][T13844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.014115][T13844] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1751.023391][T13844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.032381][T13844] usb 2-1: config 0 descriptor?? [ 1751.440891][T13844] elecom 0003:056E:00FD.0007: unknown main item tag 0x0 [ 1751.447991][T13844] elecom 0003:056E:00FD.0007: unknown main item tag 0x0 [ 1751.455327][T13844] elecom 0003:056E:00FD.0007: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.1-1/input0 [ 1751.646166][T15351] usb 2-1: USB disconnect, device number 11 [ 1752.266451][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1752.311890][ T28] audit: type=1400 audit(2010.340:2280): avc: denied { setopt } for pid=17991 comm="syz.0.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1752.473899][T17999] netlink: 'syz.7.4080': attribute type 13 has an invalid length. [ 1752.687946][T17999] gretap0: refused to change device tx_queue_len [ 1752.695550][T17999] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1752.895243][T15351] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1753.078619][T15351] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1753.087777][T15351] usb 4-1: config 1 has no interface number 0 [ 1753.094260][T15351] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1753.107146][T15351] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1753.116447][T15351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.124500][T15351] usb 4-1: Product: syz [ 1753.131977][T15351] usb 4-1: Manufacturer: syz [ 1753.153450][T15351] usb 4-1: SerialNumber: syz [ 1753.485442][T13844] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1753.675478][T13844] usb 1-1: Using ep0 maxpacket: 32 [ 1753.686198][T13844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.697295][T13844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.707558][T13844] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1753.716916][T13844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.725990][T13844] usb 1-1: config 0 descriptor?? [ 1753.735748][T13844] hub 1-1:0.0: USB hub found [ 1753.753582][T18023] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1753.763892][T15351] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1753.774993][T15351] aqc111: probe of 4-1:1.105 failed with error -71 [ 1753.782473][T15351] usb 4-1: USB disconnect, device number 12 [ 1753.951879][T18027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4093'. [ 1753.966044][T18027] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18027 comm=syz.1.4093 [ 1754.064197][T13844] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 1754.272927][T13844] usbhid 1-1:0.0: can't add hid device: -71 [ 1754.278938][T13844] usbhid: probe of 1-1:0.0 failed with error -71 [ 1754.315939][T13844] usb 1-1: USB disconnect, device number 12 [ 1754.523138][T18035] netlink: 'syz.3.4096': attribute type 13 has an invalid length. [ 1754.533533][T18035] gretap0: refused to change device tx_queue_len [ 1754.540615][T18035] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1755.827479][T18064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4107'. [ 1755.845330][T18064] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18064 comm=syz.0.4107 [ 1755.948236][T18066] capability: warning: `syz.6.4108' uses 32-bit capabilities (legacy support in use) [ 1756.085507][T13844] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1756.265677][T13844] usb 2-1: Using ep0 maxpacket: 32 [ 1756.271925][T13844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.283028][T13844] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1756.292298][T13844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.300845][T13844] usb 2-1: config 0 descriptor?? [ 1756.361160][T18072] netlink: 'syz.3.4110': attribute type 13 has an invalid length. [ 1756.371124][T18072] gretap0: refused to change device tx_queue_len [ 1756.378178][T18072] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1756.708010][T13844] elo 0003:04E7:0009.0008: report_id 0 is invalid [ 1756.714471][T13844] elo 0003:04E7:0009.0008: item 0 0 1 8 parsing failed [ 1756.721560][T13844] elo 0003:04E7:0009.0008: parse failed [ 1756.727167][T13844] elo: probe of 0003:04E7:0009.0008 failed with error -22 [ 1756.815405][T15351] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1756.909081][T15747] usb 2-1: USB disconnect, device number 12 [ 1756.996442][T15351] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1757.004763][T15351] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1757.013694][T15351] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.024116][T15351] usb 1-1: config 220 has no interface number 2 [ 1757.030471][T15351] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1757.043614][T15351] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1757.050520][T15351] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1757.057540][T15351] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1757.081508][T15351] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1757.090609][T15351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.098665][T15351] usb 1-1: Product: syz [ 1757.102834][T15351] usb 1-1: Manufacturer: syz [ 1757.107698][T15351] usb 1-1: SerialNumber: syz [ 1757.318081][T15351] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1757.327444][T15351] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1757.333780][T15351] usb 1-1: No valid video chain found. [ 1757.339332][T15351] usb 1-1: selecting invalid altsetting 0 [ 1757.347225][T15351] usb 1-1: USB disconnect, device number 13 [ 1758.372933][T18107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4121'. [ 1758.391137][T18107] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18107 comm=syz.3.4121 [ 1758.695412][T15351] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1758.708383][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4126'. [ 1758.875440][T15351] usb 2-1: Using ep0 maxpacket: 16 [ 1758.884243][T15351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.895501][T15351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1758.905266][T15351] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1758.914647][T15351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.924228][T15351] usb 2-1: config 0 descriptor?? [ 1759.355410][T13844] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1759.448302][T15351] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 1759.455672][T15351] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 1759.462879][T15351] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 1759.470123][T15351] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 1759.477807][T15351] konepure 0003:1E7D:2DB4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 1759.535410][T13844] usb 4-1: Using ep0 maxpacket: 32 [ 1759.542982][T13844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.554025][T13844] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1759.563086][T13844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.571683][T13844] usb 4-1: config 0 descriptor?? [ 1759.650715][T15351] usb 2-1: USB disconnect, device number 13 [ 1759.983304][T13844] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 1759.990118][T13844] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 1759.998002][T13844] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 1760.004789][T13844] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 1760.012187][T13844] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 1760.073091][T18146] netlink: 'syz.6.4138': attribute type 13 has an invalid length. [ 1760.083607][T18146] gretap0: refused to change device tx_queue_len [ 1760.090736][T18146] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1760.250417][T13844] kye 0003:0458:5013.000A: hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 1760.263368][T13844] kye 0003:0458:5013.000A: tablet-enabling feature report not found [ 1760.299419][T13844] kye 0003:0458:5013.000A: tablet enabling failed [ 1760.323749][T13844] usb 4-1: USB disconnect, device number 13 [ 1760.595410][T15351] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1760.779204][ T28] audit: type=1326 audit(2018.810:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18155 comm="syz.3.4143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa02cb8eba9 code=0x0 [ 1760.806857][T15351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1760.825452][T15351] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1760.848573][T15351] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1760.865400][T15351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.882331][T15351] usb 2-1: config 0 descriptor?? [ 1760.905621][T18150] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1761.054278][T18166] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1761.068944][T18166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18166 comm=syz.6.4145 [ 1761.287363][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4150'. [ 1761.358576][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4156'. [ 1761.377069][T15351] hkems 0003:2006:0118.000B: item fetching failed at offset 5/7 [ 1761.385030][T15351] hkems 0003:2006:0118.000B: parse failed [ 1761.396176][T15351] hkems: probe of 0003:2006:0118.000B failed with error -22 [ 1761.576656][T18200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1761.601357][T13844] usb 2-1: USB disconnect, device number 14 [ 1761.611272][T18200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18200 comm=syz.0.4159 [ 1761.664553][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 1761.759438][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 1761.965617][T18220] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4167'. [ 1762.249690][T18234] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1762.344321][T18246] usb usb8: usbfs: process 18246 (syz.3.4180) did not claim interface 0 before use [ 1762.625449][T13844] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1762.805405][T13844] usb 4-1: device descriptor read/64, error -71 [ 1762.820485][T18258] input: syz0 as /devices/virtual/input/input30 [ 1762.827415][ T28] audit: type=1400 audit(2020.860:2282): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1337 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1762.849591][ T28] audit: type=1400 audit(2020.860:2283): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1337 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1762.873107][ T28] audit: type=1400 audit(2020.860:2284): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1337 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1762.906954][ T28] audit: type=1400 audit(2020.940:2285): avc: denied { read } for pid=18259 comm="syz.6.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1763.075430][T13844] usb 4-1: device descriptor read/64, error -71 [ 1763.085777][T18266] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4187'. [ 1763.135664][T18266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18266 comm=syz.6.4187 [ 1763.345427][T13844] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1763.447291][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1763.615472][T13844] usb 4-1: device descriptor read/64, error -71 [ 1763.895492][T13844] usb 4-1: device descriptor read/64, error -71 [ 1764.015510][T13844] usb usb4-port1: attempt power cycle [ 1764.245432][T15351] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1764.288992][T18308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1764.333385][T18308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18308 comm=syz.0.4203 [ 1764.425463][T13844] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1764.426369][T15351] usb 2-1: Using ep0 maxpacket: 16 [ 1764.439315][T15351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.450220][T15351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1764.456495][T13844] usb 4-1: device descriptor read/8, error -71 [ 1764.460087][T15351] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1764.475247][T15351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.484039][T15351] usb 2-1: config 0 descriptor?? [ 1764.626440][T13844] usb 4-1: device descriptor read/8, error -71 [ 1764.891547][T15351] apple 0003:05AC:024B.000C: unknown global tag 0xe [ 1764.898419][T15351] apple 0003:05AC:024B.000C: item 0 1 1 14 parsing failed [ 1764.905438][T13844] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1764.905791][T15351] apple 0003:05AC:024B.000C: parse failed [ 1764.919139][T15351] apple: probe of 0003:05AC:024B.000C failed with error -22 [ 1764.936411][T13844] usb 4-1: device descriptor read/8, error -71 [ 1765.046753][ T28] audit: type=1400 audit(2023.080:2286): avc: denied { mounton } for pid=18317 comm="syz.0.4207" path="/proc/3612/task/3613/net" dev="proc" ino=73007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1765.070179][ T28] audit: type=1400 audit(2023.080:2287): avc: denied { mount } for pid=18317 comm="syz.0.4207" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1765.096466][T13844] usb 4-1: device descriptor read/8, error -71 [ 1765.105904][T13185] usb 2-1: USB disconnect, device number 15 [ 1765.215465][T13844] usb usb4-port1: unable to enumerate USB device [ 1765.558547][T18333] netlink: 'syz.7.4213': attribute type 13 has an invalid length. [ 1765.569359][T18333] gretap0: refused to change device tx_queue_len [ 1765.576773][T18333] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1765.911693][T15351] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1766.217773][T15351] usb 4-1: Using ep0 maxpacket: 8 [ 1766.623297][ T28] audit: type=1400 audit(2024.650:2288): avc: denied { ioctl } for pid=18355 comm="syz.0.4223" path="/dev/binderfs/binder0" dev="binder" ino=6 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1766.650094][T18356] binder: 18355:18356 ioctl 40046205 0 returned -22 [ 1766.685867][T15351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.698299][T15351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.708140][T15351] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1766.717363][T15351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.736922][T15351] usb 4-1: config 0 descriptor?? [ 1769.296900][T15351] usbhid 4-1:0.0: can't add hid device: -71 [ 1769.302949][T15351] usbhid: probe of 4-1:0.0 failed with error -71 [ 1769.310267][T15351] usb 4-1: USB disconnect, device number 18 [ 1769.515755][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4237'. [ 1769.585208][T18401] syz.7.4239[18401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1769.585468][T18401] syz.7.4239[18401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1769.687487][T18415] tun0: tun_chr_ioctl cmd 1074025676 [ 1769.704410][T18415] tun0: owner set to 0 [ 1769.880926][ T28] audit: type=1400 audit(2027.910:2289): avc: denied { map } for pid=18428 comm="syz.6.4252" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1769.917718][T15351] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1769.970207][T18433] overlayfs: failed to resolve './file0': -2 [ 1770.040871][T18435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4251'. [ 1770.073128][T18435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18435 comm=syz.1.4251 [ 1770.125381][T15351] usb 4-1: Using ep0 maxpacket: 8 [ 1770.132305][T15351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.145061][T15351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.156237][T15351] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1770.170866][T15351] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1770.180865][T15351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1770.189658][T15351] usb 4-1: SerialNumber: syz [ 1770.195666][T15351] usb 4-1: config 0 descriptor?? [ 1770.286264][ T28] audit: type=1400 audit(2028.320:2290): avc: denied { mounton } for pid=18439 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1770.312232][T13185] usb 4-1: USB disconnect, device number 19 [ 1770.328368][ T28] audit: type=1400 audit(2028.360:2291): avc: denied { read } for pid=18442 comm="syz.3.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1770.357295][T18439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.364387][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.371875][T18439] device bridge_slave_0 entered promiscuous mode [ 1770.380491][T18439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.387664][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.395368][T18439] device bridge_slave_1 entered promiscuous mode [ 1770.483697][T18439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.490804][T18439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.498148][T18439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.505178][T18439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.534670][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1770.542926][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.550996][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.561908][T16699] tipc: Left network mode [ 1770.569543][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1770.578100][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.585129][T12946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.592836][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1770.602940][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.609994][T12946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.632246][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1770.640581][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1770.657654][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1770.672934][T18439] device veth0_vlan entered promiscuous mode [ 1770.680812][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1770.710786][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1770.718502][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1770.728205][T18453] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1770.763230][T18439] device veth1_macvtap entered promiscuous mode [ 1770.777208][T13844] ip6_tunnel: K xmit: Local address not yet configured! [ 1770.786465][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1770.798533][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1770.814396][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 1770.829735][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 1770.837605][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1770.846585][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1770.854837][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1770.873935][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1770.882349][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1770.897034][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1770.906842][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1770.921071][ T28] audit: type=1400 audit(2028.950:2292): avc: denied { mounton } for pid=18439 comm="syz-executor" path="/root/syzkaller.GgrboF/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1770.947488][ T28] audit: type=1400 audit(2028.970:2293): avc: denied { mounton } for pid=18439 comm="syz-executor" path="/root/syzkaller.GgrboF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1770.975055][ T28] audit: type=1400 audit(2028.970:2294): avc: denied { mounton } for pid=18439 comm="syz-executor" path="/root/syzkaller.GgrboF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=73447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1771.015802][ T28] audit: type=1400 audit(2028.980:2295): avc: denied { mounton } for pid=18439 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1771.040031][ T28] audit: type=1400 audit(2028.980:2296): avc: denied { mounton } for pid=18439 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1771.125492][T13185] ip6_tunnel: K xmit: Local address not yet configured! [ 1771.236019][T18476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4264'. [ 1771.263766][T16699] device bridge_slave_1 left promiscuous mode [ 1771.282016][T16699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.328524][T16699] device bridge_slave_0 left promiscuous mode [ 1771.363338][T16699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.372128][T16699] device bridge0 left promiscuous mode [ 1771.378126][T16699] device veth1_macvtap left promiscuous mode [ 1771.607482][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1771.616505][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1771.625882][T18481] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1771.905436][T13185] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1772.086430][T13185] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.105388][T13185] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1772.114420][T13185] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 1772.145401][T13185] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1772.176102][T13185] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1772.185169][T13185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1772.205395][T13185] usb 4-1: SerialNumber: syz [ 1772.417467][T13185] usb 4-1: 0:2 : does not exist [ 1772.422349][T13185] usb 4-1: unit 5 not found! [ 1772.428077][T13185] usb 4-1: USB disconnect, device number 20 [ 1772.528262][T18526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4286'. [ 1772.868789][T18534] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4289'. [ 1772.883246][T18534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18534 comm=syz.7.4289 [ 1774.228106][ T28] audit: type=1400 audit(2032.260:2297): avc: denied { sqpoll } for pid=18563 comm="syz.1.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1774.454517][T18579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4303'. [ 1774.790804][T18597] syz.3.4315[18597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1774.790902][T18597] syz.3.4315[18597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1775.125426][T15757] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1775.317396][T15757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.328770][T15757] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1775.339071][T15757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.457601][T15757] usb 4-1: config 0 descriptor?? [ 1775.878783][T15757] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 1775.893530][T15757] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input31 [ 1775.996437][T15757] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1776.055508][T13844] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1776.212048][ T28] audit: type=1400 audit(2034.240:2298): avc: denied { read } for pid=18623 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1776.236489][T13844] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1776.244870][T13844] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1776.253795][T13844] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.264471][T13844] usb 1-1: config 220 has no interface number 2 [ 1776.318614][T18627] netlink: 'syz.1.4326': attribute type 13 has an invalid length. [ 1776.326741][T18627] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1776.335815][T18627] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1776.343469][T18627] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1776.351679][T18627] 0猉功D: refused to change device tx_queue_len [ 1776.358084][T18627] IPv6: ADDRCONF(NETDEV_CHANGE): 30猉功D: link becomes ready [ 1776.365930][T18627] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1776.458394][T13844] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1776.471629][T13844] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1776.478644][T13844] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1776.485548][T13844] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1776.493765][T13844] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1776.511184][T15747] usb 4-1: USB disconnect, device number 21 [ 1776.515430][T13844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.525101][T13844] usb 1-1: Product: syz [ 1776.529648][T13844] usb 1-1: Manufacturer: syz [ 1776.534644][T13844] usb 1-1: SerialNumber: syz Stopping sshd: stopped /usr/sbin/sshd (pid 195) OK Stopping crond: stopped /usr/sbin/crond (pid 187) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 141) [ 1776.681112][ T28] audit: type=1400 audit(2034.710:2299): avc: denied { search } for pid=18638 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 1776.748465][T13844] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1776.755155][ T28] audit: type=1400 audit(2034.780:2300): avc: denied { read write } for pid=18646 comm="ip" path="/dev/console" dev="rootfs" ino=6112 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1776.778948][T13844] usb 1-1: No valid video chain found. [ 1776.784458][T13844] usb 1-1: selecting invalid altsetting 0 [ 1776.792946][T13844] usb 1-1: USB disconnect, device number 14 [ 1776.830179][ T28] audit: type=1400 audit(2034.860:2301): avc: denied { write } for pid=142 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 1776.858805][ T28] audit: type=1400 audit(2034.860:2302): avc: denied { remove_name } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping iptables: [ 1776.883249][ T28] audit: type=1400 audit(2034.860:2303): avc: denied { unlink } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK [ 1776.906648][ T28] audit: type=1400 audit(2034.920:2304): avc: denied { unlink } for pid=142 comm="dhcpcd" name="pid" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1776.928081][ T28] audit: type=1400 audit(2034.920:2305): avc: denied { read write } for pid=18652 comm="iptables" path="/dev/console" dev="rootfs" ino=6112 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 Stopping system [ 1776.952339][ T28] audit: type=1400 audit(2034.920:2306): avc: denied { search } for pid=18652 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 message bus: done [ 1777.064006][T15747] kernel write not supported for file bpf-prog (pid: 15747 comm: kworker/1:12) [ 1777.142811][T18668] overlayfs: failed to resolve './file0': -2 Stopping klogd: OK Stopping acpid: [ 1777.347227][T18695] kvm: pic: non byte write [ 1777.425410][T15747] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1777.469970][T18698] netlink: 'syz.6.4338': attribute type 13 has an invalid length. [ 1777.483189][T18698] gretap0: refused to change device tx_queue_len [ 1777.490337][T18698] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1777.625447][T15747] usb 2-1: Using ep0 maxpacket: 16 [ 1777.631672][T15747] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1777.639955][T15747] usb 2-1: config 0 has no interface number 0 [ 1777.646120][T15747] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1777.656120][T15747] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1777.667496][T15747] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1777.676726][T15747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.684732][T15747] usb 2-1: Product: syz [ 1777.688939][T15747] usb 2-1: Manufacturer: syz [ 1777.693534][T15747] usb 2-1: SerialNumber: syz [ 1777.698818][T15747] usb 2-1: config 0 descriptor?? [ 1777.704106][T18672] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1777.711543][T18672] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1777.725394][T13844] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1777.907283][T13844] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.917500][T13844] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1777.921697][T18672] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1777.927232][T13844] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1777.933862][T18672] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1777.942633][T13844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1777.957782][T13844] usb 1-1: SerialNumber: syz [ 1778.027595][T18711] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4345'. OK Stopping syslogd: stopped /sbin/syslogd (pid 85) OK [ 1778.342900][T13844] usb 1-1: 0:2 : does not exist [ 1778.353696][T13844] usb 1-1: USB disconnect, device number 15 umount: can't remount debugfs read-only [ 1778.575399][T15747] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1778.599390][T15747] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1778.611935][T15747] asix: probe of 2-1:0.251 failed with error -71 [ 1778.619864][T15747] usb 2-1: USB disconnect, device number 16 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only Connection to 10.128.1.28 closed by remote host. umount: can't remount /deSent SIGTERM to all processes [ 1778.784193][T16217] bridge0: port 3(syz_tun) entered disabled state [ 1778.791999][T16217] device syz_tun left promiscuous mode [ 1778.797540][T16217] bridge0: port 3(syz_tun) entered disabled state [ 1779.326443][ T7076] bridge0: port 4(gretap0) entered disabled state [ 1779.333747][ T7076] device gretap0 left promiscuous mode [ 1779.339364][ T7076] bridge0: port 4(gretap0) entered disabled state [ 1779.466626][ T7076] device bridge_slave_1 left promiscuous mode [ 1779.472739][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.480201][ T7076] device bridge_slave_0 left promiscuous mode [ 1779.486336][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.494490][ T7076] device bridge0 left promiscuous mode [ 1779.500049][ T7076] device veth1_macvtap left promiscuous mode [ 1779.506102][ T7076] device veth0_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 1779.976509][ T7076] tipc: Disabling bearer [ 1779.981805][ T7076] tipc: Left network mode [ 1779.986261][ T7076] tipc: Disabling bearer [ 1779.991254][ T7076] tipc: Left network mode [ 1780.496935][ T7076] device vlan0 left promiscuous mode [ 1780.502256][ T7076] device bridge_slave_0 left promiscuous mode [ 1780.508576][ T7076] bridge0: port 1(vlan0) entered disabled state [ 1780.516941][ T7076] device veth1_macvtap left promiscuous mode [ 1780.523202][ T7076] device veth1_macvtap left promiscuous mode [ 1780.530165][ T7076] device veth1_macvtap left promiscuous mode [ 1780.935608][T18742] kvm: exiting hardware virtualization [ 1780.941966][T18742] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1780.949317][T18742] ACPI: PM: Preparing to enter system sleep state S5 [ 1780.956300][T18742] reboot: Power down serialport: VM disconnected.