last executing test programs: 6.85661018s ago: executing program 0 (id=5858): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x300) socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 6.004320404s ago: executing program 4 (id=5860): ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 5.321765265s ago: executing program 3 (id=5867): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 5.275380435s ago: executing program 3 (id=5869): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000002003e0000000000030000000000000040000000000000009801000000000000000000000000380001ad"], 0x78) close(r0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x4}, 0x2b1}) 5.207843227s ago: executing program 0 (id=5870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x800, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x81, 0x537, 0x7fffffff, 0xa1, 0x1f, "c644c0000000000000144800"}) 5.124516248s ago: executing program 2 (id=5872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 5.109964058s ago: executing program 2 (id=5873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000780)="d2205d96c717ab96f0ded75d86dd07910a21c4e34c102f2b4e7a00f2a6f0fbdae9ff75d2dd71bbc1", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.098837008s ago: executing program 4 (id=5874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 4.437590649s ago: executing program 4 (id=5875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x31, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 4.280718441s ago: executing program 3 (id=5876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 4.240656082s ago: executing program 2 (id=5877): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 4.176328333s ago: executing program 3 (id=5878): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b708", @ANYRESOCT=r2], 0x0, 0x3, 0x0, 0x0, 0x0, 0x6c}, 0x94) 4.076093575s ago: executing program 4 (id=5879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getpgid(0x0) 4.075832315s ago: executing program 2 (id=5880): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x300) socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 4.059337795s ago: executing program 4 (id=5881): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.778602909s ago: executing program 0 (id=5882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.74868672s ago: executing program 0 (id=5884): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 3.72998566s ago: executing program 1 (id=5885): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) write$selinux_access(r0, &(0x7f0000000340)={'system_u:object_r:ldconfig_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x66}, 0x4b) 3.718209481s ago: executing program 0 (id=5886): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, 0x0, 0x12d80, 0x0) fstat(r5, 0x0) stat(0x0, 0x0) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000040, &(0x7f0000000000)={[{@inlinecrypt}, {@minixdf}, {@stripe}, {@sb={'sb', 0x3d, 0x7}}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x374}}]}, 0x10, 0x501, &(0x7f0000001f40)="$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") socket$inet_tcp(0x2, 0x1, 0x0) 3.687860651s ago: executing program 1 (id=5887): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000780)="d2205d96c717ab96f0ded75d86dd07910a21c4e34c102f2b4e7a00f2a6f0fbdae9ff75d2dd71bbc1", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.181087419s ago: executing program 2 (id=5888): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 3.180652569s ago: executing program 3 (id=5889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 154.698618ms ago: executing program 2 (id=5890): syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x7, 0x10001, 0x9, 0x11}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 145.583328ms ago: executing program 1 (id=5891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r1}, 0x18) utimes(0x0, 0x0) 143.514708ms ago: executing program 0 (id=5892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x800, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x81, 0x537, 0x7fffffff, 0xa1, 0x1f, "c644c0000000000000144800"}) 80.515749ms ago: executing program 3 (id=5893): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 80.095719ms ago: executing program 1 (id=5894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 34.425809ms ago: executing program 1 (id=5895): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 34.044209ms ago: executing program 4 (id=5896): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be", 0x1}], 0x1, &(0x7f0000000c80)}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)='@%(\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000100)='@%(\x00') 0s ago: executing program 1 (id=5897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ditd_printk_skb: 1 callbacks suppressed [ 589.391014][ T28] audit: type=1326 audit(1750809033.681:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 590.340418][ T28] audit: type=1326 audit(1750809034.631:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 590.352936][T11830] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4178'. [ 590.374058][ T28] audit: type=1326 audit(1750809034.631:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 590.398255][ T28] audit: type=1326 audit(1750809034.631:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 590.422058][ T28] audit: type=1326 audit(1750809034.631:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 590.697791][ T28] audit: type=1326 audit(1750809034.631:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 591.198043][ T28] audit: type=1326 audit(1750809034.631:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 592.822811][T11876] overlayfs: failed to resolve './file0': -2 [ 592.943181][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4200'. [ 593.989858][T11906] incfs: Can't find or create .index dir in ./file0 [ 593.996774][T11906] incfs: mount failed -14 [ 594.269381][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4212'. [ 596.428904][ T1646] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 596.456096][ T1646] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 596.565302][T11948] overlayfs: failed to resolve './file0': -2 [ 596.590969][T11950] fido_id[11950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 598.637652][T11991] incfs: Can't find or create .index dir in ./file0 [ 598.722133][T11991] incfs: mount failed -14 [ 599.106911][ T28] audit: type=1326 audit(1750809043.401:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 599.175848][ T28] audit: type=1326 audit(1750809043.401:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 599.311543][T12023] incfs: Can't find or create .index dir in ./file0 [ 599.409720][T12023] incfs: mount failed -14 [ 599.617912][ T28] audit: type=1326 audit(1750809043.401:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 600.008074][ T28] audit: type=1326 audit(1750809043.401:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 600.031751][ T28] audit: type=1326 audit(1750809043.401:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 600.074454][T12034] fuse: Bad value for 'fd' [ 600.517246][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4256'. [ 601.056790][T12056] incfs: Can't find or create .index dir in ./file0 [ 601.073673][T12056] incfs: mount failed -14 [ 601.375501][T12068] device gretap0 entered promiscuous mode [ 601.381431][T12068] device macsec1 entered promiscuous mode [ 601.712679][T12078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4271'. [ 601.821237][T12096] incfs: Can't find or create .index dir in ./file0 [ 601.828634][T12096] incfs: mount failed -14 [ 602.622118][T12119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4287'. [ 603.104893][ T483] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 603.123285][ T483] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 603.155644][T12135] incfs: Can't find or create .index dir in ./file0 [ 603.162513][T12135] incfs: mount failed -14 [ 603.192157][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4296'. [ 603.217116][T12138] fido_id[12138]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 603.356556][T12158] Illegal XDP return value 2040800638 on prog (id 2403) dev syz_tun, expect packet loss! [ 603.389694][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4305'. [ 605.414948][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4310'. [ 607.289314][ T483] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 607.373252][ T483] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz0 [ 607.706946][T12234] hub 6-0:1.0: USB hub found [ 607.989207][T12234] hub 6-0:1.0: 1 port detected [ 610.402247][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4340'. [ 610.696164][ T1364] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 611.610068][ T1364] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 611.765798][T12281] fido_id[12281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 611.914180][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'. [ 612.053209][T12299] overlayfs: missing 'lowerdir' [ 613.893099][T12334] netem: change failed [ 615.080543][T12351] overlayfs: missing 'lowerdir' [ 615.259335][ T2964] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 615.267673][ T2964] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 615.344542][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4361'. [ 615.370507][T12339] device syz_tun left promiscuous mode [ 615.386674][T12339] bridge0: port 3(syz_tun) entered disabled state [ 615.426942][T12339] device bridge_slave_1 left promiscuous mode [ 615.461033][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.484698][T12339] device bridge_slave_0 left promiscuous mode [ 616.429862][ T28] audit: type=1400 audit(1750809060.651:1449): avc: denied { append } for pid=12375 comm="syz.0.4379" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 616.440790][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.423000][T12381] sch_fq: defrate 2048 ignored. [ 617.597339][T12394] overlayfs: missing 'lowerdir' [ 617.748919][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.756902][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.764855][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.772506][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.779932][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.787528][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.795489][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.803207][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.812162][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.819714][ T483] hid-generic 00A1:0009:0003.0033: unknown main item tag 0x0 [ 617.830987][ T483] hid-generic 00A1:0009:0003.0033: hidraw0: HID v0.05 Device [syz1] on syz0 [ 618.064303][T12405] fido_id[12405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 618.253382][T12428] incfs_lookup_dentry err:-5 [ 618.258059][T12428] incfs: Can't find or create .index dir in ./file0 [ 618.264962][T12428] incfs: mount failed -5 [ 618.342840][T12437] overlayfs: missing 'lowerdir' [ 618.426013][T12453] device pim6reg1 entered promiscuous mode [ 618.543864][T12461] incfs_lookup_dentry err:-5 [ 618.548555][T12461] incfs: Can't find or create .index dir in ./file0 [ 618.555344][T12461] incfs: mount failed -5 [ 618.716254][T12466] netem: change failed [ 619.105424][ T1646] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 619.114331][ T1646] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 619.155563][T12489] fido_id[12489]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 619.866729][ T28] audit: type=1326 audit(1750809064.161:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.134439][ T28] audit: type=1326 audit(1750809064.251:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.229349][ T1901] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 620.240206][ T28] audit: type=1326 audit(1750809064.261:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.270947][ T1901] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 620.336982][T12531] fido_id[12531]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 620.354659][ T28] audit: type=1326 audit(1750809064.271:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.386088][ T28] audit: type=1326 audit(1750809064.281:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.410041][ T28] audit: type=1326 audit(1750809064.281:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.435243][ T28] audit: type=1326 audit(1750809064.291:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.463746][ T28] audit: type=1326 audit(1750809064.291:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.511038][ T28] audit: type=1326 audit(1750809064.391:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 620.565834][T12552] incfs: Can't find or create .index dir in ./file0 [ 620.572699][T12552] incfs: mount failed -5 [ 622.526590][T12632] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4486'. [ 622.689388][T12638] netem: change failed [ 623.535153][T12652] overlayfs: missing 'lowerdir' [ 623.889162][T12667] netem: change failed [ 624.566038][T12682] netem: change failed [ 625.519908][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4507'. [ 625.541774][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.558106][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.584147][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.620422][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.638111][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.660397][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.667826][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.689917][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.707750][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.715496][ T6] hid-generic 00A1:0009:0003.0036: unknown main item tag 0x0 [ 625.731538][ T6] hid-generic 00A1:0009:0003.0036: hidraw0: HID v0.05 Device [syz1] on syz0 [ 625.808689][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'. [ 625.833844][T12707] fido_id[12707]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 626.094216][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.102473][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.110048][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.118239][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.125841][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.133459][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.141046][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.148520][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.156246][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.163848][ T6] hid-generic 00A1:0009:0003.0037: unknown main item tag 0x0 [ 626.171971][ T6] hid-generic 00A1:0009:0003.0037: hidraw0: HID v0.05 Device [syz1] on syz0 [ 626.203619][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4528'. [ 626.215845][T12740] fido_id[12740]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 628.209765][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 628.228581][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4532'. [ 628.277149][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 628.277166][ T28] audit: type=1326 audit(1750809072.571:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.317904][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'. [ 628.321098][ T28] audit: type=1326 audit(1750809072.611:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.363009][ T28] audit: type=1326 audit(1750809072.611:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.387412][ T28] audit: type=1326 audit(1750809072.611:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.411560][ T28] audit: type=1326 audit(1750809072.611:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.438744][ T28] audit: type=1326 audit(1750809072.621:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.462467][ T28] audit: type=1326 audit(1750809072.651:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.486306][ T28] audit: type=1326 audit(1750809072.661:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.510434][ T28] audit: type=1326 audit(1750809072.661:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 628.534114][ T28] audit: type=1326 audit(1750809072.661:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12768 comm="syz.1.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586058e929 code=0x7ffc0000 [ 630.487795][T12797] 9pnet_fd: Insufficient options for proto=fd [ 630.494452][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4552'. [ 630.504276][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4552'. [ 631.601622][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4563'. [ 631.625771][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4563'. [ 631.699865][T12835] 9pnet_fd: Insufficient options for proto=fd [ 631.784212][ T6] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 631.820994][ T6] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz0 [ 631.960909][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 631.982905][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 631.992830][T12849] fido_id[12849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 632.036836][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 632.064608][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 632.146776][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 632.156866][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 632.182545][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 632.200092][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 632.217994][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 632.229740][ T6] hid-generic 00A1:0009:0003.0039: unknown main item tag 0x0 [ 632.246059][ T6] hid-generic 00A1:0009:0003.0039: hidraw0: HID v0.05 Device [syz1] on syz0 [ 632.321732][T12860] fido_id[12860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 632.365263][T12867] 9pnet_fd: Insufficient options for proto=fd [ 632.951022][ T2964] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 632.969258][ T2964] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 633.932952][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4601'. [ 633.950306][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4601'. [ 634.910449][T12932] netlink: 'syz.4.4588': attribute type 3 has an invalid length. [ 634.918342][T12932] netlink: 'syz.4.4588': attribute type 3 has an invalid length. [ 635.230961][ T28] audit: type=1326 audit(1750809079.531:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e38e929 code=0x7ffc0000 [ 635.330436][ T28] audit: type=1326 audit(1750809079.561:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e38e929 code=0x7ffc0000 [ 635.356656][ T28] audit: type=1326 audit(1750809079.561:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f8a9e38e929 code=0x7ffc0000 [ 635.382919][ T28] audit: type=1326 audit(1750809079.561:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e38e929 code=0x7ffc0000 [ 635.406821][ T28] audit: type=1326 audit(1750809079.561:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e38e929 code=0x7ffc0000 [ 635.819329][ T6] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 635.832746][ T6] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 636.366218][T12998] IPv6: sit1: Disabled Multicast RS [ 637.484492][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 638.220522][T13021] overlayfs: missing 'lowerdir' [ 638.902227][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 638.911716][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 638.921215][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 638.930284][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 639.001326][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 639.008848][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 639.016343][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 639.023906][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 639.031352][ T2964] hid-generic 00A1:0009:0003.003C: unknown main item tag 0x0 [ 639.047990][ T2964] hid-generic 00A1:0009:0003.003C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 639.077540][T13044] fido_id[13044]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 639.691606][ T1646] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 639.713472][ T1646] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 639.886305][ T2964] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 639.914986][ T2964] hid-generic 0000:0000:0000.003E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 640.003769][T13075] fido_id[13075]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 641.479671][T13119] usb usb1: usbfs: process 13119 (syz.1.4672) did not claim interface 0 before use [ 644.138314][ T28] audit: type=1326 audit(1750809086.431:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.184351][ T28] audit: type=1326 audit(1750809086.431:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.260423][ T28] audit: type=1326 audit(1750809086.461:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.359144][ T28] audit: type=1326 audit(1750809086.461:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.408293][ T28] audit: type=1326 audit(1750809086.461:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.456877][ T28] audit: type=1326 audit(1750809086.501:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.499470][ T28] audit: type=1326 audit(1750809086.501:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.523040][ T28] audit: type=1326 audit(1750809086.501:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.548168][ T28] audit: type=1326 audit(1750809086.521:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.572524][ T28] audit: type=1326 audit(1750809086.531:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 644.615304][T13155] 9pnet_fd: Insufficient options for proto=fd [ 645.242686][T13183] usb usb1: usbfs: process 13183 (syz.4.4696) did not claim interface 0 before use [ 649.684786][T13197] 9pnet_fd: Insufficient options for proto=fd [ 649.787530][T13200] hub 6-0:1.0: USB hub found [ 649.794311][T13200] hub 6-0:1.0: 1 port detected [ 650.020165][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 650.034885][ T28] audit: type=1326 audit(1750809094.311:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.0.4710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x0 [ 651.723577][ T28] audit: type=1400 audit(1750809094.851:1515): avc: denied { validate_trans } for pid=13220 comm="syz.3.4713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 652.170716][T13232] 9pnet_fd: Insufficient options for proto=fd [ 652.250565][ T2964] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 652.462081][ T2964] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 652.495851][ T2964] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 652.515485][ T2964] usb 2-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 652.542445][ T2964] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 652.561714][ T2964] usb 2-1: config 0 has no interface number 0 [ 652.575149][ T2964] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 652.601687][ T2964] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 652.630365][ T2964] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 652.650367][ T2964] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.697303][ T2964] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 652.719093][ T2964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.728081][ T2964] usb 2-1: config 0 descriptor?? [ 652.733907][ T2964] usb 2-1: MIDIStreaming interface descriptor not found [ 653.041789][ T2964] usb 2-1: USB disconnect, device number 16 [ 653.218990][T13260] hub 6-0:1.0: USB hub found [ 653.224330][T13260] hub 6-0:1.0: 1 port detected [ 653.940458][ T2964] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 654.171688][ T2964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 654.184461][ T2964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.195684][T13350] hub 6-0:1.0: USB hub found [ 654.200475][T13350] hub 6-0:1.0: 1 port detected [ 654.200475][ T2964] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 654.200502][ T2964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.226573][ T2964] usb 1-1: config 0 descriptor?? [ 654.465013][ T3759] kworker/dying (3759) used greatest stack depth: 19872 bytes left [ 654.712155][ T2964] thrustmaster 0003:044F:B324.003F: item fetching failed at offset 4/5 [ 654.724041][ T2964] thrustmaster 0003:044F:B324.003F: parse failed [ 654.732027][ T2964] thrustmaster: probe of 0003:044F:B324.003F failed with error -22 [ 655.520713][ T2964] usb 1-1: USB disconnect, device number 22 [ 658.305410][T13416] fuse: Bad value for 'fd' [ 658.369606][T13422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4798'. [ 658.500018][T13440] hub 6-0:1.0: USB hub found [ 658.505431][T13440] hub 6-0:1.0: 1 port detected [ 658.547647][T13439] 9pnet_fd: Insufficient options for proto=fd [ 658.662717][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.704798][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.749305][T13449] IPv6: sit1: Disabled Multicast RS [ 658.754832][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.762738][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.773024][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.783326][T13456] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4814'. [ 658.793214][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.804301][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.822938][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.837141][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.849486][ T2964] hid-generic 00A1:0009:0003.0040: unknown main item tag 0x0 [ 658.858400][ T2964] hid-generic 00A1:0009:0003.0040: hidraw0: HID v0.05 Device [syz1] on syz0 [ 658.929597][T13469] fido_id[13469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 658.950045][ T1646] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 658.958315][ T1646] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 659.036532][T13488] fido_id[13488]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 659.039494][T13492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4831'. [ 659.124121][T13496] overlayfs: missing 'lowerdir' [ 659.125726][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.172377][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.190420][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.200200][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.227060][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.250121][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.257125][ T2964] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 659.265716][ T2964] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 659.266526][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.324189][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.329200][T13519] fido_id[13519]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 659.339369][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.405239][ T1646] hid-generic 00A1:0009:0003.0042: unknown main item tag 0x0 [ 659.427931][ T1646] hid-generic 00A1:0009:0003.0042: hidraw0: HID v0.05 Device [syz1] on syz0 [ 659.505153][T13529] fido_id[13529]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 659.534898][T13533] overlayfs: missing 'lowerdir' [ 662.069111][T13592] overlayfs: missing 'lowerdir' [ 662.158640][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.173071][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.635099][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.650769][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.658239][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.665978][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.674627][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.682253][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.689825][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.697477][ T6] hid-generic 00A1:0009:0003.0044: unknown main item tag 0x0 [ 662.712821][ T6] hid-generic 00A1:0009:0003.0044: hidraw0: HID v0.05 Device [syz1] on syz0 [ 662.816722][T13614] fido_id[13614]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 663.140434][ T420] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 663.331559][ T420] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 663.340061][ T420] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 663.348698][ T420] usb 1-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 663.359509][ T420] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 663.371869][ T420] usb 1-1: config 0 has no interface number 0 [ 663.378066][ T420] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 663.388246][ T420] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 663.401830][ T420] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 663.413018][ T420] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.426208][ T420] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 663.435383][ T420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.443970][ T420] usb 1-1: config 0 descriptor?? [ 663.449812][ T420] usb 1-1: MIDIStreaming interface descriptor not found [ 665.161277][ T420] usb 1-1: USB disconnect, device number 23 [ 666.410425][ T28] audit: type=1326 audit(1750809110.701:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.451386][ T28] audit: type=1326 audit(1750809110.701:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.475564][ T28] audit: type=1326 audit(1750809110.701:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.499853][ T28] audit: type=1326 audit(1750809110.701:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.523797][ T28] audit: type=1326 audit(1750809110.701:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.557099][ T28] audit: type=1326 audit(1750809110.701:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.607264][ T28] audit: type=1326 audit(1750809110.701:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.631014][ T28] audit: type=1326 audit(1750809110.701:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.661697][ T28] audit: type=1326 audit(1750809110.701:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.685891][ T28] audit: type=1326 audit(1750809110.831:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728c78e929 code=0x7ffc0000 [ 666.910508][ T2964] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 667.112515][ T2964] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 667.156322][ T2964] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 667.170093][ T2964] usb 5-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 667.184170][ T2964] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 667.193569][ T2964] usb 5-1: config 0 has no interface number 0 [ 667.199960][ T2964] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 667.213309][ T2964] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 667.224607][ T2964] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 667.234697][ T2964] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.248299][ T2964] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 667.257913][ T2964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.271936][ T2964] usb 5-1: config 0 descriptor?? [ 667.282559][ T2964] usb 5-1: MIDIStreaming interface descriptor not found [ 667.468139][T13814] IPv6: sit2: Disabled Multicast RS [ 667.884446][T13864] overlayfs: missing 'lowerdir' [ 668.002902][ T2964] usb 5-1: USB disconnect, device number 16 [ 668.717024][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5003'. [ 673.230378][ T2964] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 673.500402][ T2964] usb 4-1: Using ep0 maxpacket: 16 [ 673.506745][ T2964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.518020][ T2964] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 673.527247][ T2964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.549225][ T2964] usb 4-1: config 0 descriptor?? [ 673.587947][T13941] overlayfs: missing 'lowerdir' [ 673.976815][ T2964] usbhid 4-1:0.0: can't add hid device: -71 [ 673.983280][ T2964] usbhid: probe of 4-1:0.0 failed with error -71 [ 674.014107][ T2964] usb 4-1: USB disconnect, device number 13 [ 674.386062][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 674.386079][ T28] audit: type=1400 audit(1750809118.681:1545): avc: denied { ioctl } for pid=13950 comm="syz.1.5021" path="socket:[62877]" dev="sockfs" ino=62877 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 674.702734][T13977] netem: change failed [ 675.599985][T13989] overlayfs: missing 'lowerdir' [ 676.010626][T14004] netem: change failed [ 677.052892][T14024] overlayfs: missing 'lowerdir' [ 677.159388][T14029] device wg2 entered promiscuous mode [ 677.288773][T14040] netem: change failed [ 677.318833][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5059'. [ 677.332114][T14047] 9pnet_fd: Insufficient options for proto=fd [ 678.097897][T14074] 9pnet_fd: Insufficient options for proto=fd [ 678.210355][ T1901] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 678.651598][ T1901] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 678.660022][ T1901] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 678.668720][ T1901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.679333][ T1901] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 678.688610][ T1901] usb 5-1: config 0 has no interface number 0 [ 678.695025][ T1901] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 678.705262][ T1901] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 678.716637][ T1901] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 678.726901][ T1901] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.740437][ T1901] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 678.749708][ T1901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.758605][ T1901] usb 5-1: config 0 descriptor?? [ 678.764511][ T1901] usb 5-1: MIDIStreaming interface descriptor not found [ 679.242899][ T28] audit: type=1326 audit(1750809123.541:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e38e929 code=0x7ffc0000 [ 679.274713][ T28] audit: type=1326 audit(1750809123.571:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8a9e38e929 code=0x7ffc0000 [ 679.298341][ T28] audit: type=1326 audit(1750809123.571:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e38e929 code=0x7ffc0000 [ 679.506564][ T1901] usb 5-1: USB disconnect, device number 17 [ 679.534320][T14160] IPv6: sit2: Disabled Multicast RS [ 681.212495][ T483] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 681.283935][ T483] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 681.722266][T14179] fuse: Bad value for 'fd' [ 681.739411][T14174] fido_id[14174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 682.383296][ T1901] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 682.398078][ T1901] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 682.491703][T14206] fido_id[14206]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 685.691920][ T483] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 686.061610][ T483] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz0] on syz0 [ 687.451815][T14297] tipc: Started in network mode [ 687.458674][T14297] tipc: Node identity 7f000001, cluster identity 4711 [ 687.481038][T14297] tipc: Enabled bearer , priority 10 [ 687.507874][T14297] tipc: Enabled bearer , priority 10 [ 687.784670][ T483] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 687.880121][ T483] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz0] on syz0 [ 688.997481][ T483] tipc: Node number set to 2130706433 [ 689.907781][T14326] IPv6: sit2: Disabled Multicast RS [ 690.616468][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5169'. [ 694.659714][ T28] audit: type=1400 audit(1750809138.951:1549): avc: denied { bpf } for pid=14374 comm="syz.3.5183" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 694.735811][ T28] audit: type=1400 audit(1750809138.951:1550): avc: denied { prog_load } for pid=14374 comm="syz.3.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 694.755911][ T28] audit: type=1400 audit(1750809138.961:1551): avc: denied { map_create } for pid=14374 comm="syz.3.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 694.775558][ T28] audit: type=1400 audit(1750809138.961:1552): avc: denied { perfmon } for pid=14374 comm="syz.3.5183" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 694.796976][ T28] audit: type=1400 audit(1750809138.981:1553): avc: denied { execmem } for pid=14374 comm="syz.3.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 694.997137][ T28] audit: type=1400 audit(1750809139.281:1554): avc: denied { map_read map_write } for pid=14378 comm="syz.1.5184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 695.187422][ T28] audit: type=1400 audit(1750809139.331:1555): avc: denied { prog_run } for pid=14378 comm="syz.1.5184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 695.283757][ T28] audit: type=1400 audit(1750809139.581:1556): avc: denied { create } for pid=14386 comm="syz.1.5188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 695.337012][ T28] audit: type=1400 audit(1750809139.611:1557): avc: denied { setopt } for pid=14386 comm="syz.1.5188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 695.360483][ T28] audit: type=1400 audit(1750809139.651:1558): avc: denied { read write } for pid=14390 comm="syz.1.5189" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 695.641021][T14395] syz.1.5189[14395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 695.641206][T14395] syz.1.5189[14395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.560445][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5190'. [ 700.870072][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 700.870099][ T28] audit: type=1400 audit(1750809144.081:1572): avc: denied { create } for pid=14408 comm="syz.3.5193" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.921974][ T28] audit: type=1400 audit(1750809145.181:1573): avc: denied { read write } for pid=14420 comm="syz.1.5197" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 701.006812][ T28] audit: type=1400 audit(1750809145.181:1574): avc: denied { open } for pid=14420 comm="syz.1.5197" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 701.045769][ T28] audit: type=1400 audit(1750809145.181:1575): avc: denied { mounton } for pid=14420 comm="syz.1.5197" path="/486/file0" dev="tmpfs" ino=2587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 701.076825][ T28] audit: type=1400 audit(1750809145.211:1576): avc: denied { read } for pid=14424 comm="syz.4.5200" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 701.106006][ T28] audit: type=1400 audit(1750809145.211:1577): avc: denied { open } for pid=14424 comm="syz.4.5200" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 701.129453][ T28] audit: type=1400 audit(1750809145.211:1578): avc: denied { ioctl } for pid=14424 comm="syz.4.5200" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 701.154862][ T28] audit: type=1400 audit(1750809145.221:1579): avc: denied { name_bind } for pid=14427 comm="syz.0.5198" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 701.176938][ T28] audit: type=1400 audit(1750809145.221:1580): avc: denied { node_bind } for pid=14427 comm="syz.0.5198" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 701.197924][ T28] audit: type=1400 audit(1750809145.341:1581): avc: denied { create } for pid=14433 comm="syz.2.5202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 701.715771][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5205'. [ 707.090047][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 707.090071][ T28] audit: type=1400 audit(1750809151.101:1642): avc: denied { mount } for pid=14476 comm="syz.1.5216" name="/" dev="ramfs" ino=64287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 707.182571][ T28] audit: type=1400 audit(1750809151.101:1643): avc: denied { write } for pid=14476 comm="syz.1.5216" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 707.848915][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5221'. [ 708.411822][ T28] audit: type=1400 audit(1750809152.711:1644): avc: denied { mount } for pid=14505 comm="syz.4.5224" name="/" dev="configfs" ino=14561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 708.464334][ T28] audit: type=1400 audit(1750809152.751:1645): avc: denied { search } for pid=14505 comm="syz.4.5224" name="/" dev="configfs" ino=14561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 708.640282][ T28] audit: type=1400 audit(1750809152.751:1646): avc: denied { read } for pid=14505 comm="syz.4.5224" name="/" dev="configfs" ino=14561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 708.691794][ T28] audit: type=1400 audit(1750809152.751:1647): avc: denied { open } for pid=14505 comm="syz.4.5224" path="/" dev="configfs" ino=14561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 708.715629][ T28] audit: type=1400 audit(1750809152.971:1648): avc: denied { ioctl } for pid=14507 comm="syz.1.5225" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64351 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 708.752023][T14512] netem: change failed [ 708.760867][ T28] audit: type=1400 audit(1750809153.061:1649): avc: denied { block_suspend } for pid=14507 comm="syz.1.5225" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.820530][ T28] audit: type=1400 audit(1750809153.091:1650): avc: denied { mount } for pid=14516 comm="syz.4.5229" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 708.876951][ T28] audit: type=1400 audit(1750809153.151:1651): avc: denied { unmount } for pid=14516 comm="syz.4.5229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 711.549891][T14555] netem: change failed [ 711.727679][ T6] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 713.237758][T14595] netem: change failed [ 713.274592][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 713.274611][ T28] audit: type=1400 audit(1750809157.571:1725): avc: denied { create } for pid=14593 comm="syz.2.5256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.301692][ T28] audit: type=1326 audit(1750809157.591:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.3.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 713.350906][ T28] audit: type=1326 audit(1750809157.591:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.3.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 713.374557][ T28] audit: type=1326 audit(1750809157.591:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.3.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 713.398431][ T28] audit: type=1326 audit(1750809157.591:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.3.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 713.427735][ T28] audit: type=1400 audit(1750809157.591:1730): avc: denied { bind } for pid=14601 comm="syz.3.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 713.447426][ T28] audit: type=1400 audit(1750809157.591:1731): avc: denied { name_bind } for pid=14601 comm="syz.3.5258" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 713.468821][ T28] audit: type=1400 audit(1750809157.591:1732): avc: denied { node_bind } for pid=14601 comm="syz.3.5258" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 713.491621][ T28] audit: type=1326 audit(1750809157.591:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.3.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 713.531804][ T28] audit: type=1326 audit(1750809157.591:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.3.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 715.106863][T14636] sch_fq: defrate 2048 ignored. [ 715.918249][ T420] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 715.943408][ T420] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz0] on syz0 [ 716.160376][ T6] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 716.700349][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 716.706664][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.730369][ T6] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 716.739476][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.763593][ T6] usb 5-1: config 0 descriptor?? [ 717.346444][ T6] lenovo 0003:17EF:6062.004A: unknown main item tag 0xd [ 717.353578][ T6] lenovo 0003:17EF:6062.004A: unknown main item tag 0xd [ 717.362031][ T6] lenovo 0003:17EF:6062.004A: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 718.569813][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 718.569852][ T28] audit: type=1400 audit(1750809162.051:1757): avc: denied { bpf } for pid=14710 comm="syz.1.5297" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 718.648253][ T28] audit: type=1400 audit(1750809162.061:1758): avc: denied { map_create } for pid=14710 comm="syz.1.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.679393][ T28] audit: type=1400 audit(1750809162.061:1759): avc: denied { map_read map_write } for pid=14710 comm="syz.1.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.680250][ T1901] usb 5-1: USB disconnect, device number 19 [ 718.699676][ T28] audit: type=1400 audit(1750809162.061:1760): avc: denied { prog_load } for pid=14710 comm="syz.1.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.727676][ T28] audit: type=1400 audit(1750809162.061:1761): avc: denied { perfmon } for pid=14710 comm="syz.1.5297" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 718.749132][ T28] audit: type=1400 audit(1750809162.061:1762): avc: denied { prog_run } for pid=14710 comm="syz.1.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.768370][ T28] audit: type=1400 audit(1750809162.061:1763): avc: denied { write } for pid=14710 comm="syz.1.5297" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 718.791649][ T28] audit: type=1400 audit(1750809163.041:1764): avc: denied { execmem } for pid=14722 comm="syz.3.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 718.826206][ T28] audit: type=1400 audit(1750809163.121:1765): avc: denied { create } for pid=14726 comm="syz.0.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 718.978937][ T28] audit: type=1400 audit(1750809163.271:1766): avc: denied { append } for pid=14726 comm="syz.0.5303" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 719.350148][T14733] sch_fq: defrate 2048 ignored. [ 720.072228][ T1901] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 720.099108][ T1901] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 720.415331][T14749] fido_id[14749]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 721.514954][T14780] netem: change failed [ 721.630375][T14785] overlayfs: missing 'lowerdir' [ 721.921367][ T420] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 721.931529][ T420] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 721.996109][T14790] fido_id[14790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 722.040376][ T1901] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 723.675920][T14808] netem: change failed [ 723.849230][T14817] No source specified [ 723.944068][ T6] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 723.952043][ T1901] usb 2-1: Using ep0 maxpacket: 16 [ 723.958298][ T1901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.974855][ T6] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 723.997580][ T1901] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 724.033203][ T1901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.039597][T14829] fido_id[14829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 724.057423][ T1901] usb 2-1: config 0 descriptor?? [ 724.125602][T14839] netem: change failed [ 724.866244][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 724.866325][ T28] audit: type=1400 audit(1750809168.531:1827): avc: denied { validate_trans } for pid=14833 comm="syz.2.5342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 725.103095][ T1901] usbhid 2-1:0.0: can't add hid device: -71 [ 725.109787][ T1901] usbhid: probe of 2-1:0.0 failed with error -71 [ 725.142820][ T1901] usb 2-1: USB disconnect, device number 17 [ 725.227648][ T28] audit: type=1400 audit(1750809169.521:1828): avc: denied { append } for pid=14869 comm="syz.1.5356" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 725.414811][ T420] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 725.423091][ T420] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 725.474113][T14883] fido_id[14883]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 725.498940][T14888] netem: change failed [ 725.578539][ T28] audit: type=1400 audit(1750809169.871:1829): avc: denied { read } for pid=14885 comm="syz.4.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.595387][T14886] tipc: Started in network mode [ 725.610434][T14886] tipc: Node identity ac14140f, cluster identity 4711 [ 725.639564][T14886] tipc: New replicast peer: 172.30.1.5 [ 725.646134][T14886] tipc: Enabled bearer , priority 10 [ 725.723209][ T420] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 725.732301][ T420] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 725.767532][T14914] fido_id[14914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 725.794876][ T28] audit: type=1400 audit(1750809170.091:1830): avc: denied { create } for pid=14919 comm="syz.0.5376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 726.480834][ T28] audit: type=1400 audit(1750809170.781:1831): avc: denied { bpf } for pid=14929 comm="syz.1.5380" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.575383][ T28] audit: type=1400 audit(1750809170.781:1832): avc: denied { map_create } for pid=14929 comm="syz.1.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.679560][ T420] tipc: Node number set to 2886997007 [ 726.685631][ T28] audit: type=1400 audit(1750809170.781:1833): avc: denied { perfmon } for pid=14929 comm="syz.1.5380" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.707015][ T28] audit: type=1400 audit(1750809170.781:1834): avc: denied { map_read map_write } for pid=14929 comm="syz.1.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.728964][ T1901] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 726.735536][ T28] audit: type=1400 audit(1750809170.801:1835): avc: denied { prog_load } for pid=14929 comm="syz.1.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.744423][ T1901] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 726.767754][ T28] audit: type=1400 audit(1750809170.801:1836): avc: denied { prog_run } for pid=14929 comm="syz.1.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.848786][T14954] fido_id[14954]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 729.228737][T15065] netem: change failed [ 729.471141][T15092] netem: change failed [ 730.065268][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 730.065475][ T28] audit: type=1400 audit(1750809174.231:1918): avc: denied { write } for pid=15091 comm="syz.3.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 730.097524][ T28] audit: type=1400 audit(1750809174.241:1919): avc: denied { read } for pid=15091 comm="syz.3.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 730.119437][ T28] audit: type=1400 audit(1750809174.351:1920): avc: denied { read } for pid=15091 comm="syz.3.5449" dev="nsfs" ino=4026532390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 730.141588][ T28] audit: type=1400 audit(1750809174.351:1921): avc: denied { open } for pid=15091 comm="syz.3.5449" path="net:[4026532390]" dev="nsfs" ino=4026532390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 732.708210][ T28] audit: type=1400 audit(1750809174.421:1922): avc: denied { unlink } for pid=15109 comm="syz.4.5455" name="#67" dev="tmpfs" ino=2377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 732.740903][ T28] audit: type=1400 audit(1750809174.421:1923): avc: denied { mount } for pid=15109 comm="syz.4.5455" name="/" dev="overlay" ino=2372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 732.828786][ T420] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 732.843238][ T28] audit: type=1400 audit(1750809176.961:1924): avc: denied { unmount } for pid=8968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 732.868761][T15129] netem: change failed [ 733.873916][ T28] audit: type=1400 audit(1750809177.001:1925): avc: denied { create } for pid=15120 comm="syz.4.5458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 733.969155][ T28] audit: type=1400 audit(1750809178.131:1926): avc: denied { read write } for pid=15122 comm="syz.3.5462" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 734.085152][ T28] audit: type=1400 audit(1750809178.131:1927): avc: denied { open } for pid=15122 comm="syz.3.5462" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 734.192388][T15159] 9pnet_fd: Insufficient options for proto=fd [ 735.119132][ T2964] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 735.143792][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 735.143811][ T28] audit: type=1400 audit(1750809179.441:1966): avc: denied { map_create } for pid=15181 comm="syz.2.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 735.175823][ T28] audit: type=1400 audit(1750809179.441:1967): avc: denied { perfmon } for pid=15181 comm="syz.2.5483" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 735.198819][ T28] audit: type=1400 audit(1750809179.441:1968): avc: denied { map_read map_write } for pid=15181 comm="syz.2.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 735.219687][ T28] audit: type=1400 audit(1750809179.441:1969): avc: denied { ioctl } for pid=15162 comm="syz.4.5478" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.256882][ T28] audit: type=1400 audit(1750809179.441:1970): avc: denied { prog_load } for pid=15181 comm="syz.2.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 735.278040][ T28] audit: type=1400 audit(1750809179.441:1971): avc: denied { prog_run } for pid=15181 comm="syz.2.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 735.301950][ T28] audit: type=1400 audit(1750809179.471:1972): avc: denied { mounton } for pid=15183 comm="syz.1.5484" path="/542/bus" dev="tmpfs" ino=2889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 735.326376][ T28] audit: type=1400 audit(1750809179.471:1973): avc: denied { unlink } for pid=15183 comm="syz.1.5484" name="#69" dev="tmpfs" ino=2893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 735.356712][ T28] audit: type=1400 audit(1750809179.471:1974): avc: denied { mount } for pid=15183 comm="syz.1.5484" name="/" dev="overlay" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 735.379509][ T2964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.384743][ T28] audit: type=1400 audit(1750809179.501:1975): avc: denied { unmount } for pid=7961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 735.397623][ T2964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.420902][ T2964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 735.433890][ T2964] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 735.456895][ T2964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.466090][ T2964] usb 5-1: config 0 descriptor?? [ 735.903050][ T2964] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 735.913581][ T2964] plantronics 0003:047F:FFFF.0051: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 736.288355][ T1901] usb 5-1: USB disconnect, device number 20 [ 736.839245][T15227] overlayfs: missing 'lowerdir' [ 738.036061][T15237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5501'. [ 738.826704][T15263] overlayfs: missing 'lowerdir' [ 739.849932][T15278] device ipip0 entered promiscuous mode [ 741.443394][T15282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5516'. [ 741.860364][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 741.860856][ T28] audit: type=1400 audit(1750809186.071:2033): avc: denied { create } for pid=15272 comm="syz.3.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 742.052958][ T28] audit: type=1400 audit(1750809186.091:2034): avc: denied { bind } for pid=15272 comm="syz.3.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 742.065615][T15305] No source specified [ 742.086049][ T28] audit: type=1400 audit(1750809186.101:2035): avc: denied { setopt } for pid=15272 comm="syz.3.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 742.116047][ T28] audit: type=1400 audit(1750809186.111:2036): avc: denied { write } for pid=15272 comm="syz.3.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 743.083384][ T28] audit: type=1400 audit(1750809186.151:2037): avc: denied { setopt } for pid=15272 comm="syz.3.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 743.113697][ T28] audit: type=1400 audit(1750809186.191:2038): avc: denied { create } for pid=15272 comm="syz.3.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 743.137375][ T28] audit: type=1400 audit(1750809186.191:2039): avc: denied { setopt } for pid=15272 comm="syz.3.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 743.167177][ T28] audit: type=1400 audit(1750809186.351:2040): avc: denied { mounton } for pid=15304 comm="syz.1.5527" path="/554/bus" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 743.196233][ T28] audit: type=1400 audit(1750809187.491:2041): avc: denied { read } for pid=15320 comm="syz.0.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 743.206210][T15335] No source specified [ 743.383422][ T28] audit: type=1400 audit(1750809187.681:2042): avc: denied { read } for pid=15360 comm="syz.3.5554" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 744.008021][T15362] overlayfs: missing 'lowerdir' [ 744.321136][T15394] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.575822][T15413] overlayfs: missing 'lowerdir' [ 746.212981][T15450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5587'. [ 747.285909][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 747.285985][ T28] audit: type=1400 audit(1750809191.521:2064): avc: denied { map_create } for pid=15448 comm="syz.0.5588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 747.618477][ T28] audit: type=1400 audit(1750809191.521:2065): avc: denied { map_read map_write } for pid=15448 comm="syz.0.5588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 748.689095][ T28] audit: type=1400 audit(1750809191.991:2066): avc: denied { create } for pid=15454 comm="syz.1.5590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 748.767962][ T28] audit: type=1400 audit(1750809192.011:2067): avc: denied { write } for pid=15454 comm="syz.1.5590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 748.829186][ T28] audit: type=1400 audit(1750809192.011:2068): avc: denied { read } for pid=15454 comm="syz.1.5590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 748.930843][ T28] audit: type=1400 audit(1750809192.041:2069): avc: denied { mounton } for pid=15454 comm="syz.1.5590" path="/566/file0" dev="tmpfs" ino=3039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 748.968065][ T28] audit: type=1400 audit(1750809192.071:2070): avc: denied { unlink } for pid=15454 comm="syz.1.5590" name="#73" dev="tmpfs" ino=3045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 748.993578][ T28] audit: type=1400 audit(1750809192.081:2071): avc: denied { mount } for pid=15454 comm="syz.1.5590" name="/" dev="overlay" ino=3041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 749.169921][ T28] audit: type=1400 audit(1750809192.151:2072): avc: denied { create } for pid=15454 comm="syz.1.5590" name="#77" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 749.590661][ T28] audit: type=1400 audit(1750809192.161:2073): avc: denied { link } for pid=15454 comm="syz.1.5590" name="#77" dev="tmpfs" ino=3049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 749.640527][ T2964] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 749.947122][ T2964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 749.958292][ T2964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.968874][ T2964] usb 2-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 749.978142][ T2964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.998908][ T2964] usb 2-1: config 0 descriptor?? [ 750.429569][ T2964] thrustmaster 0003:044F:B324.0052: item fetching failed at offset 4/5 [ 750.438354][ T2964] thrustmaster 0003:044F:B324.0052: parse failed [ 750.445279][ T2964] thrustmaster: probe of 0003:044F:B324.0052 failed with error -22 [ 750.679807][ T420] usb 2-1: USB disconnect, device number 18 [ 751.679420][T15560] serio: Serial port ptm1 [ 753.252226][ T1646] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 753.541947][ T1646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 753.599598][ T1646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.658263][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 753.658293][ T28] audit: type=1400 audit(1750809197.951:2104): avc: denied { create } for pid=15595 comm="syz.0.5644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 753.985261][ T1646] usb 3-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 753.996256][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.083006][ T28] audit: type=1400 audit(1750809198.381:2105): avc: denied { validate_trans } for pid=15586 comm="syz.1.5641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 754.105192][ T28] audit: type=1400 audit(1750809198.401:2106): avc: denied { bpf } for pid=15586 comm="syz.1.5641" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 754.139221][ T1646] usb 3-1: config 0 descriptor?? [ 754.147580][ T28] audit: type=1400 audit(1750809198.401:2107): avc: denied { perfmon } for pid=15586 comm="syz.1.5641" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 754.169553][ T28] audit: type=1400 audit(1750809198.401:2108): avc: denied { prog_run } for pid=15586 comm="syz.1.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 754.189108][ T28] audit: type=1400 audit(1750809198.451:2109): avc: denied { ioctl } for pid=15554 comm="syz.2.5628" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 754.216837][ T28] audit: type=1400 audit(1750809198.471:2110): avc: denied { prog_load } for pid=15586 comm="syz.1.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 754.236465][ T28] audit: type=1400 audit(1750809198.521:2111): avc: denied { map_create } for pid=15602 comm="syz.3.5645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 754.265929][ T28] audit: type=1400 audit(1750809198.521:2112): avc: denied { map_read map_write } for pid=15602 comm="syz.3.5645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 754.407588][ T28] audit: type=1326 audit(1750809198.551:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15604 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08b58e929 code=0x7ffc0000 [ 754.558757][ T1646] thrustmaster 0003:044F:B324.0053: item fetching failed at offset 4/5 [ 754.569424][ T1646] thrustmaster 0003:044F:B324.0053: parse failed [ 754.576190][ T1646] thrustmaster: probe of 0003:044F:B324.0053 failed with error -22 [ 754.931557][ T420] usb 3-1: USB disconnect, device number 7 [ 755.090397][ T1646] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 755.270731][ T1646] usb 2-1: Using ep0 maxpacket: 8 [ 755.276906][ T1646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.286755][ T1646] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 755.295906][ T1646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.305048][ T1646] usb 2-1: config 0 descriptor?? [ 755.713610][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 755.721392][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 755.728817][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 755.736583][ T1646] usbhid 2-1:0.0: can't add hid device: -32 [ 755.743269][ T1646] usbhid: probe of 2-1:0.0 failed with error -32 [ 755.763977][ T1646] usb 2-1: USB disconnect, device number 19 [ 756.769835][T15682] netem: change failed [ 758.829860][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 758.829907][ T28] audit: type=1400 audit(1750809203.121:2179): avc: denied { name_bind } for pid=15750 comm="syz.1.5706" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 759.477389][ T28] audit: type=1400 audit(1750809203.121:2180): avc: denied { node_bind } for pid=15750 comm="syz.1.5706" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 759.833217][ T28] audit: type=1400 audit(1750809203.621:2181): avc: denied { mounton } for pid=15754 comm="syz.0.5710" path="/467/file0" dev="tmpfs" ino=2502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 760.483645][ T28] audit: type=1400 audit(1750809204.101:2182): avc: denied { create } for pid=15765 comm="syz.4.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 760.680458][ T420] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 760.825150][ T28] audit: type=1400 audit(1750809204.101:2183): avc: denied { setopt } for pid=15765 comm="syz.4.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 760.860508][ T420] usb 1-1: device descriptor read/64, error -71 [ 761.150377][ T420] usb 1-1: device descriptor read/64, error -71 [ 761.158751][ T28] audit: type=1400 audit(1750809204.501:2184): avc: denied { create } for pid=15767 comm="syz.0.5714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 761.450430][ T420] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 761.488723][ T28] audit: type=1400 audit(1750809204.531:2185): avc: denied { write } for pid=15767 comm="syz.0.5714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 761.508564][ T28] audit: type=1400 audit(1750809204.581:2186): avc: denied { create } for pid=15767 comm="syz.0.5714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 761.528377][ T28] audit: type=1400 audit(1750809204.611:2187): avc: denied { read } for pid=15767 comm="syz.0.5714" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 761.551219][ T28] audit: type=1400 audit(1750809204.611:2188): avc: denied { open } for pid=15767 comm="syz.0.5714" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 761.650470][ T420] usb 1-1: device descriptor read/64, error -71 [ 761.980449][ T420] usb 1-1: device descriptor read/64, error -71 [ 762.030994][T15800] overlayfs: missing 'lowerdir' [ 762.101367][ T420] usb usb1-port1: attempt power cycle [ 762.305752][ T1646] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 762.521501][ T1646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 762.532699][ T1646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.542500][ T1646] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 762.551813][ T1646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.560494][ T420] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 762.563243][ T1646] usb 4-1: config 0 descriptor?? [ 762.601566][ T420] usb 1-1: device descriptor read/8, error -71 [ 762.782004][ T420] usb 1-1: device descriptor read/8, error -71 [ 764.106217][ T1646] thrustmaster 0003:044F:B324.0054: item fetching failed at offset 4/5 [ 764.121759][ T1646] thrustmaster 0003:044F:B324.0054: parse failed [ 764.128498][ T1646] thrustmaster: probe of 0003:044F:B324.0054 failed with error -22 [ 764.163659][T15812] netem: change failed [ 764.231256][T15819] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5731'. [ 764.283033][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 764.283052][ T28] audit: type=1400 audit(1750809208.581:2199): avc: denied { unlink } for pid=15820 comm="syz.2.5732" name="#84" dev="tmpfs" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 764.324129][ T1646] usb 4-1: USB disconnect, device number 14 [ 764.402954][ T28] audit: type=1400 audit(1750809208.631:2200): avc: denied { mount } for pid=15820 comm="syz.2.5732" name="/" dev="overlay" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 764.465686][ T28] audit: type=1400 audit(1750809208.641:2201): avc: denied { execute } for pid=15809 comm="syz.1.5727" name="file0" dev="tmpfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 764.600387][ T28] audit: type=1400 audit(1750809208.641:2202): avc: denied { execute_no_trans } for pid=15809 comm="syz.1.5727" path="/589/file0" dev="tmpfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 764.830327][ T28] audit: type=1400 audit(1750809208.641:2203): avc: denied { module_request } for pid=15809 comm="syz.1.5727" kmod="binfmt-0000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 765.020335][ T28] audit: type=1400 audit(1750809208.651:2204): avc: denied { unmount } for pid=8660 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 769.604820][ T28] audit: type=1400 audit(1750809213.901:2205): avc: denied { create } for pid=15839 comm="syz.0.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 769.606486][T15843] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.644004][ T28] audit: type=1400 audit(1750809213.901:2206): avc: denied { ioctl } for pid=15839 comm="syz.0.5740" path="socket:[69923]" dev="sockfs" ino=69923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 769.669349][ T28] audit: type=1400 audit(1750809213.931:2207): avc: denied { ioctl } for pid=15840 comm="syz.3.5739" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 769.796021][ T28] audit: type=1400 audit(1750809214.091:2208): avc: denied { append } for pid=15858 comm="syz.4.5747" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 769.819733][T15859] usb usb1: usbfs: process 15859 (syz.4.5747) did not claim interface 0 before use [ 769.832069][T15859] sch_fq: defrate 2048 ignored. [ 769.914821][ T28] audit: type=1400 audit(1750809214.131:2209): avc: denied { bind } for pid=15858 comm="syz.4.5747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 769.969386][ T28] audit: type=1400 audit(1750809214.131:2210): avc: denied { name_bind } for pid=15858 comm="syz.4.5747" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 770.017288][ T28] audit: type=1400 audit(1750809214.131:2211): avc: denied { node_bind } for pid=15858 comm="syz.4.5747" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 770.370365][ T420] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 770.581953][T15876] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.641523][ T420] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.662966][ T420] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.692757][ T420] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 770.719870][ T420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.733288][ T28] audit: type=1400 audit(1750809215.031:2212): avc: denied { write } for pid=15881 comm="syz.2.5756" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 770.768785][ T420] usb 1-1: config 0 descriptor?? [ 770.812374][T15885] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5757'. [ 771.111896][T15900] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.241617][ T420] thrustmaster 0003:044F:B324.0055: item fetching failed at offset 4/5 [ 771.260826][ T420] thrustmaster 0003:044F:B324.0055: parse failed [ 771.287572][ T420] thrustmaster: probe of 0003:044F:B324.0055 failed with error -22 [ 771.527218][ T420] usb 1-1: USB disconnect, device number 28 [ 771.925570][ T28] audit: type=1400 audit(1750809216.221:2213): avc: denied { mounton } for pid=15922 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 771.958997][T15922] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.966101][T15922] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.973770][T15922] device bridge_slave_0 entered promiscuous mode [ 771.981164][T15922] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.988283][T15922] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.996417][T15922] device bridge_slave_1 entered promiscuous mode [ 772.095418][T15922] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.102643][T15922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.109944][T15922] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.116172][ T28] audit: type=1400 audit(1750809216.411:2214): avc: denied { read write } for pid=15932 comm="syz.1.5777" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 772.117033][T15922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.141717][ T420] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 772.165386][ T420] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 772.179383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 772.194353][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.209929][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.231240][T15937] fido_id[15937]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 772.267388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 772.284364][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.291499][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.299744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 772.309254][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.316342][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.333797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 772.349956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 772.451627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 772.501217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 772.518192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 772.536589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 772.560210][T15922] device veth0_vlan entered promiscuous mode [ 772.593175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 772.631202][T15922] device veth1_macvtap entered promiscuous mode [ 772.665565][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 772.682483][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 772.767078][ T7351] device bridge_slave_1 left promiscuous mode [ 773.922440][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.930167][ T7351] device bridge_slave_0 left promiscuous mode [ 773.936559][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.945313][ T7351] device veth1_macvtap left promiscuous mode [ 773.951419][ T7351] device veth0_vlan left promiscuous mode [ 773.997805][T15972] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5789'. [ 775.734761][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 775.734780][ T28] audit: type=1400 audit(1750809220.031:2227): avc: denied { ioctl } for pid=15980 comm="syz.0.5793" path="socket:[70144]" dev="sockfs" ino=70144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 775.782360][ T28] audit: type=1400 audit(1750809220.031:2228): avc: denied { bind } for pid=15980 comm="syz.0.5793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 776.030011][ T28] audit: type=1400 audit(1750809220.321:2229): avc: denied { mount } for pid=15991 comm="syz.4.5798" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 776.056899][ T28] audit: type=1400 audit(1750809220.351:2230): avc: denied { read write } for pid=15994 comm="syz.3.5800" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 776.089700][ T28] audit: type=1400 audit(1750809220.351:2231): avc: denied { open } for pid=15994 comm="syz.3.5800" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 776.115095][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.124528][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.124882][ T28] audit: type=1400 audit(1750809220.351:2232): avc: denied { ioctl } for pid=15994 comm="syz.3.5800" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 776.136482][T15982] device bridge_slave_0 entered promiscuous mode [ 776.220334][ C1] ------------[ cut here ]------------ [ 776.225831][ C1] refcount_t: addition on 0; use-after-free. [ 776.231938][ C1] WARNING: CPU: 1 PID: 16003 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 776.232310][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.241447][ C1] Modules linked in: [ 776.241460][ C1] CPU: 1 PID: 16003 Comm: syz.2.5802 Not tainted 6.1.141-syzkaller-00027-g5ea45f742edd #0 [ 776.241480][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.241491][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 776.248563][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.252400][ C1] Code: 05 01 48 c7 c7 60 a4 a9 85 e8 58 fc dd fe 0f 0b eb df e8 3f b6 0c ff c6 05 6f ac 0b 05 01 48 c7 c7 a0 a3 a9 85 e8 3c fc dd fe <0f> 0b eb c3 e8 23 b6 0c ff c6 05 54 ac 0b 05 01 48 c7 c7 00 a4 a9 [ 776.262966][T15982] device bridge_slave_1 entered promiscuous mode [ 776.272406][ C1] RSP: 0000:ffffc900006ef920 EFLAGS: 00010246 [ 776.272436][ C1] RAX: bed944adb62ee500 RBX: 0000000000000002 RCX: ffff88811ac29440 [ 776.325773][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 776.333782][ C1] RBP: ffffc900006ef930 R08: dffffc0000000000 R09: fffff520000ddea1 [ 776.341791][ C1] R10: fffff520000ddea1 R11: 1ffff920000ddea0 R12: ffffc900006efae0 [ 776.349780][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88810a03fc00 [ 776.357786][ C1] FS: 0000555577fc1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 776.366771][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.373405][ C1] CR2: 000000110c288173 CR3: 000000012398f000 CR4: 00000000003506a0 [ 776.381521][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.389512][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 776.397534][ C1] Call Trace: [ 776.400861][ C1] [ 776.403819][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 776.408877][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 776.414308][ C1] ? __copy_skb_header+0x49f/0x630 [ 776.419539][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 776.424792][ C1] ? __skb_clone+0x47a/0x790 [ 776.429413][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 776.435197][ C1] ? skb_clone+0x228/0x380 [ 776.439640][ C1] tipc_disc_timeout+0x6a2/0x830 [ 776.444631][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 776.450113][ C1] ? __kasan_check_write+0x14/0x20 [ 776.455262][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 776.460319][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 776.465884][ C1] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 776.472169][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 776.477640][ C1] call_timer_fn+0x46/0x2a0 [ 776.482177][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 776.487653][ C1] __run_timers+0x639/0x9a0 [ 776.492197][ C1] ? calc_index+0x200/0x200 [ 776.496721][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 776.501964][ C1] run_timer_softirq+0x6a/0xf0 [ 776.506746][ C1] handle_softirqs+0x1d7/0x600 [ 776.511544][ C1] __irq_exit_rcu+0x52/0xf0 [ 776.516064][ C1] irq_exit_rcu+0x9/0x10 [ 776.520332][ C1] sysvec_apic_timer_interrupt+0x58/0xc0 [ 776.525983][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 776.531994][ C1] RIP: 0033:0x7f2a2ca4d9a0 [ 776.536422][ C1] Code: 41 5e c3 0f 1f 80 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <41> 89 fb 44 8d 56 04 4c 8d 0d 52 46 35 00 89 f0 4c 8d 05 49 26 35 [ 776.556059][ C1] RSP: 002b:00007fff1c136f48 EFLAGS: 00000246 [ 776.562177][ C1] RAX: 000000000001ba4c RBX: 00007f2a2d8e5720 RCX: 0000000000070e83 [ 776.570179][ C1] RDX: ffffffff819b5ab3 RSI: ffffffff819b5388 RDI: 0000000000000007 [ 776.578186][ C1] RBP: ffffffff819b5388 R08: 00007f2a2cdb6038 R09: 00007f2a2cda2000 [ 776.586233][ C1] R10: 00007f2a2bfff008 R11: 0000000000000007 R12: 0000000000000007 [ 776.594236][ C1] R13: 0000000000000000 R14: ffffffff819b5ab3 R15: 0000000000070e83 [ 776.602242][ C1] ? filemap_map_pages+0xee3/0x12e0 [ 776.607460][ C1] ? filemap_map_pages+0x7b8/0x12e0 [ 776.612698][ C1] ? filemap_map_pages+0xee3/0x12e0 [ 776.617906][ C1] ? filemap_map_pages+0x7b8/0x12e0 [ 776.623143][ C1] [ 776.626171][ C1] ---[ end trace 0000000000000000 ]--- [ 776.631663][ C1] ------------[ cut here ]------------ [ 776.637127][ C1] refcount_t: underflow; use-after-free. [ 776.642873][ C1] WARNING: CPU: 1 PID: 16003 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 776.652378][ C1] Modules linked in: [ 776.656378][ C1] CPU: 1 PID: 16003 Comm: syz.2.5802 Tainted: G W 6.1.141-syzkaller-00027-g5ea45f742edd #0 [ 776.667779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.677859][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 776.684050][ C1] Code: 05 01 48 c7 c7 a0 a3 a9 85 e8 3c fc dd fe 0f 0b eb c3 e8 23 b6 0c ff c6 05 54 ac 0b 05 01 48 c7 c7 00 a4 a9 85 e8 20 fc dd fe <0f> 0b eb a7 e8 07 b6 0c ff c6 05 35 ac 0b 05 01 48 c7 c7 40 a3 a9 [ 776.703694][ C1] RSP: 0000:ffffc900006ef920 EFLAGS: 00010246 [ 776.709772][ C1] RAX: bed944adb62ee500 RBX: 0000000000000003 RCX: ffff88811ac29440 [ 776.717766][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 776.725759][ C1] RBP: ffffc900006ef930 R08: dffffc0000000000 R09: fffff520000ddea1 [ 776.733757][ C1] R10: fffff520000ddea1 R11: 1ffff920000ddea0 R12: 00000000c0000000 [ 776.741760][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88810a03fc00 [ 776.749839][ C1] FS: 0000555577fc1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 776.758800][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.765441][ C1] CR2: 000000110c288173 CR3: 000000012398f000 CR4: 00000000003506a0 [ 776.773443][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.781438][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 776.789416][ C1] Call Trace: [ 776.792726][ C1] [ 776.795665][ C1] tipc_crypto_xmit+0x195e/0x2220 [ 776.800752][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 776.806162][ C1] ? __copy_skb_header+0x49f/0x630 [ 776.811334][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 776.816558][ C1] ? __skb_clone+0x47a/0x790 [ 776.821209][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 776.826949][ C1] ? skb_clone+0x228/0x380 [ 776.831403][ C1] tipc_disc_timeout+0x6a2/0x830 [ 776.836371][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 776.841909][ C1] ? __kasan_check_write+0x14/0x20 [ 776.847051][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 776.852140][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 776.857722][ C1] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 776.864010][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 776.869489][ C1] call_timer_fn+0x46/0x2a0 [ 776.874032][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 776.879644][ C1] __run_timers+0x639/0x9a0 [ 776.884221][ C1] ? calc_index+0x200/0x200 [ 776.888748][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 776.894003][ C1] run_timer_softirq+0x6a/0xf0 [ 776.898786][ C1] handle_softirqs+0x1d7/0x600 [ 776.903609][ C1] __irq_exit_rcu+0x52/0xf0 [ 776.908130][ C1] irq_exit_rcu+0x9/0x10 [ 776.912405][ C1] sysvec_apic_timer_interrupt+0x58/0xc0 [ 776.918063][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 776.924095][ C1] RIP: 0033:0x7f2a2ca4d9a0 [ 776.928539][ C1] Code: 41 5e c3 0f 1f 80 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <41> 89 fb 44 8d 56 04 4c 8d 0d 52 46 35 00 89 f0 4c 8d 05 49 26 35 [ 776.948180][ C1] RSP: 002b:00007fff1c136f48 EFLAGS: 00000246 [ 776.954291][ C1] RAX: 000000000001ba4c RBX: 00007f2a2d8e5720 RCX: 0000000000070e83 [ 776.962298][ C1] RDX: ffffffff819b5ab3 RSI: ffffffff819b5388 RDI: 0000000000000007 [ 776.970313][ C1] RBP: ffffffff819b5388 R08: 00007f2a2cdb6038 R09: 00007f2a2cda2000 [ 776.978306][ C1] R10: 00007f2a2bfff008 R11: 0000000000000007 R12: 0000000000000007 [ 776.986322][ C1] R13: 0000000000000000 R14: ffffffff819b5ab3 R15: 0000000000070e83 [ 776.994338][ C1] ? filemap_map_pages+0xee3/0x12e0 [ 776.999554][ C1] ? filemap_map_pages+0x7b8/0x12e0 [ 777.004777][ C1] ? filemap_map_pages+0xee3/0x12e0 [ 777.010000][ C1] ? filemap_map_pages+0x7b8/0x12e0 [ 777.015224][ C1] [ 777.018247][ C1] ---[ end trace 0000000000000000 ]--- [ 777.023802][ C1] ------------[ cut here ]------------ [ 777.029257][ C1] refcount_t: saturated; leaking memory. [ 777.035013][ C1] WARNING: CPU: 1 PID: 16003 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 777.044502][ C1] Modules linked in: [ 777.048407][ C1] CPU: 1 PID: 16003 Comm: syz.2.5802 Tainted: G W 6.1.141-syzkaller-00027-g5ea45f742edd #0 [ 777.059791][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.069872][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 777.076058][ C1] Code: 05 01 48 c7 c7 40 a3 a9 85 e8 04 fc dd fe 0f 0b eb 8b e8 eb b5 0c ff c6 05 1a ac 0b 05 01 48 c7 c7 40 a3 a9 85 e8 e8 fb dd fe <0f> 0b e9 6c ff ff ff e8 cc b5 0c ff c6 05 ff ab 0b 05 01 48 c7 c7 [ 777.095693][ C1] RSP: 0000:ffffc900006ef920 EFLAGS: 00010246 [ 777.101789][ C1] RAX: bed944adb62ee500 RBX: 0000000000000001 RCX: ffff88811ac29440 [ 777.109770][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 777.117769][ C1] RBP: ffffc900006ef930 R08: dffffc0000000000 R09: fffff520000ddea1 [ 777.125769][ C1] R10: fffff520000ddea1 R11: 1ffff920000ddea0 R12: ffffc900006efae0 [ 777.133770][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88810a03fc00 [ 777.141764][ C1] FS: 0000555577fc1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 777.150717][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.157307][ C1] CR2: 000000110c288173 CR3: 000000012398f000 CR4: 00000000003506a0 [ 777.165304][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.173395][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 777.181479][ C1] Call Trace: [ 777.184773][ C1] [ 777.187710][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 777.192772][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 777.198161][ C1] ? __copy_skb_header+0x49f/0x630 [ 777.203315][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 777.208528][ C1] ? __skb_clone+0x47a/0x790 [ 777.213148][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 777.218887][ C1] ? skb_clone+0x228/0x380 [ 777.223329][ C1] tipc_disc_timeout+0x6a2/0x830 [ 777.228284][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 777.233770][ C1] ? __kasan_check_write+0x14/0x20 [ 777.238897][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 777.243967][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 777.249538][ C1] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 777.255902][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 777.261394][ C1] call_timer_fn+0x46/0x2a0 [ 777.265912][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 777.271401][ C1] __run_timers+0x639/0x9a0 [ 777.275926][ C1] ? calc_index+0x200/0x200 [ 777.280475][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 777.285695][ C1] run_timer_softirq+0x6a/0xf0 [ 777.290490][ C1] handle_softirqs+0x1d7/0x600 [ 777.295270][ C1] __irq_exit_rcu+0x52/0xf0 [ 777.299787][ C1] irq_exit_rcu+0x9/0x10 [ 777.304052][ C1] sysvec_apic_timer_interrupt+0x58/0xc0 [ 777.309702][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 777.315706][ C1] RIP: 0033:0x7f2a2ca4d9a0 [ 777.320138][ C1] Code: 41 5e c3 0f 1f 80 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <41> 89 fb 44 8d 56 04 4c 8d 0d 52 46 35 00 89 f0 4c 8d 05 49 26 35 [ 777.339771][ C1] RSP: 002b:00007fff1c136f48 EFLAGS: 00000246 [ 777.345868][ C1] RAX: 000000000001ba4c RBX: 00007f2a2d8e5720 RCX: 0000000000070e83 [ 777.353959][ C1] RDX: ffffffff819b5ab3 RSI: ffffffff819b5388 RDI: 0000000000000007 [ 777.361964][ C1] RBP: ffffffff819b5388 R08: 00007f2a2cdb6038 R09: 00007f2a2cda2000 [ 777.369943][ C1] R10: 00007f2a2bfff008 R11: 0000000000000007 R12: 0000000000000007 [ 777.377947][ C1] R13: 0000000000000000 R14: ffffffff819b5ab3 R15: 0000000000070e83 [ 777.385956][ C1] ? filemap_map_pages+0xee3/0x12e0 [ 777.391193][ C1] ? filemap_map_pages+0x7b8/0x12e0 [ 777.396403][ C1] ? filemap_map_pages+0xee3/0x12e0 [ 777.401635][ C1] ? filemap_map_pages+0x7b8/0x12e0 [ 777.406844][ C1] [ 777.409869][ C1] ---[ end trace 0000000000000000 ]--- [ 777.436013][T16008] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5803'. [ 777.532930][ T7351] tipc: Disabling bearer [ 777.545942][ T7351] tipc: Disabling bearer [ 778.872661][ T7351] tipc: Left network mode [ 779.061225][T16031] netem: change failed [ 779.112261][T16035] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5814'. [ 779.128364][ T7351] ------------[ cut here ]------------ [ 779.134033][ T7351] refcount_t: saturated; leaking memory. [ 779.148903][ T7351] WARNING: CPU: 0 PID: 7351 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 779.158509][ T7351] Modules linked in: [ 779.162509][ T7351] CPU: 0 PID: 7351 Comm: kworker/u4:9 Tainted: G W 6.1.141-syzkaller-00027-g5ea45f742edd #0 [ 779.174103][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.184237][ T7351] Workqueue: netns cleanup_net [ 779.189027][ T7351] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 779.195254][ T7351] Code: 05 01 48 c7 c7 00 a4 a9 85 e8 20 fc dd fe 0f 0b eb a7 e8 07 b6 0c ff c6 05 35 ac 0b 05 01 48 c7 c7 40 a3 a9 85 e8 04 fc dd fe <0f> 0b eb 8b e8 eb b5 0c ff c6 05 1a ac 0b 05 01 48 c7 c7 40 a3 a9 [ 779.214989][ T7351] RSP: 0018:ffffc9000df077c0 EFLAGS: 00010246 [ 779.221189][ T7351] RAX: 75ffa082ed728e00 RBX: 0000000000000000 RCX: ffff88810d80bcc0 [ 779.229179][ T7351] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 779.237202][ T7351] RBP: ffffc9000df077d0 R08: dffffc0000000000 R09: fffff52001be0e75 [ 779.245248][ T7351] R10: fffff52001be0e75 R11: 1ffff92001be0e74 R12: 1ffff92001be0f04 [ 779.253254][ T7351] R13: ffffc9000df07840 R14: 0000000000000000 R15: ffff8881220d698c [ 779.261265][ T7351] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 779.270207][ T7351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.276841][ T7351] CR2: 00002000000015c0 CR3: 0000000124ae0000 CR4: 00000000003506b0 [ 779.284842][ T7351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 779.292838][ T7351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 779.300858][ T7351] Call Trace: [ 779.304149][ T7351] [ 779.307089][ T7351] nf_nat_masq_schedule+0x46b/0x4e0 [ 779.312322][ T7351] ? __kasan_check_write+0x14/0x20 [ 779.317458][ T7351] ? __cfi_device_cmp+0x10/0x10 [ 779.322366][ T7351] ? masq_device_event+0xd0/0xd0 [ 779.327322][ T7351] ? nfqnl_rcv_dev_event+0x441/0x470 [ 779.332753][ T7351] ? rtnl_is_locked+0x15/0x20 [ 779.337453][ T7351] masq_device_event+0x9b/0xd0 [ 779.342257][ T7351] raw_notifier_call_chain+0xa1/0x110 [ 779.347649][ T7351] dev_close_many+0x32d/0x4d0 [ 779.352437][ T7351] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 779.359218][ T7351] ? __cfi_dev_close_many+0x10/0x10 [ 779.364449][ T7351] ? wait_for_common+0x54c/0x620 [ 779.369396][ T7351] ? __kasan_check_read+0x11/0x20 [ 779.374454][ T7351] unregister_netdevice_many+0x439/0x1820 [ 779.380193][ T7351] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 779.386375][ T7351] ? unregister_netdevice_queue+0x1aa/0x360 [ 779.392299][ T7351] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 779.398554][ T7351] ? rcu_barrier+0x7e/0x600 [ 779.403099][ T7351] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 779.408412][ T7351] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 779.414276][ T7351] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 779.420131][ T7351] cleanup_net+0x62d/0xb00 [ 779.424610][ T7351] ? __cfi_cleanup_net+0x10/0x10 [ 779.429577][ T7351] process_one_work+0x71f/0xc40 [ 779.434485][ T7351] worker_thread+0xa29/0x11f0 [ 779.439184][ T7351] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 779.444692][ T7351] kthread+0x281/0x320 [ 779.448787][ T7351] ? __cfi_worker_thread+0x10/0x10 [ 779.453928][ T7351] ? __cfi_kthread+0x10/0x10 [ 779.458551][ T7351] ret_from_fork+0x1f/0x30 [ 779.463015][ T7351] [ 779.466050][ T7351] ---[ end trace 0000000000000000 ]--- [ 779.476542][ T7351] ------------[ cut here ]------------ [ 779.482137][ T7351] WARNING: CPU: 0 PID: 7351 at lib/ref_tracker.c:77 ref_tracker_alloc+0x2ae/0x430 [ 779.491495][ T7351] Modules linked in: [ 779.495419][ T7351] CPU: 0 PID: 7351 Comm: kworker/u4:9 Tainted: G W 6.1.141-syzkaller-00027-g5ea45f742edd #0 [ 779.507015][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.517193][ T7351] Workqueue: netns cleanup_net [ 779.522102][ T7351] RIP: 0010:ref_tracker_alloc+0x2ae/0x430 [ 779.527854][ T7351] Code: fa e5 fe 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 48 8b 7c 24 10 48 8b 74 24 18 e8 3b 38 66 02 31 c0 eb 6d e8 22 fa e5 fe <0f> 0b 4d 85 e4 0f 85 09 fe ff ff 4c 8b 64 24 10 4d 8d 74 24 0c 4c [ 779.547514][ T7351] RSP: 0018:ffffc9000df076a0 EFLAGS: 00010293 [ 779.553631][ T7351] RAX: ffffffff8289fcfe RBX: dffffc0000000000 RCX: ffff88810d80bcc0 [ 779.561627][ T7351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000df07760 [ 779.569626][ T7351] RBP: ffffc9000df077d0 R08: dffffc0000000000 R09: ffffc9000df076e0 [ 779.577667][ T7351] R10: fffff52001be0eec R11: 1ffff92001be0edc R12: ffff888117e86038 [ 779.585672][ T7351] R13: ffff8881220d69a0 R14: 0000000000000cc0 R15: ffff8881220d6990 [ 779.593689][ T7351] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 779.602654][ T7351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.609266][ T7351] CR2: 0000001b3351fffc CR3: 000000012d42e000 CR4: 00000000003506b0 [ 779.617308][ T7351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 779.625323][ T7351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 779.633362][ T7351] Call Trace: [ 779.636658][ T7351] [ 779.639608][ T7351] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 779.645158][ T7351] ? kasan_save_alloc_info+0x25/0x30 [ 779.650494][ T7351] ? __kasan_kmalloc+0x95/0xb0 [ 779.655283][ T7351] ? nf_nat_masq_schedule+0x238/0x4e0 [ 779.661015][ T7351] ? kmalloc_trace+0x40/0xb0 [ 779.665643][ T7351] nf_nat_masq_schedule+0x338/0x4e0 [ 779.670947][ T7351] ? __kasan_check_write+0x14/0x20 [ 779.676082][ T7351] ? __cfi_device_cmp+0x10/0x10 [ 779.680988][ T7351] ? masq_device_event+0xd0/0xd0 [ 779.685942][ T7351] ? nfqnl_rcv_dev_event+0x441/0x470 [ 779.691269][ T7351] ? rtnl_is_locked+0x15/0x20 [ 779.695966][ T7351] masq_device_event+0x9b/0xd0 [ 779.700769][ T7351] raw_notifier_call_chain+0xa1/0x110 [ 779.706163][ T7351] dev_close_many+0x32d/0x4d0 [ 779.710878][ T7351] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 779.717661][ T7351] ? __cfi_dev_close_many+0x10/0x10 [ 779.722909][ T7351] ? wait_for_common+0x54c/0x620 [ 779.727859][ T7351] ? __kasan_check_read+0x11/0x20 [ 779.732928][ T7351] unregister_netdevice_many+0x439/0x1820 [ 779.738672][ T7351] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 779.744876][ T7351] ? unregister_netdevice_queue+0x1aa/0x360 [ 779.750825][ T7351] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 779.757093][ T7351] ? rcu_barrier+0x7e/0x600 [ 779.761645][ T7351] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 779.766952][ T7351] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 779.772809][ T7351] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 779.778654][ T7351] cleanup_net+0x62d/0xb00 [ 779.783150][ T7351] ? __cfi_cleanup_net+0x10/0x10 [ 779.788112][ T7351] process_one_work+0x71f/0xc40 [ 779.793031][ T7351] worker_thread+0xa29/0x11f0 [ 779.797737][ T7351] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 779.803256][ T7351] kthread+0x281/0x320 [ 779.807424][ T7351] ? __cfi_worker_thread+0x10/0x10 [ 779.812572][ T7351] ? __cfi_kthread+0x10/0x10 [ 779.817268][ T7351] ret_from_fork+0x1f/0x30 [ 779.821805][ T7351] [ 779.824854][ T7351] ---[ end trace 0000000000000000 ]--- [ 779.831681][ T8897] ------------[ cut here ]------------ [ 779.837148][ T8897] WARNING: CPU: 0 PID: 8897 at lib/ref_tracker.c:110 ref_tracker_free+0x5de/0x7c0 [ 779.846528][ T8897] Modules linked in: [ 779.850559][ T8897] CPU: 0 PID: 8897 Comm: kworker/0:10 Tainted: G W 6.1.141-syzkaller-00027-g5ea45f742edd #0 [ 779.862115][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.872203][ T8897] Workqueue: events iterate_cleanup_work [ 779.877893][ T8897] RIP: 0010:ref_tracker_free+0x5de/0x7c0 [ 779.883586][ T8897] Code: 85 e8 4e 61 5b 02 43 0f b6 04 2c 84 c0 4c 8b 74 24 08 0f 85 c9 01 00 00 41 8b 3f e8 dc e8 ff ff 4c 89 f6 eb 84 e8 32 f2 e5 fe <0f> 0b 4d 85 ff 0f 85 d3 fa ff ff 4c 8b 24 24 4d 8d 74 24 0c 4c 89 [ 779.903242][ T8897] RSP: 0018:ffffc90004da7b20 EFLAGS: 00010293 [ 779.909336][ T8897] RAX: ffffffff828a04ee RBX: 1ffff920009b4f68 RCX: ffff888112316540 [ 779.917353][ T8897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004da7be0 [ 779.925356][ T8897] RBP: ffffc90004da7c50 R08: dffffc0000000000 R09: ffffc90004da7b60 [ 779.933374][ T8897] R10: fffff520009b4f7c R11: 1ffff920009b4f6c R12: ffff8881220d69a0 [ 779.941370][ T8897] R13: dffffc0000000000 R14: ffffc90004da7b60 R15: ffff888117e86038 [ 779.949442][ T8897] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 779.958408][ T8897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.965021][ T8897] CR2: 0000001b3351fffc CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 779.973126][ T8897] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 779.981134][ T8897] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 779.989215][ T8897] Call Trace: [ 779.992556][ T8897] [ 779.995615][ T8897] ? __this_cpu_preempt_check+0x13/0x20 [ 780.001209][ T8897] ? __perf_event_task_sched_in+0x188/0x1d0 [ 780.007119][ T8897] ? __cfi_ref_tracker_free+0x10/0x10 [ 780.012559][ T8897] ? __cfi_device_cmp+0x10/0x10 [ 780.017449][ T8897] ? __kasan_check_read+0x11/0x20 [ 780.022545][ T8897] ? nf_ct_iterate_cleanup_net+0xe8/0x130 [ 780.028288][ T8897] iterate_cleanup_work+0x105/0x1f0 [ 780.033549][ T8897] ? __cfi_iterate_cleanup_work+0x10/0x10 [ 780.039289][ T8897] ? __schedule+0xb8f/0x14e0 [ 780.044028][ T8897] process_one_work+0x71f/0xc40 [ 780.048900][ T8897] worker_thread+0xa29/0x11f0 [ 780.053633][ T8897] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 780.059118][ T8897] kthread+0x281/0x320 [ 780.063217][ T8897] ? __cfi_worker_thread+0x10/0x10 [ 780.068337][ T8897] ? __cfi_kthread+0x10/0x10 [ 780.072964][ T8897] ret_from_fork+0x1f/0x30 [ 780.077398][ T8897] [ 780.080460][ T8897] ---[ end trace 0000000000000000 ]--- [ 780.160978][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 780.170513][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 780.215803][T16061] netem: change failed [ 780.221480][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 780.230231][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 780.239457][ T2205] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.246551][ T2205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.259776][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 780.270342][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 780.281991][ T2205] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.289050][ T2205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.296617][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.032938][T16063] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5827'. [ 782.116757][T15982] device veth0_vlan entered promiscuous mode [ 782.144999][T15982] device veth1_macvtap entered promiscuous mode [ 782.220010][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 782.322209][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 782.334588][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 782.351723][ T28] audit: type=1400 audit(1750809226.651:2233): avc: denied { write } for pid=16100 comm="syz.1.5841" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 782.366878][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 782.383270][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 782.393094][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 782.404544][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 782.439692][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 782.449844][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 782.459659][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 782.494444][T16106] overlayfs: missing 'lowerdir' [ 782.522843][ T28] audit: type=1400 audit(1750809226.821:2234): avc: denied { block_suspend } for pid=16102 comm="syz.4.5842" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 782.585656][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 782.594103][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 782.602595][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 782.611025][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 782.619158][ T28] audit: type=1400 audit(1750809226.911:2235): avc: denied { unmount } for pid=15982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 782.640113][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 782.647971][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 782.722696][ T28] audit: type=1400 audit(1750809227.021:2236): avc: denied { append } for pid=16117 comm="syz.2.5847" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 783.039539][T16105] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.058114][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.166187][T16105] device bridge_slave_0 entered promiscuous mode [ 783.708714][T16105] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.758249][T16105] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.768093][T16105] device bridge_slave_1 entered promiscuous mode [ 783.826865][T16130] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5850'. [ 783.865150][T16148] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.303208][ T7351] device veth1_macvtap left promiscuous mode [ 784.309575][ T7351] device veth0_vlan left promiscuous mode [ 784.462876][T16160] overlayfs: missing 'lowerdir' [ 784.873921][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 784.888868][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 784.903619][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 784.912621][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 784.921355][T11543] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.928417][T11543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.936163][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 784.947029][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 784.955980][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 784.971008][ T28] audit: type=1400 audit(1750809229.261:2237): avc: denied { connect } for pid=16161 comm="syz.4.5860" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 784.995350][T11543] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.002435][T11543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.010626][ T28] audit: type=1400 audit(1750809229.261:2238): avc: denied { write } for pid=16161 comm="syz.4.5860" path="socket:[71828]" dev="sockfs" ino=71828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 785.034840][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 785.043354][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 785.051779][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 785.060105][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 785.082415][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 785.091160][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 785.141252][T16105] device veth0_vlan entered promiscuous mode [ 785.147823][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 785.156627][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 785.177834][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 785.186130][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 785.194793][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 785.203545][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 785.213323][T16105] device veth1_macvtap entered promiscuous mode [ 785.229554][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 785.237968][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 785.247329][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 785.282508][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 785.291947][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 785.421518][T16180] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5867'. [ 785.466775][ T28] audit: type=1400 audit(1750809229.761:2239): avc: denied { create } for pid=16183 comm="syz.3.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 786.116857][T16195] netem: change failed [ 786.488152][T16202] device veth1_macvtap left promiscuous mode [ 786.494580][T16202] device macsec0 entered promiscuous mode [ 786.521987][ T7351] device bridge_slave_1 left promiscuous mode [ 786.532762][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.565759][ T7351] device bridge_slave_0 left promiscuous mode [ 786.658235][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.686961][ T7351] device veth1_macvtap left promiscuous mode [ 786.912377][ T7351] device veth0_vlan left promiscuous mode [ 790.669873][T16217] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5881'. [ 791.023782][ T7351] ================================================================== [ 791.031913][ T7351] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 791.039654][ T7351] Read of size 4 at addr ffff8881220d698c by task kworker/u4:9/7351 [ 791.047687][ T7351] [ 791.050020][ T7351] CPU: 1 PID: 7351 Comm: kworker/u4:9 Tainted: G W 6.1.141-syzkaller-00027-g5ea45f742edd #0 [ 791.061487][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.071559][ T7351] Workqueue: netns cleanup_net [ 791.076349][ T7351] Call Trace: [ 791.079633][ T7351] [ 791.082572][ T7351] __dump_stack+0x21/0x24 [ 791.086928][ T7351] dump_stack_lvl+0xee/0x150 [ 791.091546][ T7351] ? __cfi_dump_stack_lvl+0x8/0x8 [ 791.096587][ T7351] ? __cfi__printk+0x8/0x8 [ 791.101042][ T7351] ? tcp_metrics_flush_all+0xd3/0x210 [ 791.106519][ T7351] print_address_description+0x71/0x210 [ 791.112084][ T7351] print_report+0x4a/0x60 [ 791.116426][ T7351] kasan_report+0x122/0x150 [ 791.120944][ T7351] ? tcp_metrics_flush_all+0xd3/0x210 [ 791.126416][ T7351] kasan_check_range+0x280/0x290 [ 791.131370][ T7351] __kasan_check_read+0x11/0x20 [ 791.136238][ T7351] tcp_metrics_flush_all+0xd3/0x210 [ 791.141449][ T7351] ? __cfi_tcp_net_metrics_exit_batch+0x10/0x10 [ 791.147791][ T7351] tcp_net_metrics_exit_batch+0x10/0x20 [ 791.153518][ T7351] cleanup_net+0x62d/0xb00 [ 791.158037][ T7351] ? __cfi_cleanup_net+0x10/0x10 [ 791.163084][ T7351] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 791.168477][ T7351] process_one_work+0x71f/0xc40 [ 791.173342][ T7351] worker_thread+0xa29/0x11f0 [ 791.178028][ T7351] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 791.183515][ T7351] kthread+0x281/0x320 [ 791.187598][ T7351] ? __cfi_worker_thread+0x10/0x10 [ 791.192732][ T7351] ? __cfi_kthread+0x10/0x10 [ 791.197331][ T7351] ret_from_fork+0x1f/0x30 [ 791.201764][ T7351] [ 791.204790][ T7351] [ 791.207120][ T7351] Allocated by task 7961: [ 791.211452][ T7351] kasan_set_track+0x4b/0x70 [ 791.216061][ T7351] kasan_save_alloc_info+0x25/0x30 [ 791.221207][ T7351] __kasan_slab_alloc+0x72/0x80 [ 791.226088][ T7351] slab_post_alloc_hook+0x4f/0x2d0 [ 791.231313][ T7351] kmem_cache_alloc+0x16e/0x330 [ 791.236190][ T7351] copy_net_ns+0x145/0x5c0 [ 791.240799][ T7351] create_new_namespaces+0x3a2/0x660 [ 791.246114][ T7351] unshare_nsproxy_namespaces+0x120/0x170 [ 791.251862][ T7351] ksys_unshare+0x4ac/0x7b0 [ 791.256404][ T7351] __x64_sys_unshare+0x38/0x40 [ 791.261192][ T7351] x64_sys_call+0x767/0x9a0 [ 791.265725][ T7351] do_syscall_64+0x4c/0xa0 [ 791.270214][ T7351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.276133][ T7351] [ 791.278469][ T7351] Freed by task 7351: [ 791.282521][ T7351] kasan_set_track+0x4b/0x70 [ 791.287141][ T7351] kasan_save_free_info+0x31/0x50 [ 791.292295][ T7351] ____kasan_slab_free+0x132/0x180 [ 791.297441][ T7351] __kasan_slab_free+0x11/0x20 [ 791.302225][ T7351] slab_free_freelist_hook+0xc2/0x190 [ 791.307621][ T7351] kmem_cache_free+0x12d/0x300 [ 791.312401][ T7351] cleanup_net+0xa58/0xb00 [ 791.316829][ T7351] process_one_work+0x71f/0xc40 [ 791.321694][ T7351] worker_thread+0xa29/0x11f0 [ 791.326382][ T7351] kthread+0x281/0x320 [ 791.330487][ T7351] ret_from_fork+0x1f/0x30 [ 791.334918][ T7351] [ 791.337247][ T7351] Last potentially related work creation: [ 791.342963][ T7351] kasan_save_stack+0x3a/0x60 [ 791.347743][ T7351] __kasan_record_aux_stack+0xb6/0xc0 [ 791.353138][ T7351] kasan_record_aux_stack_noalloc+0xb/0x10 [ 791.358965][ T7351] insert_work+0x51/0x300 [ 791.363313][ T7351] __queue_work+0x9b1/0xd30 [ 791.367833][ T7351] delayed_work_timer_fn+0x61/0x80 [ 791.372963][ T7351] call_timer_fn+0x46/0x2a0 [ 791.377483][ T7351] __run_timers+0x667/0x9a0 [ 791.381998][ T7351] run_timer_softirq+0xb8/0xf0 [ 791.386784][ T7351] handle_softirqs+0x1d7/0x600 [ 791.391559][ T7351] __irq_exit_rcu+0x52/0xf0 [ 791.396072][ T7351] irq_exit_rcu+0x9/0x10 [ 791.400328][ T7351] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 791.405982][ T7351] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 791.412076][ T7351] [ 791.414413][ T7351] Second to last potentially related work creation: [ 791.421001][ T7351] kasan_save_stack+0x3a/0x60 [ 791.425701][ T7351] __kasan_record_aux_stack+0xb6/0xc0 [ 791.431088][ T7351] kasan_record_aux_stack_noalloc+0xb/0x10 [ 791.436896][ T7351] insert_work+0x51/0x300 [ 791.441233][ T7351] __queue_work+0x9b1/0xd30 [ 791.445735][ T7351] delayed_work_timer_fn+0x61/0x80 [ 791.450846][ T7351] call_timer_fn+0x46/0x2a0 [ 791.455345][ T7351] __run_timers+0x667/0x9a0 [ 791.459846][ T7351] run_timer_softirq+0xb8/0xf0 [ 791.464603][ T7351] handle_softirqs+0x1d7/0x600 [ 791.469358][ T7351] __irq_exit_rcu+0x52/0xf0 [ 791.473855][ T7351] irq_exit_rcu+0x9/0x10 [ 791.478093][ T7351] sysvec_apic_timer_interrupt+0x58/0xc0 [ 791.483720][ T7351] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 791.489701][ T7351] [ 791.492019][ T7351] The buggy address belongs to the object at ffff8881220d6900 [ 791.492019][ T7351] which belongs to the cache net_namespace of size 4224 [ 791.506330][ T7351] The buggy address is located 140 bytes inside of [ 791.506330][ T7351] 4224-byte region [ffff8881220d6900, ffff8881220d7980) [ 791.519691][ T7351] [ 791.522007][ T7351] The buggy address belongs to the physical page: [ 791.528418][ T7351] page:ffffea0004883400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881220d4600 pfn:0x1220d0 [ 791.539954][ T7351] head:ffffea0004883400 order:3 compound_mapcount:0 compound_pincount:0 [ 791.548276][ T7351] flags: 0x4000000000010200(slab|head|zone=1) [ 791.554341][ T7351] raw: 4000000000010200 0000000000000000 dead000000000001 ffff8881002ad080 [ 791.563091][ T7351] raw: ffff8881220d4600 0000000080070005 00000001ffffffff 0000000000000000 [ 791.571659][ T7351] page dumped because: kasan: bad access detected [ 791.578057][ T7351] page_owner tracks the page as allocated [ 791.583765][ T7351] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5557, tgid 5556 (syz.3.1818), ts 295796234054, free_ts 293659213639 [ 791.606607][ T7351] post_alloc_hook+0x1f5/0x210 [ 791.611389][ T7351] prep_new_page+0x1c/0x110 [ 791.615891][ T7351] get_page_from_freelist+0x2c7b/0x2cf0 [ 791.621523][ T7351] __alloc_pages+0x19e/0x3a0 [ 791.626124][ T7351] alloc_slab_page+0x6e/0xf0 [ 791.630716][ T7351] new_slab+0x98/0x3d0 [ 791.634782][ T7351] ___slab_alloc+0x6f6/0xb50 [ 791.639371][ T7351] __slab_alloc+0x5e/0xa0 [ 791.643697][ T7351] kmem_cache_alloc+0x1b0/0x330 [ 791.648541][ T7351] copy_net_ns+0x145/0x5c0 [ 791.652951][ T7351] create_new_namespaces+0x3a2/0x660 [ 791.658238][ T7351] unshare_nsproxy_namespaces+0x120/0x170 [ 791.663959][ T7351] ksys_unshare+0x4ac/0x7b0 [ 791.668460][ T7351] __x64_sys_unshare+0x38/0x40 [ 791.673224][ T7351] x64_sys_call+0x767/0x9a0 [ 791.677726][ T7351] do_syscall_64+0x4c/0xa0 [ 791.682171][ T7351] page last free stack trace: [ 791.686836][ T7351] free_unref_page_prepare+0x742/0x750 [ 791.692289][ T7351] free_unref_page+0x8f/0x530 [ 791.696965][ T7351] __free_pages+0x67/0x100 [ 791.701376][ T7351] __free_slab+0xca/0x1a0 [ 791.705704][ T7351] __unfreeze_partials+0x160/0x190 [ 791.710820][ T7351] put_cpu_partial+0xa9/0x100 [ 791.715493][ T7351] __slab_free+0x1c4/0x280 [ 791.719906][ T7351] ___cache_free+0xbf/0xd0 [ 791.724319][ T7351] qlist_free_all+0xc6/0x140 [ 791.728898][ T7351] kasan_quarantine_reduce+0x14a/0x170 [ 791.734359][ T7351] __kasan_slab_alloc+0x24/0x80 [ 791.739205][ T7351] slab_post_alloc_hook+0x4f/0x2d0 [ 791.744312][ T7351] kmem_cache_alloc+0x16e/0x330 [ 791.749161][ T7351] getname_flags+0xb9/0x500 [ 791.753666][ T7351] __x64_sys_unlink+0x3c/0x50 [ 791.758336][ T7351] x64_sys_call+0x958/0x9a0 [ 791.762837][ T7351] [ 791.765155][ T7351] Memory state around the buggy address: [ 791.770775][ T7351] ffff8881220d6880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 791.778854][ T7351] ffff8881220d6900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 791.786996][ T7351] >ffff8881220d6980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 791.795046][ T7351] ^ [ 791.799367][ T7351] ffff8881220d6a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 791.807419][ T7351] ffff8881220d6a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 791.815476][ T7351] ================================================================== [ 791.823596][ T7351] Disabling lock debugging due to kernel taint [ 791.844241][ T28] audit: type=1400 audit(1750809236.131:2240): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 792.020109][ T28] audit: type=1400 audit(1750809236.131:2241): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.150353][ T28] audit: type=1400 audit(1750809236.131:2242): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.207552][ T28] audit: type=1400 audit(1750809236.131:2243): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.231672][ T28] audit: type=1400 audit(1750809236.131:2244): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.252286][ T28] audit: type=1400 audit(1750809236.131:2245): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.278390][ T28] audit: type=1400 audit(1750809236.131:2246): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.301240][ T28] audit: type=1400 audit(1750809236.171:2247): avc: denied { audit_write } for pid=16262 comm="syz.2.5899" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 792.322641][ T28] audit: type=1107 audit(1750809236.171:2248): pid=16262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 792.336069][ T28] audit: type=1400 audit(1750809236.201:2249): avc: denied { write } for pid=276 comm="syz-executor" path="pipe:[14925]" dev="pipefs" ino=14925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 792.783053][ T7351] tipc: Disabling bearer [ 792.788431][ T7351] tipc: Left network mode [ 793.281607][ T7351] device bridge_slave_1 left promiscuous mode [ 793.287750][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.295300][ T7351] device bridge_slave_0 left promiscuous mode [ 793.301467][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.309253][ T7351] device bridge_slave_1 left promiscuous mode [ 793.315438][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.322845][ T7351] device bridge_slave_0 left promiscuous mode [ 793.328919][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.336772][ T7351] device bridge_slave_1 left promiscuous mode [ 793.342939][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.350488][ T7351] device bridge_slave_0 left promiscuous mode [ 793.356618][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.364217][ T7351] device bridge_slave_1 left promiscuous mode [ 793.370345][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.377602][ T7351] device bridge_slave_0 left promiscuous mode [ 793.383749][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.391390][ T7351] device bridge_slave_1 left promiscuous mode [ 793.397462][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.404905][ T7351] device bridge_slave_0 left promiscuous mode [ 793.411020][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.419063][ T7351] device veth1_macvtap left promiscuous mode [ 793.425138][ T7351] device veth0_vlan left promiscuous mode [ 793.430995][ T7351] device veth1_macvtap left promiscuous mode [ 793.436967][ T7351] device veth0_vlan left promiscuous mode [ 793.443151][ T7351] device veth0_vlan left promiscuous mode [ 793.449118][ T7351] device veth1_macvtap left promiscuous mode [ 793.455148][ T7351] device veth0_vlan left promiscuous mode [ 793.461133][ T7351] device veth1_macvtap left promiscuous mode [ 793.467103][ T7351] device veth0_vlan left promiscuous mode