last executing test programs: 10m35.434322279s ago: executing program 32 (id=60): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r1}}, 0x30) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, r3}}, 0x30) 10m18.65396716s ago: executing program 33 (id=183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 9m40.061116035s ago: executing program 1 (id=427): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 9m39.898317204s ago: executing program 1 (id=430): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 9m39.654392741s ago: executing program 1 (id=433): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write(r0, &(0x7f0000000300)='v', 0x1) 9m39.524715956s ago: executing program 1 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 9m39.331532888s ago: executing program 1 (id=436): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x22982, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 9m38.962590081s ago: executing program 1 (id=439): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x401, 0x4080) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0xffff, 0x4000061, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x6, 0xf, 0x5, 0x8000000000000009, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) 9m38.289180625s ago: executing program 34 (id=439): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x401, 0x4080) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0xffff, 0x4000061, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x6, 0xf, 0x5, 0x8000000000000009, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) 7m54.915042334s ago: executing program 7 (id=1086): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xa}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 7m54.482303173s ago: executing program 7 (id=1089): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 7m54.240605959s ago: executing program 7 (id=1093): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 7m54.032606712s ago: executing program 7 (id=1096): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 7m53.58585106s ago: executing program 7 (id=1099): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0xfffffffffffffffe) 7m53.221037284s ago: executing program 7 (id=1100): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 7m52.833391211s ago: executing program 35 (id=1100): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 7m51.619679229s ago: executing program 0 (id=1113): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 7m51.448117688s ago: executing program 0 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @GTPA_FAMILY={0x5, 0xd, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 7m51.232862859s ago: executing program 0 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7, 0xe, 0x2, 0x0, 0xfffffdd2, 0x6, 0x9, 0x3, 0x5, 0xb, 0xa, 0x1, 0x0, 0xf23, 0x1, 0x2, 0x6, 0xc, 0x40, '\x00', 0x9, 0x1}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m50.062989638s ago: executing program 0 (id=1119): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x10000000000, 0x0, 0x0, 0x8, 0x6, r0, 0x0}]) 7m49.701034013s ago: executing program 0 (id=1121): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 7m47.665750953s ago: executing program 0 (id=1130): ioperm(0x3, 0x4, 0x1000004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) 7m47.148180227s ago: executing program 36 (id=1130): ioperm(0x3, 0x4, 0x1000004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) 6m52.936768972s ago: executing program 9 (id=1447): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) epoll_wait(r1, &(0x7f0000000340)=[{}], 0x1, 0x4012c) 6m51.964717978s ago: executing program 9 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6m50.143805824s ago: executing program 9 (id=1467): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="0100000000000000", 0x8) read(r1, &(0x7f0000800000)=""/8, 0x8) sendto$packet(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) 6m49.12833482s ago: executing program 9 (id=1473): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 6m48.996331995s ago: executing program 9 (id=1475): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 6m48.006222628s ago: executing program 9 (id=1480): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000000)={"e0dede166806309cec7ef44e0500071753953261d2749f496bacef99a04583a6", r4}) 6m47.433992017s ago: executing program 37 (id=1480): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000000)={"e0dede166806309cec7ef44e0500071753953261d2749f496bacef99a04583a6", r4}) 5m30.746070343s ago: executing program 6 (id=1948): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 5m30.651671592s ago: executing program 6 (id=1949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(0x0, 0x0, 0x10000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5m30.420863281s ago: executing program 6 (id=1950): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 5m30.311634366s ago: executing program 6 (id=1951): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff6, 0x4031, 0xffffffffffffffff, 0x7542d000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$cont(0x1f, r0, 0xa, 0xf) move_pages(r0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 5m30.096410716s ago: executing program 6 (id=1952): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 5m29.687613856s ago: executing program 6 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m14.771812762s ago: executing program 38 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.384930539s ago: executing program 2 (id=3770): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x683}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 9.148356187s ago: executing program 3 (id=3774): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="f4cc31e5135e", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x7}]}}}}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 8.997104042s ago: executing program 5 (id=3776): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/34, 0x22}], 0x1}, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 8.996014427s ago: executing program 3 (id=3777): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x24004098) 8.891852507s ago: executing program 4 (id=3778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250c000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000010) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4008010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r5, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) close_range(r3, r6, 0x2) 8.617967925s ago: executing program 4 (id=3779): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.370155331s ago: executing program 2 (id=3780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x7, 0x4, 0x8, 0x8002, 0x0, 0xffffffffffffffff, 0x3e71}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) 8.291927832s ago: executing program 3 (id=3781): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) 7.06139708s ago: executing program 8 (id=3782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'vlan0\x00', {0x2}, 0x4}) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_ublk_setup_io_uring(0x5798, 0x0, 0x0, 0x0, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000580)={0x13, &(0x7f0000000380)}) 6.030986987s ago: executing program 5 (id=3783): read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000005"], 0x50) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.928521459s ago: executing program 2 (id=3784): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda6", 0x38}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2", 0x6e}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.773110891s ago: executing program 8 (id=3785): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x39, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}}, 0x40800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) close(r0) 4.609896163s ago: executing program 8 (id=3786): syz_open_dev$usbmon(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 4.5327874s ago: executing program 4 (id=3787): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 4.422921339s ago: executing program 8 (id=3788): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$can_raw(0x1d, 0x3, 0x1) 4.247592413s ago: executing program 8 (id=3789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 4.245013462s ago: executing program 5 (id=3790): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 4.20181123s ago: executing program 3 (id=3791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1000007fd) 4.025056151s ago: executing program 4 (id=3792): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x1800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) open(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 3.854869214s ago: executing program 2 (id=3793): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda6", 0x38}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2", 0x6e}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.153861656s ago: executing program 5 (id=3794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 2.043026789s ago: executing program 5 (id=3795): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.965315525s ago: executing program 2 (id=3796): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.824006918s ago: executing program 3 (id=3797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="10", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 771.909477ms ago: executing program 2 (id=3798): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfd", 0x37}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6", 0x6d}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 475.459239ms ago: executing program 8 (id=3799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e80300"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001a0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001800010606000000000000000a000000030001000000000008000f00e8030000080004", @ANYRES32=r3], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 452.476619ms ago: executing program 4 (id=3800): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0xc0089364, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x11, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x27b6, 0x18510310, 0x0, 0x1, 0x3, 0xa, 0x0, 0x0, 0x4, 0x1}}, 0x50) landlock_restrict_self(0xffffffffffffffff, 0x8) landlock_restrict_self(r0, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 301.457237ms ago: executing program 4 (id=3801): openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa40, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.33231ms ago: executing program 3 (id=3802): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000697000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000817000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000696000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d1) 0s ago: executing program 5 (id=3803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): dd hid device: -71 [ 546.497472][ T5701] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 546.543111][ T5701] usb 5-1: USB disconnect, device number 14 [ 547.020574][ T5701] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 547.037192][T15020] syz.5.2786 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 547.125608][T15020] CPU: 0 UID: 0 PID: 15020 Comm: syz.5.2786 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.125632][T15020] Tainted: [L]=SOFTLOCKUP [ 547.125637][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 547.125645][T15020] Call Trace: [ 547.125649][T15020] [ 547.125655][T15020] dump_stack_lvl+0x100/0x190 [ 547.125678][T15020] dump_header+0xfb/0x606 [ 547.125694][T15020] oom_kill_process.cold+0xd/0x330 [ 547.125709][T15020] out_of_memory+0x340/0x14f0 [ 547.125733][T15020] ? __pfx_out_of_memory+0x10/0x10 [ 547.125757][T15020] mem_cgroup_out_of_memory+0xc6/0x130 [ 547.125772][T15020] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 547.125784][T15020] ? find_held_lock+0x2b/0x80 [ 547.125799][T15020] ? do_raw_spin_unlock+0x145/0x1e0 [ 547.125816][T15020] ? _raw_spin_unlock+0x28/0x50 [ 547.125832][T15020] try_charge_memcg+0x6e5/0xdf0 [ 547.125853][T15020] ? __pfx_try_charge_memcg+0x10/0x10 [ 547.125877][T15020] ? find_held_lock+0x2b/0x80 [ 547.125888][T15020] ? rcu_read_unlock+0x17/0x60 [ 547.125906][T15020] ? rcu_read_unlock+0x17/0x60 [ 547.125930][T15020] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 547.125955][T15020] ? kasan_save_track+0x14/0x30 [ 547.125972][T15020] kmem_cache_alloc_noprof+0x587/0x6a0 [ 547.125987][T15020] ? seq_open+0x55/0x170 [ 547.126007][T15020] seq_open+0x55/0x170 [ 547.126024][T15020] __seq_open_private+0x3e/0xd0 [ 547.126043][T15020] seq_open_net+0x1ab/0x2a0 [ 547.126059][T15020] ? __pfx_seq_open_net+0x10/0x10 [ 547.126075][T15020] proc_reg_open+0x2ab/0x5f0 [ 547.126092][T15020] do_dentry_open+0x6ab/0x14d0 [ 547.126104][T15020] ? __pfx_proc_reg_open+0x10/0x10 [ 547.126122][T15020] vfs_open+0x82/0x3f0 [ 547.126138][T15020] path_openat+0x2873/0x4280 [ 547.126159][T15020] ? __pfx_path_openat+0x10/0x10 [ 547.126176][T15020] do_file_open+0x20e/0x430 [ 547.126191][T15020] ? __pfx_do_file_open+0x10/0x10 [ 547.126209][T15020] ? __pfx_kfree_link+0x10/0x10 [ 547.126232][T15020] ? alloc_fd+0x471/0x7a0 [ 547.126247][T15020] ? do_getname+0x191/0x390 [ 547.126263][T15020] do_sys_openat2+0x10f/0x1e0 [ 547.126279][T15020] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.126301][T15020] __x64_sys_openat+0x12d/0x210 [ 547.126317][T15020] ? __pfx___x64_sys_openat+0x10/0x10 [ 547.126338][T15020] do_syscall_64+0x115/0x870 [ 547.126353][T15020] ? clear_bhb_loop+0x70/0xc0 [ 547.126369][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.126385][T15020] RIP: 0033:0x7f5c1d75e90e [ 547.126397][T15020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 547.126408][T15020] RSP: 002b:00007f5c1e589ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 547.126421][T15020] RAX: ffffffffffffffda RBX: 00007f5c1e58a6c0 RCX: 00007f5c1d75e90e [ 547.126429][T15020] RDX: 0000000000000000 RSI: 00007f5c1e589f90 RDI: ffffffffffffff9c [ 547.126438][T15020] RBP: 00007f5c1d835024 R08: 0000000000000000 R09: 0000000000000000 [ 547.126446][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.126454][T15020] R13: 00007f5c1da26038 R14: 00007f5c1da25fa0 R15: 00007fffb43ecea8 [ 547.126472][T15020] [ 547.126477][T15020] memory: usage 8kB, limit 8kB, failcnt 114 [ 547.683448][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.727669][ T5701] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 547.766365][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.838812][ T5701] usb 5-1: config 0 descriptor?? [ 547.874714][T15028] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 548.345111][T15020] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 548.408530][T15020] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 548.439245][T15020] Memory cgroup stats for /syz5/test: [ 548.439456][T15020] cache 0 [ 548.472811][T15020] rss 0 [ 548.482386][T15020] rss_huge 0 [ 548.492386][T15020] shmem 0 [ 548.501830][T15020] mapped_file 0 [ 548.518407][T15020] dirty 0 [ 548.527256][T15020] writeback 0 [ 548.536150][T15020] workingset_refault_anon 0 [ 548.554566][T15020] workingset_refault_file 0 [ 548.584210][T15020] swap 0 [ 548.594204][T15020] swapcached 0 [ 548.616876][T15020] pgpgin 0 [ 548.629207][T15020] pgpgout 0 [ 548.643914][T15020] pgfault 8 [ 548.665662][T15020] pgmajfault 0 [ 548.684501][T15020] inactive_anon 0 [ 548.697590][ T5701] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 548.705774][ T5701] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 548.726087][T15020] active_anon 0 [ 548.769811][T15020] inactive_file 0 [ 548.808461][T15020] active_file 0 [ 548.831028][T15020] unevictable 0 [ 548.858345][T15020] hierarchical_memory_limit 8192 [ 548.888530][T15020] hierarchical_memsw_limit 9223372036854771712 [ 548.923160][T15020] total_cache 0 [ 548.945571][T15020] total_rss 0 [ 548.982184][T15020] total_rss_huge 0 [ 549.017306][T15020] total_shmem 0 [ 549.056944][T15020] total_mapped_file 0 [ 549.093323][T15020] total_dirty 0 [ 549.128962][T15020] total_writeback 0 [ 549.156201][T15020] total_workingset_refault_anon 0 [ 549.192310][ T5701] usb 5-1: USB disconnect, device number 15 [ 549.198525][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 549.223227][T15020] total_workingset_refault_file 0 [ 549.252472][T15020] total_swap 0 [ 549.273111][T15020] total_swapcached 0 [ 549.301509][T15020] total_pgpgin 0 [ 549.323067][T15020] total_pgpgout 0 [ 549.330109][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 549.346939][T15020] total_pgfault 8 [ 549.358894][T15020] total_pgmajfault 0 [ 549.381642][T15020] total_inactive_anon 0 [ 549.423301][T15020] total_active_anon 0 [ 549.455735][T15020] total_inactive_file 0 [ 549.480617][T15020] total_active_file 0 [ 549.504351][T15020] total_unevictable 0 [ 549.529075][T15020] anon_cost 0 [ 549.555574][T15020] file_cost 0 [ 549.581839][T15020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.2786,pid=15019,uid=0 [ 549.704479][T15020] Memory cgroup out of memory: Killed process 15019 (syz.5.2786) total-vm:104432kB, anon-rss:1436kB, file-rss:22908kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 550.160501][T15051] syz.2.2796 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 550.235188][T15051] CPU: 0 UID: 0 PID: 15051 Comm: syz.2.2796 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.235216][T15051] Tainted: [L]=SOFTLOCKUP [ 550.235221][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 550.235229][T15051] Call Trace: [ 550.235235][T15051] [ 550.235241][T15051] dump_stack_lvl+0x100/0x190 [ 550.235264][T15051] dump_header+0xfb/0x606 [ 550.235279][T15051] oom_kill_process.cold+0xd/0x330 [ 550.235295][T15051] out_of_memory+0x340/0x14f0 [ 550.235318][T15051] ? __pfx_out_of_memory+0x10/0x10 [ 550.235341][T15051] mem_cgroup_out_of_memory+0xc6/0x130 [ 550.235356][T15051] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 550.235369][T15051] ? find_held_lock+0x2b/0x80 [ 550.235383][T15051] ? do_raw_spin_unlock+0x145/0x1e0 [ 550.235401][T15051] ? _raw_spin_unlock+0x28/0x50 [ 550.235416][T15051] try_charge_memcg+0x6e5/0xdf0 [ 550.235436][T15051] ? __pfx_try_charge_memcg+0x10/0x10 [ 550.235453][T15051] ? find_held_lock+0x2b/0x80 [ 550.235464][T15051] ? rcu_read_unlock+0x17/0x60 [ 550.235481][T15051] ? rcu_read_unlock+0x17/0x60 [ 550.235503][T15051] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 550.235526][T15051] ? kasan_save_track+0x14/0x30 [ 550.235543][T15051] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 550.235562][T15051] ? __d_alloc+0x35/0xa50 [ 550.235581][T15051] __d_alloc+0x35/0xa50 [ 550.235597][T15051] d_alloc_pseudo+0x1c/0xc0 [ 550.235615][T15051] alloc_file_pseudo+0x118/0x290 [ 550.235632][T15051] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 550.235652][T15051] __shmem_file_setup+0x205/0x460 [ 550.235671][T15051] ? __pfx___shmem_file_setup+0x10/0x10 [ 550.235690][T15051] ? vm_area_alloc+0x1f/0x160 [ 550.235710][T15051] shmem_zero_setup+0x96/0x1b0 [ 550.235725][T15051] __mmap_region+0x24ef/0x2db0 [ 550.235740][T15051] ? __pfx___mmap_region+0x10/0x10 [ 550.235756][T15051] ? __lock_acquire+0x49f/0x1a40 [ 550.235781][T15051] ? __lock_acquire+0x49f/0x1a40 [ 550.235804][T15051] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 550.235830][T15051] ? rcu_is_watching+0x12/0xc0 [ 550.235848][T15051] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 550.235893][T15051] mmap_region+0x35d/0x620 [ 550.235909][T15051] ? __pfx_mmap_region+0x10/0x10 [ 550.235922][T15051] ? shmem_get_unmapped_area+0x141/0x960 [ 550.235941][T15051] ? selinux_mmap_addr+0x2b/0x110 [ 550.235957][T15051] ? bpf_lsm_mmap_addr+0x9/0x30 [ 550.235968][T15051] ? security_mmap_addr+0x71/0x1e0 [ 550.235980][T15051] ? __get_unmapped_area+0x255/0x3e0 [ 550.236000][T15051] do_mmap+0xc63/0x12f0 [ 550.236021][T15051] ? __pfx_do_mmap+0x10/0x10 [ 550.236037][T15051] ? __pfx_down_write_killable+0x10/0x10 [ 550.236065][T15051] ? __pfx_futex_wait+0x10/0x10 [ 550.236082][T15051] vm_mmap_pgoff+0x29e/0x470 [ 550.236104][T15051] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 550.236124][T15051] ? __pfx_do_futex+0x10/0x10 [ 550.236146][T15051] ksys_mmap_pgoff+0xe4/0x610 [ 550.236163][T15051] ? __x64_sys_futex+0x358/0x4d0 [ 550.236180][T15051] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 550.236196][T15051] ? xfd_validate_state+0x129/0x190 [ 550.236216][T15051] __x64_sys_mmap+0x125/0x190 [ 550.236235][T15051] do_syscall_64+0x115/0x870 [ 550.236251][T15051] ? clear_bhb_loop+0x70/0xc0 [ 550.236266][T15051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.236278][T15051] RIP: 0033:0x7ffa1f39e0d9 [ 550.236291][T15051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.236303][T15051] RSP: 002b:00007ffa20279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 550.236315][T15051] RAX: ffffffffffffffda RBX: 00007ffa1f625fa0 RCX: 00007ffa1f39e0d9 [ 550.236324][T15051] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 550.236332][T15051] RBP: 00007ffa1f435024 R08: ffffffffffffffff R09: 000000006a855000 [ 550.236340][T15051] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 550.236348][T15051] R13: 00007ffa1f626038 R14: 00007ffa1f625fa0 R15: 00007ffc2ccd7d38 [ 550.236366][T15051] [ 551.291424][T15069] erspan0: left promiscuous mode [ 551.425646][ T30] audit: type=1804 audit(1786626798.527:1127): pid=15071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2805" name="file0" dev="tmpfs" ino=3303 res=1 errno=0 [ 552.113542][T15079] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 552.308233][T15085] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 552.404732][T15051] memory: usage 8kB, limit 8kB, failcnt 20 [ 552.439700][T15051] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 552.477645][T15051] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 552.529198][T15051] Memory cgroup stats for /syz2/test: [ 552.529408][T15051] cache 0 [ 552.570134][T15051] rss 0 [ 552.585921][T15051] rss_huge 0 [ 552.602930][T15051] shmem 0 [ 552.618629][T15051] mapped_file 0 [ 552.632075][T15051] dirty 0 [ 552.649477][T15051] writeback 0 [ 552.669012][T15051] workingset_refault_anon 0 [ 552.692611][T15051] workingset_refault_file 0 [ 552.711801][T15051] swap 0 [ 552.727572][T15051] swapcached 0 [ 552.747537][T15051] pgpgin 1 [ 552.761938][T15051] pgpgout 1 [ 552.783473][T15051] pgfault 29 [ 552.806092][T15051] pgmajfault 0 [ 552.822679][T15051] inactive_anon 0 [ 552.838590][T15051] active_anon 0 [ 552.857170][T15051] inactive_file 0 [ 552.872566][T15051] active_file 0 [ 552.883540][T15051] unevictable 0 [ 552.900360][T15051] hierarchical_memory_limit 8192 [ 552.919038][T15051] hierarchical_memsw_limit 9223372036854771712 [ 552.944810][T15051] total_cache 0 [ 552.956760][T15051] total_rss 0 [ 552.970294][T15051] total_rss_huge 0 [ 552.993973][T15051] total_shmem 0 [ 553.012202][T15051] total_mapped_file 0 [ 553.035339][T15051] total_dirty 0 [ 553.057808][T15051] total_writeback 0 [ 553.078446][T15051] total_workingset_refault_anon 0 [ 553.103834][T15051] total_workingset_refault_file 0 [ 553.138537][T15051] total_swap 0 [ 553.168726][T15051] total_swapcached 0 [ 553.199338][T15051] total_pgpgin 1 [ 553.232396][T15051] total_pgpgout 1 [ 553.269755][T15051] total_pgfault 29 [ 553.299843][T15051] total_pgmajfault 0 [ 553.319748][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 553.337863][T15051] total_inactive_anon 0 [ 553.367469][T15051] total_active_anon 0 [ 553.385344][T15051] total_inactive_file 0 [ 553.421182][T15051] total_active_file 0 [ 553.452605][T15051] total_unevictable 0 [ 553.483556][T15051] anon_cost 0 [ 553.503910][T15051] file_cost 0 [ 553.525719][T15051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.2796,pid=15049,uid=0 [ 553.576262][T15114] RDS: rds_bind could not find a transport for ::ffff:172.20.0.1, load rds_tcp or rds_rdma? [ 553.613729][T15051] Memory cgroup out of memory: Killed process 15049 (syz.2.2796) total-vm:104300kB, anon-rss:1444kB, file-rss:22908kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 553.970630][ T30] audit: type=1400 audit(1786626801.098:1128): avc: denied { mounton } for pid=15120 comm="syz.2.2823" path="/599/file0" dev="tmpfs" ino=3196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 554.068360][T15127] tipc: Started in network mode [ 554.139750][T15127] tipc: Node identity 2007ff, cluster identity 4711 [ 554.207998][T15127] tipc: Node number set to 2099199 [ 554.342893][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'. [ 554.463637][T15136] vivid-003: ================= START STATUS ================= [ 554.574033][T15136] vivid-003: Radio HW Seek Mode: Bounded [ 554.642160][T15136] vivid-003: Radio Programmable HW Seek: false [ 554.699744][T15136] vivid-003: RDS Rx I/O Mode: Block I/O [ 554.736558][T15136] vivid-003: Generate RBDS Instead of RDS: false [ 554.808804][T15136] vivid-003: RDS Reception: true [ 554.830092][T15136] vivid-003: RDS Program Type: 0 inactive [ 554.865475][T15136] vivid-003: RDS PS Name: inactive [ 554.894169][T15136] vivid-003: RDS Radio Text: inactive [ 554.932080][T15136] vivid-003: RDS Traffic Announcement: false inactive [ 554.943665][T15113] infiniband syz0: set down [ 554.969618][T15136] vivid-003: RDS Traffic Program: false inactive [ 554.976358][T15113] infiniband syz0: added veth0 [ 554.998637][T15136] vivid-003: RDS Music: false inactive [ 555.033095][T15136] vivid-003: ================== END STATUS ================== [ 555.120225][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2830'. [ 555.139341][T15113] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 555.240988][T15113] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 555.350372][T15113] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 555.608882][T15113] RDS/IB: syz0: added [ 555.659340][T15113] smc: adding ib device syz0 with port count 1 [ 555.680061][T15113] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 556.162040][T15174] batman_adv: batadv0: Adding interface: veth0 [ 556.187398][T15174] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.272037][T15174] batman_adv: batadv0: Interface activated: veth0 [ 556.297246][T15175] batman_adv: batadv0: Interface deactivated: veth0 [ 556.378014][T15175] batman_adv: batadv0: Removing interface: veth0 [ 556.437126][T15174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.454189][T15174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.887958][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 556.925370][ T30] audit: type=1400 audit(1786626804.050:1129): avc: denied { write } for pid=15183 comm="syz.2.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 557.026750][ T30] audit: type=1400 audit(1786626804.100:1130): avc: denied { setopt } for pid=15181 comm="syz.3.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 557.140919][ T30] audit: type=1400 audit(1786626804.100:1131): avc: denied { write } for pid=15181 comm="syz.3.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 557.337100][ T30] audit: type=1400 audit(1786626804.470:1132): avc: denied { map } for pid=15195 comm="syz.4.2849" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 557.423870][ T5701] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 557.444933][ T30] audit: type=1400 audit(1786626804.500:1133): avc: denied { call } for pid=15195 comm="syz.4.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 557.551634][ T30] audit: type=1400 audit(1786626804.500:1134): avc: denied { transfer } for pid=15195 comm="syz.4.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 557.699947][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 557.722902][ T5701] usb 3-1: no configurations [ 557.751458][ T5701] usb 3-1: can't read configurations, error -22 [ 557.881117][T15205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 557.950635][T15210] netlink: 'syz.8.2855': attribute type 1 has an invalid length. [ 558.035153][T15210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.832049][ T5701] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 558.973366][T15242] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2866'. [ 558.985234][T15243] netlink: 'syz.4.2865': attribute type 1 has an invalid length. [ 559.012456][ T5701] usb 3-1: Using ep0 maxpacket: 8 [ 559.028762][ T5701] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 559.066530][ T5701] usb 3-1: config 0 has no interface number 0 [ 559.096560][ T5701] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 559.121866][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2866'. [ 559.146821][ T5701] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 559.217884][ T5701] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 559.254804][ T5701] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 559.347887][ T5701] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.418741][ T5701] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 559.454183][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.486527][ T5701] usb 3-1: Product: syz [ 559.505459][ T5701] usb 3-1: Manufacturer: syz [ 559.528987][ T5701] usb 3-1: SerialNumber: syz [ 559.556730][ T5701] usb 3-1: config 0 descriptor?? [ 559.789851][ T5701] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 559.840808][T15252] lo speed is unknown, defaulting to 1000 [ 560.194373][T15268] fuse: Bad value for 'fd' [ 560.233942][ T5709] usb 3-1: USB disconnect, device number 35 [ 560.881308][T15284] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 560.956810][T15286] fuse: fd is not a fuse device [ 561.274212][T15294] tipc: Enabling of bearer rejected, already enabled [ 562.112908][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2892'. [ 562.826229][ T5709] libceph: connect (1)[c::]:6789 error -101 [ 562.858377][ T5709] libceph: mon0 (1)[c::]:6789 connect error [ 562.901900][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.910009][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.927140][T15330] ceph: No mds server is up or the cluster is laggy [ 563.169780][T15337] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2899'. [ 563.362728][T15342] CIFS: Attempting to mount //127.0.0.1/share [ 563.581893][T15348] sit1: left allmulticast mode [ 563.916212][T15357] fuse: fd is not a fuse device [ 564.200016][T15342] CIFS: VFS: Error connecting to socket. Aborting operation. [ 564.231919][T15342] CIFS: VFS: cifs_mount failed w/return code = -4 [ 565.015362][T15371] netlink: 'syz.4.2911': attribute type 1 has an invalid length. [ 565.160016][T15371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 565.279531][T15376] tipc: Started in network mode [ 565.305481][T15376] tipc: Node identity 1000001, cluster identity 4369 [ 565.351686][T15376] tipc: Node number set to 16777217 [ 565.372859][T15376] tipc: Cannot configure node identity twice [ 565.427929][T15381] bond5: (slave geneve3): making interface the new active one [ 565.475708][T15381] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 565.522298][T15383] tipc: New replicast peer: 127.0.0.1 [ 565.562957][T15383] tipc: Enabled bearer , priority 10 [ 566.568663][ T30] audit: type=1400 audit(1786626813.695:1135): avc: denied { setattr } for pid=15379 comm="syz.5.2913" name="ns" dev="proc" ino=57516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 566.717975][ T5732] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 566.973167][ T5732] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 567.044259][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.134723][ T5732] usb 5-1: Product: syz [ 567.172669][ T5732] usb 5-1: Manufacturer: syz [ 567.230686][ T5732] usb 5-1: SerialNumber: syz [ 567.602566][T15421] fuse: fd is not a fuse device [ 567.659564][ T5732] rtl8150 5-1:1.0: couldn't reset the device [ 567.710876][ T5732] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 567.785755][ T5732] usb 5-1: USB disconnect, device number 16 [ 568.309976][T15435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.324100][T15439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2935'. [ 568.513761][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2935'. [ 568.531437][ T30] audit: type=1400 audit(1786626815.666:1136): avc: denied { watch watch_reads } for pid=15442 comm="syz.2.2936" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 569.522389][T15466] netlink: 'syz.8.2945': attribute type 1 has an invalid length. [ 569.638545][T15466] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.775688][T15468] bond3: (slave veth9): Enslaving as an active interface with a down link [ 569.844035][T15469] veth0_virt_wifi: entered promiscuous mode [ 569.897962][T15469] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 569.964945][T15466] bond3: (slave veth0_virt_wifi): Releasing active interface [ 570.623482][T15487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2950'. [ 571.232970][ T30] audit: type=1400 audit(1786626818.367:1137): avc: denied { setopt } for pid=15501 comm="syz.2.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 572.438300][T15533] netlink: 'syz.5.2963': attribute type 4 has an invalid length. [ 572.796466][T15540] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2964'. [ 573.065141][ T5709] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 573.225649][ T5709] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 573.234650][ T5709] usb 3-1: config 0 has no interface number 0 [ 573.245611][ T5709] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 573.255069][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.263120][ T5709] usb 3-1: Product: syz [ 573.273250][ T5709] usb 3-1: Manufacturer: syz [ 573.282590][ T5709] usb 3-1: SerialNumber: syz [ 573.308582][ T5709] usb 3-1: config 0 descriptor?? [ 573.332055][ T5709] usb 3-1: selecting invalid altsetting 1 [ 573.364043][ T5709] dvb_ttusb_budget: ttusb_init_controller: error [ 573.377305][ T5709] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 573.416439][ T5709] DVB: Unable to find symbol stv0299_attach() [ 573.442744][ T5709] DVB: Unable to find symbol tda8083_attach() [ 573.451537][ T5709] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 573.745188][ T5709] usb 3-1: USB disconnect, device number 36 [ 573.915196][T15571] batman_adv: batadv0: Adding interface: veth0 [ 573.929230][T15571] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.987450][T15571] batman_adv: batadv0: Interface activated: veth0 [ 574.001319][T15572] batman_adv: batadv0: Interface deactivated: veth0 [ 574.020598][T15572] batman_adv: batadv0: Removing interface: veth0 [ 574.057086][T15571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.107596][T15571] batadv0 (unregistering): left promiscuous mode [ 575.746659][T15600] xt_hashlimit: size too large, truncated to 1048576 [ 577.202003][T15613] binder: 15612:15613 ioctl c0306201 2000000003c0 returned -14 [ 577.401273][T15620] netlink: 'syz.5.2988': attribute type 11 has an invalid length. [ 577.591417][T15629] netlink: 64467 bytes leftover after parsing attributes in process `syz.3.2994'. [ 577.810658][ T30] audit: type=1400 audit(1786626824.950:1138): avc: denied { write } for pid=15631 comm="syz.2.2996" name="functions" dev="configfs" ino=14415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 577.840891][T15634] fuse: Bad value for 'fd' [ 577.979818][ T30] audit: type=1400 audit(1786626825.000:1139): avc: denied { write } for pid=15631 comm="syz.2.2996" name="c.1" dev="configfs" ino=14421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 578.141860][ T30] audit: type=1400 audit(1786626825.040:1140): avc: denied { write } for pid=15631 comm="syz.2.2996" name="functions" dev="configfs" ino=14415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 578.237900][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.287099][ T30] audit: type=1400 audit(1786626825.040:1141): avc: denied { write } for pid=15631 comm="syz.2.2996" name="c.1" dev="configfs" ino=14421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 578.315908][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.441713][ T30] audit: type=1400 audit(1786626825.040:1142): avc: denied { write } for pid=15631 comm="syz.2.2996" name="c.1" dev="configfs" ino=14421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 582.239167][T15702] netlink: 'syz.3.3020': attribute type 4 has an invalid length. [ 582.303295][T15702] netlink: 'syz.3.3020': attribute type 4 has an invalid length. [ 582.979632][ T5709] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 583.190425][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 583.234468][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.311687][ T5709] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.390441][ T5709] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 583.471074][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.533548][ T5709] usb 5-1: Product: syz [ 583.567004][ T5709] usb 5-1: Manufacturer: syz [ 583.606301][ T5709] usb 5-1: SerialNumber: syz [ 583.921351][ T5709] usb 5-1: unit 6 not found! [ 584.088451][ T5709] usb 5-1: USB disconnect, device number 17 [ 584.338463][T12321] udevd[12321]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.922862][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 584.956593][T15761] netlink: 'syz.5.3029': attribute type 1 has an invalid length. [ 585.006935][ T6498] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.036207][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 585.102471][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3030'. [ 585.121152][T15761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.296543][T15765] bond2: (slave veth3): Enslaving as an active interface with a down link [ 585.336515][T15768] veth0_virt_wifi: entered promiscuous mode [ 585.414402][T15768] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 585.565382][T15761] bond2: (slave veth0_virt_wifi): Releasing active interface [ 585.667365][T15773] netlink: 'syz.4.3032': attribute type 4 has an invalid length. [ 585.675869][T15006] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.750009][T15006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.801199][T15778] netlink: 'syz.4.3032': attribute type 4 has an invalid length. [ 586.074224][T15783] binder: BINDER_SET_CONTEXT_MGR already set [ 586.178313][T15783] binder: 15780:15783 ioctl 4018620d 200000000040 returned -16 [ 586.253294][T15784] binder: 15780:15784 ioctl c0306201 2000000003c0 returned -14 [ 586.284722][T15779] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.292185][T15779] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.535985][T12441] block nbd0: Receive control failed (result -32) [ 586.899324][T15779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.044542][T15793] netlink: 'syz.8.3038': attribute type 11 has an invalid length. [ 587.757801][T15750] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.827402][ T5709] lo speed is unknown, defaulting to 1000 [ 587.877206][ T6503] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.936221][ T6503] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.989656][ T9696] lo speed is unknown, defaulting to 1000 [ 588.147367][ T6503] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.192415][ T6503] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.276582][ T6503] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.349788][ T6503] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.394782][ T6503] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.449337][ T6503] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.479499][T15823] netlink: 'syz.8.3047': attribute type 83 has an invalid length. [ 588.567406][ T5709] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 588.634114][T15827] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 588.670076][T15825] netlink: 'syz.8.3047': attribute type 83 has an invalid length. [ 588.757185][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 588.778090][ T5709] usb 3-1: config 8 has an invalid interface number: 202 but max is 0 [ 588.813248][ T5709] usb 3-1: config 8 has no interface number 0 [ 588.835751][ T5709] usb 3-1: config 8 interface 202 has no altsetting 0 [ 588.873297][ T5709] usb 3-1: New USB device found, idVendor=046d, idProduct=0890, bcdDevice=ee.6e [ 588.907845][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.947978][ T5709] usb 3-1: Product: syz [ 588.975014][ T5709] usb 3-1: Manufacturer: syz [ 589.002960][ T5709] usb 3-1: SerialNumber: syz [ 589.154589][T15838] netlink: 'syz.5.3053': attribute type 4 has an invalid length. [ 589.201376][T15838] netlink: 'syz.5.3053': attribute type 4 has an invalid length. [ 589.337823][ T6503] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.403571][ T6503] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.467652][ T6503] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.548066][ T6503] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.487585][T15866] netlink: 'syz.5.3061': attribute type 1 has an invalid length. [ 590.511948][ T5709] usb 3-1: No union descriptors [ 590.549341][ T5709] gspca_main: spca500-2.14.0 probing 046d:0890 [ 590.660396][T15866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.695563][ T5709] usb 3-1: USB disconnect, device number 37 [ 590.707315][T15868] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 590.815326][T15868] bond3: entered allmulticast mode [ 590.945154][T15869] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 592.370604][T15901] fuse: fd is not a fuse device [ 594.279325][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3083'. [ 594.358464][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'. [ 595.274363][ T30] audit: type=1400 audit(1786626842.419:1143): avc: denied { mount } for pid=15947 comm="syz.2.3091" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 595.387678][ T30] audit: type=1400 audit(1786626842.459:1144): avc: denied { search } for pid=15947 comm="syz.2.3091" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 595.519823][ T30] audit: type=1400 audit(1786626842.459:1145): avc: denied { read write } for pid=15947 comm="syz.2.3091" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 595.663451][ T30] audit: type=1400 audit(1786626842.459:1146): avc: denied { open } for pid=15947 comm="syz.2.3091" path="/644/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 595.700176][T15966] netlink: 'syz.2.3093': attribute type 4 has an invalid length. [ 595.716436][T15969] netlink: 'syz.3.3098': attribute type 4 has an invalid length. [ 595.738266][T15966] netlink: 'syz.2.3093': attribute type 4 has an invalid length. [ 595.762273][T15969] netlink: 'syz.3.3098': attribute type 4 has an invalid length. [ 595.789862][ T30] audit: type=1400 audit(1786626842.539:1147): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 595.853610][T15002] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.890339][T15973] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9323] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   [ 595.922979][T15002] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.670310][T15002] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.741142][T15002] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.083325][ T5821] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 597.242574][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 597.339950][ T5821] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 597.439169][ T5821] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 597.519353][ T5821] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.590667][ T5821] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 597.676759][ T5821] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 597.727335][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.775164][ T5821] usb 5-1: Product: syz [ 597.800539][ T5821] usb 5-1: Manufacturer: syz [ 597.830328][ T5821] usb 5-1: SerialNumber: syz [ 597.951325][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 598.177429][T16022] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 598.283543][ T5821] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input30 [ 598.395939][T16028] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 598.424148][T12441] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 598.642757][ T30] audit: type=1804 audit(1786626845.801:1148): pid=16034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3122" name="file0" dev="tmpfs" ino=3711 res=1 errno=0 [ 598.669840][T16036] netlink: 'syz.2.3123': attribute type 1 has an invalid length. [ 598.716110][ T5821] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 598.755850][ T5821] (id 0x00) [ 598.769909][T16034] ref_ctr increment failed for inode: 0xe7f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888048a1f2c0 [ 598.795245][T16036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.828955][T16039] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 598.855187][T16033] uprobe: syz.3.3122:16033 failed to unregister, leaking uprobe [ 598.921754][ T5821] rc_core: IR keymap rc-imon-pad not found [ 598.950224][ T5821] Registered IR keymap rc-empty [ 598.969281][T16039] bond2: entered allmulticast mode [ 598.978112][ T5821] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 599.015891][ T5821] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 599.092334][ T5821] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 599.109735][T16036] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 599.154752][ T5821] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input31 [ 599.295573][ T5821] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:18> initialized [ 599.378581][ T5821] usb 5-1: USB disconnect, device number 18 [ 599.469638][T16056] overlayfs: failed to clone upperpath [ 599.624177][T16061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.703744][T16061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.191145][ T5821] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 600.361656][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 600.410706][ T5821] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 600.473496][ T5821] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 600.542075][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.607723][ T5821] usb 5-1: Product: syz [ 600.630624][ T5821] usb 5-1: Manufacturer: syz [ 600.656835][ T5821] usb 5-1: SerialNumber: syz [ 600.702452][ T5821] usb 5-1: config 0 descriptor?? [ 600.737209][T16072] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 600.793250][ T5821] hub 5-1:0.0: bad descriptor, ignoring hub [ 600.843187][ T5821] hub 5-1:0.0: probe with driver hub failed with error -5 [ 600.897948][ T5821] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32 [ 600.948746][T16095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3139'. [ 601.154185][ T5709] usb 5-1: USB disconnect, device number 19 [ 601.154244][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 601.244505][ T30] audit: type=1400 audit(1786626848.392:1149): avc: denied { mounton } for pid=16098 comm="syz.3.3141" path="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 602.418700][T16122] netlink: 'syz.8.3150': attribute type 4 has an invalid length. [ 602.470301][T16127] netlink: 'syz.8.3150': attribute type 4 has an invalid length. [ 602.586218][T16130] binder: 16129:16130 ioctl c0306201 2000000004c0 returned -14 [ 602.809163][T16145] binder: 16143:16145 ioctl c0306201 200000000680 returned -14 [ 603.666026][T16160] overlayfs: failed to clone upperpath [ 605.139106][T16180] overlayfs: failed to resolve './cgroup': -2 [ 605.171782][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3165'. [ 605.593946][ T5610] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 605.604679][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3171'. [ 605.732351][T16196] netlink: 'syz.8.3174': attribute type 4 has an invalid length. [ 605.784414][T16196] netlink: 'syz.8.3174': attribute type 4 has an invalid length. [ 605.942676][T16200] netlink: 'syz.5.3173': attribute type 21 has an invalid length. [ 605.990654][T16200] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3173'. [ 606.090102][T16200] netlink: 'syz.5.3173': attribute type 5 has an invalid length. [ 606.171392][T16200] netlink: 'syz.5.3173': attribute type 6 has an invalid length. [ 606.229515][T16200] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3173'. [ 607.130737][T16238] netlink: 'syz.2.3185': attribute type 4 has an invalid length. [ 607.193472][T16238] netlink: 'syz.2.3185': attribute type 4 has an invalid length. [ 607.802917][T16251] team0 (unregistering): left promiscuous mode [ 607.851632][T16251] team_slave_0: left promiscuous mode [ 607.889704][T16251] team_slave_1: left promiscuous mode [ 607.932680][T16251] team0 (unregistering): Port device team_slave_0 removed [ 607.972324][T16251] team0 (unregistering): Port device team_slave_1 removed [ 608.060116][T16258] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 608.502172][T16276] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3199'. [ 608.535672][T16278] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 608.744126][T16280] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3199'. [ 609.013087][T16292] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 610.468368][T16310] ip_tables: iptables: counters copy to user failed while replacing table [ 610.674844][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3212'. [ 610.708316][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3213'. [ 610.918737][T16323] netlink: 'syz.8.3217': attribute type 9 has an invalid length. [ 611.069439][T16330] netlink: 'syz.8.3220': attribute type 4 has an invalid length. [ 611.174771][T16333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16333 comm=syz.8.3221 [ 611.230861][T16333] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3221'. [ 611.361986][T16339] vlan3: entered allmulticast mode [ 611.381153][T16339] bond4: entered allmulticast mode [ 612.220579][T16355] gretap0: left promiscuous mode [ 612.347254][T16355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.419543][T16355] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.690089][T16355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.766454][T16355] veth1_vlan: left promiscuous mode [ 612.796779][T16355] veth0_vlan: left promiscuous mode [ 612.823429][T16355] veth0_vlan: entered promiscuous mode [ 612.858531][T16355] veth1_vlan: entered promiscuous mode [ 612.911095][T16355] veth1_macvtap: left promiscuous mode [ 612.938826][T16355] veth0_macvtap: left promiscuous mode [ 612.977748][T16355] veth0_macvtap: entered promiscuous mode [ 613.016662][T16355] veth1_macvtap: entered promiscuous mode [ 613.098578][T16355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.160405][T16355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.209004][T16355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.254277][T16355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.316425][T16355] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 613.363109][T16355] gretap0: entered promiscuous mode [ 613.400461][ T30] audit: type=1400 audit(1786626860.558:1150): avc: denied { lock } for pid=16370 comm="syz.3.3233" path="socket:[62291]" dev="sockfs" ino=62291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 613.431340][T16355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.541758][T16355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.592132][T16355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 613.657087][T16355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 613.723447][T15002] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.730643][T15002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.838030][T15002] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.845246][T15002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.060971][T16380] bridge0: port 1(wlan1) entered blocking state [ 614.084208][T16380] bridge0: port 1(wlan1) entered disabled state [ 614.128732][T16380] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 614.191505][T16380] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 614.540065][T16396] overlayfs: failed to resolve './cgroup': -2 [ 614.788398][T15011] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 615.016799][T15011] bond3: (slave veth9): making interface the new active one [ 615.281140][T15011] bond3: active interface up! [ 615.325224][T15750] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.378804][T15750] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.391462][T16419] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 615.457826][T16420] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 615.477952][T15750] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.528428][T15750] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.613451][T15011] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.662537][T15011] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.737557][T15750] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.808388][T15750] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.951035][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3252'. [ 616.573750][T16438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.641357][T16438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.575646][T16468] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 617.833135][ T30] audit: type=1400 audit(1786626865.000:1151): avc: denied { accept } for pid=16472 comm="syz.3.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 618.564879][T16488] tipc: Enabling of bearer rejected, failed to enable media [ 618.994094][ T9696] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 619.053817][ T30] audit: type=1326 audit(1786626866.221:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.5.3274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c1d79e0d9 code=0x0 [ 619.191966][ T9696] usb 3-1: Using ep0 maxpacket: 32 [ 619.206865][ T9696] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 619.240155][ T9696] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 619.289140][ T9696] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.335116][ T9696] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 619.399140][ T9696] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 619.430658][ T9696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.475541][ T9696] usb 3-1: Product: syz [ 619.499120][ T9696] usb 3-1: Manufacturer: syz [ 619.526206][ T9696] usb 3-1: SerialNumber: syz [ 619.565060][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 619.614605][T16521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.633943][ T9696] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input33 [ 619.718851][T16521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.741868][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 619.788526][T16527] bridge0: Device is already in use. [ 619.794332][ T9696] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 619.826803][ T9696] (id 0x00) [ 619.837260][T16525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.982786][ T9696] rc_core: IR keymap rc-imon-pad not found [ 619.998792][ T9696] Registered IR keymap rc-empty [ 620.016497][ T9696] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 620.054476][ T9696] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 620.103292][ T9696] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 620.134542][ T9696] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input34 [ 620.205978][ T9696] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:38> initialized [ 620.895214][ T30] audit: type=1400 audit(1786626868.062:1153): avc: denied { write } for pid=16536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.951580][T16553] imon:send_packet: task interrupted [ 621.004660][T16553] imon:send_packet: packet tx failed (-512) [ 621.045311][T16553] imon:vfd_write: send packet #1 failed [ 621.237683][ T30] audit: type=1400 audit(1786626868.402:1154): avc: denied { write } for pid=16557 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.851986][ T30] audit: type=1400 audit(1786626869.002:1155): avc: denied { write } for pid=16569 comm="syz.4.3286" name="nullb" dev="configfs" ino=3359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 621.958314][ T30] audit: type=1400 audit(1786626869.102:1156): avc: denied { write } for pid=16569 comm="syz.4.3286" name="zone_size" dev="configfs" ino=63072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 622.054251][ T30] audit: type=1400 audit(1786626869.102:1157): avc: denied { open } for pid=16569 comm="syz.4.3286" path="/303/my_configfs/nullb/nullb1/zone_size" dev="configfs" ino=63072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 622.093898][ T5258] veth0_vlan: left promiscuous mode [ 622.127588][T16553] imon:send_packet: task interrupted [ 622.144807][ T5709] veth0_vlan: entered promiscuous mode [ 622.163753][T16553] imon:send_packet: packet tx failed (-512) [ 622.216684][T16553] imon:vfd_write: send packet #0 failed [ 622.286542][ T30] audit: type=1400 audit(1786626869.442:1158): avc: denied { create } for pid=16577 comm="syz.4.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 622.345576][ T5709] usb 3-1: USB disconnect, device number 38 [ 622.463961][ T30] audit: type=1400 audit(1786626869.482:1159): avc: denied { write } for pid=16577 comm="syz.4.3298" path="socket:[63094]" dev="sockfs" ino=63094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 623.502319][ T30] audit: type=1400 audit(1786626870.663:1160): avc: denied { write } for pid=16589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.643998][T16615] jffs2: notice: (16615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 623.765509][ T30] audit: type=1400 audit(1786626870.923:1161): avc: denied { write } for pid=16613 comm="syz.4.3295" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 624.311155][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.319342][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.364154][ T5709] libceph: connect (1)[c::]:6789 error -101 [ 626.392657][ T5709] libceph: mon0 (1)[c::]:6789 connect error [ 626.520492][T16666] ceph: No mds server is up or the cluster is laggy [ 626.705458][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 626.705471][ T30] audit: type=1400 audit(1786626873.865:1163): avc: denied { mount } for pid=16682 comm="syz.5.3315" name="/" dev="autofs" ino=63581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 628.498040][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.573752][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.639829][T16720] netlink: 'syz.5.3328': attribute type 16 has an invalid length. [ 628.674673][T16720] netlink: 'syz.5.3328': attribute type 17 has an invalid length. [ 628.825638][T16722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 629.541615][ T30] audit: type=1400 audit(1786626876.706:1164): avc: denied { write } for pid=16742 comm="syz.2.3335" name="core" dev="configfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 629.732287][ T30] audit: type=1400 audit(1786626876.806:1165): avc: denied { write } for pid=16742 comm="syz.2.3335" name="target" dev="configfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 630.882340][T16782] lo speed is unknown, defaulting to 1000 [ 633.213326][T16817] random: crng reseeded on system resumption [ 633.945266][T16839] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3364'. [ 634.354089][ T9696] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 634.536949][ T9696] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 634.592648][ T9696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.669839][ T9696] usb 3-1: config 0 has no interfaces? [ 634.704660][ T9696] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 634.765689][ T9696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.828385][ T9696] usb 3-1: config 0 descriptor?? [ 635.659936][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3371'. [ 635.852014][T16878] bpf: Bad value for 'context' [ 635.884059][ T9696] usb 3-1: string descriptor 0 read error: -71 [ 636.050448][ T9696] usb 3-1: USB disconnect, device number 39 [ 636.241025][T16886] fuse: Bad value for 'fd' [ 636.398539][ T30] audit: type=1400 audit(1786626883.570:1166): avc: denied { write } for pid=16863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.685686][ T30] audit: type=1400 audit(1786626883.860:1167): avc: denied { write } for pid=16895 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.694380][ T30] audit: type=1326 audit(1786626884.870:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.2.3379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa1f39e0d9 code=0x0 [ 638.002242][T16915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16915 comm=syz.8.3382 [ 638.058574][T16917] netlink: 'syz.8.3382': attribute type 3 has an invalid length. [ 638.096028][T16917] netlink: 'syz.8.3382': attribute type 3 has an invalid length. [ 638.488395][T16925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.573668][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3385'. [ 638.599695][T16925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.715115][ T30] audit: type=1400 audit(1786626885.881:1169): avc: denied { open } for pid=5598 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.884870][T16934] netlink: 'syz.8.3388': attribute type 1 has an invalid length. [ 638.914893][ T30] audit: type=1400 audit(1786626885.881:1170): avc: denied { ioctl } for pid=5598 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 639.124727][T16937] bond5: (slave bridge5): making interface the new active one [ 639.148157][ T30] audit: type=1400 audit(1786626885.911:1171): avc: denied { read write } for pid=10665 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 639.204863][T16937] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 639.328704][ T30] audit: type=1400 audit(1786626886.001:1172): avc: denied { create } for pid=16929 comm="syz.2.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.500945][ T30] audit: type=1400 audit(1786626886.021:1173): avc: denied { write } for pid=16929 comm="syz.2.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.569234][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 639.673483][T16948] hsr_slave_0 (unregistering): left promiscuous mode [ 639.685581][ T30] audit: type=1400 audit(1786626886.031:1174): avc: denied { create } for pid=16930 comm="syz.4.3387" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 639.840382][ T30] audit: type=1400 audit(1786626886.031:1175): avc: denied { ioctl } for pid=16930 comm="syz.4.3387" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64881 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 639.994255][T16950] lo speed is unknown, defaulting to 1000 [ 640.596850][T16968] fuse: fd is not a fuse device [ 640.855147][T16958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3398'. [ 641.107156][T16976] netlink: 'syz.2.3403': attribute type 1 has an invalid length. [ 641.241215][T16980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.349167][T16976] bond3: (slave bridge0): making interface the new active one [ 641.373500][T16980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.397584][T16976] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 641.619413][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 641.619425][ T30] audit: type=1400 audit(1786626888.782:1228): avc: denied { write } for pid=16982 comm="syz.2.3406" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 641.666342][T16984] input: syz0 as /devices/virtual/input/input35 [ 641.776946][ T30] audit: type=1400 audit(1786626888.822:1229): avc: denied { open } for pid=16982 comm="syz.2.3406" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 643.020591][ T30] audit: type=1400 audit(1786626888.822:1230): avc: denied { ioctl } for pid=16982 comm="syz.2.3406" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 643.567920][ T30] audit: type=1400 audit(1786626888.872:1231): avc: denied { read } for pid=4948 comm="acpid" name="event4" dev="devtmpfs" ino=3658 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 643.745335][ T30] audit: type=1400 audit(1786626888.872:1232): avc: denied { open } for pid=4948 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3658 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 643.927510][ T30] audit: type=1400 audit(1786626888.872:1233): avc: denied { ioctl } for pid=4948 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3658 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 644.095013][ T30] audit: type=1400 audit(1786626888.882:1234): avc: denied { map } for pid=16982 comm="syz.2.3406" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 644.244884][T17002] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 644.287091][ T30] audit: type=1400 audit(1786626888.882:1235): avc: denied { read write } for pid=16982 comm="syz.2.3406" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 644.402757][ T30] audit: type=1400 audit(1786626888.902:1236): avc: denied { map } for pid=16982 comm="syz.2.3406" path="socket:[65083]" dev="sockfs" ino=65083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 644.530733][ T30] audit: type=1400 audit(1786626890.593:1237): avc: denied { create } for pid=16993 comm="syz.3.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 644.946105][T17030] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3421'. [ 645.292275][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 645.671261][T17050] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 646.265856][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3429'. [ 646.297961][ T5709] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 646.500982][ T5709] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 646.541918][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.580634][ T5709] usb 5-1: Product: syz [ 646.600732][ T5709] usb 5-1: Manufacturer: syz [ 646.622213][ T5709] usb 5-1: SerialNumber: syz [ 646.859895][T12441] Bluetooth: hci5: command 0x0405 tx timeout [ 647.065392][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 647.065404][ T30] audit: type=1400 audit(1786626894.235:1261): avc: denied { create } for pid=17070 comm="syz.8.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 647.134980][ T5709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 647.207230][ T5709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 647.239026][ T30] audit: type=1400 audit(1786626894.295:1262): avc: denied { setopt } for pid=17070 comm="syz.8.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 647.382457][ T30] audit: type=1400 audit(1786626894.305:1263): avc: denied { write } for pid=17070 comm="syz.8.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 648.526510][T17052] netlink: 'syz.4.3428': attribute type 16 has an invalid length. [ 648.557750][T17052] netlink: 'syz.4.3428': attribute type 17 has an invalid length. [ 648.923110][T17083] fuse: fd is not a fuse device [ 649.063170][ T5709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 649.116626][ T5709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 649.134581][ T30] audit: type=1400 audit(1786626896.306:1264): avc: denied { write } for pid=17086 comm="syz.3.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 649.171351][ T5709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 649.222777][ T30] audit: type=1400 audit(1786626896.366:1265): avc: denied { sys_module } for pid=17086 comm="syz.3.3439" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 649.247600][ T5709] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 649.311328][ T5709] usb 5-1: USB disconnect, device number 20 [ 649.942090][T17104] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3444'. [ 649.956278][ T30] audit: type=1400 audit(1786626897.116:1266): avc: denied { create } for pid=17102 comm="syz.8.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 650.066424][ T30] audit: type=1400 audit(1786626897.116:1267): avc: denied { write } for pid=17102 comm="syz.8.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 650.165289][T17103] syz_tun (unregistering): left allmulticast mode [ 650.183281][ T30] audit: type=1400 audit(1786626897.306:1268): avc: denied { append } for pid=17106 comm="syz.2.3445" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 650.228683][T17103] syz_tun (unregistering): left promiscuous mode [ 650.273208][T17103] bridge0: port 3(syz_tun) entered disabled state [ 650.374266][T17101] lo speed is unknown, defaulting to 1000 [ 651.045968][T17112] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 651.121843][T17112] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 651.169512][T17112] kvm: requested 36038 ns i8254 timer period limited to 200000 ns [ 651.232648][T17112] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 651.307524][T17112] kvm: requested 143314 ns i8254 timer period limited to 200000 ns [ 651.350543][ T30] audit: type=1400 audit(1786626898.517:1269): avc: denied { read write } for pid=17128 comm="syz.5.3452" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 651.440942][T17112] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 651.497326][T17112] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 651.597657][ T30] audit: type=1400 audit(1786626898.517:1270): avc: denied { open } for pid=17128 comm="syz.5.3452" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 651.805488][T17138] netlink: 'syz.5.3453': attribute type 4 has an invalid length. [ 652.230381][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 652.230393][ T30] audit: type=1400 audit(1786626899.407:1273): avc: denied { create } for pid=17142 comm="syz.5.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 652.493334][ T30] audit: type=1400 audit(1786626899.447:1274): avc: denied { bind } for pid=17141 comm="syz.2.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 652.543711][T17149] comedi comedi3: comedi_config --init_data is deprecated [ 652.708662][ T30] audit: type=1400 audit(1786626899.507:1275): avc: denied { bind } for pid=17143 comm="syz.3.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 652.830159][T17149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3458'. [ 652.858029][ T30] audit: type=1400 audit(1786626899.527:1276): avc: denied { connect } for pid=17142 comm="syz.5.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 653.008225][ T30] audit: type=1400 audit(1786626899.718:1277): avc: denied { append } for pid=17148 comm="syz.2.3458" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 653.155166][ T30] audit: type=1400 audit(1786626899.768:1278): avc: denied { create } for pid=17150 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 653.303301][ T30] audit: type=1400 audit(1786626899.828:1279): avc: denied { write } for pid=17150 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 653.514060][ T30] audit: type=1400 audit(1786626899.998:1280): avc: denied { create } for pid=17148 comm="syz.2.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 653.677648][ T30] audit: type=1400 audit(1786626899.998:1281): avc: denied { write } for pid=17148 comm="syz.2.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 653.871361][ T30] audit: type=1400 audit(1786626900.008:1282): avc: denied { nlmsg_write } for pid=17148 comm="syz.2.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 654.052828][T17188] overlayfs: failed to clone upperpath [ 654.114405][ T189] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 655.224793][ T189] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 655.577911][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.614564][ T189] usb 3-1: Product: syz [ 655.636447][ T189] usb 3-1: Manufacturer: syz [ 655.662662][ T189] usb 3-1: SerialNumber: syz [ 655.767963][T17205] jffs2: notice: (17205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 656.119409][ T189] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 656.173680][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3478'. [ 656.217795][ T189] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 656.370607][T17226] fuse: fd is not a fuse device [ 656.497940][T17223] lo speed is unknown, defaulting to 1000 [ 656.702043][T17232] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 657.114376][T17237] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 657.156117][T17240] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 657.156117][T17240] The task syz.8.3485 (17240) triggered the difference, watch for misbehavior. [ 657.186394][T17227] IPVS: stopping backup sync thread 17237 ... [ 657.363364][ T189] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 657.431899][ T189] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 657.600924][ T189] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 657.656229][ T189] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 657.733826][ T189] usb 3-1: USB disconnect, device number 40 [ 658.791246][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 658.791257][ T30] audit: type=1400 audit(1786626905.971:1295): avc: denied { create } for pid=17263 comm="syz.3.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 659.002804][ T30] audit: type=1400 audit(1786626906.021:1296): avc: denied { read write } for pid=17260 comm="syz.5.3491" name="video4" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 659.177103][ T30] audit: type=1400 audit(1786626906.031:1297): avc: denied { open } for pid=17260 comm="syz.5.3491" path="/dev/video4" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 659.224578][T17272] device-mapper: ioctl: name not supplied when creating device [ 659.343096][ T30] audit: type=1400 audit(1786626906.031:1298): avc: denied { ioctl } for pid=17260 comm="syz.5.3491" path="/dev/video4" dev="devtmpfs" ino=937 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 659.496269][ T30] audit: type=1400 audit(1786626906.401:1299): avc: denied { read } for pid=17268 comm="syz.2.3494" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 659.660625][ T30] audit: type=1400 audit(1786626906.401:1300): avc: denied { open } for pid=17268 comm="syz.2.3494" path="/729/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 659.827298][ T30] audit: type=1400 audit(1786626906.411:1301): avc: denied { ioctl } for pid=17268 comm="syz.2.3494" path="/729/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 659.944827][ T30] audit: type=1400 audit(1786626906.461:1302): avc: denied { write } for pid=17268 comm="syz.2.3494" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 660.052840][ T30] audit: type=1400 audit(1786626906.461:1303): avc: denied { block_suspend } for pid=17268 comm="syz.2.3494" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 660.155809][ T30] audit: type=1400 audit(1786626906.571:1304): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 660.770323][T17290] sch_tbf: burst 0 is lower than device ip6gre0 mtu (9472) ! [ 661.514099][T17302] netlink: 'syz.2.3506': attribute type 9 has an invalid length. [ 662.962685][T17330] overlayfs: failed to clone upperpath [ 663.869171][ T189] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 664.039049][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 664.072576][ T189] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 664.132502][ T189] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 664.182627][ T189] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 664.251634][ T189] usb 3-1: Product: syz [ 664.276108][ T189] usb 3-1: Manufacturer: syz [ 664.313795][ T189] usb 3-1: SerialNumber: syz [ 664.351646][ T189] usb 3-1: config 0 descriptor?? [ 664.395006][T17342] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 664.466161][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 664.466174][ T30] audit: type=1400 audit(1786626911.644:1316): avc: denied { create } for pid=17348 comm="syz.3.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 664.859814][T17355] lo speed is unknown, defaulting to 1000 [ 665.005599][T17361] fuse: fd is not a fuse device [ 665.803381][ T30] audit: type=1400 audit(1786626912.984:1317): avc: denied { read } for pid=17340 comm="syz.2.3521" path="socket:[66686]" dev="sockfs" ino=66686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 665.864657][ T189] usb 3-1: USB disconnect, device number 41 [ 666.651517][ T30] audit: type=1400 audit(1786626913.825:1318): avc: denied { watch } for pid=17365 comm="syz.3.3532" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 667.208386][ T30] audit: type=1400 audit(1786626914.385:1319): avc: denied { map } for pid=17382 comm="syz.3.3538" path="socket:[66794]" dev="sockfs" ino=66794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 667.308478][T17385] syz_tun: entered allmulticast mode [ 667.366143][T17384] syz_tun: left allmulticast mode [ 667.392270][ T30] audit: type=1400 audit(1786626914.385:1320): avc: denied { read write } for pid=17382 comm="syz.3.3538" path="socket:[66794]" dev="sockfs" ino=66794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 667.481746][T17389] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 667.597516][ T30] audit: type=1400 audit(1786626914.495:1321): avc: denied { setopt } for pid=17384 comm="syz.4.3539" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 667.674282][T17393] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3543'. [ 667.702997][T17389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 667.773198][T17393] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3543'. [ 667.793558][T17396] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 667.814373][ T30] audit: type=1400 audit(1786626914.685:1322): avc: denied { sqpoll } for pid=17386 comm="syz.8.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 667.981124][T17396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3542'. [ 668.046496][ T30] audit: type=1400 audit(1786626915.225:1323): avc: denied { bind } for pid=17397 comm="syz.4.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 668.091570][T17398] tipc: Failed to remove unknown binding: 66,0,0/2099199:2554715317/2554715319 [ 668.166658][T17394] bond3: (slave veth1): Enslaving as an active interface with a down link [ 668.189275][T17398] tipc: Failed to remove unknown binding: 66,0,0/2099199:2554715317/2554715318 [ 668.249293][T17395] bond3: (slave dummy0): making interface the new active one [ 668.276170][T17398] tipc: Failed to remove unknown binding: 66,0,0/2099199:2554715317/2554715319 [ 668.350177][T17398] tipc: Failed to remove unknown binding: 66,0,0/2099199:2554715317/2554715318 [ 668.383044][T17395] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 668.614966][ T30] audit: type=1400 audit(1786626915.796:1324): avc: denied { mount } for pid=17402 comm="syz.4.3546" name="/" dev="ramfs" ino=66874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 668.667506][T17396] dummy0: entered promiscuous mode [ 668.746415][T17396] bond3: (slave dummy0): Releasing active interface [ 668.763457][ T30] audit: type=1400 audit(1786626915.846:1325): avc: denied { mounton } for pid=17402 comm="syz.4.3546" path="/file0" dev="ramfs" ino=66875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 669.667383][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 669.667395][ T30] audit: type=1400 audit(1786626916.856:1333): avc: denied { mount } for pid=17421 comm="syz.2.3551" name="/" dev="autofs" ino=66942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 669.988012][T17419] lo speed is unknown, defaulting to 1000 [ 670.007688][T17426] netlink: 'syz.2.3553': attribute type 1 has an invalid length. [ 670.822678][ T10] kworker/0:1 (10) used greatest stack depth: 18152 bytes left [ 670.947819][T17432] fuse: fd is not a fuse device [ 670.970286][T17426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.133028][T17435] netlink: 'syz.8.3555': attribute type 1 has an invalid length. [ 671.154549][T17426] netlink: 'syz.2.3553': attribute type 10 has an invalid length. [ 671.193231][T17426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3553'. [ 671.239518][T17439] netlink: 'syz.8.3555': attribute type 10 has an invalid length. [ 671.249815][T17431] bond4: (slave veth7): Enslaving as an active interface with a down link [ 671.296140][T17439] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3555'. [ 671.426362][T17435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 671.627725][T17438] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 671.659359][T17426] ÿ: entered promiscuous mode [ 671.685302][T15735] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 671.723504][T17439] dummy0: entered promiscuous mode [ 671.760051][T17439] bond6: (slave dummy0): Removing an active aggregator [ 671.804558][T15735] bond6: (slave dummy0): link status up again after 0 ms [ 671.822672][T17439] bond6: (slave dummy0): Releasing backup interface [ 671.845240][ T30] audit: type=1400 audit(1786626919.027:1334): avc: denied { setopt } for pid=17441 comm="syz.2.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 671.980806][ T30] audit: type=1400 audit(1786626919.037:1335): avc: denied { read } for pid=17441 comm="syz.2.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 672.173475][T17449] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 672.594677][ T30] audit: type=1400 audit(1786626919.778:1336): avc: denied { mount } for pid=17456 comm="syz.4.3560" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 672.914368][ T30] audit: type=1400 audit(1786626920.098:1337): avc: denied { write } for pid=17461 comm="syz.8.3563" path="socket:[67059]" dev="sockfs" ino=67059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 673.066500][ T30] audit: type=1400 audit(1786626920.098:1338): avc: denied { read } for pid=17461 comm="syz.8.3563" path="socket:[67059]" dev="sockfs" ino=67059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 673.201704][T17470] overlayfs: failed to clone upperpath [ 673.225172][ T30] audit: type=1400 audit(1786626920.198:1339): avc: denied { watch } for pid=17467 comm="syz.3.3564" path="/795/control" dev="tmpfs" ino=4242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 673.452468][ T30] audit: type=1400 audit(1786626920.638:1340): avc: denied { create } for pid=17473 comm="syz.3.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 673.477737][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3566'. [ 673.593286][ T30] audit: type=1400 audit(1786626920.668:1341): avc: denied { write } for pid=17473 comm="syz.3.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 673.833784][T17478] 8021q: adding VLAN 0 to HW filter on device bond5 [ 674.036141][T17478] bond5 (unregistering): Released all slaves [ 674.684894][ T9696] IPVS: starting estimator thread 0... [ 674.834145][T17492] IPVS: using max 64 ests per chain, 153600 per kthread [ 674.940064][ T9696] libceph: connect (1)[c::]:6789 error -101 [ 674.973146][ T9696] libceph: mon0 (1)[c::]:6789 connect error [ 675.024435][T17496] ceph: No mds server is up or the cluster is laggy [ 675.562527][ T9696] libceph: connect (1)[c::]:6789 error -101 [ 675.585291][ T9696] libceph: mon0 (1)[c::]:6789 connect error [ 675.717656][T17521] ceph: No mds server is up or the cluster is laggy [ 676.010345][ T30] audit: type=1400 audit(1786626923.199:1342): avc: denied { map } for pid=17533 comm="syz.3.3584" path="socket:[67233]" dev="sockfs" ino=67233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 676.154525][ T30] audit: type=1400 audit(1786626923.239:1343): avc: denied { accept } for pid=17536 comm="syz.5.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 676.319337][ T30] audit: type=1400 audit(1786626923.239:1344): avc: denied { read } for pid=17536 comm="syz.5.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 677.201903][T17551] bridge_slave_0: left allmulticast mode [ 677.229319][T17551] bridge_slave_0: left promiscuous mode [ 677.266990][T17551] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.331659][T17551] bridge_slave_1: left allmulticast mode [ 677.360622][ T30] audit: type=1400 audit(1786626924.550:1345): avc: denied { read write } for pid=17552 comm="syz.2.3590" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 677.390488][T17551] bridge_slave_1: left promiscuous mode [ 677.519235][T17551] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.692288][ T30] audit: type=1400 audit(1786626924.580:1346): avc: denied { open } for pid=17552 comm="syz.2.3590" path="/dev/sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 677.811774][T17551] bond0: (slave bond_slave_0): Releasing backup interface [ 677.891691][T17551] bond0: (slave bond_slave_1): Releasing backup interface [ 677.944771][T17551] team0: Port device team_slave_0 removed [ 677.993932][T17551] team0: Port device team_slave_1 removed [ 678.034394][T17551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.075623][T17551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.107912][T17551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 678.203210][T17553] team0: Port device xfrm0 added [ 678.243679][T17555] tipc: Started in network mode [ 678.283402][T17555] tipc: Node identity 4a70ba91c832, cluster identity 4711 [ 678.332581][T17555] tipc: Enabled bearer , priority 0 [ 678.490143][T17575] lo speed is unknown, defaulting to 1000 [ 679.453004][ T5709] tipc: Node number set to 2185411217 [ 679.838271][ T30] audit: type=1400 audit(1786626927.031:1347): avc: denied { bind } for pid=17600 comm="syz.4.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 679.868159][T17603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3612'. [ 680.096375][T17602] lo speed is unknown, defaulting to 1000 [ 681.451275][ T30] audit: type=1400 audit(1786626928.642:1348): avc: denied { create } for pid=17627 comm="syz.3.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 682.770325][ T30] audit: type=1400 audit(1786626929.953:1349): avc: denied { watch } for pid=17631 comm="syz.2.3610" path="/754/bus/file1" dev="overlay" ino=4017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 682.932769][ T30] audit: type=1326 audit(1786626930.123:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17636 comm="syz.3.3613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d759e0d9 code=0x7fc00000 [ 683.100741][ T30] audit: type=1400 audit(1786626930.193:1351): avc: denied { create } for pid=17643 comm="syz.2.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 683.216262][ T30] audit: type=1400 audit(1786626930.223:1352): avc: denied { setopt } for pid=17643 comm="syz.2.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 683.350803][ T30] audit: type=1400 audit(1786626930.223:1353): avc: denied { ioctl } for pid=17643 comm="syz.2.3616" path="socket:[67553]" dev="sockfs" ino=67553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 683.635506][ T5709] libceph: connect (1)[c::]:6789 error -101 [ 683.646171][ T30] audit: type=1326 audit(1786626930.843:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17636 comm="syz.3.3613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d759e0d9 code=0x7fc00000 [ 683.688410][ T5709] libceph: mon0 (1)[c::]:6789 connect error [ 683.737947][T17659] ceph: No mds server is up or the cluster is laggy [ 684.301523][ T30] audit: type=1400 audit(1786626931.483:1355): avc: denied { create } for pid=17666 comm="syz.3.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 684.453359][ T30] audit: type=1400 audit(1786626931.523:1356): avc: denied { getopt } for pid=17666 comm="syz.3.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 684.524576][T17676] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3624'. [ 684.684822][T17676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17676 comm=syz.5.3624 [ 684.908502][T17689] overlayfs: failed to clone upperpath [ 684.942496][T17691] fuse: Bad value for 'fd' [ 685.221548][ T30] audit: type=1326 audit(1786626932.414:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17693 comm="syz.5.3629" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1d79e0d9 code=0x7ffc0000 [ 685.723033][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.737960][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.797214][T17700] overlayfs: failed to clone lowerpath [ 686.777756][ T9696] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 687.030937][ T9696] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 687.068158][T17748] netlink: 'syz.3.3640': attribute type 1 has an invalid length. [ 687.077324][ T9696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 687.092314][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3651'. [ 687.109445][ T9696] usb 5-1: Product: syz [ 687.123186][ T9696] usb 5-1: Manufacturer: syz [ 687.172545][T17748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 687.179631][ T9696] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input36 [ 687.206002][T17750] dummy0: left promiscuous mode [ 687.276173][T17750] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 687.295337][T17748] netlink: 'syz.3.3640': attribute type 10 has an invalid length. [ 687.314681][T17748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3640'. [ 687.324278][T15010] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 687.381327][T17748] dummy0: entered promiscuous mode [ 687.404543][T17748] bond5: (slave dummy0): Removing an active aggregator [ 687.434081][T17748] bond5: (slave dummy0): Releasing backup interface [ 687.794004][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 687.794030][ T30] audit: type=1400 audit(1786626934.985:1388): avc: denied { mount } for pid=17754 comm="syz.8.3643" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 687.823896][T17757] netlink: 'syz.2.3642': attribute type 11 has an invalid length. [ 688.145711][T17758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.192491][T17758] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.246201][T17758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.485435][T17758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.544719][ T9696] usb 5-1: USB disconnect, device number 21 [ 688.579616][T17758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 688.678952][T17758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.921557][T17758] veth1_vlan: left promiscuous mode [ 689.039037][T17758] veth0_vlan: left promiscuous mode [ 689.107354][T17758] veth0_vlan: entered promiscuous mode [ 689.161651][T17758] veth1_vlan: entered promiscuous mode [ 689.250181][T17758] veth1_macvtap: left promiscuous mode [ 689.294492][T17758] veth0_macvtap: left promiscuous mode [ 689.330078][T17758] veth0_macvtap: entered promiscuous mode [ 689.358834][T17758] veth1_macvtap: entered promiscuous mode [ 689.385053][ T30] audit: type=1400 audit(1786626936.576:1389): avc: denied { mount } for pid=17778 comm="syz.8.3652" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 689.427471][T17758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.455418][T17758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.502997][T17758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.515269][ T30] audit: type=1400 audit(1786626936.626:1390): avc: denied { search } for pid=17778 comm="syz.8.3652" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 689.559358][T17758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.641859][ T30] audit: type=1400 audit(1786626936.626:1391): avc: denied { search } for pid=17778 comm="syz.8.3652" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 689.666719][T17758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.731329][ T6085] bond2: (slave ip6gretap1): link status down again after 0 ms [ 689.745835][T17758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.795139][ T30] audit: type=1400 audit(1786626936.636:1392): avc: denied { setattr } for pid=17778 comm="syz.8.3652" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 689.825571][T17758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.080234][T15735] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.119680][T15735] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 690.162961][T15735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.671777][T17803] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10665] was attempted by " [ 690.713843][ T30] audit: type=1804 audit(1786626937.907:1393): pid=17805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3658" name="bus" dev="ramfs" ino=67987 res=1 errno=0 [ 690.895952][T15717] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.917113][T15717] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 690.955337][T15717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.064017][T15717] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 691.114471][T15717] bond4: (slave veth7): making interface the new active one [ 691.178938][T15717] bond4: active interface up! [ 691.276293][T15010] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.292993][T15010] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 691.328884][ T30] audit: type=1804 audit(1786626938.027:1394): pid=17805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.3658" name="bus" dev="ramfs" ino=67987 res=1 errno=0 [ 691.386490][T15010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.537223][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 691.605417][T15735] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.633489][T15735] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 691.682893][T15735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.749281][ T30] audit: type=1400 audit(1786626938.947:1395): avc: denied { ioctl } for pid=17817 comm="syz.3.3662" path="socket:[68016]" dev="sockfs" ino=68016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 691.775419][T15735] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 691.854390][T15735] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.005536][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 692.013405][T15717] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.155661][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 692.224426][T15717] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.406899][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 692.435198][T15717] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.492884][ T30] audit: type=1400 audit(1786626939.688:1396): avc: denied { kexec_image_load } for pid=17827 comm="syz.3.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 692.627019][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 692.696697][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.717740][T17830] netlink: 'syz.3.3667': attribute type 1 has an invalid length. [ 692.855348][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 692.918696][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 692.966496][T17830] 8021q: adding VLAN 0 to HW filter on device bond6 [ 693.017368][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.044974][T17835] netlink: 'syz.3.3667': attribute type 10 has an invalid length. [ 693.081354][ T30] audit: type=1400 audit(1786626940.278:1397): avc: denied { bind } for pid=17834 comm="syz.5.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 693.129458][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.187956][T17835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3667'. [ 693.207556][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.258188][ T30] audit: type=1400 audit(1786626940.278:1398): avc: denied { name_bind } for pid=17834 comm="syz.5.3668" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 693.314860][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.414581][T17831] bond6: (slave veth5): Enslaving as an active interface with a down link [ 693.446150][ T30] audit: type=1400 audit(1786626940.308:1399): avc: denied { node_bind } for pid=17834 comm="syz.5.3668" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 693.543345][T17833] dummy0: left promiscuous mode [ 693.641233][T17833] bond6: (slave dummy0): making interface the new active one [ 693.677772][T17833] dummy0: entered promiscuous mode [ 693.709149][T17833] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 693.767623][T17835] bond6: (slave dummy0): Releasing active interface [ 693.866115][T17840] lo speed is unknown, defaulting to 1000 [ 694.006389][ T30] audit: type=1400 audit(1786626941.208:1400): avc: denied { create } for pid=17847 comm="syz.2.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 694.118274][ T30] audit: type=1400 audit(1786626941.288:1401): avc: denied { getopt } for pid=17847 comm="syz.2.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 694.649567][ T30] audit: type=1400 audit(1786626941.849:1402): avc: denied { shutdown } for pid=17860 comm="syz.8.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 694.701318][T17861] UBIFS error (pid: 17861): cannot open "ubi0_0", error -19 [ 695.218465][ T30] audit: type=1400 audit(1786626942.419:1403): avc: denied { name_bind } for pid=17867 comm="syz.3.3677" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 695.980683][T17885] netlink: 'syz.4.3684': attribute type 1 has an invalid length. [ 696.116070][T17885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 696.254130][T17892] netlink: 'syz.4.3684': attribute type 10 has an invalid length. [ 696.517584][T17889] bond6: (slave veth1): Enslaving as an active interface with a down link [ 696.613091][T17892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3684'. [ 696.701651][T17896] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3687'. [ 696.737268][T17891] bond6: (slave dummy0): making interface the new active one [ 696.838655][T17891] dummy0: entered promiscuous mode [ 696.897184][T17891] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 696.958037][ T30] audit: type=1400 audit(1786626944.160:1404): avc: denied { setopt } for pid=17902 comm="syz.5.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 697.125481][T17892] bond6: (slave dummy0): Releasing active interface [ 697.381406][ T30] audit: type=1400 audit(1786626944.580:1405): avc: denied { bind } for pid=17907 comm="syz.4.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 697.422433][ T6501] net_ratelimit: 116 callbacks suppressed [ 697.422448][ T6501] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 697.520626][ T6501] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 697.534259][ T30] audit: type=1400 audit(1786626944.610:1406): avc: denied { connect } for pid=17907 comm="syz.4.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 697.599625][T17912] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3690'. [ 697.702349][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 697.737793][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 697.907732][T17920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3693'. [ 697.921363][ T6501] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 697.949181][ T6501] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 697.998570][T17920] ip6gre1: entered promiscuous mode [ 698.022193][T17920] ip6gre1: entered allmulticast mode [ 698.053926][T17925] netlink: 'syz.3.3693': attribute type 6 has an invalid length. [ 698.092540][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.119424][T17925] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3693'. [ 698.162302][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.186624][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 698.186638][ T30] audit: type=1400 audit(1786626945.390:1408): avc: denied { mount } for pid=17928 comm="syz.2.3695" name="/" dev="gadgetfs" ino=7120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 698.236699][T14996] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 698.325262][T17929] gadgetfs: bound to dummy_udc driver [ 698.392257][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.568674][T17938] cifs: Unknown parameter 'timeo' [ 698.612124][ T5709] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 698.653990][ C0] gadgetfs: connected [ 698.660837][ T5709] gadgetfs: disconnected [ 698.735993][ T30] audit: type=1400 audit(1786626945.941:1409): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 698.919748][ T30] audit: type=1400 audit(1786626946.121:1410): avc: denied { listen } for pid=17946 comm="syz.2.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 699.340161][ T5610] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 699.359783][ T5610] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 699.484560][ T5610] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 699.838997][ T30] audit: type=1400 audit(1786626947.041:1411): avc: denied { read } for pid=17969 comm="syz.3.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 701.328807][ T30] audit: type=1400 audit(1786626948.522:1412): avc: denied { execute_no_trans } for pid=17997 comm="syz.3.3718" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 702.430123][T15735] net_ratelimit: 96 callbacks suppressed [ 702.430139][T15735] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 702.520553][T15735] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 702.582800][ T6501] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 702.770148][ T6501] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 702.994974][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.079741][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.135835][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.192510][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.250344][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.310378][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.450080][ T189] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 703.718691][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.761139][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.840611][ T189] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 703.888550][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.957889][ T189] usb 5-1: config 0 descriptor?? [ 704.481183][T18039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=18039 comm=syz.5.3731 [ 704.663129][ T189] usbhid 5-1:0.0: can't add hid device: -71 [ 704.678442][ T189] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 704.733759][ T189] usb 5-1: USB disconnect, device number 22 [ 705.605419][T18047] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 706.052014][T18056] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3735'. [ 706.168754][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3737'. [ 707.440906][T15010] net_ratelimit: 162 callbacks suppressed [ 707.440924][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.495377][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.521563][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.548342][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.579101][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.604882][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.648432][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.675588][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.704631][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.732843][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 708.687939][ T30] audit: type=1400 audit(1786626955.896:1413): avc: denied { write } for pid=18060 comm="syz.2.3739" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 709.688983][ T30] audit: type=1400 audit(1786626956.886:1414): avc: denied { wake_alarm } for pid=18069 comm="syz.2.3741" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 709.950968][ T189] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 709.980159][ T9696] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 710.107821][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 710.156366][ T189] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 710.167238][ T189] usb 3-1: config 0 has no interface number 0 [ 710.193677][ T189] usb 3-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 710.205146][ T189] usb 3-1: config 0 interface 89 has no altsetting 0 [ 710.212944][ T9696] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 710.222238][ T9696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.254583][ T9696] usb 5-1: config 0 descriptor?? [ 710.269525][ T189] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 710.278936][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.287724][ T189] usb 3-1: Product: syz [ 710.319544][ T189] usb 3-1: Manufacturer: syz [ 710.324191][ T189] usb 3-1: SerialNumber: syz [ 710.330875][ T189] usb 3-1: config 0 descriptor?? [ 710.380439][T18070] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 710.389575][ T189] hub 3-1:0.89: bad descriptor, ignoring hub [ 710.396210][ T189] hub 3-1:0.89: probe with driver hub failed with error -5 [ 710.404559][ T189] option 3-1:0.89: GSM modem (1-port) converter detected [ 710.435198][ T189] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 710.521524][ T9696] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 710.783089][ T9696] [drm:udl_init] *ERROR* Selecting channel failed [ 710.879747][ T9696] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 710.890818][ T9696] [drm] Initialized udl on minor 1 [ 710.921256][ T9696] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 710.930342][ T9696] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 710.945059][ T189] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 710.984290][ T9696] usb 5-1: USB disconnect, device number 23 [ 711.403059][ T9696] usb 3-1: USB disconnect, device number 42 [ 711.421469][ T9696] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 711.484746][ T9696] option 3-1:0.89: device disconnected [ 711.562183][T18079] jffs2: notice: (18079) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 711.604376][ T30] audit: type=1400 audit(1786626958.807:1415): avc: denied { write } for pid=18078 comm="syz.4.3744" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 711.699577][ T30] audit: type=1400 audit(1786626958.837:1416): avc: denied { add_name } for pid=18078 comm="syz.4.3744" name="f1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 711.798820][ T30] audit: type=1400 audit(1786626958.837:1417): avc: denied { create } for pid=18078 comm="syz.4.3744" name="f1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 711.892265][ T30] audit: type=1400 audit(1786626958.887:1418): avc: denied { write } for pid=18078 comm="syz.4.3744" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 711.980864][ T30] audit: type=1400 audit(1786626958.887:1419): avc: denied { read write open } for pid=18078 comm="syz.4.3744" path="/379/mnt/f2" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 712.079188][ T30] audit: type=1400 audit(1786626958.947:1420): avc: denied { write } for pid=18078 comm="syz.4.3744" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 712.244536][ T30] audit: type=1400 audit(1786626959.447:1421): avc: denied { accept } for pid=18086 comm="syz.4.3756" lport=41579 faddr=::ffff:100.1.1.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 712.349904][ T30] audit: type=1400 audit(1786626959.477:1422): avc: denied { write } for pid=18086 comm="syz.4.3756" path="socket:[69011]" dev="sockfs" ino=69011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 712.445175][ T6082] net_ratelimit: 206 callbacks suppressed [ 712.445191][ T6082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.515277][ T6082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.572272][ T6082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.634286][ T6082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.691215][ T6082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.734445][ T6082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.781902][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.817922][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.850772][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.895771][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.024407][T18049] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 713.052136][T18058] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 713.068483][T18049] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 713.167957][T18096] bridge0: port 1(vlan3) entered blocking state [ 713.177986][T18049] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 713.239773][T18096] bridge0: port 1(vlan3) entered disabled state [ 713.279034][T18096] vlan3: entered allmulticast mode [ 713.313291][T18096] geneve0: entered allmulticast mode [ 713.413512][T18104] fuse: fd is not a fuse device [ 715.956289][T18142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 715.966472][T18142] IPv6: NLM_F_CREATE should be set when creating new route [ 715.973808][T18142] IPv6: NLM_F_CREATE should be set when creating new route [ 715.981266][T18142] IPv6: NLM_F_CREATE should be set when creating new route [ 717.174952][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 717.174966][ T30] audit: type=1400 audit(1786626963.890:1428): avc: denied { create } for pid=18146 comm="syz.2.3769" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 717.358585][ T30] audit: type=1400 audit(1786626964.010:1429): avc: denied { mounton } for pid=18146 comm="syz.2.3769" path="/789/file0" dev="tmpfs" ino=4199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 717.403256][T18156] netlink: 'syz.2.3770': attribute type 1 has an invalid length. [ 717.457861][T18156] netlink: 'syz.2.3770': attribute type 4 has an invalid length. [ 717.496337][ T30] audit: type=1400 audit(1786626964.420:1430): avc: denied { unlink } for pid=5598 comm="syz-executor" name="file0" dev="tmpfs" ino=4199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 717.522834][T18156] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.3770'. [ 717.557646][ T6082] net_ratelimit: 60 callbacks suppressed [ 717.557663][ T6082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 717.624708][ T6082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.706025][ T30] audit: type=1400 audit(1786626964.910:1431): avc: denied { bind } for pid=18162 comm="syz.3.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 717.776832][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3778'. [ 717.788248][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 717.798034][ T30] audit: type=1400 audit(1786626964.910:1432): avc: denied { node_bind } for pid=18162 comm="syz.3.3777" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 717.821828][T15717] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.866901][ T30] audit: type=1400 audit(1786626964.940:1433): avc: denied { connect } for pid=18162 comm="syz.3.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 717.933377][ T30] audit: type=1400 audit(1786626964.940:1434): avc: denied { write } for pid=18162 comm="syz.3.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 717.966140][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.007242][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 718.046462][ T30] audit: type=1400 audit(1786626965.100:1435): avc: denied { watch_reads } for pid=18165 comm="syz.4.3778" path="/386" dev="tmpfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 718.182227][T14996] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.202481][T14996] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 718.488834][T15717] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.536053][T15717] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 719.536960][ T30] audit: type=1326 audit(1786626966.741:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.4.3779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6719e0d9 code=0x7ffc0000 [ 721.770023][ T5610] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 721.838944][ T30] audit: type=1326 audit(1786626966.741:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.4.3779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6719e0d9 code=0x7ffc0000 [ 722.207809][T18194] tipc: Failed to remove unknown binding: 66,0,0/2099199:4233444547/4233444549 [ 722.256965][T18194] tipc: Failed to remove unknown binding: 66,0,0/2099199:4233444547/4233444548 [ 722.314637][T18194] tipc: Failed to remove unknown binding: 66,0,0/2099199:4233444547/4233444549 [ 722.384041][T18194] tipc: Failed to remove unknown binding: 66,0,0/2099199:4233444547/4233444548 [ 722.593330][T15010] net_ratelimit: 18 callbacks suppressed [ 722.593345][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 722.703545][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 722.872458][ T6082] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 722.925150][ T6082] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.089566][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 723.128008][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.279519][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 723.309065][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.442033][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 723.442046][ T30] audit: type=1400 audit(1786626970.643:1444): avc: denied { mount } for pid=18204 comm="syz.3.3791" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 723.505096][ T6085] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 723.540306][ T6085] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 724.617231][T18220] netlink: 'syz.5.3795': attribute type 11 has an invalid length. [ 725.759369][ T30] audit: type=1800 audit(1786626972.964:1445): pid=18207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3792" name="bus" dev="ramfs" ino=69369 res=0 errno=0 [ 725.921271][T18220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.987354][T18220] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.052449][T18220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.179103][T18220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 726.205074][T18220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.234288][T18220] veth1_vlan: left promiscuous mode [ 726.247332][T18220] veth0_vlan: left promiscuous mode [ 726.264146][T18220] veth0_vlan: entered promiscuous mode [ 726.283636][T18220] veth1_vlan: entered promiscuous mode [ 726.329033][T18220] veth1_macvtap: left promiscuous mode [ 726.343720][T18220] veth0_macvtap: left promiscuous mode [ 726.351677][ T30] audit: type=1400 audit(1786626973.564:1446): avc: denied { name_bind } for pid=18245 comm="syz.4.3801" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 726.381440][T18220] veth0_macvtap: entered promiscuous mode [ 726.400878][T18220] veth1_macvtap: entered promiscuous mode [ 726.409251][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3799'. [ 726.424559][T18220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 726.444164][T18220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.457492][T18220] 8021q: adding VLAN 0 to HW filter on device bond3 [ 726.466748][T18220] 8021q: adding VLAN 0 to HW filter on device eth0 [ 726.475683][T18220] 8021q: adding VLAN 0 to HW filter on device eth1 [ 726.485120][T18220] 8021q: adding VLAN 0 to HW filter on device eth2 [ 726.504335][T18220] 8021q: adding VLAN 0 to HW filter on device eth3 [ 726.514149][T18220] bridge0: port 1(vlan3) entered blocking state [ 726.521128][T18220] bridge0: port 1(vlan3) entered forwarding state [ 726.532677][T18220] geneve0: entered promiscuous mode [ 726.542720][ T6085] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 726.657310][ T30] audit: type=1400 audit(1786626973.865:1447): avc: denied { create } for pid=18251 comm="syz.3.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 726.821650][T15010] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.800764][T15010] net_ratelimit: 56 callbacks suppressed [ 727.800780][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.825786][ T30] audit: type=1400 audit(1786626974.045:1448): avc: denied { read } for pid=18251 comm="syz.3.3802" path="socket:[69517]" dev="sockfs" ino=69517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 729.836544][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 730.006428][T15735] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 730.029203][ T6501] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.048550][ T5709] syz0: Port: 1 Link ACTIVE [ 730.056303][ T6085] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 730.064198][T15735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 730.085034][ T30] audit: type=1400 audit(1786626974.045:1449): avc: denied { write } for pid=18251 comm="syz.3.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 730.136428][T15735] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.146177][ T6085] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 730.178062][T15735] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.209645][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 730.221620][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 730.236785][T15735] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 730.274795][T15010] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 730.286173][T15735] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 730.302779][T15010] bond2: (slave veth3): making interface the new active one [ 730.315565][T15010] bond2: active interface up! [ 732.864758][ T6501] net_ratelimit: 94 callbacks suppressed [ 732.864795][ T6501] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 732.880044][ T6501] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 732.894835][T15010] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 732.903199][T15010] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 732.994755][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.002597][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.014629][T15010] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.022468][T15010] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 733.114548][T15010] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.122388][T15010] bond2: (slave ip6gretap1): failed to get link speed/duplex