last executing test programs: 1m37.489969553s ago: executing program 0 (id=435): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 1m37.461257034s ago: executing program 0 (id=436): syz_pidfd_open(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000500)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x11, 0x0, @void}, "a8aa41f4da6a438b"}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}}}}}}}, 0x0) 1m37.392024126s ago: executing program 0 (id=438): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x370) 1m37.358854807s ago: executing program 0 (id=439): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 1m36.875492893s ago: executing program 0 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m36.65669046s ago: executing program 0 (id=446): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300"/15], &(0x7f0000000140)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m36.602078432s ago: executing program 32 (id=446): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300"/15], &(0x7f0000000140)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.155708503s ago: executing program 5 (id=2053): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80) 1.155571143s ago: executing program 5 (id=2054): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.146363123s ago: executing program 5 (id=2055): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 1.131558094s ago: executing program 5 (id=2057): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.013520497s ago: executing program 5 (id=2062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r3) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000084125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 852.077863ms ago: executing program 2 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r2, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 850.026503ms ago: executing program 5 (id=2069): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 721.652177ms ago: executing program 4 (id=2071): r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x2200) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, &(0x7f0000000100), 0x0, 0x0) 721.244647ms ago: executing program 2 (id=2072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x600, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x2800}, @generic={0x0, 0x7, "d58838068b"}]}}}}}}, 0x4a) 721.101807ms ago: executing program 4 (id=2073): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESHEX, @ANYBLOB="00280000010000000504000000000000000000e01900000001b62e5bfa5e4de4efbf6479aba0efed4e887165edc90ac4a8295053f44c4360bb17b71de66f38159c5d7ee099a6b6920b92235dac14353114b9de5e677e3b3f0ea355705dc94c1e07b961bf3f8d1a80a179800d2e9e4dea2f32307a20b18b3d7d24740b401c3b1414ba1d"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 666.856599ms ago: executing program 2 (id=2074): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r2, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 610.25845ms ago: executing program 2 (id=2075): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 609.116851ms ago: executing program 4 (id=2076): r0 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 592.532371ms ago: executing program 4 (id=2077): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 576.623592ms ago: executing program 4 (id=2078): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x1) 575.975602ms ago: executing program 2 (id=2079): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 530.139243ms ago: executing program 4 (id=2080): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x844) 529.494293ms ago: executing program 2 (id=2081): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x256c, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x75, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x84c2, 0x10, 0x1, {0x22, 0x9c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x5, 0x5}}}}}]}}]}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = dup(r1) bind$unix(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001680)={0x24, 0x0, &(0x7f00000015c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001e40)={0x24, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00032f0000002f036172a02a769455fd842cf61a8125a06548c6cb52b003904b6ec463f208f6aa7e2216439c8d0000731ebcf93514"], 0x0, 0x0}, 0x0) 483.730595ms ago: executing program 1 (id=2084): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 405.919797ms ago: executing program 1 (id=2085): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x87a8}}}}}}, 0x0) writev(r0, 0x0, 0x0) 394.615998ms ago: executing program 1 (id=2086): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x12c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd64df33832dd637a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xffff}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 358.098628ms ago: executing program 1 (id=2087): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESHEX, @ANYBLOB="00280000010000000504000000000000000000e01900000001b62e5bfa5e4de4efbf6479aba0efed4e887165edc90ac4a8295053f44c4360bb17b71de66f38159c5d7ee099a6b6920b92235dac14353114b9de5e677e3b3f0ea355705dc94c1e07b961bf3f8d1a80a179800d2e9e4dea2f32307a20b18b3d7d24740b401c3b1414ba1d"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 309.64752ms ago: executing program 1 (id=2090): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f00000002c0)={{0x2, 0x0, 0x5, 0x2, 0x626}, 0x2, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x8, 0x2, 0xc08}}, 0x11c) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) write$UHID_INPUT(r0, &(0x7f00000011c0)={0x8, {"9c674ac9166c4443fe1453b96cf1a8bfec7444bc2a3981f2e9d1ff3b7ea0171df229e2e538f5992495f2cc10ac75d39e0175a213c18c9a601d10666dc3e9cb354fbf1f63283fcb464ff889f1ebc30349b897c5a363e3c09fb7bf60702446b518f12b170815e146745606265d510b4114ca0ede6a1b830fb8e518227785a1113f06942eb9fe0ca0f1d3494143d2517da64438dc8de30d30579ebe074734d7df3e5d15c3aea6fd78c3ed5ef10470b50a53209dd4acf6a0d299ea8a057906736829aa5c3140b33b59307c85e88b4d37db64bdbf5a397180d5f475d227925291d755d48cefe9ab897348758da028fbd2009124cdfb039efa5d31409cfea87cf66f61812f60bf9da2ac8f3538c854f664862936f400695a6971ff526b296fcbe1cd147b6cd384e525f7d9b32f930f7072982cd776f1387c0ad00c16a55aa408fe740eb5462797d601ae3b60da8f3e97e532f90e4dce1333f2e84046e7c660312163385c667e98facee11b0bc84f70deabeea5bb47e4f15fa25b2dc31766ea04e58e15140db4885aee9329aacef31e506d162e07621f345b9c62babed0bea3d5438f5efd0c965524acc4f5f970663a5bf88f28e7af0f57816b5328bad628f9fb85d7b9bb965dde16b681607457335bb546039f80fdcee246b7eaf28701edea80528d914153e9a1acdad4c86498fb3b356d4a27e947fb9c2d58e422fd0019439c637a70a7f2fc6c26c0435992431e69c9899a20b5a8aff6aed3c9739829ab5ace3c2c706df71964461bfa9449758116e8c4ba7df166f403bc6309ab72521ecbeb17e49a88c4d21d64dba854486fe3e077a220875f25ad06fdaedd384a563db32704ce605917e47f7736fd5599a13352dae150aca022a9d27cc1cbed0b03ce10f6dd9e1887a17fda8b84384ef9d3c3dbbda3e704b827cf4022ba0ba4901891ddea85bcd64d6a8b5fffa1eb5a43b0bb82a61efc2623a0707916c36384556995adef73eaba3fefc4f09df6c1594e1827343a0f50e69826b2e0eecf9c9a83ecddd56df54c97ce3afbda83388a3433cbd43e682797c56ece36f6d2047893d0abcdd31a73ca5feb98eef914f04642130170cf4eef83174553e89c3ec0abce5f0b4a91d2f333f651f55ceb50de504e5b2477e23532faebcaa7699a3a3a90cdbbdbc812ed3d98466cda127e7704d8974c9a4ef1cb7d3bb2968c62cc7b961c4452f0ebd950d82350e71ec24fb38ce316009e4ca239513ac360c3724ef17788697f096d1520ee5dbc7f2508cfca5674fa811a7340a823b51509c01d8aab979bdea89ddcc14fcc592e2b50fed0ee5d1be633ceaf770fe3940aa4619d7d4840e8d321a4e1dde5de7b62a5bc9b3e5b32cf2bd4c5485459de18a50224e12493f9238570b5032c1ac92564f44caf0ccf81f84668770a2d42832353faee6f5676e5f24904f26ea982f78595d204245ba297f9720336e628cca99cb10ffaf06f64671801183cfa6c5426a83fada232ff53c02120259267ffd7d592b4f420d8a2a23bd0d850480ff835c2c33b3eb34916740f03f465b617fd803765828e67773fd75b26d69766deea5445eee3a492f8898dbff0ae88715ab463eaf9d8f8971570237cff7c3facf81ade66c1a8bb7a28b869eb0bd2de001f55d9da6b4f227428c432d302e74d9fe55f588dbd3dd1dbde826653ebe34d8c7e53637053b853d857fb7fcb96653c7181d67bde44ed2188e015b44595827454f6bbbe358a1c854f8e18ff2620db2fa2d63e32f7f6a04782fe6ca8cb471d583490c1d001cddd8bc38cd1c6db25885ffa55f4b2fe5971bd854d6ff8624036fac07414c87e1ea936427d3a1f061b4edb99e4d69cb664dca1d3eb8d6526c167194071357ba40c40655f8220ceef5aa40c0268d4f5246c61eeeffa5bdb2d6f04a32486771fcd88310a75a91b1aeda2d3a0328a31714a97501b7c608b2f1d9e3ad808352cd9d75d33368d2f3749388d4fbad2032ca896e14bcd5482654e74cb5ba1b78f2d4dd9528b50241562f2f9b8c6ada7120d937220d82a35f2a0c80b6a4e819c90b1dd944053c93da85a1882983ed43866ce2b86c03bd715280a8863e297048913bb28b6a2a5b193d6d18c3dae148be26916aa1cf20a418d1e596e7421a1f5a3e37f61e80dff61640ca90443a9f0bb35f6e08d292ff82d89947b2fe2c159570e7265d74708fdd25b0395afe03662dadb9d5af343e1c465d280d86def32f01423ee3db4b45c660183f87e8689ab321d1d6d8cffa009018c146b52a1c736c31c1730aa571877674f5e467141cd7774f611ce096fa5625a352fd04cb3145fa609865b56db0efca64b0bebc5f3481eb777d374895282170ad5698c82f76b58b3e221d2db023b4bd56ba6f725a11f4c1ca3b0b0c5f01114903f9a3a8a71f6ee1e7dc5a59345f8f5ae3fa174c9fcefe102b45f87e5f60700000000000000083120b02fedc9b8255eb9d2ec864c8787df2243fda4f221ea5f5d1fd94c3fbd980f8d14ab3743f0156b157e6a51502d705c6e41db033b0d1e25e7db40e772fcef27f77c39885950e1e183d184851347c648fecad8e5ed441c342a86b371b7db4462abb6d0975c907d5f6713f4ea80ff8dca6192ea622035aa55a3e8ffefa04acea70466adde3d8dcc7e94c419e6322dc75095be710be2a8b18a35ec9dcd3ed3820371346b2697888d4e989cb36af053cf623b3fee4df70c3feb9e7a369951ecb4b038f8e908f02e5fc37c6a58895a72520f64b64af5c7ff6f9c3ac56501d2521024ef412a28cf9278431f06e9b5557713c98e5107f616dddc48102ba02ca4e79a2ab90bea8c61bd53ff5d7115f9106ea757ecf3b35b95609a702c0d5552d5c053e280d9d22bf1cb7375af82353b3f39755ebd3527b9cad18ce0cf4d72ef25839afff4942efc2fe307b4e0111db899fa8f0d76295d4d88de940da4e6c1e6be5c84fdf48a59ee8d20e742788287a1f4314d58f5202ec0057669c30842aab707f4a9f4e4f3be63395c8e6b66bdc5ab1e58941615ef20a7a430d6e329b1af5d91f0337c1f09e4de4dd2c519da6a51b36a1d8bd7df85bf775f2d2b11ac68a6ec2172b520db98e7cd556575089137605091d6aa2b22a9162b7ce6f44de077d6ec980bd6439fc9851b000f339774f5d2784ed6356869d7bad315ac5ed225da82931c17661fed0552a18c8074dfe3d45ed517fd98f17bc75a3a0dc58e5dd0ac6fdbd2057af3f50c7086318a981c02e004b549bdbfad352794db82dabafec3abc02d36be3a060a3e9b743d91b783ac463158b2ecb9b40826b5de2b1cadc0d93fcbefa51f461795564ba14a2cd0b5f70344e1bf0a9c419504176d9ac464d758e497060b46827ac9518e6f9c08b176e22e2a85f8ef67a6e40cea3b9cc2b6df4d4840972fa46cdbdc5deeea80891e1aff5edc351002a70ec181b49baee52f55973ad165a8559d8a65aae75261c14e60bb020c8fec1113ffee839c4e7b34a302d40fcc25697809d8f2723fd59d87c99dff6aadc389654aaac5a33aba8626a6bc25c38e6f2cb8c78937cc13f9c172a46b121078fdcab56953d49d3e4a8a9571a23fa650c82da0580a448b2c1184038d8dcc6de63541d4d7cc0419fcb1b15a592a9446000a9eff1237c1ffb6e5e379f198db0bbbebce636321a134f8a65ecaf374d6acf4a36dacfc275b6012a89287b20e5a496bd944f8f5076b78d72573761d9c296db3c616fb4ad6b7f4c14c95538f1ae94679e1761561df12882f994128e981c4541e4f0992ee5c3b12081a1ea47697f06a00d992bfb1e2053aaa76c91497c201c1449a9295009c981a7041bb9527a8d81fdbc696f6ad92ab936aecc8cb8557a365b914849505f7f3ace6d6ab09a009c09abaeb7efe8e1ec8131ae305736bf24faec83eb3bde169b4a981878c4c3f81267777f88cb890a60ef7437226ed8350d4b8fd9a6f7fd544ebbb6a94af009d02daa0f7e29ed8cc7ab45bb7a8f779516e05a3597e40181777968934fdc1e5f1ce1f67be4ee1d4687c0f7bd2cb92414b16735d9fd80334825026f3d68427d2a9d64834810ba1059e78eeb59a1f6e20e582baca253edebfecea13dbfe08af0c92207d2e22fd83d6a87ffd4cd04427505252c5a973b0a0b11c6b1dadfc6c2bf9ab95c7f6acd13bc247f682f1f13437cb644fd6bc5aa6f9d8d6463850dbf5a299206d7f8c6f25e60c197176e4390306f479426785ceebb103eb3ce904dee8839941e8ed510132ea8feada6b7bb6fd9a6d248e6b512be4d8405bcba3eb6844306cbca2d7bcf7dc1f4e2a43f551f549a534754d3f53e047e9ab837ec4c88809e6c852037212a7c5605aa8b1bfedf3305430c01650d9b266e3e48bc2dc1bd143bb2368a11791add7eb07a85da0492274943e37ac5d27eb5b6a8d6c8857ed653d611a9975e97d99fdafacf910e2041ac61e23fcaeb2f0a0ff6612b58bf003108cb062093627667d38c1fd960d6a7eb432b3bd18e82d5e8195421303d2bea015545b371e6d8242bc991a7d38eaa256949983bce9dabf9941959f9eeedf41be0f764f6bc036f4fc790bb800ef058e8a62fd1d5e953a56c506519cfc6df884ff13d2452fddfb06bca41ef444f14778fc0df806270ff8d95852dbc4aa40ccdfa5262cc6af04e68f2c96c6776d40f764bd5baa7215fbbcee89bce11171baccf17b7171ae5fb5ef685cc30dcd92435fe8c679d207d736c89bb365ffa1f019a0c6f576869d58d00763e9c88e08a663a3974f6b978d959b81c18880162586cbe963b1731258f9ed61b89b4f89757b9c877874c53dbcc2be97746ab355491f407e292d217a380d4d9554d7568e25cc1a9565121ce5517fc4f5082f5b8bfe5998779654f9b1769a7c2de1f5b6b7c3c73a201bb1d857f1b408a4a16c9489be7f735e8bd9f31dbd18265bfde0b3221f768f8ea96f03db5aa6246db0e8000039b6f24d19d91532fc7ffe3edb73c2fc697559b78be8c969ed422fd28c5fcf95b2f9d49d8187122f801ccf607993acd5ce9b6ba644d69815456601203413f2ea1b7eca8c8772a0278dc2d68bb32252bf91bef7b7bc9b7f505931f816d856aec43fb8212e39544230d0746c69e0dfcacdc58daa3aa6bf6a28f48de68ca061e133ca10cf01db605e0f324e682779fb1c3ec23f642aaef74fd5d644393761b86e11f37faec44366bb2c03cb410648f2bef331b6376b69046611d3c2f3065c3f5ae5bdfca1665747e668e604ffed415eefd7b415a3ca7250b472743430feb5f31e10d70452535c3488259228e97cdc04aa6e7b2f922547305be073259b13eeb70d0d643d56dd4681967bcaf61fd7792a8657b71cac5eb57f9683f392a12d3f5e0271fe18ac4bf8102b5198c37dc24614a6cf878f976d8f26e0879b5bacd361fb1263c4465b8bd8f83cb77b38840b71b4fad3f2b386badef6dd8602e9fe34978c485f59070fb2ae01a0036262fa18f9695d97514841e7349b575ae7726cd1263c8acb945af224313e7ddd3ef04ad4165c43f2a484dcc1a6e8552a8ee3c9da98275ad12e2a9c28377b899335bf0ab20a6990a4d98e3214c3e457d5cdc9c0b88ce54b8ffa959ffff971abc9b46b125f9de9d4f5677f84227c7ccdb1524ab672009a58dd396cb1f253e7cc51faeca9f63b71b6dda84c6f06a8a553c8a4bc550bf61411f803cf07e8b46dfc7576d938b8f83f37d2036d6db26945db2ef2604a1989efc40384981163157946d000", 0xfffffffffffffcb7}}, 0x1006) 189.076584ms ago: executing program 3 (id=2093): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 178.369944ms ago: executing program 1 (id=2094): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 104.165056ms ago: executing program 3 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x48000) 103.922856ms ago: executing program 3 (id=2096): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 66.400838ms ago: executing program 3 (id=2097): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x550b, 0x0) 53.443989ms ago: executing program 3 (id=2098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x1, 0x1000000}, 0x9, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 3 (id=2099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=0x1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000a00)={0x14, &(0x7f0000000000)={0x40, 0x22, 0x28, {0x28, 0x9, "5f2abd544babb68886c842ac6acfd67da163ae2e98967d16aa85cac806c895ad5d7196bd13e3"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000c00)={0x34, &(0x7f0000000a40)={0x40, 0x15, 0x24, "8b2b05ad3721d93f3e9357afe27f0eed317c21057adbe8b23c4a2fc2c5e6c91174672d31"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xd0}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7b}, &(0x7f0000000b40)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000b80)={0x40, 0xa0, 0x4}, &(0x7f0000000bc0)={0xc0, 0xa2, 0x2f, "6a0f1027806bca2ce69d32c1c8421783a96558a527e4f5fdd6ec0ccc6175def5d726f76425a1a0fab3ab6338a6be27"}}) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x1c00, 0x3}, 0x10) syz_usb_control_io(r1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000240)={0x0, 0x1, 0x7fffffffffffffff, 0x9}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n, priority 0 [ 76.447109][ T5044] tipc: Resetting bearer [ 76.456772][ T5054] loop5: detected capacity change from 0 to 1024 [ 76.466893][ T5044] tipc: Disabling bearer [ 76.478093][ T5054] EXT4-fs: Ignoring removed nobh option [ 76.484103][ T5054] EXT4-fs: Ignoring removed nobh option [ 76.489788][ T5054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.512395][ T5054] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8042c098, mo2=0002] [ 76.521420][ T5054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.536624][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 76.536637][ T28] audit: type=1400 audit(1780019552.159:441): avc: denied { write } for pid=5051 comm="syz.5.557" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.569780][ T28] audit: type=1400 audit(1780019552.159:442): avc: denied { add_name } for pid=5051 comm="syz.5.557" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.646379][ T5064] geneve3: entered promiscuous mode [ 76.651652][ T5064] geneve3: entered allmulticast mode [ 76.834737][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811fe9ce00: abort rx timeout. Force session deactivation [ 76.883296][ T28] audit: type=1400 audit(1780019552.349:443): avc: denied { create } for pid=5052 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.143403][ T310] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.160043][ T310] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.169539][ T310] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.178560][ T310] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.638477][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 78.208896][ T4667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.460067][ T28] audit: type=1400 audit(1780019554.079:444): avc: denied { bind } for pid=5098 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.479879][ T28] audit: type=1400 audit(1780019554.079:445): avc: denied { name_bind } for pid=5098 comm="syz.2.573" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 78.504238][ T5104] syz.4.572 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.514150][ T28] audit: type=1400 audit(1780019554.079:446): avc: denied { node_bind } for pid=5098 comm="syz.2.573" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 78.536743][ T28] audit: type=1400 audit(1780019554.079:447): avc: denied { setopt } for pid=5098 comm="syz.2.573" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.536767][ T28] audit: type=1400 audit(1780019554.079:448): avc: denied { write } for pid=5098 comm="syz.2.573" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.536818][ T28] audit: type=1400 audit(1780019554.079:449): avc: denied { connect } for pid=5098 comm="syz.2.573" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.536842][ T28] audit: type=1400 audit(1780019554.079:450): avc: denied { name_connect } for pid=5098 comm="syz.2.573" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 78.538059][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.629677][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.673910][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.737968][ T40] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.747174][ T40] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.773577][ T40] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.793087][ T40] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.823448][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 79.044996][ T5099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.856876][ T5149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 79.958820][ T5160] syzkaller0: entered promiscuous mode [ 79.971774][ T5160] syzkaller0: entered allmulticast mode [ 80.178092][ T5173] syzkaller0: entered promiscuous mode [ 80.183923][ T5173] syzkaller0: entered allmulticast mode [ 80.306783][ T5153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.444241][ T5188] syzkaller0: entered promiscuous mode [ 80.449854][ T5188] syzkaller0: entered allmulticast mode [ 80.664809][ T5198] syzkaller0: entered promiscuous mode [ 80.670417][ T5198] syzkaller0: entered allmulticast mode [ 80.805310][ T5210] syzkaller0: entered promiscuous mode [ 80.810925][ T5210] syzkaller0: entered allmulticast mode [ 80.927522][ T5220] syzkaller0: entered promiscuous mode [ 80.933653][ T5220] syzkaller0: entered allmulticast mode [ 80.972567][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 81.219803][ T5246] syzkaller0: entered promiscuous mode [ 81.225735][ T5246] syzkaller0: entered allmulticast mode [ 81.464460][ T5266] loop2: detected capacity change from 0 to 128 [ 82.439246][ T5289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.459568][ T5289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.604194][ T5293] loop2: detected capacity change from 0 to 128 [ 82.623479][ T5293] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.642772][ T5293] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.683322][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 82.683335][ T28] audit: type=1400 audit(1780019558.309:455): avc: denied { setattr } for pid=5292 comm="syz.2.646" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.758690][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.777260][ T5275] Set syz1 is full, maxelem 65536 reached [ 82.791665][ T28] audit: type=1400 audit(1780019558.339:456): avc: denied { write } for pid=5292 comm="syz.2.646" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.834731][ T5299] syzkaller0: entered promiscuous mode [ 82.844551][ T28] audit: type=1400 audit(1780019558.349:457): avc: denied { write } for pid=5292 comm="syz.2.646" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.853069][ T5299] syzkaller0: entered allmulticast mode [ 82.866364][ T28] audit: type=1400 audit(1780019558.349:458): avc: denied { write } for pid=5292 comm="syz.2.646" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.888798][ T5302] TC_ACT_REPEAT abuse ? [ 82.979650][ T5305] hub 8-0:1.0: USB hub found [ 82.984461][ T5305] hub 8-0:1.0: 8 ports detected [ 83.419824][ T5309] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 83.428704][ T5309] syzkaller0: entered promiscuous mode [ 83.434394][ T5309] syzkaller0: entered allmulticast mode [ 83.443386][ T5309] tipc: Started in network mode [ 83.448409][ T5309] tipc: Node identity 72d7bade3b01, cluster identity 4711 [ 83.455875][ T5309] tipc: Enabled bearer , priority 0 [ 83.474288][ T5308] tipc: Resetting bearer [ 83.489547][ T5308] tipc: Disabling bearer [ 83.582176][ T5317] loop5: detected capacity change from 0 to 128 [ 83.780108][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 84.113504][ T28] audit: type=1400 audit(1780019559.739:459): avc: denied { write } for pid=5349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.154900][ T5367] loop2: detected capacity change from 0 to 512 [ 84.289769][ T5374] tipc: Enabling of bearer rejected, failed to enable media [ 84.338372][ T28] audit: type=1400 audit(1780019559.959:460): avc: denied { write } for pid=5368 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.517176][ T28] audit: type=1400 audit(1780019560.139:461): avc: denied { write } for pid=5380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.596138][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.675'. [ 84.622194][ T28] audit: type=1400 audit(1780019560.209:462): avc: denied { write } for pid=5397 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.764437][ T28] audit: type=1400 audit(1780019560.389:463): avc: denied { write } for pid=5406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.827200][ T28] audit: type=1400 audit(1780019560.449:464): avc: denied { write } for pid=5427 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.904944][ T5431] loop1: detected capacity change from 0 to 512 [ 85.095451][ T5438] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5438 comm=syz.5.678 [ 85.204225][ T5442] syzkaller0: entered promiscuous mode [ 85.213011][ T5442] syzkaller0: entered allmulticast mode [ 85.318450][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 85.514727][ T5486] loop3: detected capacity change from 0 to 512 [ 85.523179][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.530431][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.663643][ T5491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'. [ 85.837046][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.855472][ T5476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.925585][ T310] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.945784][ T310] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.973693][ T310] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.036767][ T310] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.193320][ T5503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 86.325990][ T5505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.360035][ T5505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.230530][ T5510] syzkaller0: entered promiscuous mode [ 87.258349][ T5510] syzkaller0: entered allmulticast mode [ 87.429068][ T5519] loop2: detected capacity change from 0 to 512 [ 87.609348][ T5526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.632048][ T5526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.757382][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 87.803575][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 87.803600][ T28] audit: type=1400 audit(1780019563.429:476): avc: denied { shutdown } for pid=5536 comm="syz.1.713" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.998839][ T28] audit: type=1400 audit(1780019563.619:477): avc: denied { read write } for pid=5525 comm="syz.3.710" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.052320][ T28] audit: type=1400 audit(1780019563.619:478): avc: denied { open } for pid=5525 comm="syz.3.710" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.140491][ T28] audit: type=1400 audit(1780019563.759:479): avc: denied { bind } for pid=5550 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.159965][ T860] IPVS: starting estimator thread 0... [ 88.166092][ T5551] xt_hashlimit: size too large, truncated to 1048576 [ 88.172152][ T28] audit: type=1400 audit(1780019563.759:480): avc: denied { name_bind } for pid=5550 comm="syz.1.717" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 88.196027][ T28] audit: type=1400 audit(1780019563.759:481): avc: denied { write } for pid=5550 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.226247][ T5555] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 88.251679][ T5552] IPVS: using max 2352 ests per chain, 117600 per kthread [ 88.261602][ T5555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.717'. [ 88.322935][ T5560] syzkaller0: entered promiscuous mode [ 88.328471][ T5560] syzkaller0: entered allmulticast mode [ 88.348281][ T5562] loop1: detected capacity change from 0 to 512 [ 88.433323][ T5524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.502390][ T5569] loop2: detected capacity change from 0 to 1024 [ 88.517962][ T5569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.541726][ T5567] hub 8-0:1.0: USB hub found [ 88.555867][ T5567] hub 8-0:1.0: 8 ports detected [ 88.565901][ T28] audit: type=1400 audit(1780019564.189:482): avc: denied { write } for pid=5568 comm="syz.2.724" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.682644][ T28] audit: type=1400 audit(1780019564.249:483): avc: denied { write } for pid=5568 comm="syz.2.724" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.704350][ T28] audit: type=1400 audit(1780019564.249:484): avc: denied { remove_name } for pid=5568 comm="syz.2.724" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.773048][ T28] audit: type=1400 audit(1780019564.399:485): avc: denied { create } for pid=5579 comm="syz.5.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.985160][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.014750][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.022330][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.029830][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.037535][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.045024][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.052471][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.059853][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.067317][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.076610][ T5607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.737'. [ 89.086497][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.103670][ T35] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 89.112310][ T35] hid-generic 0006:0008:0008.0002: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 89.142862][ T5610] fido_id[5610]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.181668][ T5613] syzkaller0: entered promiscuous mode [ 89.187343][ T5613] syzkaller0: entered allmulticast mode [ 89.542055][ T5638] syzkaller0: entered promiscuous mode [ 89.547599][ T5638] syzkaller0: entered allmulticast mode [ 89.773273][ T5642] syzkaller0: entered promiscuous mode [ 89.779035][ T5642] syzkaller0: entered allmulticast mode [ 89.793421][ T5596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.169045][ T5683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.476294][ T5704] syzkaller0: entered promiscuous mode [ 90.482026][ T5704] syzkaller0: entered allmulticast mode [ 91.064559][ T5725] loop1: detected capacity change from 0 to 128 [ 91.072422][ T5725] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 91.546692][ T5738] syzkaller0: entered promiscuous mode [ 91.555380][ T5738] syzkaller0: entered allmulticast mode [ 91.628442][ T5747] syzkaller0: entered promiscuous mode [ 91.634344][ T5747] syzkaller0: entered allmulticast mode [ 92.060022][ T5767] loop4: detected capacity change from 0 to 8192 [ 92.093290][ T5767] loop4: p1[EZD] p4 [ 92.097369][ T5767] loop4: p1 size 32768 extends beyond EOD, truncated [ 92.104853][ T5767] loop4: p4 size 262144 extends beyond EOD, truncated [ 92.693862][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 92.821883][ T5798] syzkaller0: entered promiscuous mode [ 92.827573][ T5798] syzkaller0: entered allmulticast mode [ 92.877387][ T5800] loop3: detected capacity change from 0 to 128 [ 93.358775][ T5772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.491634][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.820'. [ 93.535360][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.542626][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.678669][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.695190][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.812078][ T5802] Set syz1 is full, maxelem 65536 reached [ 93.875078][ T5836] syzkaller0: entered promiscuous mode [ 93.907984][ T5836] syzkaller0: entered allmulticast mode [ 93.926052][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.938930][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.954663][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.963932][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.988397][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 93.995988][ T28] kauditd_printk_skb: 570 callbacks suppressed [ 93.996003][ T28] audit: type=1400 audit(1780019569.609:1056): avc: denied { name_bind } for pid=5864 comm="syz.1.832" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 94.033779][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.043150][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.052954][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.062142][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.078721][ T28] audit: type=1400 audit(1780019569.699:1057): avc: denied { mounton } for pid=5866 comm="syz.3.833" path="/proc/422/net/netfilter" dev="proc" ino=4026532507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 94.096039][ T5869] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 94.116861][ T5871] loop5: detected capacity change from 0 to 128 [ 94.123856][ T5869] syzkaller0: entered promiscuous mode [ 94.142455][ T5869] syzkaller0: entered allmulticast mode [ 94.168007][ T5869] tipc: Started in network mode [ 94.174316][ T5869] tipc: Node identity ce033d4b48a9, cluster identity 4711 [ 94.181835][ T5869] tipc: Enabled bearer , priority 0 [ 94.197130][ T5868] tipc: Resetting bearer [ 94.214225][ T5868] tipc: Disabling bearer [ 95.024330][ T5894] bridge1: entered promiscuous mode [ 95.029673][ T5894] bridge1: entered allmulticast mode [ 95.062507][ T5886] Set syz1 is full, maxelem 65536 reached [ 95.128506][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.850'. [ 95.538064][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 96.064232][ T5937] netlink: 'syz.5.863': attribute type 1 has an invalid length. [ 96.101641][ T5937] netlink: 224 bytes leftover after parsing attributes in process `syz.5.863'. [ 96.111241][ T5939] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 96.124044][ T5939] syzkaller0: entered promiscuous mode [ 96.133972][ T5939] syzkaller0: entered allmulticast mode [ 96.152357][ T5939] tipc: Enabled bearer , priority 0 [ 96.167868][ T5938] tipc: Resetting bearer [ 96.183575][ T5938] tipc: Disabling bearer [ 97.308459][ T5997] loop5: detected capacity change from 0 to 512 [ 98.198296][ T23] IPVS: starting estimator thread 0... [ 98.342966][ T6020] IPVS: using max 2352 ests per chain, 117600 per kthread [ 98.797314][ T6051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6051 comm=syz.4.905 [ 99.643291][ T6058] loop1: detected capacity change from 0 to 128 [ 99.676838][ T6058] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.744214][ T6058] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.120373][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.728129][ T28] audit: type=1400 audit(1780019576.349:1058): avc: denied { getopt } for pid=6081 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.840998][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 100.864407][ T6090] ipvlan2: entered allmulticast mode [ 100.880182][ T6090] syz_tun: entered allmulticast mode [ 102.121221][ T28] audit: type=1400 audit(1780019577.719:1059): avc: denied { sqpoll } for pid=6111 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.782711][ T6132] loop1: detected capacity change from 0 to 128 [ 103.932864][ T6138] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 103.942244][ T6138] syzkaller0: entered promiscuous mode [ 103.947798][ T6138] syzkaller0: entered allmulticast mode [ 103.954877][ T6138] tipc: Started in network mode [ 103.960279][ T6138] tipc: Node identity 2269f7617061, cluster identity 4711 [ 103.969203][ T6138] tipc: Enabled bearer , priority 0 [ 103.976592][ T6137] tipc: Resetting bearer [ 103.987213][ T6137] tipc: Disabling bearer [ 105.050337][ T28] audit: type=1400 audit(1780019580.669:1060): avc: denied { create } for pid=6174 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.125618][ T6182] syzkaller0: entered promiscuous mode [ 105.131195][ T6182] syzkaller0: entered allmulticast mode [ 105.225943][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 105.237169][ T6192] ipvlan2: entered allmulticast mode [ 106.097220][ T6216] loop5: detected capacity change from 0 to 1024 [ 106.137656][ T6216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.169348][ T6221] syzkaller0: entered promiscuous mode [ 106.175006][ T6221] syzkaller0: entered allmulticast mode [ 106.177408][ T28] audit: type=1400 audit(1780019581.799:1061): avc: denied { write } for pid=6214 comm="syz.5.982" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.230751][ T4667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.240729][ T28] audit: type=1400 audit(1780019581.829:1062): avc: denied { write } for pid=6214 comm="syz.5.982" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.287320][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'. [ 106.326982][ T6224] ipvlan2: entered allmulticast mode [ 106.349103][ T6224] syz_tun: entered allmulticast mode [ 107.294941][ T6249] syzkaller0: entered promiscuous mode [ 107.302110][ T6249] syzkaller0: entered allmulticast mode [ 107.517842][ T6255] syzkaller0: entered promiscuous mode [ 107.535037][ T6255] syzkaller0: entered allmulticast mode [ 107.992166][ T5834] IPVS: starting estimator thread 0... [ 108.081763][ T6282] IPVS: using max 2352 ests per chain, 117600 per kthread [ 108.265934][ T6288] syzkaller0: entered promiscuous mode [ 108.271567][ T6288] syzkaller0: entered allmulticast mode [ 108.612938][ T6293] loop4: detected capacity change from 0 to 1024 [ 108.620912][ T6295] loop2: detected capacity change from 0 to 128 [ 108.627923][ T6295] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.648172][ T6293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.717766][ T28] audit: type=1400 audit(1780019584.339:1063): avc: denied { write } for pid=6292 comm="syz.4.1010" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.741232][ T6300] syzkaller0: entered promiscuous mode [ 108.746899][ T6300] syzkaller0: entered allmulticast mode [ 108.753622][ T28] audit: type=1400 audit(1780019584.339:1064): avc: denied { write } for pid=6292 comm="syz.4.1010" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.791820][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.814974][ T6305] syzkaller0: entered promiscuous mode [ 108.815060][ T28] audit: type=1400 audit(1780019584.439:1065): avc: denied { ioctl } for pid=6304 comm="syz.4.1015" path="socket:[14401]" dev="sockfs" ino=14401 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.820655][ T6305] syzkaller0: entered allmulticast mode [ 109.176034][ T6319] hub 8-0:1.0: USB hub found [ 109.180916][ T6319] hub 8-0:1.0: 8 ports detected [ 109.910688][ T6330] loop4: detected capacity change from 0 to 128 [ 110.516544][ T6260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.709447][ T6352] syzkaller0: entered promiscuous mode [ 110.709468][ T6352] syzkaller0: entered allmulticast mode [ 110.837236][ T6366] syzkaller0: entered promiscuous mode [ 110.843129][ T6366] syzkaller0: entered allmulticast mode [ 110.853080][ T6366] tipc: Enabled bearer , priority 0 [ 110.926891][ T6369] hub 8-0:1.0: USB hub found [ 110.931709][ T6369] hub 8-0:1.0: 8 ports detected [ 110.974124][ T6365] tipc: Resetting bearer [ 110.983667][ T6365] tipc: Disabling bearer [ 111.212134][ T6380] loop2: detected capacity change from 0 to 128 [ 111.223190][ T6380] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 111.350124][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 111.361326][ T6386] ipvlan2: entered allmulticast mode [ 111.420512][ T6388] loop1: detected capacity change from 0 to 128 [ 112.215667][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.223029][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.342662][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.370307][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.464305][ T357] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.480874][ T357] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.521698][ T357] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.538011][ T357] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.036677][ T28] audit: type=1400 audit(1780019588.659:1066): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.106366][ T6490] syzkaller0: entered promiscuous mode [ 113.113490][ T6490] syzkaller0: entered allmulticast mode [ 113.272178][ T6466] Set syz1 is full, maxelem 65536 reached [ 113.311916][ T6494] loop2: detected capacity change from 0 to 1024 [ 113.330699][ T6494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.354745][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.085669][ T6527] loop4: detected capacity change from 0 to 1024 [ 114.095851][ T6527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.116476][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.328848][ T6508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.339815][ T28] audit: type=1400 audit(1780019589.959:1067): avc: denied { create } for pid=6532 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.369901][ T28] audit: type=1400 audit(1780019589.979:1068): avc: denied { create } for pid=6532 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 114.461054][ T6544] syzkaller0: entered promiscuous mode [ 114.467598][ T6544] syzkaller0: entered allmulticast mode [ 114.498650][ T6553] loop3: detected capacity change from 0 to 128 [ 114.522951][ T6553] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.540694][ T6553] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.554995][ T6560] syzkaller0: entered promiscuous mode [ 114.610586][ T6560] syzkaller0: entered allmulticast mode [ 114.640628][ T6563] tipc: Enabled bearer , priority 0 [ 114.691756][ T6558] tipc: Resetting bearer [ 114.708622][ T6558] tipc: Disabling bearer [ 114.837608][ T28] audit: type=1400 audit(1780019590.459:1069): avc: denied { create } for pid=6581 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.875661][ T28] audit: type=1400 audit(1780019590.459:1070): avc: denied { write } for pid=6581 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.880621][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.904515][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.370200][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.417357][ T6604] syzkaller0: entered promiscuous mode [ 115.429278][ T6604] syzkaller0: entered allmulticast mode [ 116.173113][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 116.182215][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 116.362835][ T6653] syzkaller0: entered promiscuous mode [ 116.368344][ T6653] syzkaller0: entered allmulticast mode [ 116.446914][ T6657] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 117.417016][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.425728][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.788665][ T6575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.847407][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 117.927666][ T6685] loop2: detected capacity change from 0 to 1024 [ 117.967566][ T6685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.999142][ T6689] syzkaller0: entered promiscuous mode [ 118.022486][ T6689] syzkaller0: entered allmulticast mode [ 118.031743][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.699928][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1164'. [ 118.743842][ T6724] loop2: detected capacity change from 0 to 1024 [ 118.762986][ T6724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.870879][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.020960][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1178'. [ 119.052359][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1179'. [ 119.083531][ T6760] loop1: detected capacity change from 0 to 1024 [ 119.114493][ T6760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.196558][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.242954][ T6781] syzkaller0: entered promiscuous mode [ 119.258278][ T6781] syzkaller0: entered allmulticast mode [ 119.390931][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 119.476696][ T6812] syzkaller0: entered promiscuous mode [ 119.482459][ T6812] syzkaller0: entered allmulticast mode [ 119.806556][ T6830] syzkaller0: entered promiscuous mode [ 119.812076][ T6830] syzkaller0: entered allmulticast mode [ 119.934325][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 119.985441][ T6838] syzkaller0: entered promiscuous mode [ 119.990935][ T6838] syzkaller0: entered allmulticast mode [ 120.207809][ T6864] syzkaller0: entered promiscuous mode [ 120.229508][ T6864] syzkaller0: entered allmulticast mode [ 120.433170][ T6903] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1239'. [ 120.438582][ T28] audit: type=1400 audit(1780019596.059:1071): avc: denied { map } for pid=6904 comm="syz.5.1240" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.494702][ T6909] loop2: detected capacity change from 0 to 128 [ 120.508440][ T6909] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.520790][ T6909] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.308020][ T6961] tipc: Can't bind to reserved service type 0 [ 121.398838][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.432091][ T6959] vhci_hcd vhci_hcd.2: invalid port number 96 [ 121.438286][ T6959] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 121.479459][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1260'. [ 122.245087][ T6985] loop3: detected capacity change from 0 to 512 [ 122.633255][ T28] audit: type=1400 audit(1780019598.249:1072): avc: denied { ioctl } for pid=6999 comm="syz.3.1273" path="socket:[16038]" dev="sockfs" ino=16038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.243125][ T5849] IPVS: starting estimator thread 0... [ 123.341910][ T7015] IPVS: using max 2400 ests per chain, 120000 per kthread [ 123.437212][ T28] audit: type=1326 audit(1780019599.059:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a0fce59 code=0x7fc00000 [ 123.463083][ T28] audit: type=1326 audit(1780019599.089:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe08a0fce59 code=0x7fc00000 [ 123.488725][ T28] audit: type=1326 audit(1780019599.089:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a0fce59 code=0x7fc00000 [ 123.514570][ T28] audit: type=1326 audit(1780019599.089:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a0fce59 code=0x7fc00000 [ 123.540209][ T28] audit: type=1326 audit(1780019599.089:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a0fce59 code=0x7fc00000 [ 123.583662][ T28] audit: type=1326 audit(1780019599.089:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a0fce59 code=0x7fc00000 [ 123.636706][ T28] audit: type=1326 audit(1780019599.089:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a0fce59 code=0x7fc00000 [ 123.688937][ T28] audit: type=1326 audit(1780019599.089:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a0fce59 code=0x7fc00000 [ 124.669556][ T7072] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 124.678332][ T7072] syzkaller0: entered promiscuous mode [ 124.684224][ T7072] syzkaller0: entered allmulticast mode [ 124.692967][ T7072] tipc: Enabled bearer , priority 0 [ 124.701884][ T7071] tipc: Resetting bearer [ 124.711001][ T7071] tipc: Disabling bearer [ 124.907551][ T7082] loop2: detected capacity change from 0 to 128 [ 124.921400][ T7082] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.933802][ T7082] ext4 filesystem being mounted at /281/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.053600][ T7086] 9pnet_virtio: no channels available for device syz [ 125.795097][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.992967][ T7140] loop1: detected capacity change from 0 to 128 [ 126.014819][ T7140] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.045209][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1334'. [ 126.068680][ T7140] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.142015][ T7148] netlink: 'syz.5.1336': attribute type 8 has an invalid length. [ 126.893421][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.015985][ T7187] hub 8-0:1.0: USB hub found [ 127.020761][ T7187] hub 8-0:1.0: 8 ports detected [ 127.433056][ T7194] 9pnet_virtio: no channels available for device syz [ 127.960864][ T7196] loop5: detected capacity change from 0 to 512 [ 128.082001][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 128.082016][ T28] audit: type=1326 audit(1780019603.709:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 128.877557][ T28] audit: type=1326 audit(1780019603.749:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 128.893927][ T3398] hid_parser_main: 7 callbacks suppressed [ 128.893964][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 128.903833][ T28] audit: type=1326 audit(1780019603.819:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 128.954887][ T28] audit: type=1326 audit(1780019603.819:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 128.965979][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 128.990471][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1374'. [ 129.003993][ T7243] ipvlan2: entered allmulticast mode [ 129.009382][ T7243] syz_tun: entered allmulticast mode [ 129.021117][ T28] audit: type=1326 audit(1780019603.819:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 129.029272][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 129.052937][ T28] audit: type=1326 audit(1780019603.819:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 129.079925][ T28] audit: type=1326 audit(1780019603.819:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 129.106190][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 129.121846][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 129.124391][ T28] audit: type=1326 audit(1780019603.819:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 129.155020][ T28] audit: type=1326 audit(1780019603.819:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 129.163092][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 129.180603][ T28] audit: type=1326 audit(1780019603.819:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd444e0ce59 code=0x7ffc0000 [ 129.206841][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 129.269892][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 129.284099][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 129.296100][ T3398] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 129.309943][ T3398] hid-generic 0006:0008:0008.0003: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 129.339793][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 129.363702][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.372039][ T310] bond0: (slave bond_slave_0): interface is now down [ 129.373846][ T7250] fido_id[7250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.380010][ T310] bond0: (slave bond_slave_1): interface is now down [ 129.447115][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.497674][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.571698][ T310] bond0: (slave bond_slave_0): interface is now down [ 129.578432][ T310] bond0: (slave bond_slave_1): interface is now down [ 129.586060][ T310] bond0: now running without any active interface! [ 129.655321][ T7287] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 129.661945][ T7287] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.670402][ T7287] vhci_hcd vhci_hcd.0: Device attached [ 129.951614][ T3398] usb 12-1: SetAddress Request (2) to port 0 [ 129.957655][ T3398] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 130.051201][ T7292] syzkaller0: entered promiscuous mode [ 130.057038][ T7292] syzkaller0: entered allmulticast mode [ 130.099084][ T7288] vhci_hcd: connection reset by peer [ 130.105026][ T310] vhci_hcd vhci_hcd.5: stop threads [ 130.110338][ T310] vhci_hcd vhci_hcd.5: release socket [ 130.116454][ T310] vhci_hcd vhci_hcd.5: disconnect device [ 130.261653][ T7296] syzkaller0: entered promiscuous mode [ 130.267153][ T7296] syzkaller0: entered allmulticast mode [ 130.368430][ T7302] tmpfs: Unknown parameter 'usrquota' [ 130.504465][ T7313] hub 8-0:1.0: USB hub found [ 130.509155][ T7313] hub 8-0:1.0: 8 ports detected [ 130.597085][ T7323] syzkaller0: entered promiscuous mode [ 130.611598][ T7323] syzkaller0: entered allmulticast mode [ 130.678624][ T7328] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 130.791222][ T7315] ±ÿÿÿÿa–ïD: renamed from lo [ 130.816730][ T7337] syzkaller0: entered promiscuous mode [ 130.837345][ T7337] syzkaller0: entered allmulticast mode [ 131.067393][ T7355] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 131.078768][ T7355] tipc: Enabled bearer , priority 0 [ 131.090247][ T7354] tipc: Disabling bearer [ 131.463454][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 133.030217][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 133.067299][ T7394] ipvlan2: entered allmulticast mode [ 133.507639][ T7422] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 133.519573][ T7422] syzkaller0: entered promiscuous mode [ 133.529850][ T7422] syzkaller0: entered allmulticast mode [ 133.755254][ T5833] hid-generic 0006:0008:0008.0004: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 133.795404][ T7441] fido_id[7441]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.844321][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 133.863531][ T7444] ipvlan2: entered allmulticast mode [ 133.997094][ T7451] syzkaller0: entered promiscuous mode [ 134.002862][ T7451] syzkaller0: entered allmulticast mode [ 134.302377][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 134.423848][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1462'. [ 134.437273][ T7478] ipvlan2: entered allmulticast mode [ 134.640387][ T7483] syzkaller0: entered promiscuous mode [ 134.646029][ T7483] syzkaller0: entered allmulticast mode [ 134.673098][ T7481] syzkaller0: entered promiscuous mode [ 134.678714][ T7481] syzkaller0: entered allmulticast mode [ 134.948065][ T5847] hid_parser_main: 24 callbacks suppressed [ 134.948084][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 134.954191][ T7500] netlink: 'syz.4.1465': attribute type 16 has an invalid length. [ 134.961692][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 134.976927][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 134.985175][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 134.993764][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 134.999914][ T7500] netlink: 'syz.4.1465': attribute type 17 has an invalid length. [ 135.001765][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 135.009080][ T3398] usb 12-1: device descriptor read/8, error -110 [ 135.040727][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 135.064530][ T7506] syzkaller0: entered promiscuous mode [ 135.070059][ T7506] syzkaller0: entered allmulticast mode [ 135.077193][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 135.099240][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 135.106716][ T5847] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 135.116787][ T5847] hid-generic 0006:0008:0008.0005: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 135.141650][ T3398] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 135.174110][ T3398] usb 12-1: enqueue for inactive port 0 [ 135.189917][ T7511] fido_id[7511]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.205950][ T3398] usb 12-1: enqueue for inactive port 0 [ 135.221841][ T3398] usb 12-1: enqueue for inactive port 0 [ 135.245169][ T7516] syzkaller0: entered promiscuous mode [ 135.250747][ T7516] syzkaller0: entered allmulticast mode [ 135.466153][ T7527] loop5: detected capacity change from 0 to 128 [ 135.479167][ T7527] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.492414][ T7527] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.063933][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 136.063955][ T28] audit: type=1400 audit(1780019611.689:1206): avc: denied { create } for pid=7535 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.120902][ T7537] tipc: Started in network mode [ 136.128996][ T7537] tipc: Node identity 3ea848eacf4f, cluster identity 4711 [ 136.158128][ T7537] tipc: Enabled bearer , priority 0 [ 136.189309][ T7537] syzkaller0: entered promiscuous mode [ 136.195154][ T7537] syzkaller0: entered allmulticast mode [ 136.205556][ T7537] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1483'. [ 136.227256][ T7537] tipc: Resetting bearer [ 136.256853][ T7535] tipc: Resetting bearer [ 136.268398][ T7535] tipc: Disabling bearer [ 136.284163][ T7542] syzkaller0: entered promiscuous mode [ 136.293467][ T7542] syzkaller0: entered allmulticast mode [ 136.344387][ T4667] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.454190][ T7559] hub 8-0:1.0: USB hub found [ 136.458965][ T7559] hub 8-0:1.0: 8 ports detected [ 136.562051][ T3398] usb usb12-port1: attempt power cycle [ 137.389745][ T7569] syzkaller0: entered promiscuous mode [ 137.427282][ T7569] syzkaller0: entered allmulticast mode [ 137.530042][ T7573] syzkaller0: entered promiscuous mode [ 137.535847][ T7573] syzkaller0: entered allmulticast mode [ 137.584532][ T7583] syzkaller0: entered promiscuous mode [ 137.590246][ T7583] syzkaller0: entered allmulticast mode [ 137.636453][ T7581] tipc: Enabling of bearer rejected, failed to enable media [ 137.648896][ T7591] tipc: Enabled bearer , priority 0 [ 137.656794][ T7591] syzkaller0: entered promiscuous mode [ 137.662587][ T7591] syzkaller0: entered allmulticast mode [ 137.669614][ T7591] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1499'. [ 137.711201][ T7591] tipc: Resetting bearer [ 137.735329][ T7590] tipc: Resetting bearer [ 137.742085][ T7603] 9p: Bad value for 'wfdno' [ 137.751339][ T7590] tipc: Disabling bearer [ 137.795450][ T28] audit: type=1400 audit(1780019613.419:1207): avc: denied { ioctl } for pid=7607 comm="syz.3.1507" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.824015][ T7606] hub 8-0:1.0: USB hub found [ 137.828784][ T7606] hub 8-0:1.0: 8 ports detected [ 137.844080][ T7610] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 138.621312][ T7627] syzkaller0: entered promiscuous mode [ 138.628011][ T7627] syzkaller0: entered allmulticast mode [ 138.641984][ T3398] usb usb12-port1: unable to enumerate USB device [ 138.673364][ T28] audit: type=1400 audit(1780019614.299:1208): avc: denied { create } for pid=7630 comm="syz.4.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.698204][ T7633] 9p: Bad value for 'rfdno' [ 138.874431][ T7653] hub 8-0:1.0: USB hub found [ 138.879139][ T7653] hub 8-0:1.0: 8 ports detected [ 138.916274][ T7658] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 139.636612][ T7662] 9p: Bad value for 'rfdno' [ 139.674015][ T7667] veth0_vlan: entered allmulticast mode [ 139.683662][ T7667] ªªªªªª: renamed from vlan0 [ 139.780863][ T7679] syzkaller0: entered promiscuous mode [ 139.787020][ T7679] syzkaller0: entered allmulticast mode [ 139.946903][ T3398] IPVS: starting estimator thread 0... [ 140.043557][ T7674] Set syz1 is full, maxelem 65536 reached [ 140.051742][ T7688] IPVS: using max 2352 ests per chain, 117600 per kthread [ 140.074901][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 140.370931][ T7698] syzkaller0: entered promiscuous mode [ 140.376653][ T7698] syzkaller0: entered allmulticast mode [ 140.473525][ T7702] syzkaller0: entered promiscuous mode [ 140.479095][ T7702] syzkaller0: entered allmulticast mode [ 140.524403][ T7704] syz.1.1547 (7704) used obsolete PPPIOCDETACH ioctl [ 140.604945][ T7709] syzkaller0: entered promiscuous mode [ 140.610488][ T7709] syzkaller0: entered allmulticast mode [ 140.640422][ T7711] syzkaller0: entered promiscuous mode [ 140.645977][ T7711] syzkaller0: entered allmulticast mode [ 140.689859][ T7713] syzkaller0: entered promiscuous mode [ 140.695529][ T7713] syzkaller0: entered allmulticast mode [ 140.814646][ T7719] 9p: Bad value for 'rfdno' [ 140.870290][ T7722] syzkaller0: entered promiscuous mode [ 140.884749][ T7722] syzkaller0: entered allmulticast mode [ 141.023763][ T7734] syzkaller0: entered promiscuous mode [ 141.035051][ T7734] syzkaller0: entered allmulticast mode [ 141.177225][ T7752] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 141.276494][ T7760] loop5: detected capacity change from 0 to 128 [ 141.286747][ T7760] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.300043][ T7760] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.341203][ T7764] syzkaller0: entered promiscuous mode [ 141.353364][ T7764] syzkaller0: entered allmulticast mode [ 141.430347][ T7770] syzkaller0: entered promiscuous mode [ 141.435910][ T7770] syzkaller0: entered allmulticast mode [ 141.838645][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 142.062693][ T7789] syzkaller0: entered promiscuous mode [ 142.068595][ T7789] syzkaller0: entered allmulticast mode [ 142.176409][ T4667] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.228305][ T7773] Set syz1 is full, maxelem 65536 reached [ 142.252039][ T7805] syzkaller0: entered promiscuous mode [ 142.257567][ T7805] syzkaller0: entered allmulticast mode [ 142.314212][ T7819] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 142.353548][ T7823] syzkaller0: entered promiscuous mode [ 142.359057][ T7823] syzkaller0: entered allmulticast mode [ 142.564089][ T7839] syzkaller0: entered promiscuous mode [ 142.569648][ T7839] syzkaller0: entered allmulticast mode [ 143.137957][ T7845] tipc: Enabling of bearer rejected, failed to enable media [ 143.205447][ T7855] syzkaller0: entered promiscuous mode [ 143.210972][ T7855] syzkaller0: entered allmulticast mode [ 143.309595][ T7867] 9p: Bad value for 'wfdno' [ 143.462216][ T7885] tipc: Enabling of bearer rejected, failed to enable media [ 143.622203][ T7908] syzkaller0: entered promiscuous mode [ 143.627833][ T7908] syzkaller0: entered allmulticast mode [ 144.488456][ T7937] syzkaller0: entered promiscuous mode [ 144.513360][ T7937] syzkaller0: entered allmulticast mode [ 144.646699][ T28] audit: type=1400 audit(1780019620.269:1209): avc: denied { read } for pid=7943 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.385072][ T7976] syzkaller0: entered promiscuous mode [ 145.390595][ T7976] syzkaller0: entered allmulticast mode [ 145.442470][ T7978] syzkaller0: entered promiscuous mode [ 145.448110][ T7978] syzkaller0: entered allmulticast mode [ 145.532173][ T7980] syzkaller0: entered promiscuous mode [ 145.537708][ T7980] syzkaller0: entered allmulticast mode [ 145.630443][ T7987] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 145.648067][ T7991] 9p: Bad value for 'wfdno' [ 145.805856][ T8004] syzkaller0: entered promiscuous mode [ 145.811443][ T8004] syzkaller0: entered allmulticast mode [ 145.938395][ T8011] syzkaller0: entered promiscuous mode [ 145.944046][ T8011] syzkaller0: entered allmulticast mode [ 146.038852][ T8020] tipc: Enabled bearer , priority 0 [ 146.051362][ T8020] syzkaller0: entered promiscuous mode [ 146.061723][ T8020] syzkaller0: entered allmulticast mode [ 146.073353][ T8020] tipc: Resetting bearer [ 146.084550][ T8019] tipc: Resetting bearer [ 146.106459][ T8019] tipc: Disabling bearer [ 146.120013][ T8027] syzkaller0: entered promiscuous mode [ 146.127013][ T8027] syzkaller0: entered allmulticast mode [ 146.277383][ T8034] syzkaller0: entered promiscuous mode [ 146.282960][ T8034] syzkaller0: entered allmulticast mode [ 146.920234][ T8052] syzkaller0: entered promiscuous mode [ 146.926850][ T8052] syzkaller0: entered allmulticast mode [ 147.071732][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1689'. [ 147.125146][ T8076] tipc: Enabled bearer , priority 0 [ 147.133802][ T8076] syzkaller0: entered promiscuous mode [ 147.139324][ T8076] syzkaller0: entered allmulticast mode [ 147.146801][ T8076] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1692'. [ 147.156772][ T8075] tipc: Resetting bearer [ 147.166030][ T8075] tipc: Disabling bearer [ 147.263347][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.284484][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.387071][ T8109] syzkaller0: entered promiscuous mode [ 147.392683][ T8109] syzkaller0: entered allmulticast mode [ 147.557407][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.570901][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.833011][ T8124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.841954][ T8124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.858471][ T8126] syzkaller0: entered promiscuous mode [ 147.864637][ T8126] syzkaller0: entered allmulticast mode [ 147.953757][ T8128] tmpfs: Unknown parameter 'quota' [ 147.969971][ T28] audit: type=1400 audit(1780019623.579:1210): avc: denied { mounton } for pid=8127 comm="syz.4.1716" path="/350/file0" dev="tmpfs" ino=1821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.115575][ T8136] syzkaller0: entered promiscuous mode [ 148.142997][ T8136] syzkaller0: entered allmulticast mode [ 148.199130][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 148.267755][ T8151] tipc: Enabled bearer , priority 0 [ 148.289579][ T8151] syzkaller0: entered promiscuous mode [ 148.302995][ T8151] syzkaller0: entered allmulticast mode [ 148.326805][ T8151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1727'. [ 148.339069][ T8150] tipc: Resetting bearer [ 148.360622][ T8150] tipc: Disabling bearer [ 148.476145][ T8166] syzkaller0: entered promiscuous mode [ 148.481913][ T8166] syzkaller0: entered allmulticast mode [ 148.511142][ T28] audit: type=1400 audit(1780019624.129:1211): avc: denied { bind } for pid=8174 comm="syz.4.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.540147][ T8177] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 148.574056][ T8173] syzkaller0: entered promiscuous mode [ 148.579631][ T8173] syzkaller0: entered allmulticast mode [ 148.703992][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1743'. [ 148.782573][ T28] audit: type=1400 audit(1780019624.409:1212): avc: denied { create } for pid=8192 comm="syz.3.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.804832][ T28] audit: type=1400 audit(1780019624.429:1213): avc: denied { bind } for pid=8192 comm="syz.3.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.838668][ T28] audit: type=1400 audit(1780019624.449:1214): avc: denied { listen } for pid=8192 comm="syz.3.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.196731][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.196970][ T28] audit: type=1400 audit(1780019624.819:1215): avc: denied { mount } for pid=8199 comm="syz.2.1750" name="/" dev="hugetlbfs" ino=20183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 149.206429][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.483901][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.492483][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.709415][ T8218] syzkaller0: entered promiscuous mode [ 149.715150][ T8218] syzkaller0: entered allmulticast mode [ 149.740419][ T8221] 9p: Bad value for 'rfdno' [ 149.901295][ T8237] tipc: Enabled bearer , priority 0 [ 149.908786][ T8237] syzkaller0: entered promiscuous mode [ 149.914624][ T8237] syzkaller0: entered allmulticast mode [ 149.921969][ T8237] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1768'. [ 149.934259][ T8236] tipc: Resetting bearer [ 149.942074][ T8236] tipc: Disabling bearer [ 149.951393][ T8239] syzkaller0: entered promiscuous mode [ 149.957003][ T8239] syzkaller0: entered allmulticast mode [ 150.031108][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 150.058356][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.067044][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.094902][ T8249] hub 8-0:1.0: USB hub found [ 150.099661][ T8249] hub 8-0:1.0: 8 ports detected [ 150.166624][ T5844] hid_parser_main: 7 callbacks suppressed [ 150.166712][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.179948][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.187387][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.194839][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.202286][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.209706][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.217268][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.224836][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.233709][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.241089][ T5844] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 150.249118][ T5844] hid-generic 0006:0008:0008.0006: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 150.270098][ T8257] fido_id[8257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.338810][ T8267] syzkaller0: entered promiscuous mode [ 150.346063][ T8267] syzkaller0: entered allmulticast mode [ 150.385437][ T28] audit: type=1400 audit(1780019626.009:1216): avc: denied { mounton } for pid=8272 comm="syz.5.1783" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 150.491493][ T5844] hid-generic 0006:0008:0008.0007: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 150.492471][ T8284] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1788'. [ 150.539313][ T8285] fido_id[8285]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.612361][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1791'. [ 150.628038][ T8297] syzkaller0: entered promiscuous mode [ 150.633644][ T8297] syzkaller0: entered allmulticast mode [ 150.740258][ T3398] hid-generic 0006:0004:0009.0008: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 150.760521][ T8304] fido_id[8304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.914809][ T8312] syzkaller0: entered promiscuous mode [ 150.920395][ T8312] syzkaller0: entered allmulticast mode [ 150.951959][ T8313] 9p: Bad value for 'rfdno' [ 151.082712][ T8323] syzkaller0: entered promiscuous mode [ 151.088418][ T8323] syzkaller0: entered allmulticast mode [ 151.207593][ T8333] syzkaller0: entered promiscuous mode [ 151.213276][ T8333] syzkaller0: entered allmulticast mode [ 151.247686][ T8338] loop5: detected capacity change from 0 to 128 [ 151.258724][ T8338] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.271120][ T8338] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.434395][ T8347] syzkaller0: entered promiscuous mode [ 151.490001][ T8347] syzkaller0: entered allmulticast mode [ 152.164315][ T4667] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.260652][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.294851][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.365486][ T8374] syzkaller0: entered promiscuous mode [ 152.371052][ T8374] syzkaller0: entered allmulticast mode [ 152.473615][ T8381] tipc: Enabled bearer , priority 0 [ 152.491248][ T8381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1824'. [ 152.508170][ T8381] tipc: Resetting bearer [ 152.517545][ T8380] tipc: Disabling bearer [ 152.620059][ T8387] syzkaller0: entered promiscuous mode [ 152.632747][ T8387] syzkaller0: entered allmulticast mode [ 152.730166][ T8390] hub 8-0:1.0: USB hub found [ 152.741221][ T8390] hub 8-0:1.0: 8 ports detected [ 152.746657][ T28] audit: type=1400 audit(1780019628.369:1217): avc: denied { getopt } for pid=8391 comm="syz.3.1829" laddr=::ffff:127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.790804][ T28] audit: type=1400 audit(1780019628.409:1218): avc: denied { getopt } for pid=8393 comm="syz.3.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.903001][ T8397] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1832'. [ 152.956031][ T8402] syzkaller0: entered promiscuous mode [ 152.968212][ T8402] syzkaller0: entered allmulticast mode [ 153.286287][ T8422] syzkaller0: entered promiscuous mode [ 153.297194][ T8422] syzkaller0: entered allmulticast mode [ 153.357908][ T28] audit: type=1400 audit(1780019628.979:1219): avc: denied { execute } for pid=8432 comm="syz.4.1848" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.399870][ T8436] tipc: Enabled bearer , priority 0 [ 153.402679][ T28] audit: type=1400 audit(1780019628.979:1220): avc: denied { execute_no_trans } for pid=8432 comm="syz.4.1848" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.445019][ T8436] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1849'. [ 153.465116][ T8436] tipc: Resetting bearer [ 153.503155][ T8435] tipc: Disabling bearer [ 153.535626][ T8442] syzkaller0: entered promiscuous mode [ 153.541233][ T8442] syzkaller0: entered allmulticast mode [ 154.362080][ T8485] tmpfs: Unknown parameter 'usrquota' [ 154.476519][ T8491] syzkaller0: entered promiscuous mode [ 154.482228][ T8491] syzkaller0: entered allmulticast mode [ 154.969618][ T8514] syzkaller0: entered promiscuous mode [ 154.975323][ T8514] syzkaller0: entered allmulticast mode [ 155.452598][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.463850][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.555720][ T8539] syzkaller0: entered promiscuous mode [ 155.561264][ T8539] syzkaller0: entered allmulticast mode [ 156.124524][ T8563] hub 8-0:1.0: USB hub found [ 156.129303][ T8563] hub 8-0:1.0: 8 ports detected [ 156.804747][ T8572] loop4: detected capacity change from 0 to 128 [ 156.829492][ T8572] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.842261][ T8572] ext4 filesystem being mounted at /387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.791717][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.850368][ T8599] syzkaller0: entered promiscuous mode [ 157.856263][ T8599] syzkaller0: entered allmulticast mode [ 157.862925][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.882963][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.909529][ T8599] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1911'. [ 158.038247][ T8611] syzkaller0: entered promiscuous mode [ 158.043842][ T8611] syzkaller0: entered allmulticast mode [ 158.143888][ T8615] syzkaller0: entered promiscuous mode [ 158.149395][ T8615] syzkaller0: entered allmulticast mode [ 158.546082][ T8636] syzkaller0: entered promiscuous mode [ 158.551895][ T8636] syzkaller0: entered allmulticast mode [ 158.559110][ T8636] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1926'. [ 158.609477][ T8642] syzkaller0: entered promiscuous mode [ 158.615200][ T8642] syzkaller0: entered allmulticast mode [ 158.712622][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.721159][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.922943][ T8666] syzkaller0: entered promiscuous mode [ 158.928417][ T8666] syzkaller0: entered allmulticast mode [ 158.980317][ T8672] syzkaller0: entered promiscuous mode [ 158.985922][ T8672] syzkaller0: entered allmulticast mode [ 158.993335][ T8672] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1939'. [ 159.167322][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.177292][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.756253][ T8701] syzkaller0: entered promiscuous mode [ 159.761892][ T8701] syzkaller0: entered allmulticast mode [ 160.000448][ T8698] Set syz1 is full, maxelem 65536 reached [ 160.216532][ T8735] syzkaller0: entered promiscuous mode [ 160.222050][ T8735] syzkaller0: entered allmulticast mode [ 160.370149][ T8756] syzkaller0: entered promiscuous mode [ 160.375724][ T8756] syzkaller0: entered allmulticast mode [ 160.410704][ T28] audit: type=1400 audit(1780019636.029:1221): avc: denied { write } for pid=8760 comm="syz.2.1973" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 160.410760][ T8761] random: crng reseeded on system resumption [ 160.435594][ T28] audit: type=1400 audit(1780019636.029:1222): avc: denied { open } for pid=8760 comm="syz.2.1973" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 160.748456][ T8780] syzkaller0: entered promiscuous mode [ 160.754111][ T8780] syzkaller0: entered allmulticast mode [ 161.379447][ T8816] syzkaller0: entered promiscuous mode [ 161.385231][ T8816] syzkaller0: entered allmulticast mode [ 161.402300][ T8818] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1998'. [ 161.564391][ T8821] hub 8-0:1.0: USB hub found [ 161.569193][ T8821] hub 8-0:1.0: 8 ports detected [ 161.864938][ T8853] dvmrp8: entered allmulticast mode [ 161.931662][ T28] audit: type=1400 audit(1780019637.559:1223): avc: denied { getopt } for pid=8868 comm="syz.1.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.965865][ T28] audit: type=1400 audit(1780019637.589:1224): avc: denied { write } for pid=8862 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.978659][ T8873] syzkaller0: entered promiscuous mode [ 161.991082][ T8873] syzkaller0: entered allmulticast mode [ 162.144408][ T28] audit: type=1400 audit(1780019637.769:1225): avc: denied { write } for pid=8895 comm="syz.1.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.174729][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.183450][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.253449][ T5844] kernel read not supported for file /vcs (pid: 5844 comm: kworker/0:14) [ 162.346259][ T28] audit: type=1400 audit(1780019637.969:1226): avc: denied { listen } for pid=8904 comm="syz.3.2033" laddr=172.20.20.38 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.423946][ T8913] syzkaller0: entered promiscuous mode [ 162.429522][ T8913] syzkaller0: entered allmulticast mode [ 162.437316][ T8913] tipc: Enabled bearer , priority 0 [ 162.444438][ T8912] tipc: Resetting bearer [ 162.452715][ T8912] tipc: Disabling bearer [ 162.739145][ T8925] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 162.790421][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 162.839020][ T8937] tipc: Enabled bearer , priority 0 [ 162.849964][ T8937] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2047'. [ 162.862891][ T8937] tipc: Resetting bearer [ 162.874138][ T8936] tipc: Disabling bearer [ 162.875293][ T28] audit: type=1400 audit(1780019638.499:1227): avc: denied { mount } for pid=8938 comm="syz.4.2048" name="/" dev="ramfs" ino=22292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 162.914950][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.923571][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.995223][ T8948] capability: warning: `syz.5.2052' uses 32-bit capabilities (legacy support in use) [ 163.018570][ T28] audit: type=1400 audit(1780019638.639:1228): avc: denied { bind } for pid=8949 comm="syz.5.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.072184][ T28] audit: type=1400 audit(1780019638.639:1229): avc: denied { write } for pid=8949 comm="syz.5.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.154746][ T8967] tipc: Enabled bearer , priority 0 [ 163.162255][ T8967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2061'. [ 163.173090][ T8967] tipc: Resetting bearer [ 163.181162][ T8966] tipc: Disabling bearer [ 163.210774][ T8969] syzkaller0: entered promiscuous mode [ 163.216289][ T8969] syzkaller0: entered allmulticast mode [ 163.235254][ T8971] random: crng reseeded on system resumption [ 163.246390][ T28] audit: type=1400 audit(1780019638.869:1230): avc: denied { ioctl } for pid=8970 comm="syz.2.2063" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.252802][ T8971] Restarting kernel threads ... [ 163.276571][ T8971] Done restarting kernel threads. [ 163.377755][ T8981] syzkaller0: entered promiscuous mode [ 163.383463][ T8981] syzkaller0: entered allmulticast mode [ 163.407365][ T5844] kernel read not supported for file /vcs (pid: 5844 comm: kworker/0:14) [ 163.629655][ T9006] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2079'. [ 163.645661][ T9006] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2079'. [ 163.676082][ T9014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.685489][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.891968][ T35] hid_parser_main: 41 callbacks suppressed [ 163.892003][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.905645][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.913305][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.920727][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.928405][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.935854][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.943459][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.951084][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.951905][ T9039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2092'. [ 163.959008][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.970920][ T9039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2092'. [ 163.975003][ T35] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 163.991983][ T35] hid-generic 0006:0008:0008.0009: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 164.026261][ T9042] fido_id[9042]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.053452][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.062497][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.165874][ T2981] ================================================================== [ 164.173965][ T2981] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 164.180546][ T2981] [ 164.182853][ T2981] read-write to 0xffff88811b158a80 of 4 bytes by task 3289 on cpu 1: [ 164.190907][ T2981] dont_mount+0x2a/0x40 [ 164.195060][ T2981] vfs_unlink+0x206/0x490 [ 164.199395][ T2981] filename_unlinkat+0x1e2/0x410 [ 164.204340][ T2981] __se_sys_unlink+0x2b/0xe0 [ 164.208934][ T2981] __x64_sys_unlink+0x1f/0x30 [ 164.213614][ T2981] x64_sys_call+0x2eb6/0x3020 [ 164.218287][ T2981] do_syscall_64+0x12c/0x3b0 [ 164.222884][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.228759][ T2981] [ 164.231147][ T2981] read to 0xffff88811b158a80 of 4 bytes by task 2981 on cpu 0: [ 164.238674][ T2981] lookup_fast+0xf0/0x320 [ 164.243085][ T2981] path_lookupat+0x15c/0x500 [ 164.247661][ T2981] filename_lookup+0x190/0x390 [ 164.252409][ T2981] do_readlinkat+0x74/0x2f0 [ 164.256900][ T2981] __x64_sys_readlink+0x47/0x60 [ 164.261769][ T2981] x64_sys_call+0x2b51/0x3020 [ 164.266428][ T2981] do_syscall_64+0x12c/0x3b0 [ 164.271004][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.276890][ T2981] [ 164.279194][ T2981] value changed: 0x00300080 -> 0x00004080 [ 164.284914][ T2981] [ 164.287219][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 164.293451][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 164.302285][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.312338][ T2981] ==================================================================