last executing test programs: 5.287609711s ago: executing program 3 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 5.287119241s ago: executing program 3 (id=84): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 4.387460901s ago: executing program 3 (id=92): syz_usb_connect(0x5, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505032404"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.287611459s ago: executing program 3 (id=119): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000026"], 0xc) 2.279418338s ago: executing program 3 (id=121): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @loopback, 0x1009}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfe54, &(0x7f0000001b00)=ANY=[], 0x0) 1.76608473s ago: executing program 1 (id=125): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.721784671s ago: executing program 3 (id=127): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) 1.605205484s ago: executing program 1 (id=132): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x13a9c53, 0x0, 0x3, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x62) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 1.521576886s ago: executing program 1 (id=135): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c25, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) write(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xe25, 0x7}, 0x0, 0x0, 0x0, 0x0) 1.491317387s ago: executing program 1 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0x4305}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 1.144895944s ago: executing program 1 (id=137): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.091614565s ago: executing program 1 (id=138): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b1"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xf3, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0x5}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 793.323392ms ago: executing program 2 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000080), &(0x7f0000000680)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 739.541224ms ago: executing program 2 (id=141): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xfffffffc, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c76, 0x1f, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 720.011124ms ago: executing program 2 (id=142): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 712.091814ms ago: executing program 2 (id=143): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) 690.677204ms ago: executing program 2 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 662.236015ms ago: executing program 2 (id=145): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="510f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="201117"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 250.652724ms ago: executing program 4 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 221.888995ms ago: executing program 4 (id=159): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffeff7, 0x0, &(0x7f0000000180)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) 212.443685ms ago: executing program 4 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0x27, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x9, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x100003, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x20001, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x2, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x2, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x9, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x4, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 202.229766ms ago: executing program 4 (id=161): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x400c84, &(0x7f0000000000)={[{@norecovery}, {@errors_remount}, {@nouid32}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) 131.252487ms ago: executing program 0 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="78000000000701030000000000000000010000051c000780080001400000000a0800024000000004080001400000ddf308000540000000000900010073797a31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004084) 130.875577ms ago: executing program 0 (id=163): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0xc000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3300051, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 130.763497ms ago: executing program 0 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 126.981747ms ago: executing program 4 (id=165): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)=r0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000026c0)={0xffffffffffffffff, 0x20, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r8}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 94.042238ms ago: executing program 4 (id=166): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 51.537149ms ago: executing program 0 (id=167): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x3, 0x800) 12.581669ms ago: executing program 0 (id=168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 0s ago: executing program 0 (id=169): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c636f6465706167653d3836342c757466383d312c696f636861727365743d6684cadcec4bffd27466383d312c00"], 0x1, 0x248, &(0x7f0000002340)="$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") mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=virtio,', {[{@cache_mmap}, {@noextend}, {@version_9p2000}, {@version_u}]}}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) 0s ago: executing program 0 (id=171): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000020200)="d54d15") kernel console output (not intermixed with test programs): rocess permissive=1 [ 16.319987][ T24] audit: type=1400 audit(1783363784.090:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 23.955144][ T24] audit: type=1400 audit(1783363791.770:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.958792][ T271] cgroup: Unknown subsys name 'net' [ 23.978023][ T24] audit: type=1400 audit(1783363791.770:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.005660][ T24] audit: type=1400 audit(1783363791.800:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.006165][ T271] cgroup: Unknown subsys name 'devices' [ 24.120220][ T271] cgroup: Unknown subsys name 'hugetlb' [ 24.126040][ T271] cgroup: Unknown subsys name 'rlimit' [ 24.237847][ T24] audit: type=1400 audit(1783363792.050:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.261223][ T24] audit: type=1400 audit(1783363792.050:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.286529][ T24] audit: type=1400 audit(1783363792.060:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.306452][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.319195][ T24] audit: type=1400 audit(1783363792.140:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.344695][ T24] audit: type=1400 audit(1783363792.140:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.380698][ T24] audit: type=1400 audit(1783363792.200:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.406507][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.406519][ T24] audit: type=1400 audit(1783363792.200:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.226547][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.233702][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.241395][ T279] device bridge_slave_0 entered promiscuous mode [ 25.249649][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.256709][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.264139][ T279] device bridge_slave_1 entered promiscuous mode [ 25.316183][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.323397][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.331072][ T280] device bridge_slave_0 entered promiscuous mode [ 25.338824][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.345875][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.353327][ T280] device bridge_slave_1 entered promiscuous mode [ 25.416546][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.423685][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.431227][ T281] device bridge_slave_0 entered promiscuous mode [ 25.440810][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.447883][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.455351][ T281] device bridge_slave_1 entered promiscuous mode [ 25.489613][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.496701][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.504157][ T282] device bridge_slave_0 entered promiscuous mode [ 25.513571][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.520688][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.528122][ T282] device bridge_slave_1 entered promiscuous mode [ 25.633469][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.640742][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.648201][ T283] device bridge_slave_0 entered promiscuous mode [ 25.658397][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.665664][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.673439][ T283] device bridge_slave_1 entered promiscuous mode [ 25.708882][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.715958][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.723283][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.730360][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.739949][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.747046][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.754496][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.761555][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.787316][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.794427][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.801733][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.808788][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.822999][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.830087][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.837370][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.844428][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.876796][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.884667][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.892528][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.899818][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.907021][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.914300][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.921793][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.929147][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.936967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.944537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.956986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.990620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.999161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.007196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.015941][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.023105][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.030608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.039124][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.046157][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.053554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.061770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.070106][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.077139][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.084731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.093232][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.100281][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.107678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.115872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.125585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.133836][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.141120][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.166829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.174645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.182880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.192322][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.199393][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.206741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.215211][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.222287][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.229694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.237824][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.244907][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.253177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.261411][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.268486][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.275846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.284096][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.291155][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.319510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.327904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.336573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.345575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.353509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.361783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.369967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.377909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.386253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.394443][ T280] device veth0_vlan entered promiscuous mode [ 26.416382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.424586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.432666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.441454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.450224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.458835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.467141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.475291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.483578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.491257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.502142][ T279] device veth0_vlan entered promiscuous mode [ 26.517638][ T283] device veth0_vlan entered promiscuous mode [ 26.525151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.533371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.541423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.549065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.557356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.566143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.574909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.583351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.591364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.599470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.606906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.617644][ T281] device veth0_vlan entered promiscuous mode [ 26.626131][ T280] device veth1_macvtap entered promiscuous mode [ 26.633449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.642065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.650420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.662617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.670959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.685261][ T279] device veth1_macvtap entered promiscuous mode [ 26.694404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.702271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.710668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.719530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.728061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.737411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.745936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.762992][ T283] device veth1_macvtap entered promiscuous mode [ 26.771601][ T281] device veth1_macvtap entered promiscuous mode [ 26.779654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.787661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.795983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.804510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.813046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.820875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.829297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.836768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.845082][ T282] device veth0_vlan entered promiscuous mode [ 26.853901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.862254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.877986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.887139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.905773][ T282] device veth1_macvtap entered promiscuous mode [ 26.912985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.921385][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 26.922446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.937310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.945740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.954032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.969554][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.983715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.994725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.003493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.017608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.026174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.034836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.072794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.083482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.091867][ T307] fuse: Unknown parameter 'user_i00000000000000000000' [ 27.099611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.108045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.092464][ T355] fuse: Bad value for 'fd' [ 28.408419][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.768477][ T15] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 28.778613][ T15] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.817986][ T395] overlayfs: failed to clone upperpath [ 28.868501][ T15] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.877845][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.886446][ T15] usb 1-1: SerialNumber: syz [ 28.908587][ T360] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.129590][ T360] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.288355][ T301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.308363][ T287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.568430][ T301] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 29.569016][ T360] udc-core: couldn't find an available UDC or it's busy [ 29.583174][ T360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.598762][ T360] udc-core: couldn't find an available UDC or it's busy [ 29.605765][ T360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.648401][ T301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 29.657523][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 29.668758][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.698365][ T287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.709450][ T287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.719373][ T287] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 29.728689][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.737362][ T287] usb 3-1: config 0 descriptor?? [ 29.748379][ T301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 29.757872][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 29.769415][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.848540][ T15] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 29.855334][ T301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 29.865312][ T15] usb 1-1: USB disconnect, device number 2 [ 29.871359][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 29.883758][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.927710][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 29.927723][ T24] audit: type=1400 audit(1783363797.740:129): avc: denied { name_bind } for pid=427 comm="syz.4.49" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 29.955886][ T24] audit: type=1400 audit(1783363797.740:130): avc: denied { node_bind } for pid=427 comm="syz.4.49" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.976956][ T301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 29.977371][ T24] audit: type=1400 audit(1783363797.770:131): avc: denied { create } for pid=427 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.985999][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 30.017695][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.036651][ T24] audit: type=1400 audit(1783363797.850:132): avc: denied { create } for pid=430 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.056028][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.063325][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.074410][ T24] audit: type=1400 audit(1783363797.860:133): avc: denied { setopt } for pid=430 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.098383][ T301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.107383][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 30.119632][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.134057][ T24] audit: type=1400 audit(1783363797.950:134): avc: denied { create } for pid=436 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.161233][ T24] audit: type=1400 audit(1783363797.950:135): avc: denied { write } for pid=436 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.181176][ T24] audit: type=1400 audit(1783363797.950:136): avc: denied { nlmsg_read } for pid=436 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.201500][ T301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.205009][ T24] audit: type=1400 audit(1783363797.980:137): avc: denied { setopt } for pid=438 comm="syz.4.54" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.210798][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 30.242065][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.242903][ T24] audit: type=1400 audit(1783363798.060:138): avc: denied { ioctl } for pid=438 comm="syz.4.54" path="socket:[15062]" dev="sockfs" ino=15062 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.274927][ T287] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 30.282614][ T287] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 30.329299][ T301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.338243][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 30.353454][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.438470][ T301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 30.457549][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 30.478404][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.648392][ T301] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 30.657559][ T301] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 30.666089][ T301] usb 2-1: Product: syz [ 30.670407][ T301] usb 2-1: Manufacturer: syz [ 30.675144][ T301] usb 2-1: SerialNumber: syz [ 30.688233][ T287] usb 3-1: USB disconnect, device number 2 [ 30.692236][ T301] usb 2-1: config 0 descriptor?? [ 30.963088][ T465] ====================================================== [ 30.963088][ T465] WARNING: the mand mount option is being deprecated and [ 30.963088][ T465] will be removed in v5.15! [ 30.963088][ T465] ====================================================== [ 31.001145][ T465] overlayfs: failed to clone lowerpath [ 31.019809][ T465] overlayfs: failed to clone lowerpath [ 31.569010][ T287] usb 2-1: USB disconnect, device number 2 [ 31.688862][ T473] process 'syz.3.64' launched '/dev/fd/5' with NULL argv: empty string added [ 31.701815][ T473] netlink: 68 bytes leftover after parsing attributes in process `syz.3.64'. [ 31.722841][ T474] device syzkaller0 entered promiscuous mode [ 31.739311][ T478] netlink: 68 bytes leftover after parsing attributes in process `syz.0.68'. [ 31.762410][ T481] binder: 480:481 ioctl c0306201 200000000640 returned -22 [ 31.789522][ T484] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.996488][ T501] capability: warning: `syz.3.75' uses deprecated v2 capabilities in a way that may be insecure [ 32.158566][ T301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.408341][ T287] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.518385][ T301] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 32.529210][ T301] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.542524][ T301] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.551650][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.561185][ T301] usb 1-1: config 0 descriptor?? [ 32.599007][ T301] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 32.658367][ T287] usb 2-1: Using ep0 maxpacket: 32 [ 32.828683][ T287] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 32.838427][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.850391][ T287] usb 2-1: config 0 descriptor?? [ 32.944047][ T523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 33.318533][ T287] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.718383][ T287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.729800][ T542] 9pnet: Insufficient options for proto=fd [ 33.736142][ T287] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 33.745509][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.757039][ T287] usb 3-1: config 0 descriptor?? [ 33.918373][ T301] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.922309][ T287] usb 1-1: USB disconnect, device number 3 [ 34.279720][ T301] usb 4-1: Using ep0 maxpacket: 8 [ 34.410314][ T301] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 34.420962][ T301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.437644][ T301] usb 4-1: config 0 has no interface number 0 [ 34.848464][ T301] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 34.857978][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.866192][ T301] usb 4-1: Product: syz [ 34.870564][ T301] usb 4-1: Manufacturer: syz [ 34.875194][ T301] usb 4-1: SerialNumber: syz [ 34.884188][ T301] usb 4-1: config 0 descriptor?? [ 34.989839][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 34.989853][ T24] audit: type=1400 audit(1783363802.810:166): avc: denied { mounton } for pid=583 comm="syz.4.108" path="/52/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 35.019218][ T584] fuse: Bad value for 'fd' [ 35.108331][ T287] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.155059][ T531] usb 2-1: USB disconnect, device number 3 [ 35.169081][ T301] usb 4-1: USB disconnect, device number 2 [ 35.378324][ T287] usb 1-1: device descriptor read/64, error -71 [ 35.432416][ T531] usb 3-1: USB disconnect, device number 3 [ 35.464691][ T607] fuse: Unknown parameter '0x0000000000000003' [ 35.757803][ T615] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 35.782226][ T24] audit: type=1400 audit(1783363803.600:167): avc: denied { create } for pid=616 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.806915][ T617] ------------[ cut here ]------------ [ 35.812455][ T617] Too BIG xdp->frame_sz = 262144 [ 35.817625][ T617] WARNING: CPU: 1 PID: 617 at net/core/filter.c:3935 bpf_xdp_adjust_tail+0x1aa/0x1c0 [ 35.827126][ T617] Modules linked in: [ 35.831130][ T617] CPU: 1 PID: 617 Comm: syz.3.121 Not tainted syzkaller #0 [ 35.838406][ T617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.848534][ T617] RIP: 0010:bpf_xdp_adjust_tail+0x1aa/0x1c0 [ 35.854565][ T617] Code: 48 89 d3 e8 28 e2 f8 fd 48 89 da e9 cb fe ff ff e8 3b 6c be fd c6 05 7f 59 1a 03 01 48 c7 c7 20 73 6f 85 89 de e8 66 7f d2 00 <0f> 0b 48 c7 c0 ea ff ff ff e9 68 ff ff ff 0f 1f 84 00 00 00 00 00 [ 35.859118][ T24] audit: type=1400 audit(1783363803.620:168): avc: denied { connect } for pid=616 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.874240][ T617] RSP: 0018:ffffc900013777d8 EFLAGS: 00010246 [ 35.899676][ T617] RAX: 308ced6327084f00 RBX: 0000000000040000 RCX: 0000000000080000 [ 35.907681][ T617] RDX: ffffc90002930000 RSI: 000000000000186c RDI: 000000000000186d [ 35.915709][ T617] RBP: ffffc90001377818 R08: ffffc90001377167 R09: fffff5200026ee60 [ 35.923734][ T617] R10: dffffc0000000000 R11: fffff5200026ee2d R12: ffffc90001377948 [ 35.931832][ T617] R13: ffff88812e304277 R14: ffffc90001377940 R15: 1ffff9200026ef29 [ 35.939849][ T617] FS: 00007f2c99ef26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.948809][ T617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.955420][ T617] CR2: 0000200000011000 CR3: 0000000113eb3000 CR4: 00000000003506a0 [ 35.963430][ T617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.971444][ T617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.979452][ T617] Call Trace: [ 35.982768][ T617] ? 0xffffffffa0016824 [ 35.986966][ T617] bpf_prog_f476d5219b92964a+0x15/0x7dc [ 35.992569][ T617] bpf_dispatcher_xdp_func+0x1f/0x30 [ 35.997892][ T617] do_xdp_generic+0x7a5/0x14c0 [ 36.002719][ T617] ? generic_xdp_tx+0x470/0x470 [ 36.007629][ T617] ? preempt_schedule+0xbc/0xd0 [ 36.012523][ T617] tun_get_user+0x22b9/0x31c0 [ 36.017237][ T617] ? __kasan_check_write+0x14/0x20 [ 36.022409][ T617] ? tun_do_read+0x1cf0/0x1cf0 [ 36.027193][ T617] ? futex_wake+0x4c4/0x570 [ 36.031752][ T617] ? netdev_run_todo+0xd38/0xda0 [ 36.036731][ T617] ? avc_compute_av+0x430/0x6b0 [ 36.041644][ T617] ? selinux_file_permission+0x2a5/0x510 [ 36.047311][ T617] ? fsnotify_perm+0x66/0x4a0 [ 36.052052][ T617] tun_chr_write_iter+0x1c1/0x270 [ 36.057104][ T617] vfs_write+0x770/0xd70 [ 36.061408][ T617] ? kernel_write+0x3c0/0x3c0 [ 36.066115][ T617] ? futex_exit_release+0x1e0/0x1e0 [ 36.071360][ T617] ? __fget_files+0x2e1/0x340 [ 36.076090][ T617] ? __fdget_pos+0x1f7/0x380 [ 36.080739][ T617] ? ksys_write+0x70/0x260 [ 36.085186][ T617] ksys_write+0x14a/0x260 [ 36.089586][ T617] ? __ia32_sys_read+0x90/0x90 [ 36.094417][ T617] ? __kasan_check_read+0x11/0x20 [ 36.099514][ T617] __x64_sys_write+0x7b/0x90 [ 36.104138][ T617] do_syscall_64+0x31/0x40 [ 36.105053][ T620] tipc: Enabling of bearer rejected, failed to enable media [ 36.108609][ T617] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.108619][ T617] RIP: 0033:0x7f2c9b45968e [ 36.108667][ T617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 36.147423][ T617] RSP: 002b:00007f2c99ef1fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.155911][ T617] RAX: ffffffffffffffda RBX: 00007f2c99ef26c0 RCX: 00007f2c9b45968e [ 36.159814][ T24] audit: type=1400 audit(1783363803.980:169): avc: denied { create } for pid=619 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.163992][ T617] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8 [ 36.191192][ T617] RBP: 00007f2c9b52ee6f R08: 0000000000000000 R09: 0000000000000000 [ 36.199370][ T617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.207479][ T617] R13: 00007f2c9b721038 R14: 00007f2c9b720fa0 R15: 00007ffdfc025aa8 [ 36.215538][ T617] ---[ end trace ba3494a45f8763f2 ]--- [ 36.221031][ T617] Illegal XDP return value 4294967274, expect packet loss! [ 36.288848][ T627] device syzkaller0 entered promiscuous mode [ 36.298771][ T287] usb 1-1: device descriptor read/64, error -71 [ 36.315022][ T629] tipc: Enabling of bearer rejected, failed to enable media [ 36.331330][ T627] tipc: Started in network mode [ 36.337576][ T627] tipc: Own node identity 82dfd1fe652d, cluster identity 4711 [ 36.345518][ T627] tipc: Enabled bearer , priority 0 [ 36.354057][ T626] tipc: Resetting bearer [ 36.365883][ T626] tipc: Disabling bearer [ 36.466364][ T642] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 36.482413][ T645] fuse: Unknown parameter '0x0000000000000003' [ 36.568470][ T287] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.623735][ T654] Zero length message leads to an empty skb [ 36.643243][ T654] tipc: Started in network mode [ 36.648213][ T654] tipc: Own node identity 4, cluster identity 4711 [ 36.654793][ T654] tipc: 32-bit node address hash set to 4 [ 36.772023][ T609] F2FS-fs (loop2): Invalid log sectorsize (196617) [ 36.817396][ T609] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 36.867709][ T609] F2FS-fs (loop2): Test dummy encryption mode enabled [ 36.893723][ T609] F2FS-fs (loop2): invalid crc value [ 36.908380][ T287] usb 1-1: device descriptor read/64, error -71 [ 36.916792][ T609] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.953950][ T609] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 36.961160][ T609] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.976432][ T24] audit: type=1400 audit(1783363804.790:170): avc: denied { write } for pid=608 comm="syz.2.118" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.998061][ T24] audit: type=1400 audit(1783363804.790:171): avc: denied { add_name } for pid=608 comm="syz.2.118" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.999099][ T609] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 37.018540][ T24] audit: type=1400 audit(1783363804.790:172): avc: denied { create } for pid=608 comm="syz.2.118" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.046411][ T24] audit: type=1400 audit(1783363804.860:173): avc: denied { write open } for pid=608 comm="syz.2.118" path="/16/file1/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.178340][ T301] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 37.262972][ T672] device syzkaller0 entered promiscuous mode [ 37.328323][ T287] usb 1-1: device descriptor read/64, error -71 [ 37.390386][ T684] overlayfs: failed to clone upperpath [ 37.396395][ T684] overlayfs: failed to clone upperpath [ 37.402900][ T24] audit: type=1400 audit(1783363805.220:174): avc: denied { remount } for pid=683 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.474440][ T696] overlayfs: failed to clone upperpath [ 37.480071][ T287] usb usb1-port1: attempt power cycle [ 37.548374][ T301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.558825][ T301] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.567813][ T301] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 37.577122][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.601667][ T301] usb 2-1: config 0 descriptor?? [ 37.658366][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.756578][ T706] device bridge_slave_0 left promiscuous mode [ 37.763351][ T706] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.771341][ T706] device bridge_slave_1 left promiscuous mode [ 37.777728][ T706] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.792149][ T706] device vlan0 entered promiscuous mode [ 37.799915][ T706] tipc: Enabling of bearer rejected, failed to enable media [ 37.840820][ T24] audit: type=1400 audit(1783363805.660:175): avc: denied { append } for pid=662 comm="syz.1.138" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.898378][ T287] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.918332][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 37.927822][ T549] usb 2-1: USB disconnect, device number 4 [ 38.038356][ T20] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 38.047503][ T20] usb 3-1: config 0 has no interface number 0 [ 38.054205][ T20] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 38.064690][ T20] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 38.070735][ T730] FAT-fs (loop0): IO charset f„ÊÜìKÿÒtf8=1 not found [ 38.160423][ T730] 9pnet_virtio: no channels available for device syz [ 38.193221][ T735] ================================================================== [ 38.201515][ T735] BUG: KASAN: use-after-free in call_rcu+0xbe/0x1090 [ 38.208305][ T735] Write of size 8 at addr ffff888117745598 by task syz.0.171/735 [ 38.216028][ T735] [ 38.218400][ T735] CPU: 0 PID: 735 Comm: syz.0.171 Tainted: G W syzkaller #0 [ 38.227141][ T735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.237194][ T735] Call Trace: [ 38.240488][ T735] __dump_stack+0x21/0x24 [ 38.244819][ T735] dump_stack_lvl+0x1a7/0x208 [ 38.249650][ T735] ? show_regs_print_info+0x18/0x18 [ 38.255020][ T735] ? thaw_kernel_threads+0x220/0x220 [ 38.258891][ T20] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 38.260376][ T735] print_address_description+0x7f/0x2c0 [ 38.269913][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.274953][ T735] ? call_rcu+0xbe/0x1090 [ 38.275001][ T735] kasan_report+0x100/0x140 [ 38.285280][ T20] usb 3-1: Product: syz [ 38.287301][ T735] ? call_rcu+0xbe/0x1090 [ 38.287344][ T735] ? pppol2tp_sock_to_session+0x1b0/0x1b0 [ 38.292451][ T20] usb 3-1: Manufacturer: syz [ 38.295998][ T735] __asan_report_store8_noabort+0x17/0x20 [ 38.296010][ T735] call_rcu+0xbe/0x1090 [ 38.296058][ T735] ? locks_remove_posix+0x550/0x550 [ 38.301191][ T20] usb 3-1: SerialNumber: syz [ 38.306106][ T735] ? __local_bh_enable_ip+0x53/0x80 [ 38.306156][ T735] ? local_bh_enable+0x1f/0x30 [ 38.321306][ T20] usb 3-1: config 0 descriptor?? [ 38.325876][ T735] ? lock_sock_nested+0x217/0x2a0 [ 38.325936][ T735] ? rcu_gp_kthread_wake+0x90/0x90 [ 38.355568][ T735] ? __kasan_check_write+0x14/0x20 [ 38.360818][ T735] ? mutex_lock+0x92/0xf0 [ 38.365167][ T735] ? mutex_trylock+0xb0/0xb0 [ 38.369774][ T735] pppol2tp_release+0x1e3/0x2b0 [ 38.374644][ T735] sock_close+0xb8/0x200 [ 38.378898][ T735] ? sock_mmap+0xa0/0xa0 [ 38.383165][ T735] __fput+0x2dc/0x730 [ 38.387161][ T735] ____fput+0x15/0x20 [ 38.391163][ T735] task_work_run+0x127/0x190 [ 38.395777][ T735] exit_to_user_mode_loop+0xcb/0xe0 [ 38.400981][ T735] exit_to_user_mode_prepare+0x76/0xa0 [ 38.406493][ T735] syscall_exit_to_user_mode+0x1d/0x40 [ 38.411963][ T735] do_syscall_64+0x3d/0x40 [ 38.416477][ T735] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.422379][ T735] RIP: 0033:0x7f66f7f13e59 [ 38.426925][ T735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.446552][ T735] RSP: 002b:00007ffdbd396798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.455005][ T735] RAX: 0000000000000000 RBX: 00007ffdbd396880 RCX: 00007f66f7f13e59 [ 38.462986][ T735] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.470968][ T735] RBP: 0000000000009507 R08: 0000000000000001 R09: 0000000000000000 [ 38.479035][ T735] R10: 0000001b2d220000 R11: 0000000000000246 R12: 00007ffdbd3968c0 [ 38.487022][ T735] R13: 00007f66f819bfac R14: 000000000000953c R15: 00007f66f819bfa0 [ 38.495003][ T735] [ 38.497339][ T735] Allocated by task 736: [ 38.501703][ T735] __kasan_kmalloc+0xd4/0x100 [ 38.506416][ T735] __kmalloc+0x19f/0x330 [ 38.510760][ T735] l2tp_session_create+0x39/0xb60 [ 38.515796][ T735] pppol2tp_connect+0xbf5/0x1640 [ 38.520746][ T735] __sys_connect+0x3ce/0x450 [ 38.525343][ T735] __x64_sys_connect+0x7a/0x90 [ 38.530128][ T735] do_syscall_64+0x31/0x40 [ 38.534555][ T735] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.540445][ T735] [ 38.542780][ T735] Freed by task 9: [ 38.546509][ T735] kasan_set_track+0x4a/0x70 [ 38.551106][ T735] kasan_set_free_info+0x23/0x40 [ 38.556139][ T735] ____kasan_slab_free+0x125/0x160 [ 38.561256][ T735] __kasan_slab_free+0x11/0x20 [ 38.566031][ T735] slab_free_freelist_hook+0xc5/0x190 [ 38.571447][ T735] kfree+0xc0/0x270 [ 38.575266][ T735] l2tp_session_put+0xb2/0x1a0 [ 38.580037][ T735] l2tp_session_delete+0x3a9/0x4a0 [ 38.585337][ T735] l2tp_tunnel_del_work+0x180/0x3d0 [ 38.590539][ T735] process_one_work+0x6fd/0xbc0 [ 38.595408][ T735] worker_thread+0xa8e/0x13c0 [ 38.600099][ T735] kthread+0x324/0x3b0 [ 38.604171][ T735] ret_from_fork+0x1f/0x30 [ 38.608673][ T735] [ 38.611118][ T735] The buggy address belongs to the object at ffff888117745400 [ 38.611118][ T735] which belongs to the cache kmalloc-512 of size 512 [ 38.625558][ T735] The buggy address is located 408 bytes inside of [ 38.625558][ T735] 512-byte region [ffff888117745400, ffff888117745600) [ 38.638832][ T735] The buggy address belongs to the page: [ 38.644498][ T735] page:ffffea00045dd100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117744 [ 38.654740][ T735] head:ffffea00045dd100 order:2 compound_mapcount:0 compound_pincount:0 [ 38.663090][ T735] flags: 0x4000000000010200(slab|head) [ 38.668564][ T735] raw: 4000000000010200 ffffea00044a9e00 0000000400000004 ffff888100043080 [ 38.677161][ T735] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 38.685756][ T735] page dumped because: kasan: bad access detected [ 38.692174][ T735] page_owner tracks the page as allocated [ 38.697907][ T735] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 105, ts 6065826647, free_ts 0 [ 38.715968][ T735] prep_new_page+0x176/0x190 [ 38.720565][ T735] get_page_from_freelist+0x225f/0x23f0 [ 38.726127][ T735] __alloc_pages_nodemask+0x29a/0x640 [ 38.731504][ T735] new_slab+0x84/0x3f0 [ 38.735578][ T735] ___slab_alloc+0x2f8/0x4c0 [ 38.740186][ T735] __slab_alloc+0x63/0xa0 [ 38.744554][ T735] __kmalloc_track_caller+0x1e4/0x310 [ 38.749995][ T735] __alloc_skb+0xdc/0x520 [ 38.754356][ T735] alloc_skb_with_frags+0xa3/0x560 [ 38.759499][ T735] sock_alloc_send_pskb+0x87f/0x9a0 [ 38.764722][ T735] unix_dgram_sendmsg+0x6f3/0x18f0 [ 38.769859][ T735] sock_write_iter+0x2a6/0x3a0 [ 38.774645][ T735] vfs_write+0x770/0xd70 [ 38.778896][ T735] ksys_write+0x14a/0x260 [ 38.783259][ T735] __x64_sys_write+0x7b/0x90 [ 38.787860][ T735] do_syscall_64+0x31/0x40 [ 38.792292][ T735] page_owner free stack trace missing [ 38.797677][ T735] [ 38.800015][ T735] Memory state around the buggy address: [ 38.805662][ T735] ffff888117745480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.813848][ T735] ffff888117745500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.821920][ T735] >ffff888117745580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.829990][ T735] ^ [ 38.834849][ T735] ffff888117745600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.842918][ T735] ffff888117745680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.850986][ T735] ================================================================== [ 38.859051][ T735] Disabling lock debugging due to kernel taint [ 38.865648][ T287] usb 1-1: device not accepting address 6, error -71 [ 38.877546][ T682] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 38.884908][ T682] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 39.102283][ T682] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 39.109670][ T682] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 39.338418][ T20] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 41.498392][ T20] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 41.508610][ T20] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 41.519897][ T20] asix: probe of 3-1:0.34 failed with error -71 [ 41.527284][ T20] usb 3-1: USB disconnect, device number 4