last executing test programs: 24.989972692s ago: executing program 4 (id=1292): ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) 24.969267855s ago: executing program 4 (id=1294): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 24.930028249s ago: executing program 4 (id=1295): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xd37) 24.910593871s ago: executing program 4 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES64=0x0], 0x2a, 0x354, &(0x7f00000002c0)="$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") rmdir(&(0x7f0000000040)='./control\x00') 24.652633237s ago: executing program 4 (id=1303): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) close(r0) 24.472144544s ago: executing program 4 (id=1309): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) setreuid(0x0, 0xee01) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 24.471999825s ago: executing program 32 (id=1309): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) setreuid(0x0, 0xee01) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 2.810173448s ago: executing program 1 (id=1726): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES64], 0x118) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 2.551122144s ago: executing program 1 (id=1729): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000700), 0x1, 0x0) eventfd(0xcbb7) 2.519117587s ago: executing program 1 (id=1733): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000380)=0x5) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) shutdown(r0, 0x1) 1.647098504s ago: executing program 1 (id=1771): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) 1.59895065s ago: executing program 1 (id=1772): r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.512947398s ago: executing program 1 (id=1778): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090267fe010100"], 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.466258053s ago: executing program 3 (id=1780): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$nl_audit(0x10, 0x3, 0x9) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) 1.244801775s ago: executing program 3 (id=1782): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setxattr$incfs_size(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) 1.203793199s ago: executing program 3 (id=1783): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)) 1.19028047s ago: executing program 3 (id=1784): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) 1.156876844s ago: executing program 3 (id=1785): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pselect6(0x40, &(0x7f0000000300)={0x0, 0x6, 0x7fff, 0x3, 0x7, 0x4, 0x7, 0xc}, 0x0, &(0x7f0000000380)={0x8, 0x0, 0xd, 0xbc, 0x5, 0x5, 0x9, 0x2}, 0x0, 0x0) 476.626972ms ago: executing program 2 (id=1810): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 452.134035ms ago: executing program 2 (id=1811): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 433.898557ms ago: executing program 2 (id=1813): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) 405.842779ms ago: executing program 2 (id=1814): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 330.289817ms ago: executing program 2 (id=1816): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xe, 0x0, 0x0) 326.008017ms ago: executing program 2 (id=1817): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0)="e9e09d0e1669a2d00a702fd914efdeca4cf12af3a366bff2a6e6", 0x1a, 0x80, 0x0, 0x0) 309.550209ms ago: executing program 3 (id=1819): creat(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r1 = gettid() ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xaf4, 0x0) 258.654584ms ago: executing program 0 (id=1822): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') 206.798099ms ago: executing program 5 (id=1825): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000000040)=0x6) 198.32292ms ago: executing program 0 (id=1826): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}]}) 162.362144ms ago: executing program 5 (id=1827): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) write(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 161.202844ms ago: executing program 0 (id=1828): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0xc0, r4, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xa4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x20}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 150.007305ms ago: executing program 5 (id=1829): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x2, 0xe, 0x5, 0x7fff0000}]}) 142.524476ms ago: executing program 0 (id=1830): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x101000, 0x1, 0x2004c8, 0x8000000, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x1, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 120.400188ms ago: executing program 5 (id=1831): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 93.512241ms ago: executing program 0 (id=1832): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x14, 0x0, 0x239, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 65.044724ms ago: executing program 5 (id=1833): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x874fd42a7836ef6d, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 56.601684ms ago: executing program 0 (id=1834): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x2004481, &(0x7f0000000100)=ANY=[], 0xfd, 0x552e, &(0x7f0000005b40)="$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") 0s ago: executing program 5 (id=1835): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, 0x0, 0x200002e6) read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. syzkaller login: [ 18.166463][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 18.166474][ T24] audit: type=1400 audit(1763105156.050:64): avc: denied { mounton } for pid=253 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.167848][ T253] cgroup: Unknown subsys name 'net' [ 18.169314][ T24] audit: type=1400 audit(1763105156.050:65): avc: denied { mount } for pid=253 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.185411][ T24] audit: type=1400 audit(1763105156.060:66): avc: denied { unmount } for pid=253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.185626][ T253] cgroup: Unknown subsys name 'devices' [ 18.360227][ T253] cgroup: Unknown subsys name 'hugetlb' [ 18.366219][ T253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 18.507881][ T24] audit: type=1400 audit(1763105156.390:67): avc: denied { setattr } for pid=253 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.524174][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.531698][ T24] audit: type=1400 audit(1763105156.390:68): avc: denied { mounton } for pid=253 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.564589][ T24] audit: type=1400 audit(1763105156.390:69): avc: denied { mount } for pid=253 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.564599][ T253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.596550][ T24] audit: type=1400 audit(1763105156.430:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.621986][ T24] audit: type=1400 audit(1763105156.430:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.647569][ T24] audit: type=1400 audit(1763105156.440:72): avc: denied { read } for pid=253 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.673576][ T24] audit: type=1400 audit(1763105156.440:73): avc: denied { open } for pid=253 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.328863][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.335942][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.343570][ T275] device bridge_slave_0 entered promiscuous mode [ 19.351395][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.358480][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.366700][ T275] device bridge_slave_1 entered promiscuous mode [ 19.422808][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.429888][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.437449][ T277] device bridge_slave_0 entered promiscuous mode [ 19.444146][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.451211][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.458715][ T278] device bridge_slave_0 entered promiscuous mode [ 19.467626][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.474875][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.482290][ T278] device bridge_slave_1 entered promiscuous mode [ 19.492552][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.499726][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.507084][ T276] device bridge_slave_0 entered promiscuous mode [ 19.514043][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.521219][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.529069][ T277] device bridge_slave_1 entered promiscuous mode [ 19.548373][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.555429][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.563124][ T276] device bridge_slave_1 entered promiscuous mode [ 19.597829][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.605317][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.612712][ T279] device bridge_slave_0 entered promiscuous mode [ 19.620873][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.628016][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.635568][ T279] device bridge_slave_1 entered promiscuous mode [ 19.761790][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.768949][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.776228][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.783269][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.798257][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.805454][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.812797][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.820027][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.849315][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.856514][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.865729][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.873019][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.888812][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.895877][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.903311][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.910986][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.937019][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.945181][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.952680][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.960091][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.967267][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.974701][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.982108][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.989329][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.996454][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.006068][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.013551][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.034384][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.042368][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.050846][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.057875][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.065569][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.074394][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.081464][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.088851][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.096220][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.104432][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.111468][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.118977][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.127093][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.134420][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.153269][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.161496][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.168542][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.175927][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.184970][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.192062][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.199422][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.207687][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.216917][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.225414][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.232486][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.240196][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.258840][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.266738][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.275293][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.283935][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.290997][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.298782][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.307478][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.315560][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.323895][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.331254][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.339651][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.347829][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.354994][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.380917][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.389447][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.397970][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.406939][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.416320][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.424418][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.439489][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.448914][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.468998][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.477510][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.485765][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.494700][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.503243][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.511825][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.524873][ T277] device veth0_vlan entered promiscuous mode [ 20.534805][ T275] device veth0_vlan entered promiscuous mode [ 20.541563][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.549843][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.557849][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.566846][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.575255][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.583797][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.592383][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.600493][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.610887][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.618770][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.626239][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.634196][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.646353][ T279] device veth0_vlan entered promiscuous mode [ 20.657187][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.665611][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.674592][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.683081][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.691835][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.699499][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.710208][ T277] device veth1_macvtap entered promiscuous mode [ 20.719789][ T276] device veth0_vlan entered promiscuous mode [ 20.727848][ T279] device veth1_macvtap entered promiscuous mode [ 20.737887][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.746854][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.754961][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.763296][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.771370][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.779959][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.788011][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.796777][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.804334][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.812084][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.819906][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.828360][ T278] device veth0_vlan entered promiscuous mode [ 20.845045][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.853731][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.863342][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.872644][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.881417][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.889707][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.897936][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.906324][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.915066][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.923538][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.934712][ T275] device veth1_macvtap entered promiscuous mode [ 20.945324][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.954630][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.963044][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.978002][ T276] device veth1_macvtap entered promiscuous mode [ 20.987811][ T278] device veth1_macvtap entered promiscuous mode [ 20.995534][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.003464][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.012014][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.020572][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.028222][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.037368][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.045934][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.054468][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.073749][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 21.085694][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.096767][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.106533][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.121045][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.129561][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.138025][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.146449][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.162263][ T299] netlink: 'syz.4.5': attribute type 15 has an invalid length. [ 21.170481][ T299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 21.182372][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.197836][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.279680][ T313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 21.326005][ T313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=313 comm=syz.0.1 [ 21.620746][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 21.630973][ T326] device bridge_slave_1 left promiscuous mode [ 21.648456][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.661061][ T326] device bridge_slave_0 left promiscuous mode [ 21.678516][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.811699][ T304] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 22.014611][ T366] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 22.027402][ T366] overlayfs: missing 'lowerdir' [ 22.175327][ T384] process 'syz.2.38' launched '/dev/fd/4' with NULL argv: empty string added [ 22.268473][ T304] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 22.276365][ T304] usb 5-1: can't read configurations, error -71 [ 22.290107][ T393] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=393 comm=syz.1.42 [ 22.307892][ T393] netlink: 232 bytes leftover after parsing attributes in process `syz.1.42'. [ 22.622490][ T434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 22.698991][ T446] netlink: 44 bytes leftover after parsing attributes in process `syz.1.66'. [ 22.716676][ T446] netlink: 43 bytes leftover after parsing attributes in process `syz.1.66'. [ 22.727325][ T446] netlink: 'syz.1.66': attribute type 5 has an invalid length. [ 22.735535][ T446] netlink: 43 bytes leftover after parsing attributes in process `syz.1.66'. [ 22.748318][ T448] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.774169][ T451] capability: warning: `syz.1.68' uses deprecated v2 capabilities in a way that may be insecure [ 22.898658][ T465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 23.214118][ T24] kauditd_printk_skb: 83 callbacks suppressed [ 23.214131][ T24] audit: type=1326 audit(1763105161.100:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 23.249051][ T24] audit: type=1326 audit(1763105161.100:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 23.272544][ T24] audit: type=1326 audit(1763105161.100:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 23.296526][ T24] audit: type=1326 audit(1763105161.100:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 23.320011][ T24] audit: type=1326 audit(1763105161.100:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=72 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 23.343365][ T24] audit: type=1400 audit(1763105161.140:162): avc: denied { name_bind } for pid=497 comm="syz.2.88" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 23.366811][ T24] audit: type=1400 audit(1763105161.140:163): avc: denied { node_bind } for pid=497 comm="syz.2.88" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.484375][ T24] audit: type=1400 audit(1763105161.370:164): avc: denied { name_bind } for pid=513 comm="syz.0.97" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 23.494406][ T516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 23.514692][ T516] tipc: Invalid UDP bearer configuration [ 23.514714][ T516] tipc: Enabling of bearer rejected, failed to enable media [ 23.693666][ T537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.713077][ T537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 23.740623][ T537] EXT4-fs (loop2): 1 truncate cleaned up [ 23.746405][ T537] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,abort,,errors=continue [ 23.811430][ T24] audit: type=1400 audit(1763105161.700:165): avc: denied { mount } for pid=536 comm="syz.2.107" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.837413][ T24] audit: type=1400 audit(1763105161.730:166): avc: denied { write } for pid=536 comm="syz.2.107" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.030451][ T646] F2FS-fs (loop0): invalid crc value [ 25.046208][ T646] F2FS-fs (loop0): Found nat_bits in checkpoint [ 25.153067][ T646] F2FS-fs (loop0): Start checkpoint disabled! [ 25.188962][ T646] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 25.300522][ T575] F2FS-fs (loop1): Test dummy encryption mode enabled [ 25.334230][ T575] F2FS-fs (loop1): invalid crc value [ 25.360083][ T575] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.427289][ T463] attempt to access beyond end of device [ 25.427289][ T463] loop0: rw=2049, want=40968, limit=40427 [ 25.438720][ T463] attempt to access beyond end of device [ 25.438720][ T463] loop0: rw=2049, want=40992, limit=40427 [ 25.471321][ T575] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 25.925665][ T575] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 25.992262][ T575] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 26.014995][ T575] overlayfs: failed to resolve './file0': -2 [ 26.420909][ T773] __nla_validate_parse: 3 callbacks suppressed [ 26.420918][ T773] netlink: 68 bytes leftover after parsing attributes in process `syz.4.203'. [ 26.450259][ T775] ====================================================== [ 26.450259][ T775] WARNING: the mand mount option is being deprecated and [ 26.450259][ T775] will be removed in v5.15! [ 26.450259][ T775] ====================================================== [ 26.528807][ T775] binder: Unknown parameter 'contextÌð' [ 26.535629][ T781] netlink: 192 bytes leftover after parsing attributes in process `syz.0.206'. [ 26.615268][ T787] SELinux: security_context_str_to_sid(staff_u) failed for (dev binder, type binder) errno=-22 [ 26.674389][ T801] 9pnet: Could not find request transport: 0xffffffffffffffff [ 26.819900][ T820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 27.009698][ T836] syz.3.231 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 27.217375][ T856] netlink: 'syz.1.239': attribute type 12 has an invalid length. [ 27.230253][ T858] binder: BINDER_SET_CONTEXT_MGR already set [ 27.239413][ T858] binder: 857:858 ioctl 4018620d 200000000040 returned -16 [ 27.380793][ T875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 27.404096][ T875] device bridge_slave_1 left promiscuous mode [ 27.410558][ T875] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.418255][ T875] device bridge_slave_0 left promiscuous mode [ 27.424801][ T875] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.549796][ T890] device ipip0 entered promiscuous mode [ 27.758372][ T283] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.800023][ T914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.266'. [ 27.929392][ T15] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.008348][ T283] usb 4-1: Using ep0 maxpacket: 16 [ 28.148448][ T283] usb 4-1: config 7 has an invalid interface number: 163 but max is 0 [ 28.159644][ T283] usb 4-1: config 7 has no interface number 0 [ 28.190985][ T942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 28.210334][ T942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=942 comm=syz.2.279 [ 28.226308][ T24] kauditd_printk_skb: 158 callbacks suppressed [ 28.226321][ T24] audit: type=1400 audit(1763105166.120:325): avc: denied { read write } for pid=945 comm="syz.0.281" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.252945][ T948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 28.256262][ T24] audit: type=1400 audit(1763105166.120:326): avc: denied { open } for pid=945 comm="syz.0.281" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.287950][ T24] audit: type=1400 audit(1763105166.130:327): avc: denied { ioctl } for pid=945 comm="syz.0.281" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.318698][ T283] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ce.47 [ 28.327810][ T283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.329593][ T950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 28.336199][ T283] usb 4-1: Product: syz [ 28.348932][ T283] usb 4-1: Manufacturer: syz [ 28.353553][ T283] usb 4-1: SerialNumber: syz [ 28.358461][ T15] usb 2-1: config 0 has no interfaces? [ 28.376795][ T952] overlayfs: failed to resolve './file1': -2 [ 28.412156][ T956] incfs: Options parsing error. -22 [ 28.417451][ T956] incfs: mount failed -22 [ 28.487278][ T24] audit: type=1400 audit(1763105166.370:328): avc: denied { write } for pid=965 comm="syz.0.292" name="raw6" dev="proc" ino=4026532577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.528514][ T15] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.539018][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.547550][ T15] usb 2-1: Product: syz [ 28.552123][ T15] usb 2-1: Manufacturer: syz [ 28.557122][ T15] usb 2-1: SerialNumber: syz [ 28.569562][ T15] usb 2-1: config 0 descriptor?? [ 28.617223][ T24] audit: type=1400 audit(1763105166.500:329): avc: denied { connect } for pid=981 comm="syz.2.299" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.639614][ T283] usb_ehset_test: probe of 4-1:7.163 failed with error -32 [ 28.653529][ T283] usb 4-1: USB disconnect, device number 2 [ 28.661254][ T24] audit: type=1400 audit(1763105166.520:330): avc: denied { write } for pid=981 comm="syz.2.299" path="socket:[18663]" dev="sockfs" ino=18663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.701082][ T984] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 28.708526][ T984] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.715723][ T984] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 28.723162][ T984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 28.742195][ T984] EXT4-fs (loop0): 1 truncate cleaned up [ 28.747959][ T984] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 28.765490][ T24] audit: type=1400 audit(1763105166.650:331): avc: denied { mount } for pid=983 comm="syz.0.300" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.818680][ T15] usb 2-1: USB disconnect, device number 2 [ 28.838184][ T24] audit: type=1400 audit(1763105166.720:332): avc: denied { read } for pid=996 comm="syz.2.304" path="socket:[18076]" dev="sockfs" ino=18076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.868749][ T24] audit: type=1400 audit(1763105166.760:333): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.008250][ T24] audit: type=1400 audit(1763105166.890:334): avc: denied { mount } for pid=1010 comm="syz.0.310" name="/" dev="configfs" ino=13324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 29.538415][ T296] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.565862][ T1064] binder: 1063:1064 ioctl 400c620e 0 returned -14 [ 29.598708][ T1068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1068 comm=syz.1.337 [ 29.721654][ T1078] netlink: 'syz.4.342': attribute type 12 has an invalid length. [ 29.788353][ T296] usb 1-1: Using ep0 maxpacket: 32 [ 29.908447][ T296] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 29.919978][ T296] usb 1-1: config 1 has no interface number 0 [ 29.926129][ T296] usb 1-1: config 1 interface 3 has no altsetting 0 [ 29.948396][ T480] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.044650][ T1099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 30.053636][ T1099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.352'. [ 30.088432][ T296] usb 1-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 30.097660][ T296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.106906][ T296] usb 1-1: Product: syz [ 30.111399][ T296] usb 1-1: Manufacturer: syz [ 30.123203][ T296] usb 1-1: SerialNumber: syz [ 30.308428][ T480] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.328346][ T480] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 30.409745][ T296] usb 1-1: USB disconnect, device number 2 [ 30.518397][ T480] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 30.538644][ T480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.557728][ T480] usb 2-1: Product: syz [ 30.567703][ T480] usb 2-1: Manufacturer: syz [ 30.577002][ T480] usb 2-1: SerialNumber: syz [ 30.590823][ T480] usb 2-1: config 0 descriptor?? [ 30.841482][ T283] usb 2-1: USB disconnect, device number 3 [ 31.230047][ T1190] F2FS-fs (loop2): invalid crc value [ 31.246584][ T1190] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.286889][ T1190] F2FS-fs (loop2): Start checkpoint disabled! [ 31.301653][ T1190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 31.542975][ T49] attempt to access beyond end of device [ 31.542975][ T49] loop2: rw=2049, want=40968, limit=40427 [ 31.552017][ T1231] erofs: (device loop1): mounted with root inode @ nid 36. [ 31.555344][ T49] attempt to access beyond end of device [ 31.555344][ T49] loop2: rw=2049, want=41000, limit=40427 [ 31.762185][ T1239] __nla_validate_parse: 1 callbacks suppressed [ 31.762195][ T1239] netlink: 100 bytes leftover after parsing attributes in process `syz.4.413'. [ 31.920654][ T1264] overlayfs: missing 'lowerdir' [ 31.964231][ T1229] tipc: Subscription rejected, illegal request [ 32.075364][ T1277] netlink: 'syz.3.429': attribute type 5 has an invalid length. [ 32.084278][ T1277] device ip6erspan0 entered promiscuous mode [ 32.108335][ T480] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.480334][ T480] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.520747][ T1319] syz.3.448 (1319): attempted to duplicate a private mapping with mremap. This is not supported. [ 32.548405][ T480] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 32.558106][ T480] usb 1-1: can't read configurations, error -71 [ 32.660321][ T1341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'. [ 32.684052][ T1343] Zero length message leads to an empty skb [ 32.703369][ T1345] netlink: 'syz.1.461': attribute type 5 has an invalid length. [ 32.712196][ T1345] device ip6erspan0 entered promiscuous mode [ 32.857380][ T1367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 33.021885][ T1396] netlink: 'syz.3.484': attribute type 4 has an invalid length. [ 33.399982][ T1408] netlink: 102 bytes leftover after parsing attributes in process `syz.3.489'. [ 33.421803][ T1410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.490'. [ 33.444277][ T1412] netlink: 140 bytes leftover after parsing attributes in process `syz.3.491'. [ 33.535586][ T1426] overlayfs: missing 'workdir' [ 33.740174][ T1454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 33.815772][ T24] kauditd_printk_skb: 161 callbacks suppressed [ 33.815784][ T24] audit: type=1400 audit(1763105171.700:496): avc: denied { mount } for pid=1467 comm="syz.4.519" name="/" dev="pstore" ino=13251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 33.863561][ T24] audit: type=1400 audit(1763105171.750:497): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 33.902419][ T24] audit: type=1326 audit(1763105171.790:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.4.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f972a0386c9 code=0x0 [ 33.951804][ T24] audit: type=1400 audit(1763105171.830:499): avc: denied { sys_module } for pid=1479 comm="syz.3.522" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 33.984659][ T24] audit: type=1400 audit(1763105171.830:500): avc: denied { module_load } for pid=1479 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 34.074088][ T1500] device veth2 entered promiscuous mode [ 34.520184][ T1523] device veth2 entered promiscuous mode [ 34.525843][ T24] audit: type=1400 audit(1763105172.410:501): avc: denied { setopt } for pid=1522 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.565903][ T1528] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 34.767249][ T1560] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 34.781543][ T24] audit: type=1400 audit(1763105172.670:502): avc: denied { relabelto } for pid=1558 comm="syz.4.561" name="cgroup.procs" dev="cgroup" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 34.809378][ T24] audit: type=1400 audit(1763105172.670:503): avc: denied { associate } for pid=1558 comm="syz.4.561" name="cgroup.procs" dev="cgroup" ino=57 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sendmail_exec_t:s0" [ 34.839197][ T1565] netlink: 'syz.4.561': attribute type 4 has an invalid length. [ 34.879399][ T1569] overlayfs: unrecognized mount option "/" or missing value [ 34.894943][ T1563] kvm: pic: non byte write [ 34.916779][ T1563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 34.933255][ T1572] netlink: 288 bytes leftover after parsing attributes in process `syz.2.565'. [ 35.030032][ T1588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 35.049769][ T1581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.570: inode #1: comm syz.1.570: iget: illegal inode # [ 35.065605][ T1593] mmap: syz.2.574 (1593) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 35.068033][ T1589] overlayfs: failed to clone upperpath [ 35.091168][ T1581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.570: error while reading EA inode 1 err=-117 [ 35.115675][ T1581] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.130266][ T1581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.570: inode #1: comm syz.1.570: iget: illegal inode # [ 35.167022][ T1581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.570: error while reading EA inode 1 err=-117 [ 35.185410][ T1581] EXT4-fs (loop1): 1 orphan inode deleted [ 35.191533][ T1581] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue [ 35.220246][ T24] audit: type=1326 audit(1763105173.110:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.3.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x0 [ 35.284532][ T24] audit: type=1400 audit(1763105173.150:505): avc: denied { remove_name } for pid=1580 comm="syz.1.570" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.672856][ T1649] EXT4-fs (loop1): dax option not supported [ 35.972659][ T1689] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.990802][ T1689] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x000000000000000a,min_batch_time=0x0000000000000001,nogrpid,jqfmt=vfsold,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000000007,abort, [ 37.170903][ T1768] overlayfs: unrecognized mount option "/" or missing value [ 37.373069][ T1784] netlink: 172 bytes leftover after parsing attributes in process `syz.4.660'. [ 37.379060][ T1771] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 37.407364][ T1229] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.495395][ T1795] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 37.660932][ T1808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 37.669906][ T910] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.699133][ T1812] netlink: 'syz.1.672': attribute type 3 has an invalid length. [ 37.706937][ T1812] netlink: 'syz.1.672': attribute type 3 has an invalid length. [ 37.863722][ T1820] netlink: 104 bytes leftover after parsing attributes in process `syz.1.676'. [ 37.968037][ T1830] netlink: 44 bytes leftover after parsing attributes in process `syz.1.681'. [ 37.977445][ T1830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 37.986342][ T1830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 37.995340][ T1830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 38.017986][ T1832] 9p: Unknown Cache mode m [ 38.038418][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.061178][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.079986][ T910] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 38.097897][ T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.115334][ T910] usb 3-1: config 0 descriptor?? [ 38.435835][ T1869] binder: Bad value for 'stats' [ 38.578477][ T910] usbhid 3-1:0.0: can't add hid device: -71 [ 38.584686][ T910] usbhid: probe of 3-1:0.0 failed with error -71 [ 38.594020][ T910] usb 3-1: USB disconnect, device number 2 [ 38.918362][ T283] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.209251][ T24] kauditd_printk_skb: 396 callbacks suppressed [ 39.209264][ T24] audit: type=1326 audit(1763105177.100:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.239432][ T24] audit: type=1326 audit(1763105177.100:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.268639][ T24] audit: type=1326 audit(1763105177.100:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.292080][ T283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.293877][ T24] audit: type=1326 audit(1763105177.100:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.302200][ T283] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 39.326701][ T24] audit: type=1326 audit(1763105177.100:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.359574][ T24] audit: type=1326 audit(1763105177.100:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.383189][ T24] audit: type=1326 audit(1763105177.100:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.402717][ T283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.406767][ T24] audit: type=1326 audit(1763105177.100:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.442629][ T283] usb 5-1: config 0 descriptor?? [ 39.448956][ T1912] netlink: 'syz.2.720': attribute type 12 has an invalid length. [ 39.458444][ T1139] Bluetooth: hci0: command 0x1003 tx timeout [ 39.467597][ T40] Bluetooth: hci0: sending frame failed (-49) [ 39.474222][ T24] audit: type=1326 audit(1763105177.100:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.498205][ T24] audit: type=1326 audit(1763105177.130:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1908 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 39.778373][ T283] usbhid 5-1:0.0: can't add hid device: -71 [ 39.791169][ T283] usbhid: probe of 5-1:0.0 failed with error -71 [ 39.802622][ T283] usb 5-1: USB disconnect, device number 4 [ 39.922734][ T1955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.741'. [ 39.932716][ T1955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 39.941961][ T1955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 40.260362][ T1999] capability: warning: `syz.4.761' uses 32-bit capabilities (legacy support in use) [ 40.393285][ T2023] overlayfs: failed to clone upperpath [ 41.905952][ T1139] Bluetooth: hci0: command 0x1001 tx timeout [ 41.912440][ T40] Bluetooth: hci0: sending frame failed (-49) [ 42.036017][ T2091] device bridge_slave_1 left promiscuous mode [ 42.042703][ T2091] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.050595][ T2091] device bridge_slave_0 left promiscuous mode [ 42.057000][ T2091] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.458353][ T1139] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 42.698367][ T1139] usb 2-1: Using ep0 maxpacket: 32 [ 42.868376][ T1139] usb 2-1: unable to get BOS descriptor or descriptor too short [ 42.948393][ T399] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.955981][ T1139] usb 2-1: config 9 has an invalid interface number: 254 but max is 0 [ 42.964273][ T1139] usb 2-1: config 9 has no interface number 0 [ 42.970431][ T1139] usb 2-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 42.980445][ T1139] usb 2-1: config 9 interface 254 has no altsetting 0 [ 43.148515][ T1139] usb 2-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 43.157646][ T1139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.165714][ T1139] usb 2-1: Product: syz [ 43.170143][ T1139] usb 2-1: Manufacturer: syz [ 43.174822][ T1139] usb 2-1: SerialNumber: syz [ 43.198657][ T2103] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 43.320397][ T399] usb 3-1: config 0 has no interfaces? [ 43.383691][ T2158] __nla_validate_parse: 4 callbacks suppressed [ 43.383700][ T2158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.833'. [ 43.478548][ T399] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.493250][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.505430][ T1139] usb 2-1: USB disconnect, device number 4 [ 43.511517][ T399] usb 3-1: Product: syz [ 43.515846][ T399] usb 3-1: Manufacturer: syz [ 43.531664][ T399] usb 3-1: SerialNumber: syz [ 43.546778][ T399] usb 3-1: config 0 descriptor?? [ 43.595104][ T2180] xt_hashlimit: size too large, truncated to 1048576 [ 43.791792][ T1139] usb 3-1: USB disconnect, device number 3 [ 43.845859][ T2190] tipc: Started in network mode [ 43.851187][ T2190] tipc: Own node identity ac14140f, cluster identity 4711 [ 43.858718][ T2190] tipc: New replicast peer: 255.255.255.255 [ 43.864805][ T2190] tipc: Enabled bearer , priority 10 [ 43.938341][ T399] Bluetooth: hci0: command 0x1009 tx timeout [ 44.067667][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 44.081545][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.090244][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 44.098683][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.107025][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.115415][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.123741][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.132089][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.250300][ T296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.258645][ T296] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.389716][ T24] kauditd_printk_skb: 74 callbacks suppressed [ 44.389727][ T24] audit: type=1400 audit(1763105182.280:986): avc: denied { getopt } for pid=2235 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.479407][ T2233] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 44.498118][ T2233] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 44.509832][ T2233] EXT4-fs error (device loop4): ext4_get_journal_inode:5243: inode #5: comm syz.4.865: unexpected bad inode w/o EXT4_IGET_BAD [ 44.523550][ T2233] EXT4-fs (loop4): no journal found [ 44.528974][ T2233] EXT4-fs (loop4): can't get journal size [ 44.541668][ T2233] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.865: iget: bogus i_mode (110000) [ 44.558625][ T2233] EXT4-fs (loop4): get root inode failed [ 44.564400][ T2233] EXT4-fs (loop4): mount failed [ 44.846957][ T24] audit: type=1400 audit(1763105182.730:987): avc: denied { bind } for pid=2255 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.894951][ T24] audit: type=1400 audit(1763105182.730:988): avc: denied { ioctl } for pid=2255 comm="syz.1.876" path="socket:[23963]" dev="sockfs" ino=23963 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.978478][ T283] tipc: 32-bit node address hash set to f1414ac [ 45.030722][ T24] audit: type=1400 audit(1763105182.920:989): avc: denied { name_bind } for pid=2265 comm="syz.3.881" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 45.160999][ T24] audit: type=1400 audit(1763105183.050:990): avc: denied { ioctl } for pid=2257 comm="syz.1.877" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.342423][ T24] audit: type=1400 audit(1763105183.230:991): avc: denied { wake_alarm } for pid=2285 comm="syz.3.890" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.388076][ T2290] overlayfs: missing 'workdir' [ 45.421528][ T2292] overlayfs: missing 'lowerdir' [ 45.478306][ T24] audit: type=1326 audit(1763105183.360:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2300 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 45.525649][ T24] audit: type=1326 audit(1763105183.360:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2300 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 45.708407][ T24] audit: type=1400 audit(1763105183.590:994): avc: denied { read write } for pid=2327 comm="syz.2.910" name="usbmon4" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.774116][ T24] audit: type=1400 audit(1763105183.590:995): avc: denied { open } for pid=2327 comm="syz.2.910" path="/dev/usbmon4" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.928814][ T2342] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 45.948388][ T2342] EXT4-fs (loop2): Test dummy encryption mode enabled [ 45.958007][ T2342] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 45.969646][ T2342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.995721][ T2342] EXT4-fs (loop2): 1 truncate cleaned up [ 46.001671][ T2342] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 46.048517][ T2355] binder: 2354:2355 ioctl 4018620d 0 returned -22 [ 46.489410][ T2399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.941'. [ 46.667082][ T2408] x_tables: duplicate underflow at hook 2 [ 46.764308][ T2416] netlink: 'syz.1.949': attribute type 12 has an invalid length. [ 46.876590][ T2431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.956'. [ 47.448344][ T399] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 47.708323][ T399] usb 2-1: Using ep0 maxpacket: 16 [ 47.848375][ T399] usb 2-1: config 3 has an invalid interface number: 155 but max is 0 [ 47.857064][ T399] usb 2-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 47.876865][ T399] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 47.895697][ T399] usb 2-1: config 3 has no interface number 0 [ 47.907194][ T399] usb 2-1: config 3 interface 155 has no altsetting 0 [ 48.848512][ T399] usb 2-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 48.864861][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.883072][ T399] usb 2-1: Product: syz [ 48.887271][ T399] usb 2-1: Manufacturer: syz [ 48.892131][ T399] usb 2-1: SerialNumber: syz [ 49.282312][ T399] usb 2-1: USB disconnect, device number 5 [ 49.405149][ T2533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1002'. [ 49.436033][ T2535] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1003'. [ 49.459316][ T2526] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 49.475149][ T2526] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 49.484604][ T2526] F2FS-fs (loop4): invalid crc value [ 49.508751][ T2544] syz.0.1006[2544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.508811][ T2544] syz.0.1006[2544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.527813][ T2526] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.554816][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 49.554828][ T24] audit: type=1400 audit(1763105187.440:1008): avc: denied { connect } for pid=2543 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.612360][ T2554] overlayfs: missing 'lowerdir' [ 49.617423][ T2526] F2FS-fs (loop4): Failed to read root inode [ 49.629532][ T2544] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.636783][ T2544] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.722280][ T2563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 49.918707][ T2578] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 49.926135][ T2578] EXT4-fs (loop1): Test dummy encryption mode enabled [ 49.973239][ T2578] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 49.981409][ T2578] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.027047][ T2596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.034346][ T2596] IPv6: NLM_F_CREATE should be set when creating new route [ 50.044926][ T2578] EXT4-fs (loop1): 1 truncate cleaned up [ 50.066386][ T2578] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 50.780866][ T24] audit: type=1400 audit(1763105188.670:1009): avc: denied { setopt } for pid=2678 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.838253][ T24] audit: type=1400 audit(1763105188.700:1010): avc: denied { bind } for pid=2678 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.869048][ T2690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1074'. [ 50.877668][ T24] audit: type=1326 audit(1763105188.750:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2691 comm="syz.3.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x0 [ 51.000973][ T2717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2717 comm=syz.1.1086 [ 51.082666][ T399] kernel write not supported for file bpf-prog (pid: 399 comm: kworker/0:5) [ 51.202299][ T24] audit: type=1326 audit(1763105189.090:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2734 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 51.226479][ T24] audit: type=1326 audit(1763105189.120:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2734 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 51.258213][ T24] audit: type=1326 audit(1763105189.140:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2734 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 51.302070][ T24] audit: type=1326 audit(1763105189.140:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2734 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 51.355639][ T24] audit: type=1326 audit(1763105189.140:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2734 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 51.381660][ T24] audit: type=1326 audit(1763105189.140:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2734 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 51.550188][ T2752] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 51.574988][ T2752] overlayfs: missing 'lowerdir' [ 51.654946][ T2762] incfs: Backing dir is not set, filesystem can't be mounted. [ 51.663656][ T2762] incfs: mount failed -2 [ 51.700341][ T2767] syz.2.1108[2767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.700414][ T2767] syz.2.1108[2767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.718810][ T2768] netem: change failed [ 51.820510][ T2786] fuse: Bad value for 'rootmode' [ 51.993414][ T2812] device syzkaller0 entered promiscuous mode [ 52.010659][ T2814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1132'. [ 52.020070][ T2814] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1132'. [ 52.029618][ T2814] tipc: Invalid UDP bearer configuration [ 52.029636][ T2814] tipc: Enabling of bearer rejected, failed to enable media [ 52.118626][ T2826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 52.282137][ T2847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1148'. [ 52.313060][ T2845] EXT4-fs (loop0): Ignoring removed oldalloc option [ 52.332129][ T2845] EXT4-fs (loop0): Ignoring removed bh option [ 52.342657][ T2845] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.376198][ T2845] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue [ 52.534317][ T2887] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1166'. [ 53.627068][ T2972] overlayfs: overlapping lowerdir path [ 53.639420][ T2975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1206'. [ 54.469148][ T3051] incfs: Can't find or create .index dir in ./file0 [ 54.475844][ T3051] incfs: mount failed -14 [ 54.599771][ T3059] device wg2 entered promiscuous mode [ 54.659634][ T3074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 54.677673][ T3074] device bridge_slave_1 left promiscuous mode [ 54.689418][ T3074] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.729280][ T3074] device bridge_slave_0 left promiscuous mode [ 54.745618][ T3074] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.780246][ T3091] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 54.954296][ T24] kauditd_printk_skb: 109 callbacks suppressed [ 54.954309][ T24] audit: type=1400 audit(1763105192.840:1127): avc: denied { watch } for pid=3114 comm="syz.1.1269" path="/281" dev="tmpfs" ino=1707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.088759][ T3136] device syzkaller0 entered promiscuous mode [ 55.229037][ T3156] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 55.284509][ T3134] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1282'. [ 55.288222][ T3164] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 55.424896][ T3168] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 55.448170][ T3168] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.468363][ T477] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 55.477409][ T24] audit: type=1400 audit(1763105193.360:1128): avc: denied { mounton } for pid=3167 comm="syz.4.1296" path="/229/file0/bus" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.503188][ T24] audit: type=1400 audit(1763105193.390:1129): avc: denied { map } for pid=3167 comm="syz.4.1296" path="/229/file0/bus" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.529654][ T3168] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 4: comm syz.4.1296: lblock 0 mapped to illegal pblock 4 (length 1) [ 55.537802][ T24] audit: type=1400 audit(1763105193.420:1130): avc: denied { rmdir } for pid=3167 comm="syz.4.1296" name="control" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.574436][ T279] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1) [ 55.589539][ T279] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 55.604095][ T279] EXT4-fs error (device loop4): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 35 in block_group 0 [ 55.617396][ T279] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 55.629737][ T279] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 55.651732][ T9] EXT4-fs error (device loop4): __ext4_get_inode_loc:4438: comm kworker/u4:1: Invalid inode table block 35 in block_group 0 [ 55.664998][ T9] EXT4-fs error (device loop4): __ext4_get_inode_loc:4438: comm kworker/u4:1: Invalid inode table block 35 in block_group 0 [ 55.678160][ T9] EXT4-fs error (device loop4): __ext4_get_inode_loc:4438: comm kworker/u4:1: Invalid inode table block 35 in block_group 0 [ 55.815044][ T24] audit: type=1400 audit(1763105193.700:1131): avc: denied { mounton } for pid=3199 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.871177][ T3199] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.878869][ T3199] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.886607][ T3199] device bridge_slave_0 entered promiscuous mode [ 55.893342][ T477] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 55.901916][ T477] usb 1-1: config 0 has no interface number 0 [ 55.911108][ T3199] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.918206][ T3199] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.925914][ T3199] device bridge_slave_1 entered promiscuous mode [ 55.977075][ T3199] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.984173][ T3199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.991484][ T3199] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.998557][ T3199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.023923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.032441][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.040068][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.062273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.071102][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.078384][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.086069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.088404][ T477] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 56.096801][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.110606][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.113474][ T477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.133012][ T477] usb 1-1: Product: syz [ 56.141791][ T477] usb 1-1: Manufacturer: syz [ 56.148536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.151902][ T477] usb 1-1: SerialNumber: syz [ 56.156680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.174181][ T477] usb 1-1: config 0 descriptor?? [ 56.198681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.214501][ T3199] device veth0_vlan entered promiscuous mode [ 56.221373][ T477] ums-karma 1-1:0.46: USB Mass Storage device detected [ 56.229935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.238142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.252786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.260757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.274055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.282370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.303567][ T3199] device veth1_macvtap entered promiscuous mode [ 56.314136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.325294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.333712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.358996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.368002][ T24] audit: type=1400 audit(1763105194.250:1132): avc: denied { mounton } for pid=3199 comm="syz-executor" path="/root/syzkaller.6y1wrz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.370240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.433784][ T3240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1328'. [ 56.445583][ T1133] usb 1-1: USB disconnect, device number 5 [ 56.521334][ T1229] device veth1_macvtap left promiscuous mode [ 56.527528][ T1229] device veth0_vlan left promiscuous mode [ 56.912822][ T3249] EXT4-fs (loop5): Ignoring removed bh option [ 57.036501][ T3249] EXT4-fs error (device loop5): ext4_ext_check_inode:500: inode #3: comm syz.5.1330: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 57.055188][ T3249] EXT4-fs error (device loop5): ext4_quota_enable:6450: comm syz.5.1330: Bad quota inode: 3, type: 0 [ 57.066888][ T3249] EXT4-fs warning (device loop5): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 57.083813][ T3249] EXT4-fs (loop5): mount failed [ 58.210226][ T3285] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1347'. [ 58.312539][ T24] audit: type=1326 audit(1763105196.190:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3fac76c9 code=0x7ffc0000 [ 58.344541][ T24] audit: type=1326 audit(1763105196.200:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb3fac76c9 code=0x7ffc0000 [ 58.368388][ T24] audit: type=1326 audit(1763105196.200:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3fac76c9 code=0x7ffc0000 [ 58.391837][ T24] audit: type=1326 audit(1763105196.200:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3fac76c9 code=0x7ffc0000 [ 58.626652][ T3327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1365'. [ 58.850215][ T3342] loop0: p1 < > p3 [ 58.868860][ T3342] loop0: p3 size 134217728 extends beyond EOD, truncated [ 59.047476][ T359] udevd[359]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 59.047528][ T362] udevd[362]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 59.111917][ T362] udevd[362]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 59.111935][ T359] udevd[359]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 59.480129][ T3373] bridge: RTM_NEWNEIGH with invalid ether address [ 59.525620][ T3381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1386'. [ 59.908579][ T3421] device lo entered promiscuous mode [ 59.915019][ T3421] device tunl0 entered promiscuous mode [ 59.921702][ T3421] device gre0 entered promiscuous mode [ 59.928362][ T3421] device gretap0 entered promiscuous mode [ 59.935313][ T3421] device erspan0 entered promiscuous mode [ 59.942066][ T3421] device ip_vti0 entered promiscuous mode [ 59.949199][ T3421] device ip6_vti0 entered promiscuous mode [ 59.956127][ T3421] device sit0 entered promiscuous mode [ 59.962918][ T3421] device ip6tnl0 entered promiscuous mode [ 59.970176][ T3421] device ip6gre0 entered promiscuous mode [ 59.977048][ T3421] device syz_tun entered promiscuous mode [ 59.983108][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 59.990743][ T3421] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 59.998427][ T3421] device bridge0 entered promiscuous mode [ 60.005261][ T3421] device dummy0 entered promiscuous mode [ 60.012200][ T3421] device veth0 entered promiscuous mode [ 60.018871][ T3421] device veth1 entered promiscuous mode [ 60.025382][ T3421] device wg0 entered promiscuous mode [ 60.032202][ T3421] device wg1 entered promiscuous mode [ 60.038685][ T3421] device wg2 entered promiscuous mode [ 60.046187][ T3421] device veth0_to_bridge entered promiscuous mode [ 60.055230][ T3421] device veth1_to_bridge entered promiscuous mode [ 60.063740][ T3421] device veth0_to_bond entered promiscuous mode [ 60.071417][ T3421] device bond_slave_0 entered promiscuous mode [ 60.079313][ T3421] device veth1_to_bond entered promiscuous mode [ 60.087119][ T3421] device bond_slave_1 entered promiscuous mode [ 60.095236][ T3421] device veth0_to_team entered promiscuous mode [ 60.103044][ T3421] device team_slave_0 entered promiscuous mode [ 60.110261][ T3421] device veth1_to_team entered promiscuous mode [ 60.117849][ T3421] device team_slave_1 entered promiscuous mode [ 60.125068][ T3421] device veth0_to_batadv entered promiscuous mode [ 60.132384][ T3421] device batadv_slave_0 entered promiscuous mode [ 60.140460][ T3421] device veth1_to_batadv entered promiscuous mode [ 60.147799][ T3421] device batadv_slave_1 entered promiscuous mode [ 60.155033][ T3421] device xfrm0 entered promiscuous mode [ 60.161945][ T3421] device veth0_to_hsr entered promiscuous mode [ 60.169567][ T3421] device hsr_slave_0 entered promiscuous mode [ 60.176547][ T3421] device veth1_to_hsr entered promiscuous mode [ 60.183901][ T3421] device hsr_slave_1 entered promiscuous mode [ 60.190895][ T3421] device veth1_virt_wifi entered promiscuous mode [ 60.198179][ T3421] device veth0_virt_wifi entered promiscuous mode [ 60.205974][ T3421] device veth1_vlan entered promiscuous mode [ 60.215697][ T3421] device vlan0 entered promiscuous mode [ 60.222624][ T3421] device vlan1 entered promiscuous mode [ 60.230411][ T3421] device veth0_macvtap entered promiscuous mode [ 60.237487][ T3421] device macsec0 entered promiscuous mode [ 60.245717][ T3421] device sit1 entered promiscuous mode [ 60.254410][ T3421] device veth3 entered promiscuous mode [ 60.261335][ T3421] device veth0_vlan.2 entered promiscuous mode [ 60.270973][ T3421] device ip6tnl1 entered promiscuous mode [ 60.278399][ T3421] device sit2 entered promiscuous mode [ 60.478301][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 60.977746][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.016812][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 61.048584][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.084735][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.103914][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.122217][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.142223][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.154003][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 61.169769][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 61.169782][ T24] audit: type=1326 audit(1763105199.060:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.171978][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 61.199386][ T24] audit: type=1326 audit(1763105199.060:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.199404][ T24] audit: type=1326 audit(1763105199.060:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.199420][ T24] audit: type=1326 audit(1763105199.060:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.199437][ T24] audit: type=1326 audit(1763105199.060:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.199454][ T24] audit: type=1326 audit(1763105199.060:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.199471][ T24] audit: type=1326 audit(1763105199.060:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.199493][ T24] audit: type=1326 audit(1763105199.060:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.211214][ T1133] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.302442][ T24] audit: type=1326 audit(1763105199.060:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.323677][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.414515][ T1133] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 61.423172][ T24] audit: type=1326 audit(1763105199.060:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz.5.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 61.458773][ T3433] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1406'. [ 62.098386][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 62.178349][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 63.336901][ T3555] incfs: Error accessing: ./file0. [ 63.342816][ T3555] incfs: mount failed -20 [ 63.517154][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 63.533860][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 64.425916][ T3643] binder: 3642:3643 ioctl 4018620d 0 returned -22 [ 64.614462][ T9] tipc: Subscription rejected, illegal request [ 64.730449][ T3679] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 65.778349][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 65.798143][ T3722] EXT4-fs (loop0): Ignoring removed bh option [ 65.899095][ T3722] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #3: comm syz.0.1522: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 65.917842][ T3722] EXT4-fs error (device loop0): ext4_quota_enable:6450: comm syz.0.1522: Bad quota inode: 3, type: 0 [ 65.929592][ T3722] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 65.946166][ T3722] EXT4-fs (loop0): mount failed [ 66.658271][ C1] sched: RT throttling activated [ 66.704867][ T24] kauditd_printk_skb: 135 callbacks suppressed [ 66.704882][ T24] audit: type=1326 audit(1763105204.590:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 67.017066][ T24] audit: type=1326 audit(1763105204.590:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 67.044663][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1529'. [ 67.054267][ T24] audit: type=1326 audit(1763105204.590:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 67.080406][ T24] audit: type=1326 audit(1763105204.590:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 67.102369][ T3737] binder: Bad value for 'max' [ 67.115107][ T24] audit: type=1326 audit(1763105204.590:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 67.152722][ T24] audit: type=1326 audit(1763105204.590:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 67.160209][ T3743] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1533'. [ 67.196548][ T24] audit: type=1326 audit(1763105204.860:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 67.223853][ T3743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1533'. [ 67.234866][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1535'. [ 67.245661][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1535'. [ 67.255460][ T24] audit: type=1326 audit(1763105204.860:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.3.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1997c9e6c9 code=0x7ffc0000 [ 67.302925][ T24] audit: type=1326 audit(1763105205.030:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9d9326c9 code=0x7ffc0000 [ 67.360577][ T24] audit: type=1326 audit(1763105205.030:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9d9326c9 code=0x7ffc0000 [ 67.433690][ T3769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1546'. [ 67.452046][ T3769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 67.471491][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 67.481787][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 67.640502][ T3776] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.655486][ T3776] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 67.665396][ T3776] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 67.841988][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 68.082017][ T3832] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.133466][ T3832] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,quota,dioread_nolock,bsddf,noblock_validity,noauto_da_alloc,,errors=continue [ 68.221298][ T3846] overlayfs: missing 'lowerdir' [ 68.570526][ T3871] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 68.580041][ T3871] EXT4-fs (loop5): failed to open journal device unknown-block(0,8) -6 [ 69.200628][ T3904] EXT4-fs (loop2): Ignoring removed bh option [ 69.343647][ T3904] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #3: comm syz.2.1605: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 69.362203][ T3904] EXT4-fs error (device loop2): ext4_quota_enable:6450: comm syz.2.1605: Bad quota inode: 3, type: 0 [ 69.373619][ T3904] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.390207][ T3904] EXT4-fs (loop2): mount failed [ 70.524733][ T3921] netlink: 'syz.0.1610': attribute type 3 has an invalid length. [ 70.533879][ T3921] netlink: 'syz.0.1610': attribute type 3 has an invalid length. [ 70.836379][ T3963] device sit0 entered promiscuous mode [ 71.190698][ T3977] EXT4-fs (loop1): Ignoring removed bh option [ 71.295607][ T3977] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #3: comm syz.1.1634: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 71.314174][ T3977] EXT4-fs error (device loop1): ext4_quota_enable:6450: comm syz.1.1634: Bad quota inode: 3, type: 0 [ 71.325648][ T3977] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 71.342484][ T3977] EXT4-fs (loop1): mount failed [ 72.888106][ T4012] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 73.055564][ T4025] device veth2 entered promiscuous mode [ 73.098884][ T24] kauditd_printk_skb: 95 callbacks suppressed [ 73.098898][ T24] audit: type=1326 audit(1763105210.990:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.141743][ T24] audit: type=1326 audit(1763105211.020:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.183985][ T24] audit: type=1326 audit(1763105211.020:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.210945][ T24] audit: type=1326 audit(1763105211.020:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.292502][ T24] audit: type=1326 audit(1763105211.020:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.365885][ T4044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24946 sclass=netlink_route_socket pid=4044 comm=syz.3.1666 [ 73.383747][ T24] audit: type=1326 audit(1763105211.020:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.443696][ T24] audit: type=1326 audit(1763105211.020:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.474270][ T24] audit: type=1326 audit(1763105211.020:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.518976][ T24] audit: type=1326 audit(1763105211.020:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.581466][ T24] audit: type=1326 audit(1763105211.020:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f527f06c9 code=0x7ffc0000 [ 73.590990][ T4062] __nla_validate_parse: 3 callbacks suppressed [ 73.591000][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 74.023174][ T4069] syz.0.1677[4069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.023235][ T4069] syz.0.1677[4069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.258411][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 74.485149][ T4073] F2FS-fs (loop0): Invalid log_blocksize (0), supports only 12 [ 74.510858][ T4073] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.520183][ T4073] F2FS-fs (loop0): invalid crc value [ 74.530660][ T4073] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.549829][ T4104] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 74.570729][ T4073] F2FS-fs (loop0): Start checkpoint disabled! [ 74.577695][ T4073] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.585047][ T4073] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 74.618326][ T4104] overlayfs: missing 'lowerdir' [ 74.942493][ T9] attempt to access beyond end of device [ 74.942493][ T9] loop0: rw=2049, want=40976, limit=40427 [ 75.530796][ T4146] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1700: Invalid block bitmap block 0 in block_group 0 [ 75.546054][ T4146] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1700: Failed to acquire dquot type 0 [ 75.558627][ T4146] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1700: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.573605][ T4146] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1700: Invalid inode bitmap blk 0 in block_group 0 [ 75.587084][ T4146] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 75.596921][ T4146] EXT4-fs (loop0): 1 orphan inode deleted [ 75.602743][ T4146] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 75.706664][ T4146] device lo entered promiscuous mode [ 75.716616][ T4146] device tunl0 entered promiscuous mode [ 75.725723][ T4146] device gre0 entered promiscuous mode [ 75.734399][ T4146] device gretap0 entered promiscuous mode [ 75.743827][ T4146] device erspan0 entered promiscuous mode [ 75.753090][ T4146] device ip_vti0 entered promiscuous mode [ 75.762473][ T4146] device ip6_vti0 entered promiscuous mode [ 75.772517][ T4146] device sit0 entered promiscuous mode [ 75.786429][ T4146] device ip6tnl0 entered promiscuous mode [ 75.796197][ T4146] device ip6gre0 entered promiscuous mode [ 75.805820][ T4146] device syz_tun entered promiscuous mode [ 75.815274][ T4146] device ip6gretap0 entered promiscuous mode [ 75.825081][ T4146] device dummy0 entered promiscuous mode [ 75.834599][ T4146] device veth0 entered promiscuous mode [ 75.843581][ T4146] device veth1 entered promiscuous mode [ 75.853700][ T4146] device wg0 entered promiscuous mode [ 75.864209][ T4146] device wg1 entered promiscuous mode [ 75.874571][ T4146] device veth0_to_bridge entered promiscuous mode [ 75.884295][ T4146] device bridge_slave_0 entered promiscuous mode [ 75.901536][ T4146] device veth1_to_bridge entered promiscuous mode [ 75.910638][ T4146] device bridge_slave_1 entered promiscuous mode [ 75.918364][ T4146] device veth0_to_bond entered promiscuous mode [ 75.927863][ T4146] device bond_slave_0 entered promiscuous mode [ 75.935759][ T4146] device veth1_to_bond entered promiscuous mode [ 75.945163][ T4146] device bond_slave_1 entered promiscuous mode [ 75.953130][ T4146] device veth0_to_team entered promiscuous mode [ 75.962874][ T4146] device team_slave_0 entered promiscuous mode [ 75.970716][ T4146] device veth1_to_team entered promiscuous mode [ 75.980397][ T4146] device team_slave_1 entered promiscuous mode [ 75.988227][ T4146] device veth0_to_batadv entered promiscuous mode [ 75.997979][ T4146] device batadv_slave_0 entered promiscuous mode [ 76.007437][ T4146] device veth1_to_batadv entered promiscuous mode [ 76.016999][ T4146] device batadv_slave_1 entered promiscuous mode [ 76.026218][ T4146] device xfrm0 entered promiscuous mode [ 76.035756][ T4146] device veth0_to_hsr entered promiscuous mode [ 76.045194][ T4146] device hsr_slave_0 entered promiscuous mode [ 76.052798][ T4146] device veth1_to_hsr entered promiscuous mode [ 76.182318][ T4146] device hsr_slave_1 entered promiscuous mode [ 76.189996][ T4146] device veth1_virt_wifi entered promiscuous mode [ 76.199949][ T4146] device veth0_virt_wifi entered promiscuous mode [ 76.209311][ T4146] device veth1_vlan entered promiscuous mode [ 76.218543][ T4146] device veth0_vlan left promiscuous mode [ 76.224324][ T4146] device veth0_vlan entered promiscuous mode [ 76.241893][ T4146] device vlan0 entered promiscuous mode [ 76.249262][ T4146] device vlan1 entered promiscuous mode [ 76.256604][ T4146] device veth1_macvtap left promiscuous mode [ 76.262693][ T4146] device veth1_macvtap entered promiscuous mode [ 76.272274][ T4146] device veth0_macvtap entered promiscuous mode [ 76.281468][ T4146] device macsec0 entered promiscuous mode [ 76.290992][ T4146] device bridge1 entered promiscuous mode [ 76.771781][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.779257][ T1229] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 76.816316][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.824334][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.833429][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.842650][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.852891][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.863833][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 76.881387][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.890031][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 76.901568][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.945840][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.961402][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.998128][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.019251][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.030133][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.060734][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.063572][ T4174] overlayfs: missing 'workdir' [ 77.077829][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.094918][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.123796][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.147099][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.166241][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.190399][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.207807][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.225047][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.242413][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.259297][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.275974][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.286610][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.294664][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.303402][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.311918][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.367668][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 77.412028][ T4183] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1723'. [ 77.429539][ T4191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 77.770121][ T4213] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 77.991010][ T477] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 78.020450][ T4252] fuse: Bad value for 'group_id' [ 78.137172][ T24] kauditd_printk_skb: 46 callbacks suppressed [ 78.137185][ T24] audit: type=1326 audit(1763105216.020:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.183551][ T24] audit: type=1326 audit(1763105216.040:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.208103][ T24] audit: type=1326 audit(1763105216.060:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.232707][ T24] audit: type=1326 audit(1763105216.060:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.275357][ T24] audit: type=1326 audit(1763105216.060:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.299606][ T24] audit: type=1326 audit(1763105216.060:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.324514][ T24] audit: type=1326 audit(1763105216.060:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.349903][ T24] audit: type=1326 audit(1763105216.060:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.373956][ T24] audit: type=1326 audit(1763105216.060:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.397935][ T24] audit: type=1326 audit(1763105216.060:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.5.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe1b16c9 code=0x7ffc0000 [ 78.421884][ T477] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 78.430575][ T477] usb 3-1: config 1 has no interface number 0 [ 78.436993][ T477] usb 3-1: config 1 interface 105 has no altsetting 0 [ 78.608391][ T477] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 78.617850][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.626839][ T477] usb 3-1: Product: syz [ 78.631500][ T477] usb 3-1: Manufacturer: syz [ 78.636496][ T477] usb 3-1: SerialNumber: syz [ 78.674660][ T4299] netlink: 'syz.3.1774': attribute type 6 has an invalid length. [ 78.737601][ T4307] overlayfs: failed to clone upperpath [ 78.928439][ T477] aqc111: probe of 3-1:1.105 failed with error -71 [ 78.940126][ T477] usb 3-1: USB disconnect, device number 4 [ 79.018333][ T1142] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 79.388435][ T1142] usb 2-1: config index 0 descriptor too short (expected 65127, got 73) [ 79.402193][ T1142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.414250][ T1142] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 79.508466][ T1142] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.521135][ T1142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.542259][ T1142] usb 2-1: SerialNumber: syz [ 79.603729][ T4368] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 79.615720][ T4368] overlayfs: missing 'lowerdir' [ 79.686625][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1806'. [ 79.812959][ T4394] netlink: 368 bytes leftover after parsing attributes in process `syz.5.1812'. [ 80.159134][ T477] usb 2-1: USB disconnect, device number 6 [ 80.322014][ T4442] F2FS-fs (loop0): invalid crc value [ 80.331467][ T4442] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 80.355176][ T4442] F2FS-fs (loop0): recover fsync data on readonly fs [ 80.362213][ T4442] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.448639][ T49] ================================================================== [ 80.456795][ T49] BUG: KASAN: use-after-free in vlan_dev_get_iflink+0x6d/0x70 [ 80.464277][ T49] Read of size 4 at addr ffff888117a98100 by task kworker/u4:2/49 [ 80.472108][ T49] [ 80.474471][ T49] CPU: 1 PID: 49 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 80.481850][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.491933][ T49] Workqueue: netns cleanup_net [ 80.496723][ T49] Call Trace: [ 80.500053][ T49] __dump_stack+0x21/0x24 [ 80.504403][ T49] dump_stack_lvl+0x169/0x1d8 [ 80.509101][ T49] ? show_regs_print_info+0x18/0x18 [ 80.514314][ T49] ? thaw_kernel_threads+0x220/0x220 [ 80.519614][ T49] print_address_description+0x7f/0x2c0 [ 80.525182][ T49] ? vlan_dev_get_iflink+0x6d/0x70 [ 80.530310][ T49] kasan_report+0xe2/0x130 [ 80.534736][ T49] ? vlan_dev_get_iflink+0x6d/0x70 [ 80.539864][ T49] __asan_report_load4_noabort+0x14/0x20 [ 80.545516][ T49] vlan_dev_get_iflink+0x6d/0x70 [ 80.550470][ T49] ? vlan_dev_fix_features+0x180/0x180 [ 80.555944][ T49] dev_get_iflink+0x70/0xc0 [ 80.560460][ T49] rfc2863_policy+0x124/0x2b0 [ 80.565128][ T49] ? linkwatch_forget_dev+0x121/0x180 [ 80.570488][ T49] linkwatch_do_dev+0x3b/0x140 [ 80.575289][ T49] linkwatch_forget_dev+0x170/0x180 [ 80.580563][ T49] netdev_run_todo+0x2bb/0xd20 [ 80.585316][ T49] ? netdev_refcnt_read+0x1d0/0x1d0 [ 80.590502][ T49] ? unregister_netdevice_queue+0x1aa/0x360 [ 80.596384][ T49] ? list_netdevice+0x4c0/0x4c0 [ 80.601229][ T49] ? unregister_vlan_dev+0x248/0x320 [ 80.606501][ T49] rtnl_unlock+0xe/0x10 [ 80.610643][ T49] default_device_exit_batch+0x335/0x390 [ 80.616265][ T49] ? default_device_exit+0x390/0x390 [ 80.621534][ T49] ? wait_woken+0x180/0x180 [ 80.626027][ T49] ? rtnl_unlock+0xe/0x10 [ 80.630346][ T49] ? default_device_exit+0x390/0x390 [ 80.635616][ T49] cleanup_net+0x5fb/0xb70 [ 80.640026][ T49] ? __kasan_check_write+0x14/0x20 [ 80.645127][ T49] ? ops_init+0x4a0/0x4a0 [ 80.649617][ T49] ? read_word_at_a_time+0x12/0x20 [ 80.654714][ T49] ? strscpy+0x9b/0x290 [ 80.658860][ T49] process_one_work+0x6e1/0xba0 [ 80.663697][ T49] worker_thread+0xa6a/0x13b0 [ 80.668372][ T49] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 80.673821][ T49] kthread+0x346/0x3d0 [ 80.677886][ T49] ? worker_clr_flags+0x190/0x190 [ 80.683092][ T49] ? kthread_blkcg+0xd0/0xd0 [ 80.687688][ T49] ret_from_fork+0x1f/0x30 [ 80.692105][ T49] [ 80.694438][ T49] Allocated by task 3199: [ 80.698828][ T49] __kasan_kmalloc+0xda/0x110 [ 80.703512][ T49] __kmalloc+0x1a7/0x330 [ 80.707741][ T49] kvmalloc_node+0x88/0x130 [ 80.712245][ T49] alloc_netdev_mqs+0x88/0xc80 [ 80.717019][ T49] rtnl_create_link+0x242/0x930 [ 80.721876][ T49] rtnl_newlink+0x105e/0x1640 [ 80.726543][ T49] rtnetlink_rcv_msg+0x9db/0xb90 [ 80.731484][ T49] netlink_rcv_skb+0x1e0/0x430 [ 80.736247][ T49] rtnetlink_rcv+0x1c/0x20 [ 80.740662][ T49] netlink_unicast+0x876/0xa40 [ 80.745419][ T49] netlink_sendmsg+0x88d/0xb30 [ 80.750173][ T49] __sys_sendto+0x41d/0x580 [ 80.754665][ T49] __x64_sys_sendto+0xe5/0x100 [ 80.759418][ T49] do_syscall_64+0x31/0x40 [ 80.763852][ T49] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 80.769724][ T49] [ 80.772043][ T49] Freed by task 49: [ 80.775854][ T49] kasan_set_track+0x4a/0x70 [ 80.780438][ T49] kasan_set_free_info+0x23/0x40 [ 80.785364][ T49] ____kasan_slab_free+0x125/0x160 [ 80.790460][ T49] __kasan_slab_free+0x11/0x20 [ 80.795206][ T49] slab_free_freelist_hook+0xc5/0x190 [ 80.800568][ T49] kfree+0xc0/0x270 [ 80.804362][ T49] kvfree+0x35/0x40 [ 80.808160][ T49] netdev_freemem+0x3f/0x60 [ 80.812648][ T49] netdev_release+0x7f/0xb0 [ 80.817136][ T49] device_release+0x96/0x1c0 [ 80.821710][ T49] kobject_put+0x18a/0x270 [ 80.826111][ T49] netdev_run_todo+0xb99/0xd20 [ 80.830884][ T49] rtnl_unlock+0xe/0x10 [ 80.835049][ T49] default_device_exit_batch+0x335/0x390 [ 80.840668][ T49] cleanup_net+0x5fb/0xb70 [ 80.845073][ T49] process_one_work+0x6e1/0xba0 [ 80.849912][ T49] worker_thread+0xa6a/0x13b0 [ 80.854634][ T49] kthread+0x346/0x3d0 [ 80.858708][ T49] ret_from_fork+0x1f/0x30 [ 80.863131][ T49] [ 80.865493][ T49] The buggy address belongs to the object at ffff888117a98000 [ 80.865493][ T49] which belongs to the cache kmalloc-4k of size 4096 [ 80.879638][ T49] The buggy address is located 256 bytes inside of [ 80.879638][ T49] 4096-byte region [ffff888117a98000, ffff888117a99000) [ 80.893010][ T49] The buggy address belongs to the page: [ 80.898655][ T49] page:ffffea00045ea600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117a98 [ 80.908880][ T49] head:ffffea00045ea600 order:3 compound_mapcount:0 compound_pincount:0 [ 80.917194][ T49] flags: 0x4000000000010200(slab|head) [ 80.922651][ T49] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042c00 [ 80.931223][ T49] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 80.939791][ T49] page dumped because: kasan: bad access detected [ 80.946191][ T49] page_owner tracks the page as allocated [ 80.951918][ T49] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 95, ts 50344822986, free_ts 47061400376 [ 80.972216][ T49] prep_new_page+0x179/0x180 [ 80.976803][ T49] get_page_from_freelist+0x2235/0x23d0 [ 80.982424][ T49] __alloc_pages_nodemask+0x268/0x5f0 [ 80.987798][ T49] new_slab+0x84/0x3f0 [ 80.991859][ T49] ___slab_alloc+0x2a6/0x450 [ 80.996446][ T49] __slab_alloc+0x63/0xa0 [ 81.000775][ T49] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 81.006140][ T49] kobject_uevent_env+0x272/0x700 [ 81.011169][ T49] kobject_synth_uevent+0x520/0xaf0 [ 81.016368][ T49] uevent_store+0x25/0x60 [ 81.020695][ T49] dev_attr_store+0x5e/0x80 [ 81.025202][ T49] sysfs_kf_write+0x129/0x150 [ 81.029867][ T49] kernfs_fop_write_iter+0x2c5/0x400 [ 81.035148][ T49] vfs_write+0x725/0xd60 [ 81.039384][ T49] ksys_write+0x140/0x240 [ 81.043707][ T49] __x64_sys_write+0x7b/0x90 [ 81.048286][ T49] page last free stack trace: [ 81.052951][ T49] __free_pages_ok+0x7fc/0x820 [ 81.057706][ T49] __free_pages+0xdd/0x380 [ 81.062109][ T49] __free_slab+0xcf/0x190 [ 81.066457][ T49] unfreeze_partials+0x15f/0x190 [ 81.071383][ T49] put_cpu_partial+0xc1/0x180 [ 81.076044][ T49] __slab_free+0x2c9/0x3a0 [ 81.080450][ T49] ___cache_free+0x111/0x130 [ 81.085032][ T49] qlink_free+0x50/0x90 [ 81.089178][ T49] qlist_free_all+0x5f/0xb0 [ 81.093672][ T49] kasan_quarantine_reduce+0x14a/0x160 [ 81.099117][ T49] __kasan_slab_alloc+0x2f/0xf0 [ 81.103954][ T49] slab_post_alloc_hook+0x5d/0x2f0 [ 81.109053][ T49] kmem_cache_alloc+0x165/0x2e0 [ 81.113895][ T49] getname_flags+0xb9/0x500 [ 81.118382][ T49] getname+0x19/0x20 [ 81.122268][ T49] do_sys_openat2+0xd9/0x6d0 [ 81.126843][ T49] [ 81.129158][ T49] Memory state around the buggy address: [ 81.134778][ T49] ffff888117a98000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.142827][ T49] ffff888117a98080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.150880][ T49] >ffff888117a98100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.158925][ T49] ^ [ 81.163159][ T49] ffff888117a98180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.171210][ T49] ffff888117a98200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.179259][ T49] ================================================================== [ 81.187322][ T49] Disabling lock debugging due to kernel taint