last executing test programs: 9m13.92104851s ago: executing program 2 (id=187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20008000}, 0x4000080) 9m13.778449414s ago: executing program 2 (id=189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x41}, 0x2004c880) accept4$inet(r1, 0x0, 0x0, 0x80800) 9m13.656253445s ago: executing program 2 (id=191): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) time(0xfffffffffffffffc) 9m13.527614367s ago: executing program 2 (id=195): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) 9m13.374104477s ago: executing program 2 (id=196): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 9m12.991458126s ago: executing program 2 (id=200): timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2d}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 9m12.599010802s ago: executing program 32 (id=200): timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2d}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 8m5.19703024s ago: executing program 1 (id=801): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001400)=""/11, 0x1a}, {0x0}], 0x2}, 0x2fa}, {{&(0x7f00000015c0)=@un=@abs, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)=""/143, 0x8f}, 0x101}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/217, 0xd9}, 0xfb}, {{0x0, 0x0, &(0x7f00000023c0), 0x4c, &(0x7f0000002400)=""/92, 0x5c}, 0xac}], 0x4, 0x2, 0x0) 8m4.968352883s ago: executing program 1 (id=805): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/61, 0x33e000, 0x1000, 0x0, 0x1}, 0x20) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x10) 8m4.621740803s ago: executing program 3 (id=808): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) 8m4.361666473s ago: executing program 1 (id=819): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06f7c456", 0x4}, {&(0x7f0000000440)="1a53b960f237163b83f521b433ee2c217e644d8a45df0f7a295943137f14f641d312e2ccf95abee62bc1e3a7a97ffacc60f6fd0bcb8b0a8b68803f8f510bf2f24fe9de5c9c4bb36ba8a59d8d317295b62b598ea80cbacd487eecda82cacf87b769db366d244abadfbe1f2754e1adc161971cc11f228e86815b1bd49ef11be007edb462c5fe590070", 0x88}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000500)="5e101420e729f0ba7da7f033a06a7c4748bb0bae410914dc51ef", 0x1a}], 0x4, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000000e40)=""/165, 0xa5}, {&(0x7f00000062c0)=""/4096, 0x1000}], 0x2}, 0x4}], 0x1, 0x400101c3, 0x0) recvmsg(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}, 0x40002022) 8m4.277523965s ago: executing program 1 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 8m4.163202436s ago: executing program 1 (id=811): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x946, 0x66, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 8m3.824043929s ago: executing program 1 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="12000000030000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m3.335424067s ago: executing program 33 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="12000000030000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m3.246927223s ago: executing program 3 (id=817): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 8m3.113019508s ago: executing program 3 (id=818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r2, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0x4, 0x3, 0xfff9}, {0xc0000000, 0x6, 0xfff, 0xfffff520}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 8m2.251070569s ago: executing program 3 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x10000000000, 0x0, 0x0, 0x8, 0x6, r0, 0x0}]) 8m1.784413392s ago: executing program 3 (id=831): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 8m1.29105564s ago: executing program 3 (id=834): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r1], 0x15, 0x4850}}], 0x1, 0x20040804) accept4$unix(r0, 0x0, 0x0, 0x0) 8m0.717856025s ago: executing program 34 (id=834): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r1], 0x15, 0x4850}}], 0x1, 0x20040804) accept4$unix(r0, 0x0, 0x0, 0x0) 7m38.184446537s ago: executing program 6 (id=957): syz_usb_connect(0x6, 0xf4, &(0x7f0000000700)=ANY=[], 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x5, 0x239}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m36.499642319s ago: executing program 6 (id=971): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x56, &(0x7f0000000500)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0x0, @remote, @mcast2, {[@hopopts={0x21}], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) 7m36.368529782s ago: executing program 6 (id=973): fsopen(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000001200)=0x80, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 7m35.959832601s ago: executing program 6 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 7m35.826816528s ago: executing program 6 (id=975): r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) tkill(r0, 0x11) 7m35.557479276s ago: executing program 6 (id=978): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x8, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 7m35.181541574s ago: executing program 35 (id=978): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x8, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 2m37.768772123s ago: executing program 4 (id=3283): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m35.942575225s ago: executing program 4 (id=3292): epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x5a74, 0xcf75, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2m35.210187578s ago: executing program 4 (id=3297): mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xa0c89f, 0x1c881, 0x1, 0xd1}) syz_io_uring_setup(0x2cf2, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x40044) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m34.837364674s ago: executing program 4 (id=3299): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m34.473198684s ago: executing program 4 (id=3302): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2", 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) 2m33.371933933s ago: executing program 4 (id=3309): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK, @TCA_FLOWER_KEY_SCTP_DST_MASK, @TCA_FLOWER_KEY_IP_TTL_MASK={0x0, 0x4c, 0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK, @TCA_FLOWER_KEY_ARP_THA={0x0, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_FLOWER_KEY_CT_ZONE={0x0, 0x5d, 0x4}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0x7f}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x0, 0xf, [0xffffff00, 0xffffff00, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xf1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m32.843862893s ago: executing program 36 (id=3309): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK, @TCA_FLOWER_KEY_SCTP_DST_MASK, @TCA_FLOWER_KEY_IP_TTL_MASK={0x0, 0x4c, 0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK, @TCA_FLOWER_KEY_ARP_THA={0x0, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_FLOWER_KEY_CT_ZONE={0x0, 0x5d, 0x4}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0x7f}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x0, 0xf, [0xffffff00, 0xffffff00, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xf1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.454963492s ago: executing program 8 (id=4336): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6.585280206s ago: executing program 9 (id=4339): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 6.055945957s ago: executing program 9 (id=4340): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r2, 0x2007ffb) close(r2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 5.331980213s ago: executing program 8 (id=4342): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.416329003s ago: executing program 9 (id=4345): socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x2300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.842075202s ago: executing program 5 (id=4346): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 3.841831212s ago: executing program 7 (id=4347): shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x11e, 0x80, 0x0, 0x1ec) 3.7040129s ago: executing program 7 (id=4348): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 3.491125585s ago: executing program 9 (id=4349): pipe2(&(0x7f0000000080), 0x2800) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000280)) io_setup(0x1, &(0x7f00000002c0)=0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x8031, 0xffffffffffffffff, 0x4b016000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x81}]) 3.041410099s ago: executing program 0 (id=4351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x10, 0x0, &(0x7f00000049c0)=[@clear_death], 0x0, 0x0, 0x0}) 2.897336141s ago: executing program 0 (id=4352): io_setup(0x3, &(0x7f0000000100)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) 2.873481253s ago: executing program 8 (id=4353): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r1, &(0x7f00000033c0)=[{0x0}, {&(0x7f00000001c0)=""/141, 0x8d}], 0x2, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.744040966s ago: executing program 7 (id=4354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400000000000000002c0100"/84) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 2.616135932s ago: executing program 8 (id=4355): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) move_pages(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000422000/0x3000)=nil], &(0x7f0000001180), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/125, 0xffffffa9}, {0x0}, {&(0x7f0000000680)=""/101, 0x5b}, {&(0x7f0000000380)=""/51, 0x29}], 0x4}, 0x40000001) 2.491346003s ago: executing program 5 (id=4356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendfile(r1, r0, 0x0, 0xf03a0005) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) 2.164576996s ago: executing program 5 (id=4357): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x3) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 1.987259283s ago: executing program 8 (id=4358): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc3ec, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0d, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) 1.986950578s ago: executing program 9 (id=4359): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) inotify_rm_watch(r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.870328998s ago: executing program 5 (id=4360): ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 1.840695536s ago: executing program 9 (id=4361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400"/80) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 1.482893228s ago: executing program 0 (id=4362): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) unlink(&(0x7f00000002c0)='./file0\x00') 1.344027331s ago: executing program 0 (id=4363): socket$netlink(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x10000000, 'dh\x00'}, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x101, 0x1, r2, 0x0) 1.062695238s ago: executing program 7 (id=4364): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x0, 0x1}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x26) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r3, &(0x7f0000003000), 0x100) read(r3, &(0x7f0000004000), 0x100) read(r3, &(0x7f0000005000), 0x100) 629.706514ms ago: executing program 5 (id=4365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 629.419216ms ago: executing program 7 (id=4366): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x38}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00006c8000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) 522.249641ms ago: executing program 0 (id=4367): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.132914ms ago: executing program 7 (id=4368): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 956.944µs ago: executing program 0 (id=4378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xc0, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x6}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x100000000000001}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350758, 0x6}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@flushpolicy={0xac, 0x1d, 0x19, 0x70bd2c, 0x25dfdbff, "", [@algo_aead={0x4c, 0x12, {{'aegis128-generic\x00'}}}, @lifetime_val={0x24, 0x9, {0x2, 0x6, 0x0, 0x6a61}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}}]}, 0xac}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x10, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x83, 0x7, 0xe3, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0x5, 0x8, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 272.159µs ago: executing program 8 (id=4369): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 0s ago: executing program 5 (id=4370): fallocate(0xffffffffffffffff, 0x3, 0x0, 0x200401) ioctl$COMEDI_DEVINFO(0xffffffffffffffff, 0x80b06401, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) semget(0x1, 0x4, 0x39c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x169140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="11223344556677889900aabbccdd", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): T29] kauditd_printk_skb: 25 callbacks suppressed [ 443.347776][ T29] audit: type=1400 audit(1785897281.550:1504): avc: denied { mount } for pid=14396 comm="syz.8.2804" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 443.394691][T14411] netlink: 'syz.0.2810': attribute type 1 has an invalid length. [ 443.951392][T14411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.092762][T14416] bond4: (slave veth5): Enslaving as an active interface with a down link [ 444.173672][ T29] audit: type=1400 audit(1785897282.380:1505): avc: denied { call } for pid=14430 comm="syz.5.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 444.214245][T14417] bond4: (slave dummy0): making interface the new active one [ 444.247518][T14417] dummy0: entered promiscuous mode [ 444.328375][ T29] audit: type=1400 audit(1785897282.530:1506): avc: denied { open } for pid=14432 comm="syz.5.2816" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 444.357134][T14417] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 444.417401][T14424] bond4 (unregistering): (slave veth5): Releasing active interface [ 444.495562][T14424] bond4 (unregistering): (slave dummy0): Releasing active interface [ 444.534601][T14424] bond4 (unregistering): Released all slaves [ 445.213289][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 445.294568][T14460] overlayfs: failed to clone upperpath [ 445.308818][T14459] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2827'. [ 445.427318][ T29] audit: type=1400 audit(1785897283.630:1507): avc: denied { getopt } for pid=14457 comm="syz.5.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 445.607017][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 446.713157][T14510] netlink: 'syz.0.2846': attribute type 8 has an invalid length. [ 446.762964][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 446.838153][T14510] bond0: entered promiscuous mode [ 446.901256][T14510] bond_slave_0: entered promiscuous mode [ 446.943554][T14510] bond_slave_1: entered promiscuous mode [ 447.003890][T14510] team0: entered promiscuous mode [ 447.028636][T14515] fuse: Bad value for 'fd' [ 447.049286][T14510] team_slave_0: entered promiscuous mode [ 447.088004][T14510] team_slave_1: entered promiscuous mode [ 447.139304][T14510] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 447.222797][T14510] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 447.295703][T14510] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 447.380350][T14510] hsr1: entered promiscuous mode [ 447.428146][T14525] fuse: Bad value for 'fd' [ 447.917872][ T29] audit: type=1400 audit(1785897286.110:1508): avc: denied { shutdown } for pid=14533 comm="syz.8.2855" lport=33508 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 447.999424][T14536] kvm: pic: single mode not supported [ 448.001818][T14536] kvm: pic: level sensitive irq not supported [ 448.088973][ T29] audit: type=1400 audit(1785897286.290:1509): avc: denied { connect } for pid=14539 comm="syz.8.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 448.176922][T14520] ceph: No mds server is up or the cluster is laggy [ 448.496748][T14548] bridge_slave_0: left allmulticast mode [ 448.554665][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2861'. [ 448.598233][T14548] bridge_slave_0: left promiscuous mode [ 448.644067][T14548] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.706117][T14548] bridge_slave_1: left allmulticast mode [ 448.727424][T14548] bridge_slave_1: left promiscuous mode [ 448.749157][T14548] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.772572][T14548] bond0: (slave bond_slave_0): Releasing backup interface [ 448.784006][T14548] bond0: (slave bond_slave_1): Releasing backup interface [ 448.797737][T14548] team0: Port device team_slave_0 removed [ 448.814371][T14548] team0: Port device team_slave_1 removed [ 448.816125][T14548] net_ratelimit: 31 callbacks suppressed [ 448.816136][T14548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 448.898478][T14554] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.007662][T14560] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 450.233943][T14584] netlink: 'syz.4.2874': attribute type 19 has an invalid length. [ 451.206540][ T29] audit: type=1400 audit(1785897289.410:1510): avc: denied { read } for pid=14608 comm="syz.5.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 452.357246][T14632] fuse: Bad value for 'fd' [ 453.506584][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2900'. [ 453.533364][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2900'. [ 453.896219][T14668] netlink: 'syz.7.2904': attribute type 4 has an invalid length. [ 453.941785][T14668] netlink: 'syz.7.2904': attribute type 4 has an invalid length. [ 454.041671][ T5950] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.079944][ T5950] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.104562][ T5950] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.134512][ T5950] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.433059][ T29] audit: type=1804 audit(1785897292.640:1511): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2912" name="file0" dev="tmpfs" ino=2132 res=1 errno=0 [ 454.534793][T14691] bond3: entered allmulticast mode [ 454.558066][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2914'. [ 454.637668][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2914'. [ 454.669893][T14691] macvlan2: entered promiscuous mode [ 454.699551][T14691] macvlan2: entered allmulticast mode [ 454.724990][T14691] bond3: (slave macvlan2): Opening slave failed [ 455.737408][T14731] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.2929'. [ 456.589112][T14731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2929'. [ 457.023356][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2935'. [ 457.494969][ T29] audit: type=1400 audit(1785897295.700:1512): avc: denied { read } for pid=14753 comm="syz.5.2938" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 457.683528][ T29] audit: type=1400 audit(1785897295.700:1513): avc: denied { open } for pid=14753 comm="syz.5.2938" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 457.965559][T14762] fuse: fd is not a fuse device [ 458.107601][T14766] fuse: fd is not a fuse device [ 458.281292][ T5740] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 458.394351][T14774] syz_tun: entered allmulticast mode [ 458.457208][T14773] syz_tun: left allmulticast mode [ 458.468637][ T5740] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 458.499594][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.169515][ T5740] gud 6-1:1.0: Failed to add properties (error=-5) [ 459.223156][ T5740] gud 6-1:1.0: probe with driver gud failed with error -5 [ 459.679325][ T9224] IPVS: starting estimator thread 0... [ 459.783328][T14807] IPVS: using max 65 ests per chain, 156000 per kthread [ 460.259286][T14819] overlayfs: failed to clone upperpath [ 460.369833][T14822] CIFS: Attempting to mount //127.0.0.1/share [ 460.629295][T14826] overlayfs: upper fs does not support file handles, falling back to index=off. [ 461.190802][T14822] CIFS: VFS: Error connecting to socket. Aborting operation. [ 461.228580][T14822] CIFS: VFS: cifs_mount failed w/return code = -4 [ 461.618222][ T9224] usb 6-1: USB disconnect, device number 15 [ 461.685084][T14847] macvtap1: entered promiscuous mode [ 461.724787][T14847] vlan0: entered promiscuous mode [ 461.768396][T14847] team0: Device macvtap1 failed to register rx_handler [ 461.796519][T14847] vlan0: left promiscuous mode [ 462.480298][T14878] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2982'. [ 463.723541][ T29] audit: type=1800 audit(1785897301.930:1514): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2993" name="nullb0" dev="tmpfs" ino=2188 res=0 errno=0 [ 464.279486][ T29] audit: type=1800 audit(1785897302.480:1515): pid=14903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2990" name="/" dev="fuse" ino=1 res=0 errno=0 [ 466.608998][T14959] netlink: 'syz.4.3011': attribute type 4 has an invalid length. [ 466.699751][T14959] netlink: 'syz.4.3011': attribute type 4 has an invalid length. [ 466.890537][T14962] bridge0: port 3(syz_tun) entered disabled state [ 466.939060][T14962] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.946289][T14962] bridge0: port 1(1¾x9ÿ) entered disabled state [ 467.403994][T14095] Bluetooth: hci4: command 0x0406 tx timeout [ 467.600955][T14983] fuse: fd is not a fuse device [ 467.611953][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.665807][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.761621][T11994] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.822714][T11994] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.461183][ T9224] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 468.641519][ T9224] usb 5-1: Using ep0 maxpacket: 32 [ 468.656399][ T9224] usb 5-1: config 8 has an invalid interface number: 202 but max is 0 [ 468.696694][ T9224] usb 5-1: config 8 has no interface number 0 [ 468.744828][ T9224] usb 5-1: config 8 interface 202 has no altsetting 0 [ 468.792796][ T9224] usb 5-1: New USB device found, idVendor=046d, idProduct=0890, bcdDevice=ee.6e [ 468.835532][ T9224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.892796][ T9224] usb 5-1: Product: syz [ 468.918830][ T9224] usb 5-1: Manufacturer: syz [ 468.951447][ T9224] usb 5-1: SerialNumber: syz [ 469.237059][T15033] openvswitch: netlink: IP tunnel dst address not specified [ 470.120296][ T9224] usb 5-1: No union descriptors [ 470.147206][ T9224] gspca_main: spca500-2.14.0 probing 046d:0890 [ 470.182250][ T9224] videodev: could not get a free minor [ 470.217840][ T9224] gspca_main: video_register_device err -23 [ 470.252517][ T9224] spca500 5-1:8.202: probe with driver spca500 failed with error -23 [ 470.289478][ T9224] usb 5-1: USB disconnect, device number 19 [ 470.481829][ T5711] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 470.662253][ T5711] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.716699][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 470.825218][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 470.908298][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 470.964930][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 471.037558][ T5711] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 471.074250][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 471.119605][ T5711] usb 6-1: Product: syz [ 471.140123][ T5711] usb 6-1: Manufacturer: syz [ 471.158947][ T5711] usb 6-1: SerialNumber: syz [ 471.191366][ T5711] usb 6-1: config 0 descriptor?? [ 471.360496][ T29] audit: type=1400 audit(1785897309.560:1516): avc: denied { kill } for pid=15081 comm="syz.0.3052" capability=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 471.417627][ T5711] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 471.432445][ T5711] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 471.618139][ T5711] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 471.634495][ T5711] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 471.677531][ T5711] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 471.818620][ T5711] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 471.904722][ T29] audit: type=1326 audit(1785897310.110:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.0.3058" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe464f9e019 code=0x0 [ 473.034681][ T5711] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 473.088043][T15129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.104236][ T5711] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 473.153577][T15129] bridge0: port 1(bond4) entered blocking state [ 473.167307][ T5711] videodev: could not get a free minor [ 473.188370][T15129] bridge0: port 1(bond4) entered disabled state [ 473.200307][ T5711] radio-si470x 6-1:0.0: Could not register video device [ 473.219119][T15129] bond4: entered allmulticast mode [ 473.229501][ T5711] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -23 [ 473.250075][T15129] bond4: entered promiscuous mode [ 473.278460][ T5711] usb 6-1: USB disconnect, device number 16 [ 473.763153][ T5711] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 473.941597][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 473.966663][ T5711] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.013787][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 474.039903][ T29] audit: type=1400 audit(1785897312.240:1518): avc: denied { bind } for pid=15171 comm="syz.7.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.072696][ T5711] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 474.107745][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.157933][ T5711] usb 5-1: config 0 descriptor?? [ 474.429036][ T29] audit: type=1400 audit(1785897312.630:1519): avc: denied { execute } for pid=15183 comm="syz.0.3084" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=52993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 474.613004][ T5711] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 475.057044][ T5711] usb 5-1: USB disconnect, device number 20 [ 475.953186][T15213] loop5: detected capacity change from 0 to 7 [ 475.999635][T15213] loop5: [POWERTEC] p1 p2 p3 [ 476.068622][T15213] loop5: p1 size 1919942656 extends beyond EOD, truncated [ 476.132406][T15213] loop5: p2 start 876163636 is beyond EOD, truncated [ 476.177076][T15213] loop5: p3 start 29360128 is beyond EOD, truncated [ 476.457218][T15223] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 476.483513][ T5872] udevd[5872]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 476.637747][T15231] team0: No ports can be present during mode change [ 476.727563][T15230] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3101'. [ 476.920775][T15241] syz_tun: entered allmulticast mode [ 476.961223][ T9224] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 476.989808][T15241] dvmrp8: entered allmulticast mode [ 477.047861][T15240] syz_tun: left allmulticast mode [ 477.155770][ T9224] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.176903][T15247] overlayfs: failed to clone upperpath [ 477.214195][ T9224] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.277606][ T9224] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 477.310381][ T9224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.562565][ T9224] usb 6-1: GET_CAPABILITIES returned 0 [ 477.580299][ T9224] usbtmc 6-1:16.0: can't read capabilities [ 477.614040][T15258] fuse: fd is not a fuse device [ 478.320047][ T9224] usb 6-1: USB disconnect, device number 17 [ 478.545489][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3118'. [ 478.728839][T15285] fuse: fd is not a fuse device [ 478.918671][T15291] overlayfs: failed to clone upperpath [ 480.074733][T15313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3131'. [ 480.240290][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3132'. [ 481.020676][T15340] bond5: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 481.086046][T15340] bond5: entered allmulticast mode [ 481.283637][T15344] bridge1: entered promiscuous mode [ 481.339103][T15344] bridge1: entered allmulticast mode [ 481.383102][T15344] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 481.702847][ T9224] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 481.892540][ T9224] usb 6-1: Using ep0 maxpacket: 32 [ 481.923962][ T9224] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.973476][ T9224] usb 6-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 482.010580][ T9224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.058486][ T9224] usb 6-1: Product: syz [ 482.088389][ T9224] usb 6-1: Manufacturer: syz [ 482.110972][T15355] MTD: Couldn't look up './dev/mtdblock0': -2 [ 482.121865][ T9224] usb 6-1: SerialNumber: syz [ 482.155343][ T9224] usb 6-1: config 0 descriptor?? [ 482.294525][ T29] audit: type=1400 audit(1785897320.500:1520): avc: denied { accept } for pid=15357 comm="syz.8.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 482.329490][T15365] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 482.399637][ T29] audit: type=1400 audit(1785897320.600:1521): avc: denied { read } for pid=15367 comm="syz.4.3149" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 482.445296][T15365] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.478787][T15369] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 482.510400][T15369] bond6: entered allmulticast mode [ 482.602900][T15370] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 482.638848][ T9] usb 6-1: USB disconnect, device number 18 [ 482.988830][ T5610] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 483.325990][T15396] tipc: New replicast peer: 127.0.0.1 [ 483.336208][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.366690][T15396] tipc: Enabled bearer , priority 10 [ 483.383620][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.440867][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.533465][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.550930][T15401] uprobe: syz.7.3161:15401 failed to unregister, leaking uprobe [ 483.582778][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.627462][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.643195][T15401] uprobe: syz.7.3161:15401 failed to unregister, leaking uprobe [ 483.654619][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.697561][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.735680][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.778735][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.838132][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 483.919662][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 484.002789][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 484.094720][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 484.166342][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 484.268647][T15397] 9pnet_fd: p9_fd_create_tcp (15397): problem connecting socket to 127.0.0.1 [ 484.278990][T15426] syz_tun: entered allmulticast mode [ 484.334999][T15425] syz_tun: left allmulticast mode [ 484.388992][T15429] fuse: fd is not a fuse device [ 484.397133][ T29] audit: type=1400 audit(1785897322.590:1522): avc: denied { mounton } for pid=15427 comm="syz.0.3170" path="/716/file0" dev="tmpfs" ino=3817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 485.037151][T15445] syzkaller0: entered promiscuous mode [ 485.065889][T15445] syzkaller0: entered allmulticast mode [ 485.201222][ T9224] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 485.421402][ T9224] usb 6-1: Using ep0 maxpacket: 32 [ 485.458848][ T9224] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.569367][ T9224] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 485.650983][ T9224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.727699][ T9224] usb 6-1: Product: syz [ 485.752755][ T9224] usb 6-1: Manufacturer: syz [ 485.785256][ T9224] usb 6-1: SerialNumber: syz [ 485.842360][ T9224] usb 6-1: config 0 descriptor?? [ 485.913181][ T9224] usb 6-1: No union descriptors [ 485.938636][ T9224] usb 6-1: unsupported MDLM descriptors [ 486.700059][T15467] fuse: Bad value for 'fd' [ 486.706862][T15468] netlink: 'syz.8.3184': attribute type 1 has an invalid length. [ 486.826428][T15468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 486.977076][T15470] bond4: (slave veth5): Enslaving as an active interface with a down link [ 487.100893][ T9] usb 6-1: USB disconnect, device number 19 [ 487.156114][T15473] bond4: (slave dummy0): making interface the new active one [ 487.198370][T15473] dummy0: entered promiscuous mode [ 487.214478][T15473] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 487.298911][T15468] bond4 (unregistering): (slave veth5): Releasing active interface [ 487.335527][T15468] bond4 (unregistering): (slave dummy0): Releasing active interface [ 487.385562][T15468] bond4 (unregistering): Released all slaves [ 487.703322][T15481] : renamed from bond0 (while UP) [ 488.002179][T15491] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3193'. [ 488.045581][T15488] netlink: 'syz.5.3191': attribute type 21 has an invalid length. [ 488.139448][T15488] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3191'. [ 488.236507][T15488] netlink: 'syz.5.3191': attribute type 5 has an invalid length. [ 488.340373][T15488] netlink: 'syz.5.3191': attribute type 6 has an invalid length. [ 488.443928][T15488] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3191'. [ 489.781139][ T5610] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 489.799395][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3207'. [ 490.144940][ T29] audit: type=1400 audit(1785897328.350:1523): avc: denied { name_bind } for pid=15537 comm="syz.5.3210" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 490.266158][ T29] audit: type=1400 audit(1785897328.370:1524): avc: denied { name_connect } for pid=15537 comm="syz.5.3210" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 490.996720][T15555] fuse: Bad value for 'rootmode' [ 491.038735][T15555] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þhë~"G [ 491.401545][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 491.482868][T15571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15571 comm=syz.8.3221 [ 491.530291][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3221'. [ 491.619741][T15573] vlan3: entered allmulticast mode [ 491.664700][T15573] bond0: entered allmulticast mode [ 492.553895][T15587] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 493.555281][T15609] fuse: Bad value for 'fd' [ 493.775973][T15614] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3231'. [ 493.846557][T15615] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3231'. [ 493.920863][T15615] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3231'. [ 494.098628][T15619] bond1: left promiscuous mode [ 494.124873][T15619] gre1: left promiscuous mode [ 494.251642][T15627] syz_tun: entered allmulticast mode [ 494.317991][T15627] lo: entered allmulticast mode [ 494.375169][T15626] syz_tun: left allmulticast mode [ 495.928507][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3254'. [ 496.163386][ T5711] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 496.392259][ T5711] usb 6-1: Using ep0 maxpacket: 32 [ 496.462968][ T5711] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 496.533742][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.594322][ T5711] usb 6-1: config 0 descriptor?? [ 496.637463][ T5711] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 497.191417][ T5711] gspca_vc032x: reg_r err -110 [ 497.208491][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.236454][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.275756][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.301350][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.323346][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.352112][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.385970][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.428116][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.468202][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.509355][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.549481][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.592039][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.637616][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.680344][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.739026][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.797148][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.855092][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.909235][ T5711] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.954486][ T5711] gspca_vc032x: Unknown sensor... [ 497.997550][T15727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 498.009365][ T5711] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 498.135187][ T5711] usb 6-1: USB disconnect, device number 21 [ 499.713687][T15773] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 499.917083][T15777] fuse: fd is not a fuse device [ 501.165728][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.758173][T15818] overlayfs: failed to clone upperpath [ 501.838388][ T29] audit: type=1400 audit(1785897340.040:1525): avc: denied { rename } for pid=15815 comm="syz.8.3293" name="file0" dev="tmpfs" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 502.903640][ T29] audit: type=1400 audit(1785897341.110:1526): avc: denied { mounton } for pid=15839 comm="syz.4.3299" path="/255/file1/debug" dev="autofs" ino=56022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 503.907946][T11405] syz_tun (unregistering): left allmulticast mode [ 503.950566][T11405] syz_tun (unregistering): left promiscuous mode [ 504.000134][T11405] bridge0: port 3(syz_tun) entered disabled state [ 504.178918][T15867] fuse: fd is not a fuse device [ 505.208347][T14095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.226393][T14095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.238255][T14095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.247805][T14095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.266229][T14095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.362513][ T29] audit: type=1400 audit(1785897343.570:1527): avc: denied { mounton } for pid=15890 comm="syz.7.3316" path="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 506.429538][T15915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.652862][ T5952] bridge_slave_1: left allmulticast mode [ 506.669309][ T29] audit: type=1804 audit(1785897344.870:1528): pid=15934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3325" name="bus" dev="ramfs" ino=56398 res=1 errno=0 [ 506.706862][ T5952] bridge_slave_1: left promiscuous mode [ 506.739874][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.775342][ T5952] ¾x9ÿ: left allmulticast mode [ 506.784015][ T29] audit: type=1804 audit(1785897344.900:1529): pid=15934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.3325" name="bus" dev="ramfs" ino=56398 res=1 errno=0 [ 506.812624][ T5952] ¾x9ÿ: left promiscuous mode [ 506.829225][ T5952] bridge0: port 1(1¾x9ÿ) entered disabled state [ 507.254886][ T5952] team0: Port device bridge0 removed [ 507.360409][ T5952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.388158][ T5952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.403198][T14095] Bluetooth: hci2: command tx timeout [ 507.426050][ T5952] bond0 (unregistering): Released all slaves [ 508.343291][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3334'. [ 508.537932][T15966] bond4: entered promiscuous mode [ 508.568207][T15966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 508.689351][T15972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 508.737733][T15972] bond4: (slave sit2): The slave device specified does not support setting the MAC address [ 508.766482][ T29] audit: type=1400 audit(1785897346.970:1530): avc: denied { write } for pid=15950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.867157][T15972] bond4: (slave sit2): Error -95 calling set_mac_address [ 509.131984][ T29] audit: type=1400 audit(1785897347.330:1531): avc: denied { write } for pid=15978 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.236097][ T5952] hsr_slave_0: left promiscuous mode [ 509.282054][ T5952] hsr_slave_1: left promiscuous mode [ 509.345887][ T5952] team0 (unregistering): Port device vlan3 removed [ 509.484403][T14095] Bluetooth: hci2: command tx timeout [ 509.657957][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3338'. [ 509.803706][ T29] audit: type=1804 audit(1785897348.010:1532): pid=15993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3340" name="file0" dev="tmpfs" ino=3983 res=1 errno=0 [ 510.439399][ T5952] team0 (unregistering): Port device team_slave_1 removed [ 510.455490][T16009] netlink: 'syz.5.3345': attribute type 1 has an invalid length. [ 510.495103][ T5952] team0 (unregistering): Port device team_slave_0 removed [ 510.685806][T16014] netlink: 'syz.0.3346': attribute type 83 has an invalid length. [ 510.830169][T16014] netlink: 'syz.0.3346': attribute type 83 has an invalid length. [ 510.868865][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17 [ 511.059328][T16009] 8021q: adding VLAN 0 to HW filter on device bond5 [ 511.168527][T16010] bond5: (slave veth9): Enslaving as an active interface with a down link [ 511.199778][T16011] veth0_virt_wifi: entered promiscuous mode [ 511.260921][T16011] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 511.324011][T16012] bond5: (slave veth0_virt_wifi): Releasing active interface [ 511.561183][T14095] Bluetooth: hci2: command tx timeout [ 511.700115][T16028] fuse: fd is not a fuse device [ 512.249304][T16047] fuse: fd is not a fuse device [ 512.707188][T15888] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.786407][T15888] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.832588][T15888] bridge_slave_0: entered allmulticast mode [ 512.877208][T15888] bridge_slave_0: entered promiscuous mode [ 512.927169][T16060] vlan2: entered allmulticast mode [ 512.965243][T16060] bond0: entered allmulticast mode [ 512.996548][T16060] bond_slave_0: entered allmulticast mode [ 513.036525][T16060] bond_slave_1: entered allmulticast mode [ 513.108162][ T29] audit: type=1400 audit(1785897351.310:1533): avc: denied { write } for pid=16039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.389443][ T29] audit: type=1400 audit(1785897351.590:1534): avc: denied { write } for pid=16075 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.499810][T16064] bridge_slave_0: left allmulticast mode [ 513.540548][T16064] bridge_slave_0: left promiscuous mode [ 513.578979][T16064] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.645841][T14095] Bluetooth: hci2: command tx timeout [ 513.686870][T16064] bridge_slave_1: left allmulticast mode [ 513.727049][T16064] bridge_slave_1: left promiscuous mode [ 513.746955][T16064] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.777999][T16064] bond0: (slave bond_slave_0): Releasing backup interface [ 513.802161][T16064] bond_slave_0: left allmulticast mode [ 513.820738][T16064] bond0: (slave bond_slave_1): Releasing backup interface [ 513.842459][T16064] bond_slave_1: left allmulticast mode [ 513.860124][T16064] team0: Port device team_slave_0 removed [ 513.883343][T16064] team0: Port device team_slave_1 removed [ 513.902179][T16064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.954717][T15888] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.977223][T15888] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.001303][T15888] bridge_slave_1: entered allmulticast mode [ 514.025352][T15888] bridge_slave_1: entered promiscuous mode [ 514.066188][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 514.179265][T15888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.228694][T15888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.384996][T15888] team0: Port device team_slave_0 added [ 514.427837][T15888] team0: Port device team_slave_1 added [ 514.504402][T16098] netlink: 'syz.5.3362': attribute type 4 has an invalid length. [ 514.601906][T15888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.653620][T15888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.762446][T15888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.832592][T15888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.872462][T15888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.018527][T15888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.146634][ T29] audit: type=1400 audit(1785897353.350:1535): avc: denied { create } for pid=16111 comm="syz.8.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 515.227780][T15888] hsr_slave_0: entered promiscuous mode [ 515.279447][T15888] hsr_slave_1: entered promiscuous mode [ 515.304192][ T29] audit: type=1400 audit(1785897353.470:1536): avc: denied { write } for pid=16097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.347289][T15888] debugfs: 'hsr0' already exists in 'hsr' [ 515.382448][T15888] Cannot create hsr debugfs directory [ 515.554867][ T29] audit: type=1400 audit(1785897353.760:1537): avc: denied { write } for pid=16120 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.804541][ T5273] 8021q: adding VLAN 0 to HW filter on device eth19 [ 516.619610][T16141] vlan2: entered allmulticast mode [ 516.653708][T16141] bond0: entered allmulticast mode [ 516.693698][T16141] bond_slave_0: entered allmulticast mode [ 516.726069][T16141] bond_slave_1: entered allmulticast mode [ 516.749194][T16156] netlink: 'syz.5.3374': attribute type 4 has an invalid length. [ 516.779857][T16146] bridge_slave_0: left allmulticast mode [ 516.807459][T16146] bridge_slave_0: left promiscuous mode [ 516.842026][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.899819][T16146] bridge_slave_1: left allmulticast mode [ 516.926330][ T29] audit: type=1400 audit(1785897355.130:1538): avc: denied { write } for pid=16133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.965433][T16146] bridge_slave_1: left promiscuous mode [ 516.996167][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.064518][T16146] bond0: (slave bond_slave_0): Releasing backup interface [ 517.086021][T16146] bond_slave_0: left allmulticast mode [ 517.106902][T16146] bond0: (slave bond_slave_1): Releasing backup interface [ 517.136885][T16146] bond_slave_1: left allmulticast mode [ 517.154606][T16146] team0: Port device team_slave_0 removed [ 517.166729][ T29] audit: type=1400 audit(1785897355.370:1539): avc: denied { write } for pid=16169 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.213752][T16146] team0: Port device team_slave_1 removed [ 517.235729][T16146] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 517.312488][ T5273] 8021q: adding VLAN 0 to HW filter on device eth20 [ 517.439526][T16173] fuse: fd is not a fuse device [ 517.602663][T15888] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 517.648105][T15888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.677486][T15888] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 517.718737][T15888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.758588][T15888] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 517.829840][T15888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.873377][T15888] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 517.938563][T15888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.323645][T15888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.405453][T15888] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.469444][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.476600][T11993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.546764][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.553903][T11993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.133439][T16226] vlan3: entered allmulticast mode [ 519.266110][T16228] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 519.556334][ T29] audit: type=1400 audit(1785897357.760:1540): avc: denied { map } for pid=16237 comm="syz.8.3392" path="socket:[58396]" dev="sockfs" ino=58396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 519.965428][T15888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.092935][T16256] lo: entered allmulticast mode [ 520.127985][T16256] tunl0: entered allmulticast mode [ 520.158309][T16256] gre0: entered allmulticast mode [ 520.216981][T16256] gretap0: entered allmulticast mode [ 520.262157][T16256] erspan0: entered allmulticast mode [ 520.304385][T16256] ip_vti0: entered allmulticast mode [ 520.326011][T16256] ip6_vti0: entered allmulticast mode [ 520.345614][T16256] sit0: entered allmulticast mode [ 520.369881][T16256] ip6tnl0: entered allmulticast mode [ 520.386587][T16256] ip6gre0: entered allmulticast mode [ 520.419818][T16256] ip6gretap0: entered allmulticast mode [ 520.448244][T16256] bridge0: entered allmulticast mode [ 520.480404][T16256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.519444][T16256] team0: entered allmulticast mode [ 520.551445][T16256] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.584628][T16256] dummy0: entered allmulticast mode [ 520.609066][T16256] nlmon0: entered allmulticast mode [ 520.637933][T16256] vxcan0: entered allmulticast mode [ 520.659683][T16256] vxcan1: entered allmulticast mode [ 520.678885][T16256] veth0: entered allmulticast mode [ 520.690779][T16256] veth1: entered allmulticast mode [ 520.702942][T16256] wg0: entered allmulticast mode [ 520.723769][T16256] wg1: entered allmulticast mode [ 520.741746][T16256] wg2: entered allmulticast mode [ 520.756241][T16256] veth0_to_bridge: entered allmulticast mode [ 520.766111][T16256] bridge_slave_0: entered allmulticast mode [ 520.772801][T16256] veth1_to_bridge: entered allmulticast mode [ 520.779664][T16256] bridge_slave_1: entered allmulticast mode [ 520.786493][T16256] veth0_to_bond: entered allmulticast mode [ 520.793612][T16256] bond_slave_0: entered allmulticast mode [ 520.799891][T16256] veth1_to_bond: entered allmulticast mode [ 520.807153][T16256] bond_slave_1: entered allmulticast mode [ 520.813792][T16256] veth0_to_team: entered allmulticast mode [ 520.820521][T16256] team_slave_0: entered allmulticast mode [ 520.827197][T16256] veth1_to_team: entered allmulticast mode [ 520.834309][T16256] team_slave_1: entered allmulticast mode [ 520.840555][T16256] veth0_to_batadv: entered allmulticast mode [ 520.850669][T16256] batadv_slave_0: entered allmulticast mode [ 520.859208][T16256] veth1_to_batadv: entered allmulticast mode [ 520.866328][T16256] batadv_slave_1: entered allmulticast mode [ 520.873897][T16256] xfrm0: entered allmulticast mode [ 520.880284][T16256] veth0_to_hsr: entered allmulticast mode [ 520.887375][T16256] hsr_slave_0: entered allmulticast mode [ 520.893816][T16256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 520.936098][T16271] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 521.619736][T15888] veth0_vlan: entered promiscuous mode [ 521.690846][T15888] veth1_vlan: entered promiscuous mode [ 521.855687][T15888] veth0_macvtap: entered promiscuous mode [ 521.927816][T15888] veth1_macvtap: entered promiscuous mode [ 522.049476][T15888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.137893][T15888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.236280][ T1040] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.296679][ T1040] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.411697][T11993] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.468445][T11993] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.778047][T11993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.824507][T11993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.004331][T11993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.053420][T11993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.152272][ T29] audit: type=1400 audit(1785897361.350:1541): avc: denied { mounton } for pid=15888 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 523.771502][T16320] fuse: fd is not a fuse device [ 524.563163][T16332] fuse: fd is not a fuse device [ 524.916115][T16339] fuse: fd is not a fuse device [ 524.970586][T16342] tipc: Started in network mode [ 524.999767][T16342] tipc: Node identity 4, cluster identity 4711 [ 525.034256][T16342] tipc: Node number set to 4 [ 525.101582][ T29] audit: type=1400 audit(1785897363.300:1542): avc: denied { setopt } for pid=16346 comm="syz.8.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 525.145263][T16350] overlayfs: failed to clone upperpath [ 525.234307][ T29] audit: type=1400 audit(1785897363.300:1543): avc: denied { connect } for pid=16346 comm="syz.8.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 525.867350][ T29] audit: type=1400 audit(1785897364.070:1544): avc: denied { transfer } for pid=16377 comm="syz.9.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 526.204807][T16385] hsr1: left promiscuous mode [ 526.265662][T16385] bond5: left allmulticast mode [ 526.301868][T16385] bridge1: left allmulticast mode [ 526.334574][T16385] bridge1: left promiscuous mode [ 526.373977][ T29] audit: type=1400 audit(1785897364.570:1545): avc: denied { listen } for pid=16389 comm="syz.8.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 526.406196][T16385] bond6: left allmulticast mode [ 526.442521][T11993] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.490002][T11993] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.513849][ T29] audit: type=1400 audit(1785897364.610:1546): avc: denied { accept } for pid=16389 comm="syz.8.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 526.569716][T11993] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.633148][T11993] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.705200][T11993] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.766035][T11993] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.806485][T11993] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.849452][T11993] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.401410][T14095] Bluetooth: hci2: command tx timeout [ 528.319184][ T29] audit: type=1400 audit(1785897366.520:1547): avc: denied { checkpoint_restore } for pid=16414 comm="syz.7.3449" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 528.561321][T16420] fuse: fd is not a fuse device [ 529.146491][T16439] (syz.9.3455,16439,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 529.181405][T16447] fuse: fd is not a fuse device [ 529.203654][ T29] audit: type=1400 audit(1785897367.400:1548): avc: denied { write } for pid=16413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.231525][T16439] (syz.9.3455,16439,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 529.278261][T16439] (syz.9.3455,16439,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 529.310477][T16451] fuse: fd is not a fuse device [ 529.325559][T16439] (syz.9.3455,16439,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 529.479797][ T29] audit: type=1400 audit(1785897367.680:1549): avc: denied { write } for pid=16454 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.625259][T16462] pimreg: entered allmulticast mode [ 529.658983][T16466] pimreg: left allmulticast mode [ 530.259530][ T29] audit: type=1400 audit(1785897368.460:1550): avc: denied { write } for pid=16468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.410228][ T29] audit: type=1400 audit(1785897368.610:1551): avc: denied { write } for pid=16485 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.157419][T16507] fuse: fd is not a fuse device [ 531.364995][T16513] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3472'. [ 531.433789][T16515] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3473'. [ 531.583688][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3472'. [ 531.665421][ T29] audit: type=1400 audit(1785897369.870:1552): avc: denied { accept } for pid=16523 comm="syz.9.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 531.843342][ T29] audit: type=1400 audit(1785897370.030:1553): avc: denied { write } for pid=16493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.951241][T16528] rdma_rxe: rxe_newlink: failed to add veth0 [ 532.197968][ T29] audit: type=1400 audit(1785897370.400:1554): avc: denied { write } for pid=16535 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.358180][ T29] audit: type=1400 audit(1785897370.430:1555): avc: denied { read } for pid=16542 comm="syz.7.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 532.738161][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3485'. [ 533.088842][T16567] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3487'. [ 533.238490][T16571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3489'. [ 533.308477][ T29] audit: type=1400 audit(1785897371.510:1556): avc: denied { setopt } for pid=16570 comm="syz.0.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 533.566579][ T29] audit: type=1400 audit(1785897371.770:1557): avc: denied { write } for pid=16551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.825039][ T29] audit: type=1400 audit(1785897372.030:1558): avc: denied { write } for pid=16588 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.968848][T16246] libceph: connect (1)[c::]:6789 error -101 [ 533.995008][T16246] libceph: mon0 (1)[c::]:6789 connect error [ 534.116822][T16593] ceph: No mds server is up or the cluster is laggy [ 534.292913][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 534.319457][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 535.102061][ T5711] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 535.273623][ T5711] usb 10-1: Using ep0 maxpacket: 16 [ 535.302220][ T5711] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.348888][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.409097][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 535.463223][ T5711] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 535.520144][ T5711] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.596582][ T5711] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 535.639612][ T5711] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 535.687874][ T5711] usb 10-1: Manufacturer: syz [ 535.729044][ T5711] usb 10-1: config 0 descriptor?? [ 536.081152][ T5711] rc_core: IR keymap rc-hauppauge not found [ 536.107568][ T5711] Registered IR keymap rc-empty [ 536.154751][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.203143][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.255078][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 536.291604][T16654] fuse: fd is not a fuse device [ 536.327436][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input28 [ 536.404456][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.463762][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.511403][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.561204][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.601301][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.642230][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.701460][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.752180][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.782044][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.824745][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 536.873827][ T5711] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 536.920288][ T5711] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 536.936756][T16667] overlayfs: failed to clone upperpath [ 536.973056][ T5711] usb 10-1: USB disconnect, device number 2 [ 537.258838][ T29] audit: type=1400 audit(1785897375.460:1559): avc: denied { watch watch_reads } for pid=16670 comm="syz.0.3514" path="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 537.632126][ T5711] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 537.782967][ T5711] usb 10-1: Using ep0 maxpacket: 32 [ 537.790198][ T5711] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 537.802937][ T5711] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 537.812333][ T5711] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.820443][ T5711] usb 10-1: Product: syz [ 537.825116][ T5711] usb 10-1: Manufacturer: syz [ 537.830649][ T5711] usb 10-1: SerialNumber: syz [ 537.838081][ T5711] usb 10-1: config 0 descriptor?? [ 537.855190][T16676] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 537.868185][ T5711] hub 10-1:0.0: bad descriptor, ignoring hub [ 537.879377][ T5711] hub 10-1:0.0: probe with driver hub failed with error -5 [ 537.890083][ T5711] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input29 [ 538.076701][T16246] usb 10-1: USB disconnect, device number 3 [ 538.076755][ C0] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 539.066257][T16686] bridge0: port 1(wlan1) entered blocking state [ 539.096959][T16686] bridge0: port 1(wlan1) entered disabled state [ 539.132298][T16686] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 539.195147][T16686] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 539.844365][T16707] netlink: 'syz.8.3530': attribute type 11 has an invalid length. [ 540.111559][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3524'. [ 540.359324][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3534'. [ 540.611100][T16246] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 540.794096][T16246] usb 10-1: Using ep0 maxpacket: 32 [ 540.890124][T16246] usb 10-1: unable to get BOS descriptor or descriptor too short [ 540.968335][T16246] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 541.027353][T16246] usb 10-1: can't read configurations, error -71 [ 542.719470][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3550'. [ 542.788547][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3550'. [ 544.993600][T16837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 545.041975][T16837] netlink: 'syz.0.3572': attribute type 7 has an invalid length. [ 545.096074][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 545.152603][T16837] netlink: 'syz.0.3572': attribute type 8 has an invalid length. [ 545.177221][T16842] fuse: fd is not a fuse device [ 545.186138][T16843] fuse: fd is not a fuse device [ 545.197857][T16839] netlink: 'syz.0.3572': attribute type 7 has an invalid length. [ 545.234858][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3572'. [ 545.287590][T16839] netlink: 'syz.0.3572': attribute type 8 has an invalid length. [ 545.359310][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3572'. [ 546.003409][T16883] bond2: entered allmulticast mode [ 546.033232][T16883] ipip0: entered allmulticast mode [ 546.245676][ T29] audit: type=1804 audit(1785897384.450:1560): pid=16891 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3590" name="file0" dev="tmpfs" ino=2615 res=1 errno=0 [ 546.335946][T16891] ref_ctr increment failed for inode: 0xa37 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ccf1980 [ 546.417554][T16889] uprobe: syz.8.3590:16889 failed to unregister, leaking uprobe [ 547.216533][T16915] fuse: fd is not a fuse device [ 548.025457][T16918] overlay: ./file0 is not a directory [ 548.030929][ T29] audit: type=1400 audit(1785897386.230:1561): avc: denied { mounton } for pid=16916 comm="syz.8.3600" path="/500/file0" dev="tmpfs" ino=2636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 548.149279][ T29] audit: type=1400 audit(1785897386.340:1562): avc: denied { read } for pid=16946 comm="syz.5.3623" path="socket:[61446]" dev="sockfs" ino=61446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 548.871221][T16246] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 549.045101][T16246] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 549.091760][T16246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.153420][T16246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.219299][T16246] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.280864][T16246] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.330752][T16246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.366731][T16246] usb 10-1: config 0 descriptor?? [ 549.616586][T16985] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 549.830215][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 549.869943][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 549.906957][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 549.942803][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 549.979884][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 550.015937][ T29] audit: type=1400 audit(1785897388.210:1563): avc: denied { getopt } for pid=16993 comm="syz.7.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 550.042299][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 550.088284][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 550.137985][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 550.157184][ T29] audit: type=1400 audit(1785897388.260:1564): avc: denied { connect } for pid=16959 comm="syz.9.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 550.200886][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 550.238773][T16246] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 550.251558][T17006] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3637'. [ 550.317820][T16246] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 550.424731][T16246] usb 10-1: USB disconnect, device number 6 [ 550.524831][T17012] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 550.560955][T17008] fido_id[17008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 550.579111][T17015] overlayfs: failed to clone upperpath [ 551.307847][T17046] overlayfs: failed to resolve './cgroup': -2 [ 551.587135][T17058] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 553.675897][T17087] netlink: 'syz.9.3669': attribute type 1 has an invalid length. [ 553.788719][T17087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.846621][T17098] fuse: fd is not a fuse device [ 553.930848][T17095] bond1: (slave veth3): Enslaving as an active interface with a down link [ 554.008108][T17099] veth0_virt_wifi: entered promiscuous mode [ 554.076578][T17099] bond1: (slave veth0_virt_wifi): making interface the new active one [ 554.130053][T17099] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 554.184039][T17087] bond1: (slave veth0_virt_wifi): Releasing active interface [ 554.294478][T17115] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 554.435813][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3680'. [ 555.099640][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3686'. [ 555.163176][T17135] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 555.208317][T17135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 555.253187][T17142] fuse: fd is not a fuse device [ 556.057569][T17153] fuse: fd is not a fuse device [ 556.067296][T17154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.201864][T17154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.259572][T17163] fuse: fd is not a fuse device [ 556.319778][T17150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.378512][T17166] syzkaller0: entered promiscuous mode [ 556.400540][T17166] syzkaller0: entered allmulticast mode [ 556.627106][ T29] audit: type=1804 audit(1785897394.810:1565): pid=17175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.3700" name="file0" dev="ramfs" ino=63620 res=1 errno=0 [ 557.417575][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3707'. [ 558.415369][ T29] audit: type=1400 audit(1785897396.620:1566): avc: denied { write } for pid=17211 comm="syz.9.3713" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 558.510508][ T29] audit: type=1400 audit(1785897396.640:1567): avc: denied { open } for pid=17211 comm="syz.9.3713" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 558.604924][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3715'. [ 558.631564][ T29] audit: type=1400 audit(1785897396.650:1568): avc: denied { ioctl } for pid=17211 comm="syz.9.3713" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 558.741653][T17219] hsr_slave_1 (unregistering): left promiscuous mode [ 560.026275][T17255] fuse: fd is not a fuse device [ 560.918652][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3737'. [ 561.238250][T17292] hsr_slave_0 (unregistering): left promiscuous mode [ 562.375438][T17303] tunl0: Caught tx_queue_len zero misconfig [ 562.603342][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.324770][T17328] fuse: fd is not a fuse device [ 563.559828][T16246] libceph: connect (1)[c::]:6789 error -99 [ 563.576318][T16246] libceph: mon0 (1)[c::]:6789 connect error [ 563.700111][T17335] ceph: No mds server is up or the cluster is laggy [ 563.818579][T17348] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3753'. [ 564.394963][T17365] fuse: Bad value for 'fd' [ 564.745135][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3764'. [ 564.803308][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3764'. [ 564.860647][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3764'. [ 564.906237][T17376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.927347][T17376] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 565.143779][T17376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 565.183058][T17376] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 565.267637][T17376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 565.282735][T17376] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 565.306935][T17376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.337491][T17376] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 567.184398][T17425] tunl0: entered allmulticast mode [ 567.212291][T17425] gre0: entered allmulticast mode [ 567.248563][T17425] gretap0: entered allmulticast mode [ 567.312865][T17425] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 568.443491][T17469] lo: entered allmulticast mode [ 568.467199][T17470] overlayfs: failed to clone upperpath [ 568.476183][T17469] tunl0: entered allmulticast mode [ 568.505164][T17469] gre0: entered allmulticast mode [ 568.549320][T17469] gretap0: entered allmulticast mode [ 568.634735][T17469] erspan0: entered allmulticast mode [ 568.675307][T17469] ip_vti0: entered allmulticast mode [ 568.728579][T17469] ip6_vti0: entered allmulticast mode [ 568.875317][T17469] sit0: entered allmulticast mode [ 568.903861][T17469] ip6tnl0: entered allmulticast mode [ 570.866455][T17469] ip6gre0: entered allmulticast mode [ 570.902763][T17469] syz_tun: entered allmulticast mode [ 571.904793][T17469] ip6gretap0: entered allmulticast mode [ 572.058664][T17469] bridge0: entered allmulticast mode [ 572.080197][T17469] vcan0: entered allmulticast mode [ 572.103985][T17469] bond0: entered allmulticast mode [ 572.119990][T17503] netlink: 272 bytes leftover after parsing attributes in process `syz.5.3810'. [ 572.135542][T17469] bond_slave_0: entered allmulticast mode [ 572.152095][T17469] bond_slave_1: entered allmulticast mode [ 572.172471][T17469] team0: entered allmulticast mode [ 572.190781][T17469] team_slave_0: entered allmulticast mode [ 572.222493][T17469] team_slave_1: entered allmulticast mode [ 572.245518][T17469] dummy0: entered allmulticast mode [ 572.260700][T17469] nlmon0: entered allmulticast mode [ 572.273006][T17469] batadv0: entered allmulticast mode [ 572.287337][T17469] vxcan0: entered allmulticast mode [ 572.307474][T17469] vxcan1: entered allmulticast mode [ 572.322434][T17469] veth0: entered allmulticast mode [ 572.333413][T17469] veth1: entered allmulticast mode [ 572.339172][T17469] wg0: entered allmulticast mode [ 572.345044][T17469] wg1: entered allmulticast mode [ 572.350611][T17469] wg2: entered allmulticast mode [ 572.359562][T17469] veth0_to_bridge: entered allmulticast mode [ 572.367538][T17469] bridge_slave_0: left promiscuous mode [ 572.373916][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.386837][T17469] veth1_to_bridge: entered allmulticast mode [ 572.397368][T17469] bridge_slave_1: left promiscuous mode [ 572.403789][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.413988][T17469] veth0_to_bond: entered allmulticast mode [ 572.421992][T17469] bond0: (slave bond_slave_0): Releasing backup interface [ 572.430579][T17469] veth1_to_bond: entered allmulticast mode [ 572.438911][T17469] bond0: (slave bond_slave_1): Releasing backup interface [ 572.454765][T17469] veth0_to_team: entered allmulticast mode [ 572.467557][T17469] team0: Port device team_slave_0 removed [ 572.474631][T17469] veth1_to_team: entered allmulticast mode [ 572.484579][T17469] team0: Port device team_slave_1 removed [ 572.490664][T17469] veth0_to_batadv: entered allmulticast mode [ 572.497743][T17469] batadv_slave_0: entered allmulticast mode [ 572.505282][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.513511][T17469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.522273][T17469] veth1_to_batadv: entered allmulticast mode [ 572.528928][T17469] batadv_slave_1: entered allmulticast mode [ 572.535513][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.543474][T17469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.552206][T17469] xfrm0: entered allmulticast mode [ 572.557986][T17469] veth0_to_hsr: entered allmulticast mode [ 572.564772][T17469] hsr_slave_0: entered allmulticast mode [ 572.570947][T17469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 572.992361][T16246] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 573.076551][ T29] audit: type=1326 audit(1785897411.280:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.7.3820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c5459e019 code=0x0 [ 573.154604][T17532] tipc: Failed to remove unknown binding: 66,0,0/2126:2686452477/2686452479 [ 573.203091][T17532] tipc: Failed to remove unknown binding: 66,0,0/2126:2686452477/2686452478 [ 573.246046][T16246] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 573.262330][T17535] tipc: Failed to remove unknown binding: 66,0,0/2126:2686452477/2686452479 [ 573.286860][T16246] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 573.340053][T17535] tipc: Failed to remove unknown binding: 66,0,0/2126:2686452477/2686452478 [ 573.356780][T16246] usb 10-1: config 220 has no interface number 2 [ 573.390781][T16246] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 573.493245][T16246] usb 10-1: config 220 interface 0 has no altsetting 0 [ 573.535248][T16246] usb 10-1: config 220 interface 76 has no altsetting 0 [ 573.577363][T16246] usb 10-1: config 220 interface 1 has no altsetting 0 [ 573.619597][T16246] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 573.663636][T16246] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.714224][T16246] usb 10-1: Product: syz [ 573.737208][T16246] usb 10-1: Manufacturer: syz [ 573.763437][T16246] usb 10-1: SerialNumber: syz [ 574.027815][T16246] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 574.079793][T16246] uvcvideo 10-1:220.0: No valid video chain found. [ 574.125680][T16246] usb 10-1: selecting invalid altsetting 0 [ 574.193655][T16246] usb 10-1: selecting invalid altsetting 0 [ 574.223912][T16246] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 574.274850][T16246] usb 10-1: USB disconnect, device number 7 [ 574.507378][ T29] audit: type=1400 audit(1785897412.710:1570): avc: denied { bind } for pid=17552 comm="syz.0.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.533052][T17555] lo: entered allmulticast mode [ 574.549631][T17555] tunl0: entered allmulticast mode [ 574.564595][T17555] gre0: entered allmulticast mode [ 574.580952][T17555] gretap0: entered allmulticast mode [ 574.594666][T17555] erspan0: entered allmulticast mode [ 574.610883][T17555] ip_vti0: entered allmulticast mode [ 574.625712][T17555] ip6_vti0: entered allmulticast mode [ 574.639514][T17555] sit0: entered allmulticast mode [ 574.646225][T17555] ip6tnl0: entered allmulticast mode [ 574.652431][T17555] ip6gre0: entered allmulticast mode [ 574.669045][T17555] ip6gretap0: entered allmulticast mode [ 574.700076][T17555] bridge0: entered allmulticast mode [ 574.715438][T17555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.726251][T17555] nlmon0: entered allmulticast mode [ 574.732581][T17555] veth0: entered allmulticast mode [ 574.740740][T17555] veth1: entered allmulticast mode [ 574.754138][T17555] wg0: entered allmulticast mode [ 574.766887][T17555] wg1: entered allmulticast mode [ 574.779397][T17555] wg2: entered allmulticast mode [ 574.788157][T17555] veth0_to_bridge: entered allmulticast mode [ 574.796818][T17555] bridge_slave_0: entered allmulticast mode [ 574.803674][T17555] veth1_to_bridge: entered allmulticast mode [ 574.810442][T17555] bridge_slave_1: entered allmulticast mode [ 574.817274][T17555] veth0_to_bond: entered allmulticast mode [ 574.824225][T17555] bond_slave_0: entered allmulticast mode [ 574.830549][T17555] veth1_to_bond: entered allmulticast mode [ 574.837422][T17555] bond_slave_1: entered allmulticast mode [ 574.844074][T17555] veth0_to_team: entered allmulticast mode [ 574.856625][T17555] team_slave_0: entered allmulticast mode [ 574.876388][T17555] veth1_to_team: entered allmulticast mode [ 574.906365][T17555] team_slave_1: entered allmulticast mode [ 574.922985][T17561] netlink: 'syz.9.3831': attribute type 1 has an invalid length. [ 574.932177][T17555] veth0_to_batadv: entered allmulticast mode [ 574.938657][T17561] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3831'. [ 574.948822][T17555] batadv_slave_0: entered allmulticast mode [ 574.955827][T17555] xfrm0: entered allmulticast mode [ 574.961480][T17561] netlink: 'syz.9.3831': attribute type 1 has an invalid length. [ 574.969947][T17555] veth0_to_hsr: entered allmulticast mode [ 574.977243][T17555] hsr_slave_0: entered allmulticast mode [ 575.016911][T17555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.728143][ T29] audit: type=1326 audit(1785897414.930:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.5.3841" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d739e019 code=0x0 [ 577.111065][ T5711] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 577.283021][ T5711] usb 10-1: Using ep0 maxpacket: 16 [ 577.301535][ T5711] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.336680][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.370269][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 577.408812][ T5711] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 577.439679][ T5711] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.488762][ T5711] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 577.518186][ T5711] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 577.546375][ T5711] usb 10-1: Manufacturer: syz [ 577.597946][ T5711] usb 10-1: config 0 descriptor?? [ 577.676904][ T29] audit: type=1400 audit(1785897415.880:1572): avc: denied { watch } for pid=17597 comm="syz.8.3854" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 577.859451][T17602] lo: entered allmulticast mode [ 577.890449][T17602] tunl0: entered allmulticast mode [ 577.922529][T17602] gre0: entered allmulticast mode [ 577.974958][T17602] gretap0: entered allmulticast mode [ 577.986039][ T5711] rc_core: IR keymap rc-hauppauge not found [ 578.008030][ T5711] Registered IR keymap rc-empty [ 578.028537][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.046282][T17602] erspan0: entered allmulticast mode [ 578.072724][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.102617][T17602] ip_vti0: entered allmulticast mode [ 578.124493][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 578.137404][T17602] ip6_vti0: entered allmulticast mode [ 578.160890][T17602] sit0: entered allmulticast mode [ 578.177203][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input30 [ 578.199097][T17602] ip6tnl0: entered allmulticast mode [ 578.220325][T17602] ip6gre0: entered allmulticast mode [ 578.241948][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.251898][T17602] ip6gretap0: entered allmulticast mode [ 578.278129][T17602] bridge0: entered allmulticast mode [ 578.300119][T17602] vcan0: entered allmulticast mode [ 578.306611][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.339813][T17602] : entered allmulticast mode [ 578.361847][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.372967][T17602] team0: entered allmulticast mode [ 578.400763][T17602] dummy0: entered allmulticast mode [ 578.414296][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.451249][T17602] nlmon0: entered allmulticast mode [ 578.462480][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.479257][T17602] veth0: entered allmulticast mode [ 578.507657][T17602] veth1: entered allmulticast mode [ 578.521847][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.556759][T17602] wg0: entered allmulticast mode [ 578.576558][T17602] wg1: entered allmulticast mode [ 578.582991][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.605595][T17602] wg2: entered allmulticast mode [ 578.622963][T17602] veth0_to_bridge: entered allmulticast mode [ 578.633248][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.657147][T17602] bridge_slave_0: entered allmulticast mode [ 578.681473][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.706207][T17602] veth1_to_bridge: entered allmulticast mode [ 578.724150][ T5711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 578.759474][T17602] bridge_slave_1: entered allmulticast mode [ 578.773686][ T5711] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 578.811626][ T5711] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 578.827077][T17602] veth0_to_bond: entered allmulticast mode [ 578.852286][T17602] bond_slave_0: entered allmulticast mode [ 578.872516][ T5711] usb 10-1: USB disconnect, device number 8 [ 578.890741][T17602] veth1_to_bond: entered allmulticast mode [ 578.937872][T17602] bond_slave_1: entered allmulticast mode [ 578.980182][T17602] veth0_to_team: entered allmulticast mode [ 579.015605][T17602] team_slave_0: entered allmulticast mode [ 579.056449][T17602] veth1_to_team: entered allmulticast mode [ 579.098328][T17602] team_slave_1: entered allmulticast mode [ 579.135355][T17602] veth0_to_batadv: entered allmulticast mode [ 579.167762][T17602] batadv_slave_0: entered allmulticast mode [ 579.202966][T17602] veth1_to_batadv: entered allmulticast mode [ 579.242660][T17602] batadv_slave_1: entered allmulticast mode [ 579.273990][T17602] xfrm0: entered allmulticast mode [ 579.305685][T17602] veth0_to_hsr: entered allmulticast mode [ 579.334830][T17602] hsr_slave_0: entered allmulticast mode [ 579.364625][T17602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 580.223436][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3860'. [ 580.314012][T17658] bpf: Bad value for 'context' [ 580.769942][T17667] ceph: No mds server is up or the cluster is laggy [ 581.101854][ T9] libceph: connect (1)[c::]:6789 error -99 [ 581.142415][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 581.218433][T17678] ceph: No mds server is up or the cluster is laggy [ 582.196894][T17702] ref_ctr increment failed for inode: 0xc7b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e368cc0 [ 582.212616][ T29] audit: type=1804 audit(1785897420.400:1573): pid=17702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3873" name="file0" dev="tmpfs" ino=3195 res=1 errno=0 [ 582.270495][T17701] uprobe: syz.7.3873:17701 failed to unregister, leaking uprobe [ 583.145112][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3877'. [ 583.429074][T17729] team0 (unregistering): left promiscuous mode [ 583.468511][T17729] team_slave_0: left promiscuous mode [ 583.509054][T17729] team_slave_1: left promiscuous mode [ 583.566099][T17729] team0 (unregistering): Port device team_slave_0 removed [ 583.640392][T17729] team0 (unregistering): Port device team_slave_1 removed [ 583.654276][T17732] xt_hashlimit: size too large, truncated to 1048576 [ 583.734574][T17732] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 584.045168][T17739] overlayfs: failed to clone upperpath [ 584.403906][T17756] kvm: pic: single mode not supported [ 584.403919][T17756] kvm: pic: level sensitive irq not supported [ 585.340477][T17786] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3897'. [ 585.544798][T17790] bridge0: entered allmulticast mode [ 585.585790][T17790] bond4: left allmulticast mode [ 585.618823][T17790] bond4: left promiscuous mode [ 585.647807][T17790] bridge0: port 1(bond4) entered disabled state [ 585.684046][T17793] overlayfs: failed to clone upperpath [ 585.981524][ T29] audit: type=1400 audit(1785897424.190:1574): avc: denied { listen } for pid=17796 comm="syz.9.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 586.428606][T17810] syz_tun: entered allmulticast mode [ 586.478412][T17810] syz_tun: left allmulticast mode [ 586.683069][T17819] fuse: fd is not a fuse device [ 586.846052][T17822] bridge0: port 1(veth0) entered blocking state [ 586.887208][T17822] bridge0: port 1(veth0) entered disabled state [ 586.947476][T17822] veth0: entered promiscuous mode [ 586.984114][T17822] bridge0: port 1(veth0) entered blocking state [ 586.990462][T17822] bridge0: port 1(veth0) entered listening state [ 587.327631][ T29] audit: type=1400 audit(1785897425.530:1575): avc: denied { write } for pid=17807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.477153][ T29] audit: type=1326 audit(1785897425.660:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe464f9e019 code=0x7ffc0000 [ 587.657727][ T29] audit: type=1326 audit(1785897425.660:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe464f9e019 code=0x7ffc0000 [ 587.895081][ T29] audit: type=1326 audit(1785897425.660:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe464f9e019 code=0x7ffc0000 [ 588.158892][ T29] audit: type=1326 audit(1785897425.660:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe464f9e019 code=0x7ffc0000 [ 588.290844][T12006] tipc: Subscription rejected, illegal request [ 588.429265][ T29] audit: type=1326 audit(1785897425.670:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe464f9e019 code=0x7ffc0000 [ 588.620613][T17865] veth1_to_hsr: entered allmulticast mode [ 588.680582][ T29] audit: type=1326 audit(1785897425.670:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe464f9e019 code=0x7ffc0000 [ 588.722845][T17865] hsr_slave_1: entered allmulticast mode [ 588.772992][T17865] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 588.865769][ T29] audit: type=1326 audit(1785897425.730:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe464f5e84e code=0x7ffc0000 [ 589.065893][ T29] audit: type=1326 audit(1785897425.730:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe464f5e84e code=0x7ffc0000 [ 589.279721][ T29] audit: type=1326 audit(1785897425.740:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.0.3912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe464f5e84e code=0x7ffc0000 [ 589.493080][T17887] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3921'. [ 589.683864][T17887] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17887 comm=syz.9.3921 [ 589.966360][T17905] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3925'. [ 590.024413][T17909] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3925'. [ 590.435591][T17920] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3930'. [ 590.486424][T17920] unsupported nlmsg_type 40 [ 591.219677][T17931] netlink: 'syz.9.3934': attribute type 1 has an invalid length. [ 591.474986][T17935] bond2: (slave bridge2): making interface the new active one [ 591.560895][T17935] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 592.133915][T16246] libceph: connect (1)[c::]:6789 error -101 [ 592.188345][T16246] libceph: mon0 (1)[c::]:6789 connect error [ 592.308971][T17945] ceph: No mds server is up or the cluster is laggy [ 592.372494][T17957] fuse: fd is not a fuse device [ 593.870789][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 593.870800][ T29] audit: type=1400 audit(1785897432.070:1643): avc: denied { create } for pid=17981 comm="syz.7.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 593.909394][T17982] netlink: 'syz.7.3952': attribute type 16 has an invalid length. [ 593.953799][T17982] netlink: 'syz.7.3952': attribute type 17 has an invalid length. [ 594.093781][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3953'. [ 594.290014][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 594.398711][T17995] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 594.413156][T17995] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 594.430074][T17995] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 594.444660][T17995] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 595.727619][T18036] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 595.819974][T18029] ceph: No mds server is up or the cluster is laggy [ 596.163892][T18046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3971'. [ 597.365558][ T29] audit: type=1326 audit(1785897435.570:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 597.534075][ T29] audit: type=1326 audit(1785897435.570:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 597.654669][T18079] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 597.654669][T18079] The task syz.9.3983 (18079) triggered the difference, watch for misbehavior. [ 597.697876][ T29] audit: type=1326 audit(1785897435.600:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 597.795738][T18084] netlink: zone id is out of range [ 597.807248][ T29] audit: type=1326 audit(1785897435.600:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 597.839898][T18084] netlink: get zone limit has 4 unknown bytes [ 597.906410][ T29] audit: type=1326 audit(1785897435.600:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 598.024443][ T29] audit: type=1326 audit(1785897435.600:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 598.119686][ T29] audit: type=1326 audit(1785897435.600:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 598.260933][ T29] audit: type=1326 audit(1785897435.600:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 598.320256][ T29] audit: type=1326 audit(1785897435.600:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.7.3982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5c5459e019 code=0x7ffc0000 [ 600.122622][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 600.122635][ T29] audit: type=1804 audit(1785897438.320:1713): pid=18130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3998" name="bus" dev="ramfs" ino=67770 res=1 errno=0 [ 600.289236][ T29] audit: type=1804 audit(1785897438.320:1714): pid=18130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.3998" name="bus" dev="ramfs" ino=67770 res=1 errno=0 [ 601.278312][ T5711] libceph: connect (1)[c::]:6789 error -99 [ 601.312845][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 601.352190][T18157] ceph: No mds server is up or the cluster is laggy [ 602.284555][ C0] bridge0: port 1(veth0) entered learning state [ 602.551486][T16246] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 602.808827][T16246] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.948354][T16246] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 603.010368][T18214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4020'. [ 603.034562][T16246] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 603.086307][T16246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.162410][T16246] as10x_usb: device has been detected [ 603.207684][T16246] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 603.344079][T16246] usb 10-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 603.630629][T18229] fuse: fd is not a fuse device [ 603.877926][ T29] audit: type=1400 audit(1785897442.080:1715): avc: denied { firmware_load } for pid=16246 comm="kworker/0:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 603.949416][T16246] as10x_usb: error during firmware upload part1 [ 603.979985][T16246] Registered device Abilis Systems DVB-Titan [ 605.980401][ T9] usb 10-1: USB disconnect, device number 9 [ 606.269710][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4036'. [ 606.552430][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4038'. [ 606.594077][ T9] Unregistered device Abilis Systems DVB-Titan [ 606.616924][ T9] as10x_usb: device has been disconnected [ 606.637867][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4038'. [ 607.193653][ T29] audit: type=1326 audit(1785897445.400:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 607.369045][ T29] audit: type=1326 audit(1785897445.430:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 607.496003][T18311] netlink: 'syz.0.4051': attribute type 10 has an invalid length. [ 607.504016][T18311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4051'. [ 607.513908][T18311] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 607.593944][ T29] audit: type=1326 audit(1785897445.430:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 607.708724][ T29] audit: type=1326 audit(1785897445.430:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 607.798547][ T29] audit: type=1326 audit(1785897445.430:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 607.921156][ T29] audit: type=1326 audit(1785897445.430:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 608.027390][ T29] audit: type=1326 audit(1785897445.430:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 608.155749][ T29] audit: type=1326 audit(1785897445.440:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 608.258969][ T29] audit: type=1326 audit(1785897445.440:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f77d739e019 code=0x7ffc0000 [ 608.890454][ T29] audit: type=1326 audit(1785897445.440:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.5.4048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77d7397d97 code=0x7ffc0000 [ 610.469207][T18352] overlayfs: failed to clone lowerpath [ 610.555176][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4066'. [ 610.994148][T18360] Console: switching to colour VGA+ 80x25 [ 612.058833][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4074'. [ 614.377824][T18447] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 614.500410][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 614.500422][ T29] audit: type=1326 audit(1785897452.700:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18449 comm="syz.5.4098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d739e019 code=0x0 [ 615.205024][T18457] ip6_vti0: left allmulticast mode [ 615.416763][T18464] netlink: 'syz.8.4100': attribute type 25 has an invalid length. [ 616.067123][T18481] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4107'. [ 616.132754][T18485] tipc: Failed to remove unknown binding: 66,0,0/2099199:1906967880/1906967881 [ 616.199366][T18485] tipc: Failed to remove unknown binding: 66,0,0/2099199:1906967880/1906967881 [ 616.418920][T18491] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 617.641047][ C0] bridge0: port 1(veth0) entered forwarding state [ 617.647494][ C0] bridge0: topology change detected, propagating [ 620.138334][T18592] netlink: 'syz.5.4141': attribute type 11 has an invalid length. [ 620.298163][T18592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.408464][T18592] veth1_vlan: left promiscuous mode [ 620.453409][T18592] veth0_vlan: left promiscuous mode [ 620.492008][T18592] veth0_vlan: entered promiscuous mode [ 620.534696][T18592] veth1_vlan: entered promiscuous mode [ 620.586451][T18592] veth1_macvtap: left promiscuous mode [ 620.625833][T18592] veth0_macvtap: left promiscuous mode [ 620.656735][T18592] veth0_macvtap: entered promiscuous mode [ 620.700712][T18592] veth1_macvtap: entered promiscuous mode [ 620.754377][T18592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.863070][T18592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 621.047852][T18592] 8021q: adding VLAN 0 to HW filter on device eth0 [ 621.216253][T18592] 8021q: adding VLAN 0 to HW filter on device eth1 [ 622.257676][T18592] 8021q: adding VLAN 0 to HW filter on device eth2 [ 622.304355][T18592] 8021q: adding VLAN 0 to HW filter on device eth3 [ 622.344486][T18628] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 622.383776][T18592] 8021q: adding VLAN 0 to HW filter on device bond3 [ 622.413659][T18592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 622.428161][T18592] 8021q: adding VLAN 0 to HW filter on device bond5 [ 622.455609][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4143'. [ 622.477039][T11981] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.501611][T11981] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.603361][ T29] audit: type=1400 audit(1785897460.800:1784): avc: denied { bind } for pid=18633 comm="syz.7.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 623.131110][ T5945] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.186370][ T5945] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.344907][T11981] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 623.399342][ T29] audit: type=1400 audit(1785897461.590:1785): avc: denied { mount } for pid=18649 comm="syz.5.4155" name="/" dev="pstore" ino=3748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 623.429763][T11981] bond5: (slave veth9): making interface the new active one [ 623.509701][T11981] bond5: active interface up! [ 623.517073][T18653] fuse: fd is not a fuse device [ 623.546721][ T1040] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.568723][ T29] audit: type=1400 audit(1785897461.690:1786): avc: denied { watch watch_reads } for pid=18649 comm="syz.5.4155" path="/" dev="pstore" ino=3748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 623.591953][ T5740] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 623.607387][ T1040] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.697779][ T1040] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.728777][ T1040] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.806083][ T5740] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.859197][ T5740] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 623.933535][ T5740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.020961][ T5740] usb 10-1: config 0 descriptor?? [ 624.044129][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.074169][ T5740] pwc: Askey VC010 type 2 USB webcam detected. [ 624.547936][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4154'. [ 624.723249][ T5740] pwc: recv_control_msg error -71 req 02 val 2b00 [ 624.760684][ T5740] pwc: recv_control_msg error -71 req 02 val 2700 [ 624.795873][ T5740] pwc: recv_control_msg error -71 req 02 val 2c00 [ 624.820856][ T5740] pwc: recv_control_msg error -71 req 04 val 1000 [ 624.848941][ T5740] pwc: recv_control_msg error -71 req 04 val 1300 [ 624.876671][ T5740] pwc: recv_control_msg error -71 req 04 val 1400 [ 624.911177][ T5740] pwc: recv_control_msg error -71 req 02 val 2000 [ 624.938902][ T5740] pwc: recv_control_msg error -71 req 02 val 2100 [ 624.965772][ T5740] pwc: recv_control_msg error -71 req 04 val 1500 [ 624.988992][ T5740] pwc: recv_control_msg error -71 req 02 val 2500 [ 625.019194][ T5740] pwc: recv_control_msg error -71 req 02 val 2400 [ 625.049313][ T5740] pwc: recv_control_msg error -71 req 02 val 2600 [ 625.077148][ T5740] pwc: recv_control_msg error -71 req 02 val 2900 [ 625.110773][ T5740] pwc: recv_control_msg error -71 req 02 val 2800 [ 625.144869][ T5740] pwc: recv_control_msg error -71 req 04 val 1100 [ 625.184598][ T5740] pwc: recv_control_msg error -71 req 04 val 1200 [ 625.222893][ T5740] videodev: could not get a free minor [ 625.263437][ T5740] pwc: Failed to register as video device (-23). [ 625.364958][ T5740] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -23 [ 625.444891][ T5740] usb 10-1: USB disconnect, device number 10 [ 625.984921][T18686] netlink: ct family unspecified [ 626.018004][T18686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.176267][T18693] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15888] was attempted by " [ 626.278149][T18696] fuse: fd is not a fuse device [ 628.141183][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4184'. [ 628.278278][T18739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18739 comm=syz.5.4184 [ 629.115594][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4193'. [ 629.156749][T18761] fuse: fd is not a fuse device [ 629.335871][T18763] netlink: 'syz.7.4195': attribute type 9 has an invalid length. [ 629.746499][T16246] libceph: connect (1)[c::]:6789 error -101 [ 629.767644][T16246] libceph: mon0 (1)[c::]:6789 connect error [ 629.879213][T18771] ceph: No mds server is up or the cluster is laggy [ 630.194077][T18791] netlink: 'syz.5.4202': attribute type 1 has an invalid length. [ 630.477284][T18797] 8021q: adding VLAN 0 to HW filter on device bond7 [ 630.538554][T18797] bond6: (slave bond7): making interface the new active one [ 630.577420][T18797] bond6: (slave bond7): Enslaving as an active interface with an up link [ 630.716680][T18802] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 630.949502][T18813] fuse: fd is not a fuse device [ 631.278643][T18822] netlink: 'syz.0.4211': attribute type 1 has an invalid length. [ 631.377091][T18824] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4212'. [ 631.498374][T18827] netlink: 'syz.0.4211': attribute type 10 has an invalid length. [ 631.539090][T18822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 631.582298][T18827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4211'. [ 633.286435][T18872] overlayfs: failed to clone upperpath [ 634.664786][T18895] overlayfs: failed to clone upperpath [ 634.865718][T18897] fuse: fd is not a fuse device [ 634.913374][ T29] audit: type=1800 audit(1785897473.120:1787): pid=18880 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.4233" name="bus" dev="ramfs" ino=70349 res=0 errno=0 [ 635.745468][T18916] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 635.918997][T18916] CPU: 0 UID: 0 PID: 18916 Comm: syz.9.4242 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.919020][T18916] Tainted: [L]=SOFTLOCKUP [ 635.919024][T18916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 635.919032][T18916] Call Trace: [ 635.919037][T18916] [ 635.919042][T18916] dump_stack_lvl+0x100/0x190 [ 635.919064][T18916] sysfs_warn_dup.cold+0x1c/0x28 [ 635.919083][T18916] sysfs_create_dir_ns+0x24b/0x2b0 [ 635.919097][T18916] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 635.919107][T18916] ? find_held_lock+0x2b/0x80 [ 635.919119][T18916] ? kobject_add_internal+0x25f/0x930 [ 635.919138][T18916] ? kobject_add_internal+0x25f/0x930 [ 635.919158][T18916] ? class_dir_child_ns_type+0xd/0x60 [ 635.919177][T18916] kobject_add_internal+0x2c8/0x930 [ 635.919198][T18916] kobject_add+0x16a/0x1e0 [ 635.919217][T18916] ? __pfx_kobject_add+0x10/0x10 [ 635.919237][T18916] ? get_device_parent+0x1b3/0x4c0 [ 635.919253][T18916] ? kobject_put+0xb9/0x640 [ 635.919274][T18916] device_add+0x294/0x1970 [ 635.919292][T18916] ? lockdep_init_map_type+0x5c/0x250 [ 635.919307][T18916] ? __pfx_device_add+0x10/0x10 [ 635.919322][T18916] ? lockdep_init_map_type+0x5c/0x250 [ 635.919338][T18916] ? __init_waitqueue_head+0xca/0x150 [ 635.919358][T18916] tty_register_device_attr+0x388/0x7f0 [ 635.919374][T18916] ? lockdep_init_map_type+0x5c/0x250 [ 635.919389][T18916] ? __pfx_tty_register_device_attr+0x10/0x10 [ 635.919408][T18916] ? tty_port_init+0x156/0x1c0 [ 635.919425][T18916] gsm_activate_mux+0x155/0x2a0 [ 635.919441][T18916] gsmld_ioctl+0x346/0x15c0 [ 635.919461][T18916] ? kasan_quarantine_put+0x104/0x240 [ 635.919475][T18916] ? __pfx_gsmld_ioctl+0x10/0x10 [ 635.919494][T18916] ? __ldsem_down_read_nested+0xf3/0x890 [ 635.919514][T18916] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 635.919536][T18916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 635.919551][T18916] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 635.919565][T18916] ? __pfx_gsmld_ioctl+0x10/0x10 [ 635.919591][T18916] tty_ioctl+0x11b4/0x1640 [ 635.919607][T18916] ? __pfx_tty_ioctl+0x10/0x10 [ 635.919621][T18916] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 635.919648][T18916] ? __fget_files+0x215/0x3d0 [ 635.919659][T18916] ? hook_file_ioctl_common+0x140/0x440 [ 635.919678][T18916] ? selinux_file_ioctl+0x13b/0x290 [ 635.919695][T18916] ? selinux_file_ioctl+0xb6/0x290 [ 635.919714][T18916] ? __pfx_tty_ioctl+0x10/0x10 [ 635.919729][T18916] __x64_sys_ioctl+0x18e/0x210 [ 635.919748][T18916] do_syscall_64+0x115/0x870 [ 635.919770][T18916] ? clear_bhb_loop+0x40/0x90 [ 635.919786][T18916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.919800][T18916] RIP: 0033:0x7f450eb9e019 [ 635.919813][T18916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.919825][T18916] RSP: 002b:00007f450fab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.919838][T18916] RAX: ffffffffffffffda RBX: 00007f450ee26090 RCX: 00007f450eb9e019 [ 635.919846][T18916] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 635.919854][T18916] RBP: 00007f450ec3500c R08: 0000000000000000 R09: 0000000000000000 [ 635.919861][T18916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.919869][T18916] R13: 00007f450ee26128 R14: 00007f450ee26090 R15: 00007fffb4ec9bf8 [ 635.919886][T18916] [ 635.919907][T18916] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 636.527888][T18935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4250'. [ 636.593763][T18933] IPVS: stopping backup sync thread 18937 ... [ 636.602579][T18937] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 636.635257][T18940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18940 comm=syz.0.4250 [ 636.830506][ T29] audit: type=1400 audit(1785897474.980:1788): avc: denied { mounton } for pid=18936 comm="syz.7.4251" path="/file0" dev="bpf" ino=70597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 636.858949][T18941] overlayfs: upper fs does not support tmpfile. [ 637.418563][T18949] netlink: 'syz.8.4253': attribute type 11 has an invalid length. [ 637.854074][T18950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.533763][ T29] audit: type=1326 audit(1785897476.740:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18971 comm="syz.0.4262" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe464f9e019 code=0x0 [ 638.584765][T18974] overlayfs: failed to clone upperpath [ 639.207246][T16246] libceph: connect (1)[c::]:6789 error -101 [ 639.253112][T16246] libceph: mon0 (1)[c::]:6789 connect error [ 639.335038][T18985] ceph: No mds server is up or the cluster is laggy [ 639.794298][T19002] netlink: 'syz.9.4270': attribute type 11 has an invalid length. [ 640.210466][T19006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.438973][ T5951] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 640.530851][T19021] netlink: 'syz.8.4274': attribute type 16 has an invalid length. [ 640.542524][ T5951] bond1: (slave veth3): making interface the new active one [ 640.590097][T19021] netlink: 'syz.8.4274': attribute type 17 has an invalid length. [ 640.687531][ T5951] bond1: active interface up! [ 641.229155][T19039] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4281'. [ 641.359353][T19039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19039 comm=syz.9.4281 [ 642.195707][T19054] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5608] was attempted by " [ 642.709715][ T29] audit: type=1326 audit(1785897480.910:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 643.315503][ T29] audit: type=1326 audit(1785897481.040:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 643.508344][ T29] audit: type=1326 audit(1785897481.040:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 643.695950][ T29] audit: type=1326 audit(1785897481.040:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 643.907805][ T29] audit: type=1326 audit(1785897481.040:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 644.048420][ T29] audit: type=1326 audit(1785897481.040:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 644.093923][T19103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4304'. [ 644.168463][ T29] audit: type=1326 audit(1785897481.040:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 644.285930][ T29] audit: type=1326 audit(1785897481.040:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 644.341176][T16246] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 644.410255][ T29] audit: type=1326 audit(1785897481.040:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 644.531412][T16246] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.569323][T16246] usb 10-1: config 0 has no interface number 0 [ 644.599758][ T29] audit: type=1326 audit(1785897481.040:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19068 comm="syz.9.4293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 644.674046][T16246] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 644.691777][T16246] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.734523][T16246] usb 10-1: Product: syz [ 644.776584][T16246] usb 10-1: Manufacturer: syz [ 644.800873][T16246] usb 10-1: SerialNumber: syz [ 644.869299][T16246] usb 10-1: config 0 descriptor?? [ 645.110934][T16246] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 645.190412][T16246] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 645.203412][T19111] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4307'. [ 645.247287][T16246] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 645.297442][T16246] usb 10-1: media controller created [ 645.373095][T16246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.167853][T19136] overlayfs: failed to clone upperpath [ 646.267907][T19139] fuse: fd is not a fuse device [ 646.493712][T16246] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 646.639919][T16246] usb 10-1: USB disconnect, device number 11 [ 647.756491][T19157] ip6gre1: entered promiscuous mode [ 647.795624][T19158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 647.867153][T19157] ip6gre1: entered allmulticast mode [ 647.902527][T11980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.032968][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.074080][T11980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.086204][T19182] fuse: fd is not a fuse device [ 648.188479][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4325'. [ 648.651181][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.824216][T19197] bridge0: port 1(veth0) entered disabled state [ 649.081984][ T5740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.471706][T12008] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.535864][T12008] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.599561][T12008] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.662453][T12008] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.799111][T19217] overlayfs: failed to clone upperpath [ 649.993550][T11980] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.051515][T11980] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.126324][T11980] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.184269][T11980] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.044503][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 651.044514][ T29] audit: type=1400 audit(1785897489.250:1843): avc: denied { write } for pid=19227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.209373][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4339'. [ 651.434784][ T29] audit: type=1400 audit(1785897489.640:1844): avc: denied { write } for pid=19249 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.950247][ T5273] veth0_vlan: left promiscuous mode [ 652.030619][T16246] veth0_vlan: entered promiscuous mode [ 652.202733][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.751475][ T29] audit: type=1800 audit(1785897490.950:1845): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4340" name="bus" dev="ramfs" ino=71855 res=0 errno=0 [ 653.153291][T19272] netlink: 'syz.5.4343': attribute type 1 has an invalid length. [ 653.295972][ T29] audit: type=1326 audit(1785897491.500:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19278 comm="syz.9.4345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 653.331565][T19282] netlink: 'syz.5.4343': attribute type 10 has an invalid length. [ 653.397108][T19282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4343'. [ 653.440426][ T29] audit: type=1326 audit(1785897491.530:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19278 comm="syz.9.4345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 653.496398][T19272] 8021q: adding VLAN 0 to HW filter on device bond8 [ 653.638439][ T29] audit: type=1326 audit(1785897491.530:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19278 comm="syz.9.4345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 653.836597][T19290] overlayfs: failed to clone upperpath [ 653.874230][ T29] audit: type=1326 audit(1785897491.530:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19278 comm="syz.9.4345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f450eb9e019 code=0x7ffc0000 [ 654.035188][T19294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4348'. [ 654.102393][ T29] audit: type=1326 audit(1785897491.580:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19278 comm="syz.9.4345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f450eb5e84e code=0x7ffc0000 [ 654.303076][ T29] audit: type=1326 audit(1785897491.580:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19278 comm="syz.9.4345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f450eb5e84e code=0x7ffc0000 [ 654.439311][ T29] audit: type=1326 audit(1785897491.590:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19278 comm="syz.9.4345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f450eb5e84e code=0x7ffc0000 [ 656.021306][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 656.128487][T19336] overlayfs: failed to clone upperpath [ 656.195971][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 656.234615][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 656.273993][ T9] usb 10-1: Product: syz [ 656.295195][ T9] usb 10-1: Manufacturer: syz [ 656.339711][ T9] input: Samsung SUR40 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input31 [ 657.509738][ T9] videodev: could not get a free minor [ 657.517010][ T9] sur40 10-1:1.0: Unable to register video subdevice. [ 657.531243][ T9] sur40 10-1:1.0: probe with driver sur40 failed with error -23 [ 657.586081][ T9] usb 10-1: USB disconnect, device number 12 [ 657.695199][T17543] ================================================================== [ 657.703284][T17543] BUG: KASAN: slab-use-after-free in sur40_open+0x46c/0x500 [ 657.710551][T17543] Read of size 8 at addr ffff88802c392000 by task udevd/17543 [ 657.717974][T17543] [ 657.720276][T17543] CPU: 0 UID: 0 PID: 17543 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 657.720292][T17543] Tainted: [L]=SOFTLOCKUP [ 657.720296][T17543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 657.720303][T17543] Call Trace: [ 657.720309][T17543] [ 657.720315][T17543] dump_stack_lvl+0x100/0x190 [ 657.720332][T17543] print_report+0x13d/0x4b0 [ 657.720349][T17543] ? __virt_addr_valid+0x239/0x430 [ 657.720365][T17543] ? sur40_open+0x46c/0x500 [ 657.720377][T17543] kasan_report+0xdf/0x1c0 [ 657.720392][T17543] ? sur40_open+0x46c/0x500 [ 657.720405][T17543] ? __pfx_sur40_open+0x10/0x10 [ 657.720417][T17543] sur40_open+0x46c/0x500 [ 657.720429][T17543] input_open_device+0x24c/0x3d0 [ 657.720442][T17543] evdev_open+0x52f/0x690 [ 657.720459][T17543] ? __pfx_evdev_open+0x10/0x10 [ 657.720474][T17543] chrdev_open+0x234/0x6a0 [ 657.720486][T17543] ? __pfx_chrdev_open+0x10/0x10 [ 657.720498][T17543] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 657.720514][T17543] do_dentry_open+0x6ab/0x14d0 [ 657.720525][T17543] ? __pfx_chrdev_open+0x10/0x10 [ 657.720538][T17543] vfs_open+0x82/0x3f0 [ 657.720552][T17543] path_openat+0x2873/0x4280 [ 657.720567][T17543] ? __pfx_path_openat+0x10/0x10 [ 657.720580][T17543] do_file_open+0x20e/0x430 [ 657.720592][T17543] ? __pfx_do_file_open+0x10/0x10 [ 657.720609][T17543] ? alloc_fd+0x471/0x7a0 [ 657.720622][T17543] ? do_getname+0x191/0x390 [ 657.720636][T17543] do_sys_openat2+0x10f/0x1e0 [ 657.720649][T17543] ? __pfx_do_sys_openat2+0x10/0x10 [ 657.720663][T17543] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 657.720682][T17543] __x64_sys_openat+0x12d/0x210 [ 657.720696][T17543] ? __pfx___x64_sys_openat+0x10/0x10 [ 657.720709][T17543] ? find_held_lock+0x2b/0x80 [ 657.720719][T17543] ? trace_syscall_enter+0xd9/0x110 [ 657.720736][T17543] do_syscall_64+0x115/0x870 [ 657.720750][T17543] ? clear_bhb_loop+0x40/0x90 [ 657.720763][T17543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.720774][T17543] RIP: 0033:0x7f18f4aa7407 [ 657.720785][T17543] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 657.720796][T17543] RSP: 002b:00007ffe26c23d50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 657.720808][T17543] RAX: ffffffffffffffda RBX: 00007f18f5150880 RCX: 00007f18f4aa7407 [ 657.720816][T17543] RDX: 0000000000080000 RSI: 000055832e5766b0 RDI: ffffffffffffff9c [ 657.720823][T17543] RBP: 000055832e7b5d50 R08: 0000000000000000 R09: 0000000000000000 [ 657.720830][T17543] R10: 0000000000000000 R11: 0000000000000202 R12: 00005582f05630c8 [ 657.720837][T17543] R13: 00005582f05630ce R14: 00007ffe26c24350 R15: 00005582f0569bcc [ 657.720849][T17543] [ 657.720853][T17543] [ 657.987316][T17543] Allocated by task 9: [ 657.991361][T17543] kasan_save_stack+0x30/0x50 [ 657.996010][T17543] kasan_save_track+0x14/0x30 [ 658.000653][T17543] __kasan_kmalloc+0xaa/0xb0 [ 658.005211][T17543] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 658.010555][T17543] sur40_probe+0x1a8/0x1580 [ 658.015030][T17543] usb_probe_interface+0x303/0x8f0 [ 658.020113][T17543] really_probe+0x241/0xa60 [ 658.024593][T17543] __driver_probe_device+0x20e/0x450 [ 658.029845][T17543] driver_probe_device+0x4a/0x140 [ 658.034840][T17543] __device_attach_driver+0x1df/0x320 [ 658.040179][T17543] bus_for_each_drv+0x159/0x1e0 [ 658.044994][T17543] __device_attach+0x1e4/0x4d0 [ 658.049724][T17543] device_initial_probe+0xaf/0xd0 [ 658.054718][T17543] bus_probe_device+0x64/0x160 [ 658.059447][T17543] device_add+0x121d/0x1970 [ 658.063921][T17543] usb_set_configuration+0xd97/0x1c60 [ 658.069277][T17543] usb_generic_driver_probe+0xa1/0xe0 [ 658.074616][T17543] usb_probe_device+0xef/0x400 [ 658.079348][T17543] really_probe+0x241/0xa60 [ 658.083837][T17543] __driver_probe_device+0x20e/0x450 [ 658.089106][T17543] driver_probe_device+0x4a/0x140 [ 658.094118][T17543] __device_attach_driver+0x1df/0x320 [ 658.099460][T17543] bus_for_each_drv+0x159/0x1e0 [ 658.104278][T17543] __device_attach+0x1e4/0x4d0 [ 658.109011][T17543] device_initial_probe+0xaf/0xd0 [ 658.114006][T17543] bus_probe_device+0x64/0x160 [ 658.118736][T17543] device_add+0x121d/0x1970 [ 658.123210][T17543] usb_new_device.cold+0x685/0x115c [ 658.128380][T17543] hub_event+0x30a3/0x4a60 [ 658.132767][T17543] process_one_work+0xa23/0x1940 [ 658.137674][T17543] worker_thread+0x5ef/0xe50 [ 658.142231][T17543] kthread+0x370/0x450 [ 658.146267][T17543] ret_from_fork+0x72b/0xd50 [ 658.150826][T17543] ret_from_fork_asm+0x1a/0x30 [ 658.155561][T17543] [ 658.157852][T17543] Freed by task 9: [ 658.161536][T17543] kasan_save_stack+0x30/0x50 [ 658.166183][T17543] kasan_save_track+0x14/0x30 [ 658.170827][T17543] kasan_save_free_info+0x3b/0x70 [ 658.175824][T17543] __kasan_slab_free+0x5f/0x80 [ 658.180557][T17543] kfree+0x22b/0x6c0 [ 658.184443][T17543] sur40_probe+0xc36/0x1580 [ 658.188915][T17543] usb_probe_interface+0x303/0x8f0 [ 658.194010][T17543] really_probe+0x241/0xa60 [ 658.198484][T17543] __driver_probe_device+0x20e/0x450 [ 658.203741][T17543] driver_probe_device+0x4a/0x140 [ 658.208733][T17543] __device_attach_driver+0x1df/0x320 [ 658.214073][T17543] bus_for_each_drv+0x159/0x1e0 [ 658.218888][T17543] __device_attach+0x1e4/0x4d0 [ 658.223621][T17543] device_initial_probe+0xaf/0xd0 [ 658.228616][T17543] bus_probe_device+0x64/0x160 [ 658.233346][T17543] device_add+0x121d/0x1970 [ 658.237818][T17543] usb_set_configuration+0xd97/0x1c60 [ 658.243157][T17543] usb_generic_driver_probe+0xa1/0xe0 [ 658.248494][T17543] usb_probe_device+0xef/0x400 [ 658.253240][T17543] really_probe+0x241/0xa60 [ 658.257714][T17543] __driver_probe_device+0x20e/0x450 [ 658.262980][T17543] driver_probe_device+0x4a/0x140 [ 658.268016][T17543] __device_attach_driver+0x1df/0x320 [ 658.273357][T17543] bus_for_each_drv+0x159/0x1e0 [ 658.278175][T17543] __device_attach+0x1e4/0x4d0 [ 658.282908][T17543] device_initial_probe+0xaf/0xd0 [ 658.287913][T17543] bus_probe_device+0x64/0x160 [ 658.292664][T17543] device_add+0x121d/0x1970 [ 658.297152][T17543] usb_new_device.cold+0x685/0x115c [ 658.302322][T17543] hub_event+0x30a3/0x4a60 [ 658.306709][T17543] process_one_work+0xa23/0x1940 [ 658.311631][T17543] worker_thread+0x5ef/0xe50 [ 658.316199][T17543] kthread+0x370/0x450 [ 658.320253][T17543] ret_from_fork+0x72b/0xd50 [ 658.324825][T17543] ret_from_fork_asm+0x1a/0x30 [ 658.329563][T17543] [ 658.331857][T17543] The buggy address belongs to the object at ffff88802c392000 [ 658.331857][T17543] which belongs to the cache kmalloc-4k of size 4096 [ 658.345874][T17543] The buggy address is located 0 bytes inside of [ 658.345874][T17543] freed 4096-byte region [ffff88802c392000, ffff88802c393000) [ 658.359546][T17543] [ 658.361840][T17543] The buggy address belongs to the physical page: [ 658.368226][T17543] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c390 [ 658.376954][T17543] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 658.385431][T17543] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 658.392966][T17543] page_type: f5(slab) [ 658.396925][T17543] raw: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122 [ 658.405488][T17543] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 658.414042][T17543] head: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122 [ 658.422681][T17543] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 658.431317][T17543] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 658.439953][T17543] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 658.448587][T17543] page dumped because: kasan: bad access detected [ 658.454985][T17543] page_owner tracks the page as allocated [ 658.460667][T17543] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5951, tgid 5951 (kworker/u8:15), ts 122043123337, free_ts 121944663692 [ 658.481646][T17543] post_alloc_hook+0xfd/0x120 [ 658.486307][T17543] get_page_from_freelist+0xf48/0x3530 [ 658.491734][T17543] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 658.497596][T17543] new_slab+0xa2/0x640 [ 658.501632][T17543] refill_objects+0xe3/0x410 [ 658.506189][T17543] __pcs_replace_empty_main+0x376/0x680 [ 658.511710][T17543] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 658.518096][T17543] kmalloc_reserve+0xe8/0x350 [ 658.522740][T17543] __alloc_skb+0x185/0x710 [ 658.527126][T17543] nsim_dev_trap_report_work+0x2af/0xd20 [ 658.532740][T17543] process_one_work+0xa23/0x1940 [ 658.537645][T17543] worker_thread+0x5ef/0xe50 [ 658.542203][T17543] kthread+0x370/0x450 [ 658.546239][T17543] ret_from_fork+0x72b/0xd50 [ 658.550803][T17543] ret_from_fork_asm+0x1a/0x30 [ 658.555540][T17543] page last free pid 5601 tgid 5601 stack trace: [ 658.561831][T17543] __free_frozen_pages+0x79f/0x1090 [ 658.567002][T17543] qlist_free_all+0x47/0xf0 [ 658.571473][T17543] kasan_quarantine_reduce+0x1a0/0x1f0 [ 658.576901][T17543] __kasan_slab_alloc+0x69/0x90 [ 658.581722][T17543] __kmalloc_noprof+0x2bf/0x820 [ 658.586541][T17543] tomoyo_realpath_from_path+0xb6/0x690 [ 658.592055][T17543] tomoyo_path_perm+0x276/0x460 [ 658.596878][T17543] tomoyo_path_symlink+0x97/0xe0 [ 658.601785][T17543] security_path_symlink+0x152/0x2d0 [ 658.607041][T17543] filename_symlinkat+0x122/0x560 [ 658.612035][T17543] __x64_sys_symlink+0x79/0xb0 [ 658.616766][T17543] do_syscall_64+0x115/0x870 [ 658.621326][T17543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.627189][T17543] [ 658.629482][T17543] Memory state around the buggy address: [ 658.635088][T17543] ffff88802c391f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 658.643118][T17543] ffff88802c391f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 658.651144][T17543] >ffff88802c392000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.659174][T17543] ^ [ 658.663206][T17543] ffff88802c392080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.671233][T17543] ffff88802c392100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.679262][T17543] ================================================================== [ 659.310343][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 659.310354][ T29] audit: type=1400 audit(1785897497.510:1876): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 659.342753][T17543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 659.349947][T17543] CPU: 0 UID: 0 PID: 17543 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 659.360415][T17543] Tainted: [L]=SOFTLOCKUP [ 659.364707][T17543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 659.374729][T17543] Call Trace: [ 659.377982][T17543] [ 659.380888][T17543] dump_stack_lvl+0x100/0x190 [ 659.385540][T17543] vpanic+0x552/0x970 [ 659.389492][T17543] ? __pfx_vpanic+0x10/0x10 [ 659.393963][T17543] ? mark_held_locks+0x40/0x70 [ 659.398702][T17543] ? sur40_open+0x46c/0x500 [ 659.403187][T17543] panic+0xd1/0xe0 [ 659.406877][T17543] ? __pfx_panic+0x10/0x10 [ 659.411264][T17543] ? sur40_open+0x46c/0x500 [ 659.415738][T17543] ? preempt_schedule_common+0x42/0xc0 [ 659.421168][T17543] ? check_panic_on_warn+0x1f/0x90 [ 659.426251][T17543] check_panic_on_warn.cold+0x19/0x34 [ 659.431590][T17543] end_report.part.0+0x3a/0x90 [ 659.436327][T17543] kasan_report.cold+0xe/0x18 [ 659.440974][T17543] ? sur40_open+0x46c/0x500 [ 659.445453][T17543] ? __pfx_sur40_open+0x10/0x10 [ 659.450271][T17543] sur40_open+0x46c/0x500 [ 659.454572][T17543] input_open_device+0x24c/0x3d0 [ 659.459477][T17543] evdev_open+0x52f/0x690 [ 659.463779][T17543] ? __pfx_evdev_open+0x10/0x10 [ 659.468599][T17543] chrdev_open+0x234/0x6a0 [ 659.472995][T17543] ? __pfx_chrdev_open+0x10/0x10 [ 659.477907][T17543] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 659.484207][T17543] do_dentry_open+0x6ab/0x14d0 [ 659.488939][T17543] ? __pfx_chrdev_open+0x10/0x10 [ 659.493845][T17543] vfs_open+0x82/0x3f0 [ 659.497884][T17543] path_openat+0x2873/0x4280 [ 659.502446][T17543] ? __pfx_path_openat+0x10/0x10 [ 659.507354][T17543] do_file_open+0x20e/0x430 [ 659.511827][T17543] ? __pfx_do_file_open+0x10/0x10 [ 659.516824][T17543] ? alloc_fd+0x471/0x7a0 [ 659.521123][T17543] ? do_getname+0x191/0x390 [ 659.525597][T17543] do_sys_openat2+0x10f/0x1e0 [ 659.530243][T17543] ? __pfx_do_sys_openat2+0x10/0x10 [ 659.535412][T17543] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 659.541716][T17543] __x64_sys_openat+0x12d/0x210 [ 659.546537][T17543] ? __pfx___x64_sys_openat+0x10/0x10 [ 659.551881][T17543] ? find_held_lock+0x2b/0x80 [ 659.556525][T17543] ? trace_syscall_enter+0xd9/0x110 [ 659.561699][T17543] do_syscall_64+0x115/0x870 [ 659.566262][T17543] ? clear_bhb_loop+0x40/0x90 [ 659.570908][T17543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.576770][T17543] RIP: 0033:0x7f18f4aa7407 [ 659.581159][T17543] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 659.600736][T17543] RSP: 002b:00007ffe26c23d50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 659.609117][T17543] RAX: ffffffffffffffda RBX: 00007f18f5150880 RCX: 00007f18f4aa7407 [ 659.617058][T17543] RDX: 0000000000080000 RSI: 000055832e5766b0 RDI: ffffffffffffff9c [ 659.624998][T17543] RBP: 000055832e7b5d50 R08: 0000000000000000 R09: 0000000000000000 [ 659.632939][T17543] R10: 0000000000000000 R11: 0000000000000202 R12: 00005582f05630c8 [ 659.640879][T17543] R13: 00005582f05630ce R14: 00007ffe26c24350 R15: 00005582f0569bcc [ 659.648825][T17543] [ 659.651879][T17543] Kernel Offset: disabled [ 659.656191][T17543] Rebooting in 86400 seconds..