last executing test programs: 4m1.204052792s ago: executing program 1 (id=506): mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, 0xffffffffffffffff, 0x0) 4m1.132735994s ago: executing program 1 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x8, 0xffff, 0x101, 0x6e0, 0xffffffffffffffff}) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_pidfd_open(r4, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f00000003c0)={0x1800100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, &(0x7f0000000340)=""/4, 0x0}, 0x58) 4m0.501040346s ago: executing program 1 (id=508): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup, 0x2, 0x1, 0x9, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$unix(r0, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = syz_open_dev$evdev(&(0x7f0000000540), 0x6, 0x1) ioctl$EVIOCSFF(r5, 0x40304580, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m57.614384828s ago: executing program 1 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x324}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000) 3m55.531398894s ago: executing program 1 (id=534): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3add, &(0x7f0000000340)={0x0, 0xf5a6, 0x11900, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3m51.735811812s ago: executing program 1 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 3m51.571908489s ago: executing program 32 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 2m15.235110672s ago: executing program 2 (id=1131): setuid(0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) 2m15.164173644s ago: executing program 2 (id=1132): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d2408b3ad5a479c1106bdfc4e35700200000000000000962c220a2e11", 0x2a}], 0x0) read(r0, &(0x7f0000000040)=""/46, 0x2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x54, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x200}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1ff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x2c02cfb1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 2m14.923682466s ago: executing program 2 (id=1134): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = gettid() r4 = open(0x0, 0x466040, 0x1a0) migrate_pages(r3, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x802, 0x0) socket$inet(0x2, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x500e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 2m14.830604672s ago: executing program 2 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) 2m14.710952571s ago: executing program 2 (id=1139): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 2m13.150605695s ago: executing program 2 (id=1144): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0x5) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m12.958660138s ago: executing program 33 (id=1144): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0x5) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m2.380004438s ago: executing program 4 (id=1186): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="47e75e65875d62a2897c41319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2dc593ed390d4e02ad0415ce6da347af8b12c7b7839029b7896502eceee28fdf", 0x48}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663b2b10a65079aa09519e65997ded71d2c3eaa", 0x70}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a2b6d43311a2fb8c56695d43d5f18c04514aabe53dd091efd0b577c455b636154b11a31ed54df51ca1e3a2e8b6941aeb19878fb1f7aeeb2cd2f15", 0x5e}], 0x4) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2m2.103244394s ago: executing program 4 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="76ea0900000000", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m1.945591322s ago: executing program 4 (id=1193): openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r0, 0x40047452, &(0x7f0000000100)) 2m1.881360728s ago: executing program 4 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) setuid(0xee00) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) 2m1.691911388s ago: executing program 4 (id=1201): timer_create(0x2, &(0x7f0000000000)={0x0, 0x32, 0x4}, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r2, 0x4, r2}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 2m1.251159113s ago: executing program 0 (id=1202): r0 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001440), 0x13f, 0x4}}, 0x20) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r5 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5, 0x4}) write$eventfd(r5, &(0x7f0000000080)=0x430f, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) 2m1.185329959s ago: executing program 0 (id=1203): syz_emit_vhci(0x0, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 2m0.966747455s ago: executing program 0 (id=1206): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001891}, 0x20000004) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4008844}, 0x8040) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020) 2m0.883753418s ago: executing program 4 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) 2m0.121747792s ago: executing program 34 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) 2m0.117840908s ago: executing program 0 (id=1211): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) setuid(0xee00) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) 1m59.89787649s ago: executing program 0 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000302000000fcffffff000000002abd700004350020020001fd20000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="0c31b0d3ddb0"}, 0x6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 'bridge0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_MODE={0xa, 0x2, {0x1784}}]}, 0x30}}, 0x884c) 1m58.877830487s ago: executing program 0 (id=1224): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x44000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$packet(0x11, 0x2, 0x300) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xfffffffffffffffe) 1m58.60693675s ago: executing program 35 (id=1224): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x44000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$packet(0x11, 0x2, 0x300) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xfffffffffffffffe) 11.625483977s ago: executing program 3 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c708000340000000810800"], 0x168}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = fsmount(r6, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x16, 0x0, @void}, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) 11.091323197s ago: executing program 3 (id=1700): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) 10.847346482s ago: executing program 3 (id=1702): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) inotify_init1(0x0) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r8}}) 6.471666166s ago: executing program 6 (id=1717): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e24, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="be177d", 0x3}], 0x1}}], 0x1, 0x40) r4 = getpid() sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100000fc00000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005520000001100010000000000000000000000000ab98b7290cceee835ab1f351d6ab0fb09435d180cea4a2be2b969b5fcf571963f392e4ecb6e779c649d83dd6be53a85c1a0db833f4b892595ebc7a9ce2f9b5d30e3ae4bb82b8a9fcc45e52656af4963a79924177eb8deddffd016cb3e8e8f98c119ce11f06166a9e2a504a00b7e56add6695ec73e9eca00535532d3f4689fe993db39"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6.144931237s ago: executing program 5 (id=1719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x97, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x0, 0x4, 0x9, 0x150}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES16], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403e1301eb1e2bc"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(r3, 0x80045b09, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 6.092459711s ago: executing program 8 (id=1720): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7, 0x4, 0x9, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.858645752s ago: executing program 6 (id=1721): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 4.631436673s ago: executing program 5 (id=1722): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 4.60756386s ago: executing program 6 (id=1723): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) 4.582014023s ago: executing program 8 (id=1724): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x8, 0x21, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x3, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a310000000014"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb0000004}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="001286dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 4.489858244s ago: executing program 3 (id=1726): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='\x00', 0x1) 4.291490413s ago: executing program 3 (id=1728): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = msgget$private(0x0, 0x1c0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$negate(0xd, r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x200, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0xe, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc044565d, &(0x7f0000000100)=@mmap={0x2008, 0x1, 0x4, 0x1000, 0x8d44, {}, {0x4, 0x2, 0x5, 0x48, 0x0, 0xe, "f0ffffff"}, 0x5, 0x1, {}, 0x3}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8000000, r2, 0x0) msgctl$IPC_SET(r1, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) 4.273808925s ago: executing program 5 (id=1729): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(r0, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = syz_open_dev$evdev(&(0x7f0000000540), 0x6, 0x1) ioctl$EVIOCSFF(r5, 0x40304580, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.24171429s ago: executing program 8 (id=1730): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) tkill(r2, 0xb) 3.06528137s ago: executing program 8 (id=1733): epoll_create1(0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) syz_open_procfs(0x0, 0x0) fchdir(r3) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) readlink(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)=""/104, 0x68) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0xfffffffc) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.931048844s ago: executing program 7 (id=1734): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 2.724487846s ago: executing program 6 (id=1735): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r10 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 2.631030629s ago: executing program 7 (id=1736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x4}, @void, @x25={0x2, 0x8, 0x12, "581a5e59657bd571a74eb5"}}, 0x12) 2.471688564s ago: executing program 7 (id=1737): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0xfffffffffffffcc1, &(0x7f0000000480)=0xb413) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,measure,permit_directio,f', @ANYRESDEC, @ANYBLOB]) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x2, 0x8, 0xf00, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xa40471498cad0c5d) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x401, 0x1c, 0x5c, &(0x7f0000000000)="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"}) 1.780909112s ago: executing program 5 (id=1738): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='\x00', 0x1) 1.547549349s ago: executing program 7 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 1.488658972s ago: executing program 5 (id=1740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1.487331284s ago: executing program 8 (id=1741): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x8, 0x21, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x3, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a310000000014"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb0000004}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="001286dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.345201365s ago: executing program 7 (id=1742): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, 0x0) setns(0xc9, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x2) tkill(r1, 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x381, 0x0) 463.38168ms ago: executing program 8 (id=1743): mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace/events/mac80211/enable\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x8000000a, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 419.643438ms ago: executing program 5 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8000000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x4, 0x0, 0xff, 0x0, 0x6, 0x800}, &(0x7f0000000240)=0x20) socket(0x1, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) r2 = socket$tipc(0x1e, 0x5, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x4b45, 0x3) r5 = socket$inet(0x2, 0xa, 0x4) fcntl$dupfd(r5, 0x406, r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x4080) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x1, 0x0) 410.065873ms ago: executing program 7 (id=1745): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) 234.940008ms ago: executing program 6 (id=1746): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 78.961059ms ago: executing program 6 (id=1747): mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0', 0xb) 0s ago: executing program 3 (id=1748): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup, 0x2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(r0, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = syz_open_dev$evdev(&(0x7f0000000540), 0x6, 0x1) ioctl$EVIOCSFF(r5, 0x40304580, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [ 198.252700][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.312238][ T7574] fuse: Bad value for 'fd' [ 198.553313][ T30] audit: type=1400 audit(1785808436.743:436): avc: denied { write } for pid=7585 comm="syz.3.553" name="functions" dev="configfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.672316][ T30] audit: type=1800 audit(1785808436.763:437): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.553" name="id" dev="configfs" ino=14974 res=0 errno=0 [ 198.792557][ T30] audit: type=1400 audit(1785808436.983:438): avc: denied { write } for pid=7594 comm="syz.0.557" name="configs" dev="configfs" ino=13423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.834933][ T30] audit: type=1400 audit(1785808437.013:439): avc: denied { write } for pid=7594 comm="syz.0.557" name="functions" dev="configfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.938881][ T7597] net_ratelimit: 502 callbacks suppressed [ 198.938895][ T7597] socket: no more sockets [ 198.973374][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 198.991487][ T30] audit: type=1400 audit(1785808437.013:440): avc: denied { write } for pid=7594 comm="syz.0.557" name="c.1" dev="configfs" ino=14107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.095987][ T7602] udc dummy_udc.0: failed to start g1: -4 [ 199.112603][ T30] audit: type=1400 audit(1785808437.033:441): avc: denied { create } for pid=7594 comm="syz.0.557" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 199.134181][ T7602] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 199.168143][ T30] audit: type=1400 audit(1785808437.033:442): avc: denied { write } for pid=7594 comm="syz.0.557" name="c.1" dev="configfs" ino=14107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.191187][ T7602] UDC core: g1: couldn't find an available UDC or it's busy [ 199.335204][ T7609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7609 comm=syz.3.560 [ 199.391122][ T7616] fuse: Unknown parameter 'user_i00000000000000000000' [ 199.465732][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.511940][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.539194][ T7570] bridge_slave_0: entered allmulticast mode [ 199.561104][ T7570] bridge_slave_0: entered promiscuous mode [ 199.580153][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.593167][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.611785][ T7570] bridge_slave_1: entered allmulticast mode [ 199.625787][ T7570] bridge_slave_1: entered promiscuous mode [ 199.676966][ T7570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.697442][ T7570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.743357][ T7570] team0: Port device team_slave_0 added [ 199.755847][ T7570] team0: Port device team_slave_1 added [ 199.793192][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.807862][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.857900][ T7570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.876107][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.888645][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.928838][ T7570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.997619][ T7570] hsr_slave_0: entered promiscuous mode [ 200.007449][ T7570] hsr_slave_1: entered promiscuous mode [ 200.018962][ T7570] debugfs: 'hsr0' already exists in 'hsr' [ 200.030192][ T7570] Cannot create hsr debugfs directory [ 200.291520][ T5624] Bluetooth: hci0: command tx timeout [ 200.420776][ T7631] /dev/nbd4: Can't lookup blockdev [ 201.433452][ T7570] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.444919][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.453139][ T7570] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.463535][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.475834][ T7570] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.487563][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.502632][ T7570] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.513893][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.525456][ T7639] netlink: 'syz.3.570': attribute type 12 has an invalid length. [ 201.640143][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.668407][ T30] audit: type=1400 audit(1785808439.853:443): avc: denied { mount } for pid=7646 comm="syz.3.571" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 201.669183][ T7570] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.725971][ T30] audit: type=1400 audit(1785808439.913:444): avc: denied { read } for pid=7646 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.746270][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.753390][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.776391][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.783525][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.964954][ T7650] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 201.975617][ T7650] : entered promiscuous mode [ 202.084601][ T7659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.896238][ T5624] Bluetooth: hci0: command tx timeout [ 202.914970][ T7679] /dev/nbd3: Can't lookup blockdev [ 203.862414][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.405965][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 204.405980][ T30] audit: type=1400 audit(1785808442.593:447): avc: denied { write } for pid=7710 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.445151][ T7570] veth0_vlan: entered promiscuous mode [ 204.451603][ T7713] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 204.458163][ T7713] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.474438][ T7713] vhci_hcd vhci_hcd.0: Device attached [ 204.492151][ T7570] veth1_vlan: entered promiscuous mode [ 204.537314][ T7570] veth0_macvtap: entered promiscuous mode [ 204.557188][ T7570] veth1_macvtap: entered promiscuous mode [ 204.577656][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.626020][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.742430][ T1051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.751331][ T29] usb 34-1: SetAddress Request (2) to port 0 [ 205.314096][ T30] audit: type=1326 audit(1785808443.503:448): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.579" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe05499e019 code=0x0 [ 205.341533][ T5624] Bluetooth: hci0: command tx timeout [ 205.349281][ T29] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 205.357850][ T1051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.404737][ T5823] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.449179][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.479374][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.539674][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.548917][ T5823] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.569549][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.639030][ T30] audit: type=1400 audit(1785808443.823:449): avc: denied { mounton } for pid=7570 comm="syz-executor" path="/root/syzkaller.qQ790j/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 205.670109][ T7715] vhci_hcd: connection reset by peer [ 205.690275][ T30] audit: type=1400 audit(1785808443.863:450): avc: denied { mounton } for pid=7570 comm="syz-executor" path="/root/syzkaller.qQ790j/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 205.717619][ T48] vhci_hcd vhci_hcd.0: stop threads [ 205.723558][ T48] vhci_hcd vhci_hcd.0: release socket [ 205.734784][ T48] vhci_hcd vhci_hcd.0: disconnect device [ 205.742294][ T30] audit: type=1400 audit(1785808443.863:451): avc: denied { mounton } for pid=7570 comm="syz-executor" path="/root/syzkaller.qQ790j/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 205.808237][ T30] audit: type=1400 audit(1785808443.873:452): avc: denied { mounton } for pid=7570 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 206.702297][ T5718] hid_parser_main: 91 callbacks suppressed [ 206.702322][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.742275][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.763258][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.786109][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.808659][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.834732][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.868049][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.893091][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.918074][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.937171][ T5718] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 206.990100][ T5718] hid-generic 0000:0000:0004.0005: hidraw0: HID v0.03 Device [syz1] on syz0 [ 207.167011][ T7749] fido_id[7749]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 207.371948][ T30] audit: type=1400 audit(1785808445.553:453): avc: denied { setopt } for pid=7756 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.511385][ T5624] Bluetooth: hci0: command tx timeout [ 207.889410][ T30] audit: type=1400 audit(1785808446.063:454): avc: denied { bind } for pid=7756 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.930708][ T7757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.598'. [ 207.979882][ T7757] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 207.995910][ T7768] fuse: Unknown parameter 'user_id00000000000000000000' [ 208.018787][ T7757] bond2 (unregistering): Released all slaves [ 208.154724][ T30] audit: type=1400 audit(1785808446.343:455): avc: denied { kexec_image_load } for pid=7771 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 208.289566][ T7776] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.636770][ T7785] fuse: Bad value for 'fd' [ 208.663299][ T7785] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.553698][ T7804] netlink: 'syz.5.612': attribute type 1 has an invalid length. [ 209.576157][ T30] audit: type=1400 audit(1785808447.733:456): avc: denied { getopt } for pid=7800 comm="syz.5.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.355296][ T30] audit: type=1800 audit(1785808448.533:457): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.613" name="id" dev="configfs" ino=15716 res=0 errno=0 [ 210.441555][ T29] usb 34-1: device descriptor read/8, error -110 [ 210.492790][ T7816] Bluetooth: MGMT ver 1.23 [ 210.525127][ T30] audit: type=1400 audit(1785808448.713:458): avc: denied { create } for pid=7817 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.550533][ T5624] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 210.596375][ T30] audit: type=1800 audit(1785808448.783:459): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.621" name="file0" dev="overlay" ino=758 res=0 errno=0 [ 210.669509][ T7819] can: request_module (can-proto-3) failed. [ 210.832183][ T29] usb usb34-port1: attempt power cycle [ 211.630895][ T7840] tipc: Started in network mode [ 211.671084][ T7846] fuse: Bad value for 'fd' [ 211.680694][ T7836] could not allocate digest TFM handle hmac(sha3-224) [ 211.689201][ T7840] tipc: Node identity 76ab023f2bba, cluster identity 4711 [ 211.724279][ T7840] tipc: Enabled bearer , priority 0 [ 211.765631][ T7849] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.952660][ T29] usb usb34-port1: unable to enumerate USB device [ 211.969812][ T7826] tipc: Disabling bearer [ 212.528101][ T30] audit: type=1400 audit(1785808450.703:460): avc: denied { read } for pid=7859 comm="syz.5.629" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 212.571030][ T30] audit: type=1400 audit(1785808450.703:461): avc: denied { open } for pid=7859 comm="syz.5.629" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 212.598318][ T30] audit: type=1400 audit(1785808450.753:462): avc: denied { ioctl } for pid=7859 comm="syz.5.629" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 212.630801][ T30] audit: type=1800 audit(1785808450.753:463): pid=7861 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.630" name="id" dev="configfs" ino=15857 res=0 errno=0 [ 212.712727][ T7866] Invalid source name [ 212.823832][ T30] audit: type=1400 audit(1785808451.013:464): avc: denied { bind } for pid=7873 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.248393][ T30] audit: type=1400 audit(1785808451.433:465): avc: denied { remount } for pid=7886 comm="syz.5.641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 214.488090][ T7907] Mass Storage Function, version: 2009/09/11 [ 214.533277][ T7907] LUN: removable file: (no medium) [ 214.694019][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 214.694034][ T30] audit: type=1400 audit(1785808452.883:469): avc: denied { create } for pid=7910 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.765105][ T30] audit: type=1400 audit(1785808452.943:470): avc: denied { connect } for pid=7910 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.825374][ T7912] syz.2.647 uses obsolete (PF_INET,SOCK_PACKET) [ 214.980537][ T7917] overlay: Unknown parameter '/' [ 215.053290][ T30] audit: type=1400 audit(1785808453.233:471): avc: denied { ioctl } for pid=7915 comm="syz.5.648" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.846488][ T30] audit: type=1326 audit(1785808455.673:472): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f474b99e019 code=0x0 [ 218.428204][ T30] audit: type=1400 audit(1785808456.613:473): avc: denied { write } for pid=7930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.473792][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 218.519150][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 218.688525][ T30] audit: type=1400 audit(1785808456.873:474): avc: denied { write } for pid=7971 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.258989][ T5270] veth0_vlan: left promiscuous mode [ 219.270486][ T5799] veth0_vlan: entered promiscuous mode [ 220.175966][ T30] audit: type=1326 audit(1785808458.363:475): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.3.667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49fff9e019 code=0x0 [ 220.341594][ T30] audit: type=1400 audit(1785808458.523:476): avc: denied { write } for pid=7996 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 220.482986][ T8000] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 220.636415][ T30] audit: type=1400 audit(1785808458.823:477): avc: denied { write } for pid=7979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.715501][ T30] audit: type=1400 audit(1785808458.883:478): avc: denied { read } for pid=8013 comm="syz.0.676" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.779330][ T30] audit: type=1400 audit(1785808458.963:479): avc: denied { write } for pid=8015 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.882520][ T30] audit: type=1400 audit(1785808459.073:480): avc: denied { watch } for pid=7996 comm="syz.4.671" path="/138/control" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 221.742095][ T8042] fuse: Bad value for 'fd' [ 221.885902][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 222.008635][ T30] audit: type=1400 audit(1785808460.193:481): avc: denied { setopt } for pid=8051 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.195215][ T8057] gretap1: entered promiscuous mode [ 222.220111][ T8057] batman_adv: batadv0: Adding interface: gretap1 [ 222.234427][ T8057] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.267540][ T8057] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 222.414902][ T8060] Device name cannot be null; rc = [-22] [ 223.269890][ T8073] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 223.276422][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.289056][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.696'. [ 223.485250][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 223.847827][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 223.910653][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 224.762839][ T8077] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.811107][ T8091] fuse: Bad value for 'fd' [ 224.839435][ T8093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.910241][ T8077] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.028686][ T8077] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.137577][ T8077] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.169285][ T8074] vhci_hcd: connection reset by peer [ 225.176184][ T5823] vhci_hcd vhci_hcd.3: stop threads [ 225.189122][ T5823] vhci_hcd vhci_hcd.3: release socket [ 225.207225][ T5823] vhci_hcd vhci_hcd.3: disconnect device [ 225.341513][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.351998][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.374861][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.401187][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.877525][ T30] audit: type=1400 audit(1785808464.063:482): avc: denied { create } for pid=8114 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 225.900074][ T30] audit: type=1400 audit(1785808464.093:483): avc: denied { read } for pid=8114 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 225.979039][ T8119] fuse: Bad value for 'fd' [ 225.986200][ T8119] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.112204][ T30] audit: type=1400 audit(1785808465.283:484): avc: denied { ioctl } for pid=8133 comm="syz.5.713" path="socket:[17245]" dev="sockfs" ino=17245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 229.776643][ T29] usb 40-1: device descriptor read/8, error -110 [ 229.986160][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 230.754743][ T29] usb usb40-port1: attempt power cycle [ 231.187245][ T30] audit: type=1400 audit(1785808469.373:485): avc: denied { write } for pid=8191 comm="syz.4.735" name="functions" dev="configfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.241339][ T30] audit: type=1400 audit(1785808469.413:486): avc: denied { write } for pid=8191 comm="syz.4.735" name="c.1" dev="configfs" ino=14107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.283141][ T30] audit: type=1400 audit(1785808469.413:487): avc: denied { write } for pid=8191 comm="syz.4.735" name="c.1" dev="configfs" ino=14107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.342505][ T29] usb usb40-port1: unable to enumerate USB device [ 231.936579][ T30] audit: type=1326 audit(1785808470.123:488): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.5.738" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5cdf9e019 code=0x0 [ 232.008526][ T8205] fuse: Bad value for 'fd' [ 232.080698][ T8216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.797819][ T30] audit: type=1400 audit(1785808470.983:489): avc: denied { mount } for pid=8222 comm="syz.4.743" name="/" dev="autofs" ino=18437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 232.854659][ T8168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.054198][ T30] audit: type=1400 audit(1785808471.233:490): avc: denied { write } for pid=8208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.118056][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 233.138841][ T5624] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 233.183813][ T30] audit: type=1400 audit(1785808471.373:491): avc: denied { read write } for pid=8233 comm="syz.0.746" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 233.243030][ T30] audit: type=1400 audit(1785808471.373:492): avc: denied { open } for pid=8233 comm="syz.0.746" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 233.340582][ T30] audit: type=1400 audit(1785808471.523:493): avc: denied { write } for pid=8239 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.892304][ T8261] program syz.5.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.981791][ T8260] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 234.079533][ T30] audit: type=1400 audit(1785808472.073:494): avc: denied { append } for pid=8258 comm="syz.5.744" name="sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 235.268451][ T5823] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 236.296179][ T8311] overlay: Unknown parameter '/' [ 236.401324][ T5737] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 236.564441][ T5737] usb 6-1: Using ep0 maxpacket: 8 [ 236.574512][ T5737] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 236.594434][ T5737] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 236.624152][ T5737] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.654396][ T5737] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 236.684887][ T5737] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 236.711095][ T5737] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.724234][ T5737] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.734713][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.946475][ T5737] usb 6-1: GET_CAPABILITIES returned 0 [ 236.965748][ T5737] usbtmc 6-1:16.0: can't read capabilities [ 237.175674][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.188044][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.220448][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 237.230605][ T8307] usbtmc 6-1:16.0: Unable to send data, error -71 [ 237.259204][ T5728] usb 6-1: USB disconnect, device number 2 [ 238.173615][ T8269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.194676][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 240.002595][ T8360] 9p: Bad value for 'rfdno' [ 242.209604][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 242.209619][ T30] audit: type=1326 audit(1785808480.393:500): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.791" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49fff9e019 code=0x0 [ 242.472804][ T8384] tmpfs: Unknown parameter 'nr_blhcks' [ 242.503768][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 242.513470][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 242.768088][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 242.777004][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 242.975276][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 242.984199][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 244.288517][ T8416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.387926][ T30] audit: type=1400 audit(1785808483.573:501): avc: denied { node_bind } for pid=8437 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 249.550209][ T8456] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 249.556754][ T8456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.759130][ T8456] vhci_hcd vhci_hcd.0: Device attached [ 249.995430][ T8493] trusted_key: encrypted_key: insufficient parameters specified [ 250.032083][ T5728] usb 38-1: SetAddress Request (2) to port 0 [ 250.042344][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.048635][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.058460][ T5728] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 250.691626][ T5624] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 250.803181][ T30] audit: type=1400 audit(1785808488.993:502): avc: denied { setopt } for pid=8506 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.855331][ T30] audit: type=1400 audit(1785808489.023:503): avc: denied { write } for pid=8506 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.954809][ T8507] gadgetfs: bound to dummy_udc driver [ 251.067522][ T8482] vhci_hcd: connection reset by peer [ 251.091281][ T1051] vhci_hcd vhci_hcd.2: stop threads [ 251.121365][ T1051] vhci_hcd vhci_hcd.2: release socket [ 251.139621][ T1051] vhci_hcd vhci_hcd.2: disconnect device [ 251.175110][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.203349][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.240589][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.415117][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.443543][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.497462][ T8511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.524370][ T8511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.563829][ T8511] veth1_vlan: left promiscuous mode [ 251.581599][ T8511] veth0_vlan: left promiscuous mode [ 251.646144][ T8511] veth0_vlan: entered promiscuous mode [ 251.669513][ T30] audit: type=1400 audit(1785808489.853:504): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 251.707803][ T8511] veth1_vlan: entered promiscuous mode [ 252.342272][ T8511] veth1_macvtap: left promiscuous mode [ 252.403600][ T8511] veth0_macvtap: left promiscuous mode [ 252.411871][ T8511] veth0_macvtap: entered promiscuous mode [ 252.452363][ T8511] veth1_macvtap: entered promiscuous mode [ 252.472253][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.497031][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.515597][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.532154][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.584682][ T8511] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 252.610965][ T5624] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 252.650489][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.657558][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.719160][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.726281][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.898359][ T197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.928548][ T197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.012044][ T197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.097469][ T197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.279626][ T197] rpcbind: server 127.0.0.1 not responding, timed out [ 254.281122][ T8553] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 254.287651][ T8553] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 254.459403][ T30] audit: type=1326 audit(1785808492.643:505): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8563 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd83c39e019 code=0x0 [ 254.586443][ T8553] vhci_hcd vhci_hcd.0: Device attached [ 254.851503][ T5737] usb 34-1: SetAddress Request (6) to port 0 [ 254.857689][ T5737] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 255.255081][ T5728] usb 38-1: device descriptor read/8, error -110 [ 255.943051][ T5728] usb usb38-port1: attempt power cycle [ 256.048827][ T8560] vhci_hcd: connection reset by peer [ 256.080917][ T30] audit: type=1400 audit(1785808494.263:506): avc: denied { write } for pid=8599 comm="syz.4.871" name="functions" dev="configfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.084896][ T2226] vhci_hcd vhci_hcd.0: stop threads [ 256.120186][ T8602] file system registered [ 256.169606][ T30] audit: type=1400 audit(1785808494.353:507): avc: denied { ioctl } for pid=8603 comm="syz.3.872" path="socket:[18213]" dev="sockfs" ino=18213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.195247][ T8604] ffs_data_put(): freeing [ 256.231537][ T2226] vhci_hcd vhci_hcd.0: release socket [ 256.263526][ T2226] vhci_hcd vhci_hcd.0: disconnect device [ 256.390956][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.398195][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.543487][ T5728] usb usb38-port1: unable to enumerate USB device [ 256.559470][ T8605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.604261][ T8605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.753758][ T197] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.790192][ T197] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.822265][ T197] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.851490][ T197] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.987592][ T30] audit: type=1400 audit(1785808495.173:508): avc: denied { accept } for pid=8611 comm="syz.0.875" laddr=127.0.0.1 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 257.250280][ T30] audit: type=1400 audit(1785808495.433:509): avc: denied { ioctl } for pid=8624 comm="syz.0.881" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 257.382287][ T8629] fuse: Bad value for 'fd' [ 257.518062][ T30] audit: type=1400 audit(1785808495.703:510): avc: denied { mount } for pid=8631 comm="syz.0.884" name="/" dev="functionfs" ino=19053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 259.064775][ T5624] Bluetooth: hci4: Malformed LE Event: 0x02 [ 260.389077][ T5737] usb 34-1: device descriptor read/8, error -110 [ 260.539614][ T30] audit: type=1400 audit(1785808498.723:511): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 260.585053][ T5613] ffs_data_put(): freeing [ 260.592090][ T8663] fuse: Bad value for 'fd' [ 260.822036][ T5737] usb usb34-port1: attempt power cycle [ 261.767432][ T5737] usb usb34-port1: unable to enumerate USB device [ 265.476698][ T8720] syz_tun: entered allmulticast mode [ 265.547931][ T30] audit: type=1400 audit(1785808503.733:512): avc: denied { create } for pid=8716 comm="syz.4.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 266.111148][ T8718] syz_tun: left allmulticast mode [ 267.568494][ T30] audit: type=1800 audit(1785808505.753:513): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.925" name="id" dev="configfs" ino=19224 res=0 errno=0 [ 267.695508][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'. [ 268.484814][ T8763] fuse: Bad value for 'fd' [ 268.635609][ T8765] fuse: Bad value for 'fd' [ 269.676160][ T8777] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 269.682683][ T8777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 269.719295][ T8777] vhci_hcd vhci_hcd.0: Device attached [ 269.981464][ T24] usb 34-1: SetAddress Request (10) to port 0 [ 270.011605][ T24] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 270.337410][ T8785] fuse: Bad value for 'fd' [ 271.152974][ T30] audit: type=1400 audit(1785808509.333:514): avc: denied { write } for pid=8800 comm="syz.2.942" name="functions" dev="configfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.544057][ T8813] fuse: Bad value for 'fd' [ 271.593037][ T8778] vhci_hcd: connection reset by peer [ 271.617999][ T2226] vhci_hcd vhci_hcd.0: stop threads [ 271.630114][ T2226] vhci_hcd vhci_hcd.0: release socket [ 271.653778][ T2226] vhci_hcd vhci_hcd.0: disconnect device [ 272.419859][ T8837] fuse: Bad value for 'fd' [ 272.744810][ T30] audit: type=1400 audit(1785808510.933:515): avc: denied { read } for pid=8848 comm="syz.5.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.825705][ T8853] syz_tun: entered allmulticast mode [ 272.847938][ T8852] syz_tun: left allmulticast mode [ 274.083336][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 274.266475][ T8883] syz_tun: entered allmulticast mode [ 274.280124][ T8882] syz_tun: left allmulticast mode [ 274.300179][ T8885] fuse: Bad value for 'fd' [ 274.406635][ T8887] netlink: 64 bytes leftover after parsing attributes in process `syz.4.977'. [ 274.683896][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 274.930180][ T8903] overlay: Unknown parameter '/' [ 275.619600][ T24] usb 34-1: device descriptor read/8, error -110 [ 275.730764][ T8915] fuse: Bad value for 'fd' [ 275.800226][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.807761][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.940080][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.956839][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.061728][ T1051] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.072957][ T24] usb usb34-port1: attempt power cycle [ 276.101519][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.213209][ T30] audit: type=1800 audit(1785808514.403:516): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.991" name="id" dev="configfs" ino=19725 res=0 errno=0 [ 276.291394][ T2226] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.307668][ T2226] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.443750][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 276.640307][ T8947] fuse: Bad value for 'fd' [ 276.707403][ T24] usb usb34-port1: unable to enumerate USB device [ 277.314835][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.322288][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.600820][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.622900][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.699547][ T30] audit: type=1400 audit(1785808515.853:517): avc: denied { write } for pid=8967 comm="syz.3.1005" name="functions" dev="configfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.834617][ T8973] fuse: Bad value for 'fd' [ 277.940947][ T30] audit: type=1400 audit(1785808515.863:518): avc: denied { write } for pid=8967 comm="syz.3.1005" name="c.1" dev="configfs" ino=14107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.034665][ T30] audit: type=1400 audit(1785808515.873:519): avc: denied { write } for pid=8967 comm="syz.3.1005" name="c.1" dev="configfs" ino=14107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.122883][ T48] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.131777][ T48] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.145410][ T48] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.154056][ T48] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.214399][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 278.656062][ T9000] fuse: Bad value for 'fd' [ 278.866413][ T8994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 278.872936][ T8994] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 279.465200][ T8994] vhci_hcd vhci_hcd.0: Device attached [ 279.501325][ T5740] usb 34-1: SetAddress Request (14) to port 0 [ 279.578202][ T5740] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 279.805481][ T9010] vhci_hcd: connection reset by peer [ 279.812476][ T5823] vhci_hcd vhci_hcd.0: stop threads [ 279.819190][ T5823] vhci_hcd vhci_hcd.0: release socket [ 279.845414][ T5823] vhci_hcd vhci_hcd.0: disconnect device [ 280.022512][ T30] audit: type=1800 audit(1785808518.213:520): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1029" name="id" dev="configfs" ino=20917 res=0 errno=0 [ 280.777013][ T5823] rpcbind: server 127.0.0.1 not responding, timed out [ 280.963588][ T30] audit: type=1400 audit(1785808519.153:521): avc: denied { ioctl } for pid=9056 comm="syz.2.1039" path="socket:[19900]" dev="sockfs" ino=19900 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.089481][ T9061] overlay: Unknown parameter '/' [ 281.647381][ T9085] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 281.653906][ T9085] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.490232][ T5737] usb 42-1: SetAddress Request (2) to port 0 [ 282.514276][ T5737] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 282.542284][ T9085] vhci_hcd vhci_hcd.0: Device attached [ 282.976608][ T9103] tipc: Started in network mode [ 283.192617][ T9103] tipc: Node identity 080211000001, cluster identity 4711 [ 283.527503][ T9103] tipc: Enabled bearer , priority 0 [ 283.988148][ T9116] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 283.994675][ T9116] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.055806][ T9116] vhci_hcd vhci_hcd.0: Device attached [ 284.139200][ T30] audit: type=1400 audit(1785808522.323:522): avc: denied { write } for pid=9126 comm="syz.5.1062" name="functions" dev="configfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.185727][ T9127] openvswitch: netlink: IP tunnel dst address not specified [ 284.195848][ T30] audit: type=1400 audit(1785808522.363:523): avc: denied { write } for pid=9126 comm="syz.5.1062" name="extensions" dev="configfs" ino=20019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.220190][ T9127] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1062'. [ 284.266578][ T30] audit: type=1800 audit(1785808522.363:524): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1062" name="bmControls" dev="configfs" ino=20032 res=0 errno=0 [ 284.290440][ T9086] vhci_hcd: connection reset by peer [ 284.303005][ T48] vhci_hcd vhci_hcd.4: stop threads [ 284.309405][ T48] vhci_hcd vhci_hcd.4: release socket [ 284.317176][ T48] vhci_hcd vhci_hcd.4: disconnect device [ 284.476510][ T9133] fuse: Bad value for 'fd' [ 284.538463][ T29] tipc: Node number set to 134418688 [ 284.679023][ T9117] vhci_hcd: connection closed [ 284.679714][ T13] vhci_hcd vhci_hcd.0: stop threads [ 284.734951][ T13] vhci_hcd vhci_hcd.0: release socket [ 284.774243][ T5740] usb 34-1: device descriptor read/8, error -110 [ 284.783242][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 285.202115][ T5740] usb usb34-port1: attempt power cycle [ 285.791873][ T5740] usb usb34-port1: unable to enumerate USB device [ 286.429050][ T9158] fuse: Bad value for 'fd' [ 287.130048][ T9169] fuse: Bad value for 'fd' [ 287.137939][ T9171] 9p: Bad value for 'rfdno' [ 287.182932][ T9171] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 287.337180][ T9176] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1077'. [ 287.654657][ T5737] usb 42-1: device descriptor read/8, error -110 [ 288.085403][ T5737] usb usb42-port1: attempt power cycle [ 289.104924][ T5737] usb usb42-port1: unable to enumerate USB device [ 289.158077][ T30] audit: type=1800 audit(1785808527.343:525): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1089" name="host_addr" dev="configfs" ino=21221 res=0 errno=0 [ 289.304888][ T30] audit: type=1800 audit(1785808527.493:526): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1091" name="file" dev="configfs" ino=20204 res=0 errno=0 [ 289.370938][ T30] audit: type=1400 audit(1785808527.553:527): avc: denied { create } for pid=9212 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 289.439750][ T9215] 9pnet_virtio: no channels available for device syz [ 289.663668][ T9226] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 289.749466][ T30] audit: type=1400 audit(1785808527.843:528): avc: denied { mount } for pid=9219 comm="syz.3.1094" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 290.117081][ T30] audit: type=1326 audit(1785808527.843:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 290.162266][ T30] audit: type=1326 audit(1785808527.843:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 290.206211][ T30] audit: type=1326 audit(1785808527.843:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 290.247114][ T30] audit: type=1400 audit(1785808527.853:532): avc: denied { mounton } for pid=9219 comm="syz.3.1094" path="/225/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 290.331355][ T30] audit: type=1326 audit(1785808527.863:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 290.382693][ T30] audit: type=1326 audit(1785808527.863:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.3.1094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 291.799486][ T9251] fuse: Bad value for 'fd' [ 291.923874][ T9256] overlay: Unknown parameter '/' [ 292.210917][ T5622] Bluetooth: hci4: Dropping invalid advertising data [ 292.217913][ T5622] Bluetooth: hci4: Malformed LE Event: 0x02 [ 292.322293][ T9277] tipc: Enabling of bearer rejected, failed to enable media [ 293.484143][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1125'. [ 294.964803][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 294.964859][ T30] audit: type=1400 audit(1785808533.153:549): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 296.069482][ T9347] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1141'. [ 296.079077][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 296.364863][ T5740] syz1: Port: 1 Link DOWN [ 296.391014][ T2226] smbdirect: ib_dev[syz1] removed [ 296.884724][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.895557][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.903682][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.913681][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.921860][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.544169][ T9387] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1154'. [ 298.553241][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 299.269952][ T5624] Bluetooth: hci4: command tx timeout [ 299.716432][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.725835][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.735537][ T9361] bridge_slave_0: entered allmulticast mode [ 299.742984][ T9361] bridge_slave_0: entered promiscuous mode [ 299.752632][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.759893][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.767354][ T9361] bridge_slave_1: entered allmulticast mode [ 299.774716][ T9361] bridge_slave_1: entered promiscuous mode [ 299.810874][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.822923][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.860484][ T9361] team0: Port device team_slave_0 added [ 299.868478][ T9361] team0: Port device team_slave_1 added [ 299.921411][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.931374][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.984932][ T9361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.011433][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.028493][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.084917][ T9361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.231017][ T9361] hsr_slave_0: entered promiscuous mode [ 300.256734][ T9361] hsr_slave_1: entered promiscuous mode [ 300.269522][ T9361] debugfs: 'hsr0' already exists in 'hsr' [ 300.297026][ T9361] Cannot create hsr debugfs directory [ 301.816046][ T9430] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1165'. [ 301.825125][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 301.835238][ T5624] Bluetooth: hci4: command tx timeout [ 302.066742][ T9361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.108453][ T9361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.137208][ T9361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.165578][ T9361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.187239][ T9361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.247880][ T9361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.734258][ T9361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.746912][ T9361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.004807][ T9361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.058109][ T9361] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.098528][ T2226] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.105694][ T2226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.160845][ T2226] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.167932][ T2226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.102618][ T5624] Bluetooth: hci4: command tx timeout [ 304.466770][ T9479] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 304.473306][ T9479] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 304.495854][ T9479] vhci_hcd vhci_hcd.0: Device attached [ 304.595336][ T30] audit: type=1400 audit(1785808542.783:550): avc: denied { write } for pid=9459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.742437][ T30] audit: type=1400 audit(1785808542.923:551): avc: denied { write } for pid=9490 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.771456][ T5737] usb 42-1: SetAddress Request (6) to port 0 [ 304.791362][ T5737] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 304.930200][ T9361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.506639][ T9496] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1176'. [ 305.515717][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1176'. [ 305.991854][ T30] audit: type=1400 audit(1785808544.173:552): avc: denied { write } for pid=9502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.110201][ T9361] veth0_vlan: entered promiscuous mode [ 306.122507][ T5622] Bluetooth: hci4: command tx timeout [ 306.146699][ T9361] veth1_vlan: entered promiscuous mode [ 306.173556][ T30] audit: type=1400 audit(1785808544.353:553): avc: denied { write } for pid=9524 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.248357][ T9361] veth0_macvtap: entered promiscuous mode [ 306.265606][ T9361] veth1_macvtap: entered promiscuous mode [ 306.305538][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.335823][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.392905][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.413192][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.491649][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.534210][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.609468][ T9481] vhci_hcd: connection reset by peer [ 306.627412][ T36] vhci_hcd vhci_hcd.4: stop threads [ 306.641133][ T36] vhci_hcd vhci_hcd.4: release socket [ 306.654324][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 306.705565][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.723219][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.789404][ T30] audit: type=1400 audit(1785808544.973:554): avc: denied { write } for pid=9528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.859476][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.874023][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.888383][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 306.959809][ T30] audit: type=1400 audit(1785808545.143:555): avc: denied { write } for pid=9548 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.720167][ T9585] tipc: Enabling of bearer rejected, failed to enable media [ 308.433222][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 308.607495][ T30] audit: type=1800 audit(1785808546.793:556): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1203" name="id" dev="configfs" ino=22828 res=0 errno=0 [ 308.787715][ T30] audit: type=1400 audit(1785808546.973:557): avc: denied { read } for pid=9619 comm="syz.6.1205" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 308.867463][ T30] audit: type=1400 audit(1785808546.973:558): avc: denied { open } for pid=9619 comm="syz.6.1205" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 308.935402][ T30] audit: type=1400 audit(1785808546.973:559): avc: denied { ioctl } for pid=9619 comm="syz.6.1205" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 309.705168][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.714177][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.723300][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.730967][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.739797][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.881847][ T5737] usb 42-1: device descriptor read/8, error -110 [ 309.937377][ T30] audit: type=1800 audit(1785808548.123:560): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1217" name="id" dev="configfs" ino=22879 res=0 errno=0 [ 310.170095][ T24] hid_parser_main: 91 callbacks suppressed [ 310.170112][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.204169][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.220634][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.236559][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.256788][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.269445][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.291112][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.313078][ T5737] usb usb42-port1: attempt power cycle [ 310.323483][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.343328][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.365655][ T24] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 310.388536][ T24] hid-generic 0000:0000:0004.0006: hidraw0: HID v0.03 Device [syz1] on syz0 [ 310.506809][ T9654] fido_id[9654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 310.639277][ T9660] tipc: Started in network mode [ 310.662267][ T9660] tipc: Node identity a6b57bcc8196, cluster identity 4711 [ 310.670638][ T9663] 9p: Bad value for 'wfdno' [ 310.697068][ T9660] tipc: Enabled bearer , priority 0 [ 310.729644][ T9664] syzkaller0: entered promiscuous mode [ 310.761036][ T9664] syzkaller0: entered allmulticast mode [ 310.826033][ T9660] tipc: Resetting bearer [ 310.868323][ T9659] tipc: Resetting bearer [ 310.891616][ T9659] tipc: Disabling bearer [ 310.923660][ T5737] usb usb42-port1: unable to enumerate USB device [ 311.039414][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.057457][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.068945][ T9634] bridge_slave_0: entered allmulticast mode [ 311.088217][ T9634] bridge_slave_0: entered promiscuous mode [ 311.108366][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.116560][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.125408][ T9634] bridge_slave_1: entered allmulticast mode [ 311.136759][ T9634] bridge_slave_1: entered promiscuous mode [ 311.258512][ T9634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.284231][ T9634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.324168][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.338426][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.351618][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.360136][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.368747][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.425676][ T9634] team0: Port device team_slave_0 added [ 311.450258][ T9634] team0: Port device team_slave_1 added [ 311.483300][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.489623][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.550094][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.567363][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.623659][ T9634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.654225][ T5737] hid-generic 0000:0000:0004.0007: hidraw0: HID v0.03 Device [syz1] on syz0 [ 311.695431][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.719949][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.790605][ T9695] fido_id[9695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 311.813235][ T9634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.819943][ T5624] Bluetooth: hci1: command tx timeout [ 311.965007][ T9634] hsr_slave_0: entered promiscuous mode [ 311.992209][ T9634] hsr_slave_1: entered promiscuous mode [ 312.001694][ T9634] debugfs: 'hsr0' already exists in 'hsr' [ 312.014844][ T9634] Cannot create hsr debugfs directory [ 312.846009][ T9634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 312.889061][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.920390][ T9634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 312.972603][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.063486][ T9634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 313.088240][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.108127][ T9634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 313.139890][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.312060][ T9681] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.332143][ T9681] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.350591][ T9681] bridge_slave_0: entered allmulticast mode [ 313.371604][ T9681] bridge_slave_0: entered promiscuous mode [ 313.385111][ T9681] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.401669][ T5624] Bluetooth: hci3: command tx timeout [ 313.411663][ T9681] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.439526][ T9681] bridge_slave_1: entered allmulticast mode [ 313.457115][ T9681] bridge_slave_1: entered promiscuous mode [ 313.512614][ T5609] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 313.533107][ T9681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.575671][ T9681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.644122][ T9681] team0: Port device team_slave_0 added [ 313.660716][ T9681] team0: Port device team_slave_1 added [ 313.693885][ T9681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.701959][ T5609] usb 7-1: Using ep0 maxpacket: 32 [ 313.701963][ T9681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.742788][ T5609] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.754736][ T5609] usb 7-1: config 0 has no interface number 0 [ 313.754769][ T9681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.783170][ T5609] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 313.787566][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.801604][ T5609] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.804321][ T9681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.821517][ T9681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.857728][ T5609] usb 7-1: Product: syz [ 313.860164][ T9681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.882398][ T5624] Bluetooth: hci1: command tx timeout [ 313.884704][ T5609] usb 7-1: Manufacturer: syz [ 313.904362][ T5609] usb 7-1: SerialNumber: syz [ 313.934713][ T5609] usb 7-1: config 0 descriptor?? [ 313.952459][ T9681] hsr_slave_0: entered promiscuous mode [ 313.960976][ T9681] hsr_slave_1: entered promiscuous mode [ 313.971287][ T9681] debugfs: 'hsr0' already exists in 'hsr' [ 313.978477][ T9681] Cannot create hsr debugfs directory [ 313.978526][ T5609] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 314.043912][ T5609] usb 7-1: selecting invalid altsetting 1 [ 314.057024][ T5609] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 314.057404][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.187951][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.195030][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.773424][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.780493][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.798525][ T5609] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 314.829788][ T5609] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 314.855561][ T5609] usb 7-1: media controller created [ 314.907851][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.041626][ T5609] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 315.055854][ T5609] zl10353_read_register: readreg error (reg=127, ret==-71) [ 315.085983][ T5609] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 315.200652][ T5609] usb 7-1: USB disconnect, device number 2 [ 315.436969][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'. [ 315.455255][ T9681] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 315.479226][ T9681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.486515][ T5624] Bluetooth: hci3: command tx timeout [ 315.525341][ T9681] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 315.550300][ T9681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.558294][ T9681] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 315.580299][ T9681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.595756][ T9681] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 316.161116][ T5624] Bluetooth: hci1: command tx timeout [ 316.185179][ T9681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.237342][ T9779] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1253'. [ 316.247386][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1253'. [ 316.350162][ T9681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.358032][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1254'. [ 316.366282][ T9681] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.386480][ T2226] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.393611][ T2226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.454442][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.461584][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.492277][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.512154][ T48] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.551457][ T2226] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.713807][ T5823] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.861342][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.561339][ T5624] Bluetooth: hci3: command tx timeout [ 317.609536][ T9634] veth0_vlan: entered promiscuous mode [ 317.637124][ T9634] veth1_vlan: entered promiscuous mode [ 317.699219][ T9634] veth0_macvtap: entered promiscuous mode [ 317.725929][ T9634] veth1_macvtap: entered promiscuous mode [ 317.775340][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.801822][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.882829][ T1051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.917627][ T1051] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.959094][ T9681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.087489][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.097261][ T5823] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.120680][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.129820][ T5823] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.201375][ T5624] Bluetooth: hci1: command tx timeout [ 318.234461][ T2226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.263318][ T2226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.424613][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 318.433545][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 318.474912][ T30] audit: type=1400 audit(1785808556.663:561): avc: denied { write } for pid=9843 comm="syz.6.1264" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 318.593622][ T9681] veth0_vlan: entered promiscuous mode [ 318.625471][ T9681] veth1_vlan: entered promiscuous mode [ 318.764902][ T9681] veth0_macvtap: entered promiscuous mode [ 318.779001][ T9681] veth1_macvtap: entered promiscuous mode [ 318.810825][ T9681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.821652][ T5737] libceph: connect (1)[c::]:6789 error -101 [ 318.831451][ T5737] libceph: mon0 (1)[c::]:6789 connect error [ 318.865927][ T9681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.933712][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.206921][ T9838] ceph: No mds server is up or the cluster is laggy [ 319.493719][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 319.591461][ T9853] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1265'. [ 319.600534][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1265'. [ 319.649098][ T5624] Bluetooth: hci3: command tx timeout [ 319.657015][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 319.693276][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.902061][ T5823] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.924925][ T5823] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.407733][ T5823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.420834][ T5823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.457509][ T5823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.466990][ T5823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.336141][ T30] audit: type=1326 audit(1785808559.523:562): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.3.1270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49fff9e019 code=0x0 [ 323.322646][ T9894] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1277'. [ 323.331763][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1277'. [ 324.271285][ T30] audit: type=1800 audit(1785808562.453:563): pid=9904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1279" name="id" dev="configfs" ino=25377 res=0 errno=0 [ 325.061431][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 325.252050][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 325.259052][ T29] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 325.270007][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 325.282639][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 325.298799][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 325.323307][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 325.348519][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.372103][ T5728] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 325.381093][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.409191][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.541310][ T5728] usb 7-1: Using ep0 maxpacket: 32 [ 325.564286][ T5728] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.579937][ T5728] usb 7-1: config 0 has no interface number 0 [ 325.599524][ T5728] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 325.614182][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.626936][ T29] usb 9-1: GET_CAPABILITIES returned 0 [ 325.634043][ T5728] usb 7-1: Product: syz [ 325.638211][ T5728] usb 7-1: Manufacturer: syz [ 325.642897][ T29] usbtmc 9-1:16.0: can't read capabilities [ 325.648967][ T5728] usb 7-1: SerialNumber: syz [ 325.676586][ T5728] usb 7-1: config 0 descriptor?? [ 325.747474][ T5728] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 325.804466][ T5728] usb 7-1: selecting invalid altsetting 1 [ 325.883546][ T5728] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 326.257891][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 326.314445][ T9910] usbtmc 9-1:16.0: Unable to send data, error -71 [ 326.530413][ T29] usb 9-1: USB disconnect, device number 2 [ 326.540959][ T5728] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 326.576678][ T5728] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 326.613826][ T5728] usb 7-1: media controller created [ 326.619363][ T30] audit: type=1800 audit(1785808564.803:564): pid=9941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1290" name="bmControls" dev="configfs" ino=25443 res=0 errno=0 [ 326.632099][ T9941] openvswitch: netlink: IP tunnel dst address not specified [ 326.658699][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.699195][ T9941] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1290'. [ 326.742680][ T5728] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 326.754788][ T5728] zl10353_read_register: readreg error (reg=127, ret==-71) [ 326.773168][ T5728] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 326.853374][ T5728] usb 7-1: USB disconnect, device number 3 [ 327.091875][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 327.127199][ T9954] ceph: No mds server is up or the cluster is laggy [ 327.136940][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 327.156963][ T5737] hid_parser_main: 192 callbacks suppressed [ 327.156974][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.177792][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.202229][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.211152][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.226261][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.237049][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.274527][ T30] audit: type=1400 audit(1785808565.453:565): avc: denied { read append } for pid=9961 comm="syz.8.1297" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 327.299899][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.341265][ T30] audit: type=1400 audit(1785808565.453:566): avc: denied { open } for pid=9961 comm="syz.8.1297" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 327.342521][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.446291][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.487094][ T30] audit: type=1400 audit(1785808565.483:567): avc: denied { ioctl } for pid=9961 comm="syz.8.1297" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 327.489602][ T5737] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 327.657756][ T5737] hid-generic 0000:0000:0004.0008: hidraw0: HID v0.03 Device [syz1] on syz0 [ 327.701648][ T30] audit: type=1400 audit(1785808565.593:568): avc: denied { read } for pid=9961 comm="syz.8.1297" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 327.783272][ T30] audit: type=1400 audit(1785808565.963:569): avc: denied { write } for pid=9975 comm="syz.6.1303" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 328.120019][ T9978] fido_id[9978]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 328.825161][ T9988] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1306'. [ 328.835261][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1306'. [ 329.967627][ T30] audit: type=1400 audit(1785808568.153:570): avc: denied { getopt } for pid=10000 comm="syz.5.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 330.024369][ T30] audit: type=1400 audit(1785808568.173:571): avc: denied { connect } for pid=10000 comm="syz.5.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 330.100022][ T30] audit: type=1400 audit(1785808568.243:572): avc: denied { write } for pid=10000 comm="syz.5.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 330.125510][T10004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10004 comm=syz.6.1312 [ 330.431304][ T5718] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 330.602632][ T5718] usb 7-1: config index 0 descriptor too short (expected 10276, got 36) [ 330.628537][ T5718] usb 7-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 330.653078][ T5718] usb 7-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 330.676542][ T5718] usb 7-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 330.706377][ T5718] usb 7-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 330.737564][ T5718] usb 7-1: config 109 interface 0 has no altsetting 0 [ 330.751268][ T5718] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 330.779385][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.831321][ T5728] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 331.002706][ T5728] usb 9-1: Using ep0 maxpacket: 32 [ 331.016029][ T5728] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.051256][ T5728] usb 9-1: config 0 has no interface number 0 [ 331.073271][ T5728] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 331.098481][ T5728] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.123256][ T5728] usb 9-1: Product: syz [ 331.259178][T10025] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1318'. [ 331.268295][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 331.301231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 331.321229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 331.862263][ T5728] usb 9-1: Manufacturer: syz [ 331.867018][ T5728] usb 9-1: SerialNumber: syz [ 331.876292][ T5728] usb 9-1: config 0 descriptor?? [ 331.886708][ T5728] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 331.901800][ T5728] usb 9-1: selecting invalid altsetting 1 [ 331.927950][ T5728] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 332.017639][ T5718] usb 7-1: string descriptor 0 read error: -71 [ 332.042608][ T5718] usbhid 7-1:109.0: can't add hid device: -71 [ 332.055507][ T5728] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.067659][ T5718] usbhid 7-1:109.0: probe with driver usbhid failed with error -71 [ 332.130159][ T5718] usb 7-1: USB disconnect, device number 4 [ 332.131476][ T5728] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 332.193170][ T5728] usb 9-1: media controller created [ 332.228668][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.271123][ T5624] Bluetooth: hci0: Dropping invalid advertising data [ 332.278042][ T5624] Bluetooth: hci0: Malformed LE Event: 0x02 [ 332.291667][ T5728] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 332.311588][ T5728] zl10353_read_register: readreg error (reg=127, ret==-71) [ 332.329008][ T5728] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 332.414325][ T5728] usb 9-1: USB disconnect, device number 3 [ 332.736928][T10038] tipc: Enabling of bearer rejected, failed to enable media [ 333.681891][ T5728] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 333.912288][ T5728] usb 9-1: Using ep0 maxpacket: 8 [ 333.921537][ T5728] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 333.933554][ T5728] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 333.951845][ T30] audit: type=1800 audit(1785808572.143:573): pid=10055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1329" name="file" dev="configfs" ino=25664 res=0 errno=0 [ 333.976473][ T5728] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 334.009861][T10060] 9pnet_virtio: no channels available for device syz [ 334.016574][ T5728] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 334.038181][ T5728] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 334.097262][ T5728] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.139051][ T5728] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.167941][ T5728] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.377703][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1332'. [ 334.629032][ T5728] usb 9-1: GET_CAPABILITIES returned 0 [ 334.648102][ T5728] usbtmc 9-1:16.0: can't read capabilities [ 334.798920][T10075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10075 comm=syz.5.1333 [ 334.836865][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 335.380526][T10043] usbtmc 9-1:16.0: Unable to send data, error -71 [ 335.438856][ T9] usb 9-1: USB disconnect, device number 4 [ 335.476626][T10063] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 335.483143][T10063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.554156][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1334'. [ 335.796763][T10063] vhci_hcd vhci_hcd.0: Device attached [ 335.886813][ T30] audit: type=1400 audit(1785808574.073:574): avc: denied { create } for pid=10088 comm="syz.6.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 336.061328][ T5728] usb 48-1: SetAddress Request (2) to port 0 [ 336.067426][T10092] tipc: Started in network mode [ 336.074605][ T5728] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 336.100937][T10092] tipc: Node identity f6f554dee09d, cluster identity 4711 [ 336.157499][T10092] tipc: Enabled bearer , priority 0 [ 336.388434][T10091] tipc: Disabling bearer [ 336.670618][T10082] vhci_hcd: connection reset by peer [ 336.683198][ T36] vhci_hcd vhci_hcd.7: stop threads [ 337.215524][ T36] vhci_hcd vhci_hcd.7: release socket [ 337.243334][ T36] vhci_hcd vhci_hcd.7: disconnect device [ 337.642886][ T36] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.706248][ T36] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.770344][ T36] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.822989][ T36] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.141037][T10118] input: syz0 as /devices/virtual/input/input8 [ 338.336494][ T30] audit: type=1400 audit(1785808576.523:575): avc: denied { read } for pid=4960 comm="acpid" name="event2" dev="devtmpfs" ino=3060 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.421645][ T30] audit: type=1400 audit(1785808576.523:576): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3060 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.544473][ T30] audit: type=1400 audit(1785808576.523:577): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3060 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.702042][ T30] audit: type=1400 audit(1785808576.583:578): avc: denied { read } for pid=10117 comm="syz.8.1345" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 339.398753][ T30] audit: type=1400 audit(1785808576.583:579): avc: denied { open } for pid=10117 comm="syz.8.1345" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 339.451653][ T29] Process accounting resumed [ 339.477345][ T30] audit: type=1326 audit(1785808577.053:580): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49fff9e019 code=0x0 [ 339.727112][ T30] audit: type=1400 audit(1785808577.913:581): avc: denied { mount } for pid=10128 comm="syz.5.1348" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 339.951339][ T29] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 340.484462][ T30] audit: type=1400 audit(1785808578.673:582): avc: denied { unmount } for pid=7570 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 340.539204][ T29] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 340.564947][ T29] usb 9-1: config 0 has no interface number 0 [ 340.593002][ T29] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.615099][ T29] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 340.629893][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.642961][ T29] usb 9-1: Product: syz [ 340.708703][ T29] usb 9-1: Manufacturer: syz [ 340.722737][ T29] usb 9-1: SerialNumber: syz [ 340.756064][ T29] usb 9-1: config 0 descriptor?? [ 340.789322][ T29] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 341.163107][ T5728] usb 48-1: device descriptor read/8, error -110 [ 341.553354][ T5728] usb usb48-port1: attempt power cycle [ 341.848917][ T30] audit: type=1326 audit(1785808579.983:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 343.211717][ C1] usb 9-1: yurex_control_callback - control failed: -2 [ 343.291575][ T30] audit: type=1326 audit(1785808579.983:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 343.318587][ T30] audit: type=1326 audit(1785808579.983:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe5cdf5e84e code=0x7ffc0000 [ 343.345014][ T30] audit: type=1326 audit(1785808579.983:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 343.390089][ T5609] usb 9-1: USB disconnect, device number 5 [ 343.404992][ T30] audit: type=1326 audit(1785808579.983:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 343.462321][ T30] audit: type=1326 audit(1785808579.993:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 343.474392][ T5609] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 343.511386][ T5728] usb usb48-port1: unable to enumerate USB device [ 343.566573][ T30] audit: type=1326 audit(1785808579.993:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 343.667225][ T30] audit: type=1326 audit(1785808579.993:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 343.754743][ T30] audit: type=1326 audit(1785808579.993:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 343.814016][ T30] audit: type=1326 audit(1785808579.993:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.5.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cdf9e019 code=0x7ffc0000 [ 344.406181][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 344.545319][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1371'. [ 345.777641][T10221] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 345.801723][ T4926] Bluetooth: hci3: command 0x0406 tx timeout [ 345.852779][T10221] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 346.083149][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1382'. [ 346.405437][T10243] fuse: Bad value for 'fd' [ 346.871859][T10250] fuse: Bad value for 'fd' [ 347.421636][T10245] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1387'. [ 347.448188][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'. [ 347.802712][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 348.012624][T10276] tipc: Enabled bearer , priority 0 [ 349.453782][ T5740] tipc: Node number set to 656636876 [ 350.207456][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1409'. [ 350.304146][T10317] fuse: Bad value for 'fd' [ 350.456248][ T5740] hid_parser_main: 91 callbacks suppressed [ 350.456262][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 350.494218][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 350.510499][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 350.529706][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 350.550639][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 350.567092][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 350.584515][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 350.599886][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 350.607569][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 351.100013][T10319] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1410'. [ 351.116745][ T5740] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 351.133027][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1410'. [ 351.147863][ T5740] hid-generic 0000:0000:0004.0009: hidraw0: HID v0.03 Device [syz1] on syz0 [ 351.286564][T10325] fido_id[10325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 352.606053][T10356] ubi8: attaching mtd0 [ 352.653007][T10356] ubi8: scanning is finished [ 352.666005][T10356] ubi8: empty MTD device detected [ 353.348775][T10356] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB) [ 353.356418][T10356] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 385 bytes [ 353.363762][T10356] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 353.370816][T10356] ubi8: VID header offset: 3647 (aligned 3647), data offset: 3711 [ 353.378784][T10356] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 353.385736][T10356] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 2 [ 353.393794][T10356] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2080993342 [ 353.404158][T10356] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 353.482784][T10361] ubi8: background thread "ubi_bgt8d" started, PID 10361 [ 354.400522][T10369] syz_tun: entered allmulticast mode [ 355.088481][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'. [ 355.499286][T10389] fuse: Bad value for 'fd' [ 356.489810][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 356.785224][T10435] tipc: Started in network mode [ 356.808705][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 356.808737][ T30] audit: type=1400 audit(1785808594.993:623): avc: denied { remount } for pid=10414 comm="syz.8.1440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 356.844784][T10435] tipc: Node identity b251ee5e4972, cluster identity 4711 [ 356.865641][T10435] tipc: Enabled bearer , priority 0 [ 357.069811][T10437] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1446'. [ 357.102206][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1446'. [ 357.862425][ T5740] tipc: Node number set to 4213435998 [ 358.008929][T10459] fuse: Bad value for 'fd' [ 358.391287][ T5718] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 358.551547][ T5718] usb 7-1: Using ep0 maxpacket: 8 [ 359.163464][ T5718] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 359.184935][ T5718] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 359.222459][ T5718] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 359.365661][ T5718] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 359.410321][ T5718] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 359.452508][ T5718] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.508349][ T5718] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.536461][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.844521][T10483] ubi: mtd0 is already attached to ubi8 [ 359.854500][ T5718] usb 7-1: GET_CAPABILITIES returned 0 [ 359.870097][ T5718] usbtmc 7-1:16.0: can't read capabilities [ 360.087884][T10482] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 360.094408][T10482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 360.154715][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 360.178432][T10462] usbtmc 7-1:16.0: Unable to send data, error -71 [ 360.218265][ T5728] usb 7-1: USB disconnect, device number 5 [ 361.469455][T10492] netlink: 252 bytes leftover after parsing attributes in process `syz.7.1463'. [ 361.709893][T10482] vhci_hcd vhci_hcd.0: Device attached [ 362.016325][ T5728] usb 44-1: SetAddress Request (2) to port 0 [ 363.090481][ T5728] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 364.150070][T10523] read descriptors [ 364.178271][T10523] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 364.205268][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1472'. [ 364.727926][ T30] audit: type=1326 audit(1785808602.563:624): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.6.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bdb99e019 code=0x0 [ 364.757566][T10484] vhci_hcd: connection reset by peer [ 364.769404][ T48] vhci_hcd vhci_hcd.5: stop threads [ 364.782079][ T48] vhci_hcd vhci_hcd.5: release socket [ 364.791317][ T48] vhci_hcd vhci_hcd.5: disconnect device [ 365.316387][ T9634] ffs_data_put(): freeing [ 366.176726][T10554] fuse: Bad value for 'fd' [ 366.308363][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 366.929536][T10563] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1485'. [ 367.053417][ T30] audit: type=1800 audit(1785808605.243:625): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1487" name="id" dev="configfs" ino=26615 res=0 errno=0 [ 367.057946][T10571] fuse: Bad value for 'fd' [ 367.275356][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 367.385040][ T30] audit: type=1400 audit(1785808605.573:626): avc: denied { ioctl } for pid=10573 comm="syz.6.1491" path="/dev/usbmon7" dev="devtmpfs" ino=738 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 367.518325][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1497'. [ 367.645073][T10596] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1499'. [ 368.441476][ T5728] usb 44-1: device descriptor read/8, error -110 [ 368.513634][ T30] audit: type=1800 audit(1785808606.703:627): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1502" name="id" dev="configfs" ino=27404 res=0 errno=0 [ 368.729114][T10613] fuse: Bad value for 'fd' [ 368.855372][ T5728] usb usb44-port1: attempt power cycle [ 370.278642][ T4926] Bluetooth: hci5: command 0xfc11 tx timeout [ 370.280810][ T5622] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 370.348426][T10629] fuse: Bad value for 'fd' [ 370.582927][ T5728] usb usb44-port1: unable to enumerate USB device [ 371.555479][ T30] audit: type=1800 audit(1785808609.743:628): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1514" name="id" dev="configfs" ino=27459 res=0 errno=0 [ 372.167098][T10649] overlayfs: missing 'lowerdir' [ 372.576715][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1509'. [ 372.667492][T10671] fuse: Bad value for 'fd' [ 372.757585][ T30] audit: type=1326 audit(1785808610.943:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10668 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 372.820720][ T30] audit: type=1326 audit(1785808610.973:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10668 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 372.873734][ T30] audit: type=1326 audit(1785808610.983:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10668 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 372.925259][ T30] audit: type=1326 audit(1785808611.003:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10668 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 372.953029][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.959403][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.989397][ T30] audit: type=1326 audit(1785808611.043:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10668 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 373.034881][ T30] audit: type=1400 audit(1785808611.163:634): avc: denied { create } for pid=10668 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.054521][ T30] audit: type=1400 audit(1785808611.163:635): avc: denied { setopt } for pid=10668 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.082952][ T30] audit: type=1400 audit(1785808611.273:636): avc: denied { read } for pid=10668 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.740507][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 373.783551][ T30] audit: type=1400 audit(1785808611.973:637): avc: denied { write } for pid=10668 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.922999][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 373.940682][ T9] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 373.973270][ T9] usb 7-1: config 0 has no interface number 0 [ 373.986263][ T9] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.013827][ T9] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 374.050239][ T9] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 374.075875][ T9] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 374.099478][ T9] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 374.134448][ T9] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.162756][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 374.175781][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.193050][ T9] usb 7-1: Product: syz [ 374.212059][ T9] usb 7-1: Manufacturer: syz [ 374.224203][ T9] usb 7-1: SerialNumber: syz [ 374.244123][ T9] usb 7-1: config 0 descriptor?? [ 374.256832][T10676] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 374.288565][T10697] openvswitch: netlink: IP tunnel dst address not specified [ 374.298918][T10697] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1528'. [ 374.470344][T10676] read descriptors [ 374.474906][T10676] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 374.501338][ T9] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 374.548967][ T9] usb 7-1: USB disconnect, device number 6 [ 374.814290][T10712] ubi: mtd0 is already attached to ubi8 [ 376.225154][ T9361] ffs_data_put(): freeing [ 376.279371][T10719] fuse: Bad value for 'fd' [ 377.599148][T10737] fuse: Bad value for 'fd' [ 380.034559][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 380.034575][ T30] audit: type=1326 audit(1785808617.763:639): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.7.1554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effe6f9e019 code=0x0 [ 380.353711][ T30] audit: type=1400 audit(1785808618.543:640): avc: denied { write } for pid=10776 comm="syz.8.1559" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 380.507284][T10778] fuse: Unknown parameter '0000000000000000000301777777777777777777777*‚' [ 381.930339][T10802] autofs: Bad value for 'fd' [ 382.107129][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 382.126532][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 382.184615][T10806] ceph: No mds server is up or the cluster is laggy [ 383.259063][T10824] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1569'. [ 383.329066][T10826] tipc: Enabling of bearer rejected, already enabled [ 383.491950][T10828] fuse: Bad value for 'fd' [ 383.645905][T10839] ubi: mtd0 is already attached to ubi8 [ 386.923461][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.931082][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.244130][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.273586][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.812941][T10872] tipc: Enabled bearer , priority 0 [ 387.861812][ T36] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.885805][ T36] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.927698][ T36] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.968593][ T36] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.923624][ T5740] tipc: Node number set to 1561395775 [ 389.306365][ T30] audit: type=1800 audit(1785808627.493:641): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1592" name="file" dev="configfs" ino=28052 res=0 errno=0 [ 389.606746][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1593'. [ 391.824902][ T30] audit: type=1400 audit(1785808630.013:642): avc: denied { write } for pid=10916 comm="syz.6.1591" name="functions" dev="configfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 391.832969][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 391.881740][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 391.973794][T10928] ceph: No mds server is up or the cluster is laggy [ 393.969929][T10960] fuse: Bad value for 'fd' [ 394.142878][T10963] tipc: Enabling of bearer rejected, already enabled [ 395.179623][ T5728] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 395.341275][ T5728] usb 7-1: Using ep0 maxpacket: 8 [ 395.354791][ T5728] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 395.373120][ T5728] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 395.411247][ T5728] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 395.434528][ T5728] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 395.463709][ T5728] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 395.500453][ T5728] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.534083][ T5728] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.581273][ T5728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.507097][ T5728] usb 7-1: GET_CAPABILITIES returned 0 [ 396.534318][ T5728] usbtmc 7-1:16.0: can't read capabilities [ 396.730462][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.772751][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.865981][ T5728] usb 7-1: USB disconnect, device number 7 [ 397.629710][ T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 397.792459][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 397.809993][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 397.849442][ T29] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 397.886998][ T29] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 397.934766][ T29] usb 9-1: Product: syz [ 397.956457][ T29] usb 9-1: Manufacturer: syz [ 397.967656][ T29] usb 9-1: SerialNumber: syz [ 397.986112][ T29] usb 9-1: config 0 descriptor?? [ 398.001982][T11012] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 398.041057][ T29] hub 9-1:0.0: bad descriptor, ignoring hub [ 398.058562][ T29] hub 9-1:0.0: probe with driver hub failed with error -5 [ 398.105922][ T30] audit: type=1400 audit(1785808636.303:643): avc: denied { block_suspend } for pid=11021 comm="syz.6.1632" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 399.591478][ T5850] usb 9-1: USB disconnect, device number 6 [ 402.502244][ T29] libceph: connect (1)[c::]:6789 error -101 [ 402.510643][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 402.560363][T11064] ceph: No mds server is up or the cluster is laggy [ 402.675245][T11072] fuse: Unknown parameter '1844674407370955161501777777777777777777777*‚' [ 403.185555][ T29] libceph: connect (1)[c::]:6789 error -101 [ 403.191760][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 405.592275][T11090] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1649'. [ 407.193979][ T30] audit: type=1326 audit(1785808645.363:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 407.497021][ T30] audit: type=1326 audit(1785808645.363:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 407.525672][ T30] audit: type=1326 audit(1785808645.363:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49fff5e84e code=0x7ffc0000 [ 407.555989][ T30] audit: type=1326 audit(1785808645.363:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 407.582852][ T30] audit: type=1326 audit(1785808645.363:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 409.901262][ T30] audit: type=1326 audit(1785808645.363:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 409.927670][ T30] audit: type=1326 audit(1785808645.363:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 409.956048][ T30] audit: type=1326 audit(1785808645.363:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 409.982630][ T30] audit: type=1326 audit(1785808645.363:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 410.011308][ T30] audit: type=1326 audit(1785808645.363:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fff9e019 code=0x7ffc0000 [ 410.150045][ T5728] hid_parser_main: 91 callbacks suppressed [ 410.150057][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.187644][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.210450][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.239949][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.264393][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.293272][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.324162][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.344416][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.366318][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.392131][ T5728] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 410.422149][ T5728] hid-generic 0000:0000:0004.000A: hidraw0: HID v0.03 Device [syz1] on syz0 [ 411.048376][T11138] fido_id[11138]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 412.890108][T11155] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 412.896641][T11155] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.906583][T11155] vhci_hcd vhci_hcd.0: Device attached [ 413.211287][ T5728] usb 40-1: SetAddress Request (6) to port 0 [ 413.371488][ T5728] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 414.320700][T11156] vhci_hcd: connection reset by peer [ 414.359636][ T13] vhci_hcd vhci_hcd.3: stop threads [ 415.059972][ T13] vhci_hcd vhci_hcd.3: release socket [ 415.071049][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 415.903637][T11187] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1683'. [ 415.912731][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 416.506969][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 416.506980][ T30] audit: type=1326 audit(1785808654.693:662): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.6.1684" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bdb99e019 code=0x0 [ 416.875643][T11206] trusted_key: encrypted_key: insufficient parameters specified [ 417.163044][T11213] input: syz0 as /devices/virtual/input/input9 [ 417.948309][ T30] audit: type=1400 audit(1785808656.133:663): avc: denied { getopt } for pid=11220 comm="syz.8.1697" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.010012][T11222] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001 [ 418.052716][ T30] audit: type=1400 audit(1785808656.243:664): avc: denied { read } for pid=11220 comm="syz.8.1697" dev="sockfs" ino=28618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 418.103414][T11226] iou-wrk-11222 (11226): drop_caches: 0 [ 418.372639][T11225] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1698'. [ 418.381744][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 418.721387][ T5728] usb 40-1: device descriptor read/8, error -110 [ 418.844541][ T30] audit: type=1326 audit(1785808657.033:665): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.5.1701" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5cdf9e019 code=0x0 [ 419.121760][ T5728] usb usb40-port1: attempt power cycle [ 419.712557][ T5728] usb usb40-port1: unable to enumerate USB device [ 420.106287][T11267] pim6reg: entered allmulticast mode [ 420.192536][T11267] pim6reg: left allmulticast mode [ 420.333928][ T30] audit: type=1400 audit(1785808658.473:666): avc: denied { mounton } for pid=11259 comm="syz.6.1707" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 421.215269][T11273] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 421.221800][T11273] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 421.323287][T11273] vhci_hcd vhci_hcd.0: Device attached [ 421.637582][ T5728] usb 40-1: SetAddress Request (10) to port 0 [ 421.690420][ T5728] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 423.058542][T11301] input: syz0 as /devices/virtual/input/input10 [ 423.587287][T11276] vhci_hcd: connection reset by peer [ 423.603526][T10849] vhci_hcd vhci_hcd.3: stop threads [ 423.620598][T10849] vhci_hcd vhci_hcd.3: release socket [ 423.646320][T10849] vhci_hcd vhci_hcd.3: disconnect device [ 425.540835][ T5718] libceph: connect (1)[c::]:6789 error -101 [ 425.558902][ T5718] libceph: mon0 (1)[c::]:6789 connect error [ 425.811397][ T30] audit: type=1326 audit(1785808663.933:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 426.164417][ T5718] libceph: connect (1)[c::]:6789 error -101 [ 426.195222][T11338] ceph: No mds server is up or the cluster is laggy [ 426.282249][ T30] audit: type=1326 audit(1785808663.933:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 426.284391][ T5718] libceph: mon0 (1)[c::]:6789 connect error [ 426.456500][ T30] audit: type=1326 audit(1785808663.933:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effe6f5e84e code=0x7ffc0000 [ 426.489711][T11352] tipc: Enabling of bearer rejected, already enabled [ 426.562569][ T30] audit: type=1326 audit(1785808663.933:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 426.657475][ T30] audit: type=1326 audit(1785808663.943:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 426.762680][ T30] audit: type=1326 audit(1785808663.943:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 426.877182][ T30] audit: type=1326 audit(1785808663.943:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 426.926957][ T5728] usb 40-1: device descriptor read/8, error -110 [ 426.958338][ T30] audit: type=1326 audit(1785808663.943:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 427.013881][ T30] audit: type=1326 audit(1785808663.943:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 427.051146][ T30] audit: type=1326 audit(1785808663.943:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.7.1731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe6f9e019 code=0x7ffc0000 [ 427.332497][ T5728] usb usb40-port1: attempt power cycle [ 427.466832][T11371] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 427.491455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.912214][ T5728] usb usb40-port1: unable to enumerate USB device [ 428.415790][T11374] bond2 (unregistering): Released all slaves [ 428.521329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.725447][T11383] smpboot: CPU 1 is now offline [ 429.561214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.609870][T11402] /dev/nullb0: Can't lookup blockdev [ 429.674801][T11407] ================================================================== [ 429.682859][T11407] BUG: KASAN: slab-use-after-free in pn_bind+0x550/0x5b0 [ 429.689854][T11407] Write of size 8 at addr ffff88807abb4800 by task syz.6.1747/11407 [ 429.697795][T11407] [ 429.700091][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.6.1747 Tainted: G S L syzkaller #0 PREEMPT(full) [ 429.700110][T11407] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 429.700115][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 429.700122][T11407] Call Trace: [ 429.700126][T11407] [ 429.700130][T11407] dump_stack_lvl+0x100/0x190 [ 429.700144][T11407] print_report+0x13d/0x4b0 [ 429.700161][T11407] ? __virt_addr_valid+0x239/0x430 [ 429.700177][T11407] ? pn_bind+0x550/0x5b0 [ 429.700187][T11407] kasan_report+0xdf/0x1c0 [ 429.700204][T11407] ? pn_bind+0x550/0x5b0 [ 429.700215][T11407] pn_bind+0x550/0x5b0 [ 429.700225][T11407] ? rcu_is_watching+0x12/0xc0 [ 429.700244][T11407] ? __pfx_pn_bind+0x10/0x10 [ 429.700254][T11407] usb_add_function+0x219/0x890 [ 429.700269][T11407] ? composite_dev_prepare+0x171/0x420 [ 429.700285][T11407] configfs_composite_bind+0xd83/0x1960 [ 429.700300][T11407] ? kernfs_create_link+0x1bd/0x240 [ 429.700316][T11407] gadget_bind_driver+0x28c/0xbf0 [ 429.700327][T11407] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 429.700342][T11407] ? __pfx_gadget_bind_driver+0x10/0x10 [ 429.700353][T11407] really_probe+0x241/0xa60 [ 429.700368][T11407] __driver_probe_device+0x20e/0x450 [ 429.700383][T11407] driver_probe_device+0x4a/0x140 [ 429.700396][T11407] __driver_attach+0x21f/0x5b0 [ 429.700409][T11407] ? __pfx___driver_attach+0x10/0x10 [ 429.700423][T11407] bus_for_each_dev+0x13e/0x1d0 [ 429.700433][T11407] ? __pfx_bus_for_each_dev+0x10/0x10 [ 429.700443][T11407] ? bus_add_driver+0x2b5/0x5b0 [ 429.700456][T11407] bus_add_driver+0x305/0x5b0 [ 429.700468][T11407] driver_register+0x1e2/0x360 [ 429.700483][T11407] usb_gadget_register_driver_owner+0x132/0x210 [ 429.700494][T11407] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 429.700509][T11407] configfs_write_iter+0x302/0x4e0 [ 429.700522][T11407] vfs_write+0x6ac/0x1050 [ 429.700538][T11407] ? __pfx_configfs_write_iter+0x10/0x10 [ 429.700552][T11407] ? __pfx_vfs_write+0x10/0x10 [ 429.700570][T11407] ksys_write+0x12a/0x250 [ 429.700580][T11407] ? __pfx_ksys_write+0x10/0x10 [ 429.700591][T11407] do_syscall_64+0x115/0x870 [ 429.700604][T11407] ? clear_bhb_loop+0x40/0x90 [ 429.700617][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.700628][T11407] RIP: 0033:0x7f3bdb99e019 [ 429.700649][T11407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.700660][T11407] RSP: 002b:00007f3bd9bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.700671][T11407] RAX: ffffffffffffffda RBX: 00007f3bdbc25fa0 RCX: 00007f3bdb99e019 [ 429.700679][T11407] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000003 [ 429.700687][T11407] RBP: 00007f3bdba3500c R08: 0000000000000000 R09: 0000000000000000 [ 429.700694][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.700702][T11407] R13: 00007f3bdbc26038 R14: 00007f3bdbc25fa0 R15: 00007ffe8dce4a28 [ 429.700712][T11407] [ 429.700717][T11407] [ 429.992722][T11407] Allocated by task 4975: [ 429.997016][T11407] kasan_save_stack+0x30/0x50 [ 430.001667][T11407] kasan_save_track+0x14/0x30 [ 430.006312][T11407] __kasan_kmalloc+0xaa/0xb0 [ 430.010875][T11407] __kvmalloc_node_noprof+0x34f/0x970 [ 430.016221][T11407] seq_read_iter+0x819/0x1270 [ 430.020864][T11407] kernfs_fop_read_iter+0x46c/0x610 [ 430.026030][T11407] vfs_read+0x82e/0xb40 [ 430.030158][T11407] ksys_read+0x12a/0x250 [ 430.034369][T11407] do_syscall_64+0x115/0x870 [ 430.038934][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.044800][T11407] [ 430.047092][T11407] Freed by task 4975: [ 430.051034][T11407] kasan_save_stack+0x30/0x50 [ 430.055677][T11407] kasan_save_track+0x14/0x30 [ 430.060321][T11407] kasan_save_free_info+0x3b/0x70 [ 430.065316][T11407] __kasan_slab_free+0x5f/0x80 [ 430.070047][T11407] kfree+0x22b/0x6c0 [ 430.073917][T11407] seq_release+0x4b/0x80 [ 430.078143][T11407] kernfs_fop_release+0xf4/0x1f0 [ 430.083048][T11407] __fput+0x3ff/0xb50 [ 430.087007][T11407] fput_close_sync+0x118/0x250 [ 430.091740][T11407] __x64_sys_close+0x8b/0x120 [ 430.096386][T11407] do_syscall_64+0x115/0x870 [ 430.100981][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.106847][T11407] [ 430.109140][T11407] The buggy address belongs to the object at ffff88807abb4000 [ 430.109140][T11407] which belongs to the cache kmalloc-cg-4k of size 4096 [ 430.123424][T11407] The buggy address is located 2048 bytes inside of [ 430.123424][T11407] freed 4096-byte region [ffff88807abb4000, ffff88807abb5000) [ 430.137357][T11407] [ 430.139652][T11407] The buggy address belongs to the physical page: [ 430.146034][T11407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807abb2000 pfn:0x7abb0 [ 430.156059][T11407] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 430.164525][T11407] memcg:ffff88807abb1011 [ 430.168731][T11407] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 430.177203][T11407] page_type: f5(slab) [ 430.181156][T11407] raw: 00fff00000000240 ffff88813fe2d500 ffffea00021d9810 ffff88813fe2c7c8 [ 430.189707][T11407] raw: ffff88807abb2000 0000200000040003 00000000f5000000 ffff88807abb1011 [ 430.198259][T11407] head: 00fff00000000240 ffff88813fe2d500 ffffea00021d9810 ffff88813fe2c7c8 [ 430.206896][T11407] head: ffff88807abb2000 0000200000040003 00000000f5000000 ffff88807abb1011 [ 430.215531][T11407] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 430.224166][T11407] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 430.232807][T11407] page dumped because: kasan: bad access detected [ 430.239184][T11407] page_owner tracks the page as allocated [ 430.244864][T11407] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7570, tgid 7570 (syz-executor), ts 198797606954, free_ts 198774886788 [ 430.266366][T11407] post_alloc_hook+0xfd/0x120 [ 430.271017][T11407] get_page_from_freelist+0xf48/0x3530 [ 430.276449][T11407] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 430.282316][T11407] new_slab+0xa2/0x640 [ 430.286351][T11407] refill_objects+0xe3/0x410 [ 430.290913][T11407] __pcs_replace_empty_main+0x376/0x680 [ 430.296439][T11407] __kmalloc_noprof+0x66d/0x820 [ 430.301263][T11407] __register_sysctl_table+0xac/0x1650 [ 430.306692][T11407] __addrconf_sysctl_register+0x1a2/0x360 [ 430.312379][T11407] addrconf_sysctl_register+0x163/0x200 [ 430.317890][T11407] ipv6_add_dev+0xaf2/0x1520 [ 430.322444][T11407] addrconf_notify+0x5db/0x1ba0 [ 430.327264][T11407] notifier_call_chain+0x99/0x3f0 [ 430.332255][T11407] call_netdevice_notifiers_info+0xbe/0x110 [ 430.338127][T11407] register_netdevice+0x1998/0x25a0 [ 430.343294][T11407] ip6gre_newlink_common.isra.0+0x153/0x350 [ 430.349153][T11407] page last free pid 7590 tgid 7590 stack trace: [ 430.355440][T11407] __free_frozen_pages+0x79f/0x1090 [ 430.360614][T11407] qlist_free_all+0x47/0xf0 [ 430.365162][T11407] kasan_quarantine_reduce+0x1a0/0x1f0 [ 430.370594][T11407] __kasan_slab_alloc+0x69/0x90 [ 430.375414][T11407] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 430.380839][T11407] do_getname+0x35/0x390 [ 430.385053][T11407] __x64_sys_symlinkat+0x7c/0xe0 [ 430.389959][T11407] do_syscall_64+0x115/0x870 [ 430.394518][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.400378][T11407] [ 430.402670][T11407] Memory state around the buggy address: [ 430.408264][T11407] ffff88807abb4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.416291][T11407] ffff88807abb4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.424324][T11407] >ffff88807abb4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.432349][T11407] ^ [ 430.436381][T11407] ffff88807abb4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.444408][T11407] ffff88807abb4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.452435][T11407] ================================================================== [ 430.601299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.490116][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 431.490128][ T30] audit: type=1400 audit(1785808668.653:727): avc: denied { bind } for pid=11397 comm="syz.5.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.603011][ T30] audit: type=1400 audit(1785808669.733:728): avc: denied { read } for pid=4957 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 431.641208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.678227][ T30] audit: type=1400 audit(1785808669.733:729): avc: denied { search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.751226][ T30] audit: type=1400 audit(1785808669.733:730): avc: denied { write search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.799797][ T30] audit: type=1400 audit(1785808669.733:731): avc: denied { add_name } for pid=4957 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.851210][ T30] audit: type=1400 audit(1785808669.733:732): avc: denied { create } for pid=4957 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.892949][ T30] audit: type=1400 audit(1785808669.733:733): avc: denied { append open } for pid=4957 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.964854][ T30] audit: type=1400 audit(1785808669.733:734): avc: denied { getattr } for pid=4957 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 432.681218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.724745][T11407] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 432.731926][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.6.1747 Tainted: G S L syzkaller #0 PREEMPT(full) [ 432.742826][T11407] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 432.748949][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 432.758969][T11407] Call Trace: [ 432.762217][T11407] [ 432.765119][T11407] dump_stack_lvl+0x100/0x190 [ 432.769768][T11407] vpanic+0x552/0x970 [ 432.773716][T11407] ? __pfx_vpanic+0x10/0x10 [ 432.778188][T11407] ? pn_bind+0x550/0x5b0 [ 432.782396][T11407] panic+0xd1/0xe0 [ 432.786084][T11407] ? __pfx_panic+0x10/0x10 [ 432.790466][T11407] ? pn_bind+0x550/0x5b0 [ 432.794676][T11407] ? preempt_schedule_common+0x42/0xc0 [ 432.800105][T11407] check_panic_on_warn.cold+0x19/0x34 [ 432.805452][T11407] end_report.part.0+0x3a/0x90 [ 432.810196][T11407] kasan_report.cold+0xe/0x18 [ 432.814851][T11407] ? pn_bind+0x550/0x5b0 [ 432.819061][T11407] pn_bind+0x550/0x5b0 [ 432.823095][T11407] ? rcu_is_watching+0x12/0xc0 [ 432.827833][T11407] ? __pfx_pn_bind+0x10/0x10 [ 432.832388][T11407] usb_add_function+0x219/0x890 [ 432.837208][T11407] ? composite_dev_prepare+0x171/0x420 [ 432.842639][T11407] configfs_composite_bind+0xd83/0x1960 [ 432.848163][T11407] ? kernfs_create_link+0x1bd/0x240 [ 432.853334][T11407] gadget_bind_driver+0x28c/0xbf0 [ 432.858333][T11407] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 432.863943][T11407] ? __pfx_gadget_bind_driver+0x10/0x10 [ 432.869454][T11407] really_probe+0x241/0xa60 [ 432.873929][T11407] __driver_probe_device+0x20e/0x450 [ 432.879191][T11407] driver_probe_device+0x4a/0x140 [ 432.884187][T11407] __driver_attach+0x21f/0x5b0 [ 432.888921][T11407] ? __pfx___driver_attach+0x10/0x10 [ 432.894174][T11407] bus_for_each_dev+0x13e/0x1d0 [ 432.898990][T11407] ? __pfx_bus_for_each_dev+0x10/0x10 [ 432.904327][T11407] ? bus_add_driver+0x2b5/0x5b0 [ 432.909148][T11407] bus_add_driver+0x305/0x5b0 [ 432.913793][T11407] driver_register+0x1e2/0x360 [ 432.918529][T11407] usb_gadget_register_driver_owner+0x132/0x210 [ 432.924737][T11407] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 432.930340][T11407] configfs_write_iter+0x302/0x4e0 [ 432.935429][T11407] vfs_write+0x6ac/0x1050 [ 432.939732][T11407] ? __pfx_configfs_write_iter+0x10/0x10 [ 432.945332][T11407] ? __pfx_vfs_write+0x10/0x10 [ 432.950069][T11407] ksys_write+0x12a/0x250 [ 432.954363][T11407] ? __pfx_ksys_write+0x10/0x10 [ 432.959180][T11407] do_syscall_64+0x115/0x870 [ 432.963747][T11407] ? clear_bhb_loop+0x40/0x90 [ 432.968394][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.974252][T11407] RIP: 0033:0x7f3bdb99e019 [ 432.978637][T11407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.998216][T11407] RSP: 002b:00007f3bd9bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.006596][T11407] RAX: ffffffffffffffda RBX: 00007f3bdbc25fa0 RCX: 00007f3bdb99e019 [ 433.014535][T11407] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000003 [ 433.022481][T11407] RBP: 00007f3bdba3500c R08: 0000000000000000 R09: 0000000000000000 [ 433.030420][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.038356][T11407] R13: 00007f3bdbc26038 R14: 00007f3bdbc25fa0 R15: 00007ffe8dce4a28 [ 433.046296][T11407] [ 433.049319][T11407] Kernel Offset: disabled [ 433.053610][T11407] Rebooting in 86400 seconds..