last executing test programs: 9m15.310297471s ago: executing program 32 (id=262): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 8m49.05935434s ago: executing program 5 (id=486): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) 8m48.961741765s ago: executing program 5 (id=488): socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0xfffffffffffffffc, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000404c05001000000000000109022400010000400009040000020300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1110901a1007508897609309102c0c0"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 8m47.137700633s ago: executing program 5 (id=514): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m45.921675946s ago: executing program 5 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 8m45.655650168s ago: executing program 5 (id=525): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42080, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000400)) 8m45.269552789s ago: executing program 5 (id=529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x2000001c}) dup3(r0, r1, 0x0) 8m44.751484963s ago: executing program 33 (id=529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x2000001c}) dup3(r0, r1, 0x0) 7m15.990733426s ago: executing program 0 (id=1614): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) 7m15.852747485s ago: executing program 0 (id=1618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 7m14.981406247s ago: executing program 0 (id=1636): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0xfffffffffffffca6, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m14.935823703s ago: executing program 0 (id=1637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 7m14.879386963s ago: executing program 0 (id=1638): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 7m14.61263872s ago: executing program 0 (id=1639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000004c0)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0x4be, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4b0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x49c, 0x0, @opaque="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"}}}}}, 0x0) 7m14.525302045s ago: executing program 34 (id=1639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000004c0)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0x4be, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4b0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x49c, 0x0, @opaque="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"}}}}}, 0x0) 3m56.828531996s ago: executing program 6 (id=4113): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3m56.453751314s ago: executing program 6 (id=4118): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) 3m56.308259716s ago: executing program 6 (id=4120): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9f0, 0x1f480, 0x2, 0x321}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m56.125472415s ago: executing program 6 (id=4123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m56.011036139s ago: executing program 6 (id=4124): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 3m55.742692396s ago: executing program 6 (id=4125): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101800, 0x108) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) getdents64(r0, 0x0, 0x0) 3m40.712941057s ago: executing program 35 (id=4125): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101800, 0x108) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) getdents64(r0, 0x0, 0x0) 2m25.129766417s ago: executing program 2 (id=5028): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) chdir(&(0x7f0000000000)='./cgroup\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m24.433238008s ago: executing program 2 (id=5034): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) pipe2(&(0x7f0000000000), 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x1003, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff, 0x0, r2}}], 0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2m24.27096124s ago: executing program 2 (id=5038): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) unshare(0xc040480) r1 = socket$key(0xf, 0x3, 0x2) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) read(r2, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) 2m24.178664953s ago: executing program 2 (id=5039): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) pipe(0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000413, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 2m24.112947663s ago: executing program 2 (id=5041): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 2m23.644990934s ago: executing program 2 (id=5048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}, 0xc004) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000a27000/0x4000)=nil, &(0x7f000039e000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000023d000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000818000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m23.48782788s ago: executing program 36 (id=5048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}, 0xc004) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000a27000/0x4000)=nil, &(0x7f000039e000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000023d000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000818000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 38.615136426s ago: executing program 7 (id=6064): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) 38.340878627s ago: executing program 7 (id=6065): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 35.880688527s ago: executing program 7 (id=6085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000100)={0x2, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500), 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x8, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="a687337ce816ca484e8bacdb1f07bacd5e6f9d3a9ce7a660c134123499d0eeca30d27a068a011eacd599ac2e8c", 0x2d, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) shutdown(r0, 0x1) 35.117023121s ago: executing program 7 (id=6092): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 34.605211622s ago: executing program 7 (id=6099): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) write$binfmt_script(r1, &(0x7f0000001180)={'#! ', './file0'}, 0xb) 33.652728066s ago: executing program 7 (id=6108): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000000)=""/26, 0xfffffffffffffdb9}, 0x7068}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/111, 0xffffffe2}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001a00)=""/171}], 0x0, &(0x7f00000018c0)=""/176, 0x7}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) 33.545233312s ago: executing program 37 (id=6108): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000000)=""/26, 0xfffffffffffffdb9}, 0x7068}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/111, 0xffffffe2}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001a00)=""/171}], 0x0, &(0x7f00000018c0)=""/176, 0x7}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) 3.548508464s ago: executing program 4 (id=6347): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000010800)={@remote, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}}}}}}, 0x0) 3.466589519s ago: executing program 4 (id=6350): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340)) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r0) 3.179271754s ago: executing program 3 (id=6351): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.173526529s ago: executing program 4 (id=6352): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb600000000000000000000181100", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f0000000880)=""/106, 0x6a}, {&(0x7f0000000040)=""/29, 0x1d}, {0x0}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000900)=""/160, 0xa0}], 0x8, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000bc0)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x2, 0x121, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x700, 0x80, 0xa59e, 0x483, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x68, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x85, 0x3, 0x3, [{@multicast1, 0x2}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x2d, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2929}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x0, 0x4, 0x0, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}, @cb_func={0x18, 0xb5dfd661d7e7976a, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ec0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x7c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0), 0x10, 0xb}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfff, 0x9, 0x3, 0x8, 0xf, 0x7ff, 0x3, 0x4, 0x6, 0x5d01, 0x9, 0x9, 0x1, 0x1ff, 0x10, 0x9, 0xfffffffa, 0x200, 0xfff, 0x1, 0x4, 0x6, 0x3, 0xb, 0x4, 0x5fe, 0x4, 0x9, 0x5, 0x7, 0x3, 0x4, 0xffffffff, 0x84, 0x400, 0x8000, 0x9, 0x2ff5, 0xffff, 0x7, 0x4, 0xd5, 0x4, 0x5, 0x8, 0x3ff, 0x4, 0x1, 0x8001, 0x8, 0xa85, 0x4, 0x7, 0x7, 0x1, 0x0, 0x8, 0xffff7fff, 0x1, 0xff, 0x7, 0x1, 0x4, 0x4, 0x0, 0xe6, 0x4, 0x1a, 0x1ff, 0xe, 0x55, 0x7, 0x6, 0x8000008, 0x400, 0x6, 0xffffffff, 0xfffffffe, 0x7, 0x0, 0x80000001, 0x400000, 0x6, 0x401, 0x3, 0x200, 0x1, 0x0, 0x6852, 0x10001, 0x0, 0x3, 0x4, 0xc7, 0xb0, 0xae, 0x8, 0x1, 0x80000000, 0x4, 0x0, 0x6, 0x8, 0x245, 0xfc, 0x8b, 0x80000000, 0x0, 0x5, 0x80000000, 0x5, 0x80000000, 0xa976362a, 0x9, 0x9, 0x8, 0xff, 0x80000000, 0x9, 0x8, 0xc869, 0xffff8001, 0xf7, 0x6, 0x40, 0x8, 0x1, 0xf1, 0x6, 0x7, 0x200, 0x2, 0x200, 0x8, 0x5, 0x8, 0x5, 0x7, 0x1, 0x9, 0x918, 0xc035, 0xe, 0x2, 0x3, 0x4, 0x5, 0x5, 0x7a5e, 0x9d, 0xfffffffb, 0x1, 0x0, 0x5, 0x5, 0x1, 0x9, 0x8, 0x4, 0x6, 0xc93, 0x13e, 0xff, 0x4, 0xfffffffe, 0x7, 0xcd3, 0x6, 0x4, 0xe, 0xffffa776, 0x401, 0x4, 0x8000, 0x3, 0xdbf, 0x10001, 0x0, 0x4, 0x5683e473, 0x13, 0x81, 0xa187, 0x4, 0x1ff, 0x66c, 0x7ff, 0x3610, 0xfffffffd, 0x5, 0x0, 0x9, 0x5, 0xfffff801, 0x0, 0x81, 0xfffffffb, 0x401, 0x6, 0x6, 0xe, 0x101, 0x4, 0x9, 0x4, 0x97c, 0xdb, 0x1, 0x7, 0x7, 0x8, 0x4fbf, 0x160, 0x2, 0x1, 0x5, 0x3, 0x3, 0x1ff, 0x7, 0x8, 0x1, 0x4, 0xa, 0x4, 0x6, 0x400, 0x0, 0x9, 0x2d29, 0x1, 0xffffffff, 0x8001, 0x5, 0x7, 0x109, 0xa, 0xec, 0x5, 0x9, 0xffff8acb, 0x4, 0x9, 0x4, 0x2, 0xffffff35, 0x9, 0x9, 0x5, 0x9, 0x7fff, 0x1, 0x6b, 0x81, 0x1, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x8001, 0x7f5}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 2.97712644s ago: executing program 4 (id=6355): r0 = inotify_init() open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utime(&(0x7f0000000140)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.40916286s ago: executing program 9 (id=6358): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 2.341786624s ago: executing program 4 (id=6359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f538650f01c4b83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.339536783s ago: executing program 1 (id=6369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@delchain={0xac, 0x64, 0xf31, 0xfffffffb, 0x25dfdc03, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x1, 0x1b}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'macvtap0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}, @TCA_FW_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'syzkaller0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xd8de4580905797c6}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.257284932s ago: executing program 4 (id=6360): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0xfffffffffffffeb8, 0x800, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r0) tkill(r0, 0x13) 2.161174587s ago: executing program 1 (id=6361): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = open(0x0, 0x1031c2, 0x0) close(r2) 1.794719946s ago: executing program 9 (id=6362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) write(r2, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r2, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r3, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 1.44182372s ago: executing program 8 (id=6364): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) getdents(r3, &(0x7f00000002c0)=""/201, 0xc9) 1.404510626s ago: executing program 8 (id=6365): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="80fd0200004317122b018f42ab6f15b53098b9108154c550342729b594e158c886514949372d372d39e1dc961b814f3154213cdd3de6382dd1afff1dd9436485d8fb12e40f", 0x45}], 0x1, 0x0, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 1.333432439s ago: executing program 1 (id=6366): pselect6(0x40, &(0x7f0000000040)={0x8, 0x2, 0x2, 0x401, 0x401004, 0x7, 0x7ffffffffffffffd, 0x6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, &(0x7f0000000200)={0x26, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.222456846s ago: executing program 3 (id=6367): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x8000, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.175918384s ago: executing program 3 (id=6368): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.108794341s ago: executing program 3 (id=6370): r0 = inotify_init() open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utime(&(0x7f0000000140)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.108489993s ago: executing program 1 (id=6371): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 878.892293ms ago: executing program 3 (id=6372): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528", 0x78}, {0x0}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 878.072391ms ago: executing program 1 (id=6373): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 874.001365ms ago: executing program 9 (id=6374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073153a00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x1}, 0xc) 667.667947ms ago: executing program 3 (id=6375): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 588.201129ms ago: executing program 9 (id=6376): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 423.023749ms ago: executing program 9 (id=6377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 344.492223ms ago: executing program 8 (id=6378): syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) listen(r0, 0x7) 334.834526ms ago: executing program 1 (id=6379): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 249.851609ms ago: executing program 8 (id=6380): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 170.343519ms ago: executing program 9 (id=6381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 52.910815ms ago: executing program 8 (id=6382): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r5, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 0s ago: executing program 8 (id=6383): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='hybla', 0x5) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@dev={0xfe, 0x80, '\x00', 0xb}, 0x2, 0x0, 0x1, 0x0, 0x100, 0x9}, 0x20) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r1) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x80000000, 0x4) kernel console output (not intermixed with test programs): 09.142199][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.150207][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 509.478968][T20091] lo speed is unknown, defaulting to 1000 [ 509.949781][T20119] fuse: fd is not a fuse device [ 510.108184][T20091] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.116026][T20091] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.123511][T20091] bridge_slave_0: entered allmulticast mode [ 510.131066][T20091] bridge_slave_0: entered promiscuous mode [ 510.141733][T20091] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.155867][T20091] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.163476][T20091] bridge_slave_1: entered allmulticast mode [ 510.186439][T20091] bridge_slave_1: entered promiscuous mode [ 510.242178][T20091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.283763][T20091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.438279][T20091] team0: Port device team_slave_0 added [ 510.472425][T20091] team0: Port device team_slave_1 added [ 510.540983][T20091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.554744][T20091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.636658][T20091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.695110][T20091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.714001][T20091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.740290][T20091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.017680][T20091] hsr_slave_0: entered promiscuous mode [ 511.028771][T20091] hsr_slave_1: entered promiscuous mode [ 511.045390][T20091] debugfs: 'hsr0' already exists in 'hsr' [ 511.057073][T20091] Cannot create hsr debugfs directory [ 511.275248][ T5621] Bluetooth: hci0: command tx timeout [ 511.523675][T20091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 511.689447][T20091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.704344][T20091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 511.784379][T20091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.819604][T20091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 511.835340][T20091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.843521][T20091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 511.876576][T20091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.046513][T20091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.096518][T20091] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.123133][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.130288][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.175518][T11366] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.182620][T11366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.679292][T20091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.948813][T20091] veth0_vlan: entered promiscuous mode [ 512.970565][T20091] veth1_vlan: entered promiscuous mode [ 513.050148][T20091] veth0_macvtap: entered promiscuous mode [ 513.063611][T20091] veth1_macvtap: entered promiscuous mode [ 513.087525][T20091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.108021][T20091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.239480][T20201] Bluetooth: MGMT ver 1.23 [ 513.354782][ T5621] Bluetooth: hci0: command tx timeout [ 513.618263][T20210] lo: left allmulticast mode [ 513.651334][T20210] tunl0: left allmulticast mode [ 513.670133][T20210] gre0: left allmulticast mode [ 514.114896][T20210] gretap0: left allmulticast mode [ 514.197173][T20210] erspan0: left allmulticast mode [ 514.204213][T20210] ip_vti0: left allmulticast mode [ 514.215530][T20210] ip6_vti0: left allmulticast mode [ 514.222415][T20210] sit0: left allmulticast mode [ 514.231111][T20210] ip6tnl0: left allmulticast mode [ 514.240077][T20210] ip6gre0: left allmulticast mode [ 514.249162][T20210] syz_tun: left allmulticast mode [ 514.265288][T20210] ip6gretap0: left allmulticast mode [ 514.278076][T20210] bridge0: left allmulticast mode [ 514.286704][T20210] team0: left allmulticast mode [ 514.294086][T20210] dummy0: left allmulticast mode [ 514.308083][T20210] nlmon0: left allmulticast mode [ 514.314183][T20210] vxcan0: left allmulticast mode [ 514.323189][T20210] vxcan1: left allmulticast mode [ 514.330421][T20210] veth0: left allmulticast mode [ 514.339372][T20210] veth1: left allmulticast mode [ 514.353984][T20210] wg0: left allmulticast mode [ 514.361317][T20210] wg1: left allmulticast mode [ 514.367847][T20210] wg2: left allmulticast mode [ 514.372515][T20221] binder: 20220:20221 ioctl c0306201 200000000080 returned -14 [ 514.375491][T20221] binder: 20220:20221 ioctl c0306201 2000000003c0 returned -14 [ 514.388005][T20210] veth0_to_bridge: left allmulticast mode [ 514.405365][T20210] bridge_slave_0: left allmulticast mode [ 514.413372][T20210] veth0_to_bond: left allmulticast mode [ 514.421316][T20210] bond_slave_0: left allmulticast mode [ 514.428900][T20210] veth1_to_bond: left allmulticast mode [ 514.438214][T20210] bond_slave_1: left allmulticast mode [ 514.456510][T20210] veth0_to_team: left allmulticast mode [ 514.471930][T20210] team_slave_0: left allmulticast mode [ 514.481907][T20210] veth1_to_team: left allmulticast mode [ 514.490158][T20210] team_slave_1: left allmulticast mode [ 514.499904][T20210] veth1_to_batadv: left allmulticast mode [ 514.507451][T20210] batadv_slave_1: left allmulticast mode [ 514.514081][T20210] xfrm0: left allmulticast mode [ 514.520368][T20210] veth0_to_hsr: left allmulticast mode [ 514.527311][T20210] hsr_slave_0: left allmulticast mode [ 514.536521][T20210] bond3: left promiscuous mode [ 514.541316][T20210] bond3: left allmulticast mode [ 514.548168][T20210] gretap1: left promiscuous mode [ 514.561754][T20210] vxlan1: left promiscuous mode [ 514.566707][T20210] vxlan1: left allmulticast mode [ 514.573291][T20210] vxlan2: left promiscuous mode [ 514.578665][T20210] vxlan2: left allmulticast mode [ 514.606472][T11588] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.658099][T20228] tipc: Enabling of bearer rejected, failed to enable media [ 514.678078][ T6289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.687162][T11588] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.705588][ T6289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.712193][ T30] audit: type=1400 audit(1785755915.856:3123): avc: denied { getopt } for pid=20229 comm="syz.8.5087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 514.818901][T11375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.831795][T11375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.865653][ T57] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.897826][ T57] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.920764][ T57] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.937847][ T57] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.987901][T11367] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.008137][T11367] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.039703][T11367] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.058522][T11367] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.067670][T11367] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.088597][T11367] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.438693][ T5621] Bluetooth: hci0: command tx timeout [ 515.776111][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5093'. [ 515.831185][T20251] bond2: entered promiscuous mode [ 515.849170][T20251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.013096][T20251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.030849][T20251] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 516.058594][T20251] bond2: (slave sit1): Error -95 calling set_mac_address [ 516.097575][ T30] audit: type=1400 audit(1785755917.236:3124): avc: denied { name_bind } for pid=20260 comm="syz.9.5096" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 516.171122][ T5621] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 516.205716][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5094'. [ 516.353023][T20277] netlink: 64467 bytes leftover after parsing attributes in process `syz.8.5101'. [ 516.654786][ T8640] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 516.844950][ T8640] usb 8-1: Using ep0 maxpacket: 8 [ 516.857676][ T8640] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.868698][ T8640] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.882796][ T8640] usb 8-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 516.893353][ T8640] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.903700][ T8640] usb 8-1: Product: syz [ 516.911585][ T8640] usb 8-1: Manufacturer: syz [ 516.919270][ T8640] usb 8-1: SerialNumber: syz [ 517.514824][ T5621] Bluetooth: hci0: command tx timeout [ 517.823451][ T8640] usb 8-1: unit 48 not found! [ 517.862953][ T8640] usb 8-1: unit 0 not found! [ 518.023550][ T8640] usb 8-1: USB disconnect, device number 22 [ 518.148104][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.532941][T20325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5121'. [ 518.628808][T20331] syzkaller1: entered promiscuous mode [ 518.634406][T20331] syzkaller1: entered allmulticast mode [ 519.310804][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5128'. [ 519.801103][T20369] netlink: 'syz.3.5136': attribute type 4 has an invalid length. [ 519.894791][ T5729] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 519.939308][T20373] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5138'. [ 519.948480][T20373] netlink: 'syz.7.5138': attribute type 7 has an invalid length. [ 519.958125][T20373] netlink: 'syz.7.5138': attribute type 8 has an invalid length. [ 519.966501][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5138'. [ 519.979230][T20373] erspan0: entered promiscuous mode [ 519.985481][T20373] gretap0: entered promiscuous mode [ 519.991818][T20374] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5138'. [ 520.001508][T20374] netlink: 'syz.7.5138': attribute type 7 has an invalid length. [ 520.002128][T20373] erspan0: left promiscuous mode [ 520.009363][T20374] netlink: 'syz.7.5138': attribute type 8 has an invalid length. [ 520.022882][T20373] gretap0: left promiscuous mode [ 520.023208][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5138'. [ 520.043188][T20374] erspan0: entered promiscuous mode [ 520.049591][T20374] gretap0: entered promiscuous mode [ 520.057200][T20374] erspan0: left promiscuous mode [ 520.063243][T20374] gretap0: left promiscuous mode [ 520.066173][ T5729] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.084299][ T5729] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.098027][ T5729] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 520.107434][ T5729] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.115556][ T5729] usb 10-1: Product: syz [ 520.119996][ T5729] usb 10-1: Manufacturer: syz [ 520.124804][ T5729] usb 10-1: SerialNumber: syz [ 520.136103][ T5729] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 520.159010][ T5729] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 520.183819][ T5729] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 520.435646][ T30] audit: type=1400 audit(1785755921.576:3125): avc: denied { bind } for pid=20386 comm="syz.8.5143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 520.635091][ T5621] Bluetooth: hci5: command tx timeout [ 520.773541][T20403] fuse: fd is not a fuse device [ 520.876408][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5152'. [ 521.347274][T20421] overlayfs: failed to clone upperpath [ 521.393582][T20423] fuse: fd is not a fuse device [ 522.015574][T20436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5164'. [ 522.048981][T20434] syz.8.5163 (20434) used greatest stack depth: 16808 bytes left [ 522.248135][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5167'. [ 522.386301][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5170'. [ 522.475107][T20360] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 522.501396][T20360] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 522.512868][T20360] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 522.526946][T20360] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 522.544447][ T5729] usb 10-1: USB disconnect, device number 2 [ 522.596265][ T5729] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 522.621286][ T5729] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 522.643121][ T5729] ti_usb_3410_5052 10-1:2.0: device disconnected [ 523.120271][ T30] audit: type=1400 audit(1785755924.266:3126): avc: denied { unmount } for pid=20091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 523.476400][T20493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5197'. [ 524.320288][T20532] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5204'. [ 524.640832][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 525.581033][ T30] audit: type=1400 audit(1785755926.656:3127): avc: denied { setattr } for pid=20548 comm="syz.9.5211" name="ns" dev="proc" ino=78651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 525.872212][T20555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5213'. [ 525.978202][T20555] bond7: entered promiscuous mode [ 525.983945][T20555] 8021q: adding VLAN 0 to HW filter on device bond7 [ 526.127552][T20555] 8021q: adding VLAN 0 to HW filter on device bond7 [ 526.150254][T20555] bond7: (slave sit5): The slave device specified does not support setting the MAC address [ 526.162691][T20555] bond7: (slave sit5): Error -95 calling set_mac_address [ 526.894161][T20575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5218'. [ 528.160179][ T30] audit: type=1326 audit(1785755929.306:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.187011][ T30] audit: type=1326 audit(1785755929.306:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.219234][ T30] audit: type=1326 audit(1785755929.306:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.255570][ T30] audit: type=1326 audit(1785755929.306:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.283150][ T30] audit: type=1326 audit(1785755929.306:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.310224][ T30] audit: type=1326 audit(1785755929.306:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.338117][ T30] audit: type=1326 audit(1785755929.306:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.367113][ T30] audit: type=1326 audit(1785755929.306:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.394873][ T30] audit: type=1326 audit(1785755929.306:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20591 comm="syz.3.5225" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fc19e019 code=0x7fc00000 [ 528.846282][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5233'. [ 528.868592][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5233'. [ 531.083175][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5253'. [ 532.033561][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 532.033577][ T30] audit: type=1400 audit(1785755933.176:3189): avc: denied { nlmsg_read } for pid=20691 comm="syz.8.5266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 532.474746][T17083] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 532.475862][ T5621] Bluetooth: hci2: command 0x1003 tx timeout [ 532.602573][T20696] netlink: 'syz.3.5263': attribute type 1 has an invalid length. [ 532.657378][T20696] 8021q: adding VLAN 0 to HW filter on device bond6 [ 532.766514][T20696] bond6: (slave veth7): Enslaving as an active interface with a down link [ 532.881514][T20698] veth0_virt_wifi: entered promiscuous mode [ 532.916358][T20698] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 532.955636][T20696] bond6: (slave veth0_virt_wifi): Releasing active interface [ 533.887780][T20716] fuse: fd is not a fuse device [ 534.009950][T20718] overlayfs: failed to clone upperpath [ 534.793846][T20726] netlink: 'syz.3.5278': attribute type 83 has an invalid length. [ 534.860286][T20727] netlink: 'syz.3.5278': attribute type 83 has an invalid length. [ 535.737315][T20740] netlink: 'syz.4.5283': attribute type 1 has an invalid length. [ 535.927503][T20740] 8021q: adding VLAN 0 to HW filter on device bond8 [ 535.969870][T20744] bond8: (slave veth19): Enslaving as an active interface with a down link [ 535.995208][T20745] veth0_virt_wifi: entered promiscuous mode [ 536.015057][T20745] bond8: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 536.036720][T20750] bond8: (slave veth0_virt_wifi): Releasing active interface [ 536.142720][T20757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.190489][ T30] audit: type=1400 audit(1785755937.336:3190): avc: denied { watch watch_reads } for pid=20759 comm="syz.4.5288" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 536.262030][T20765] tipc: Enabling of bearer rejected, failed to enable media [ 536.344301][T20769] net_ratelimit: 12 callbacks suppressed [ 536.344315][T20769] 0: reclassify loop, rule prio 0, protocol 03 [ 536.812063][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5296'. [ 536.835699][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5296'. [ 536.839141][T20783] netlink: 'syz.4.5297': attribute type 1 has an invalid length. [ 536.847419][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5296'. [ 536.869249][T20783] 8021q: adding VLAN 0 to HW filter on device bond9 [ 536.918645][T20783] bond9: (slave veth21): Enslaving as an active interface with a down link [ 536.946506][T20783] bond9: (slave dummy0): making interface the new active one [ 536.955417][T20783] dummy0: entered promiscuous mode [ 536.960924][T20783] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 536.976985][T20783] netlink: 'syz.4.5297': attribute type 10 has an invalid length. [ 536.984919][T20783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5297'. [ 537.014005][T20783] bond9: (slave dummy0): Releasing active interface [ 537.230973][T20790] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5298'. [ 537.281926][T20790] bond1: entered promiscuous mode [ 537.302069][T20790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.424261][T20790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.439960][T20790] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 537.468987][T20790] bond1: (slave sit1): Error -95 calling set_mac_address [ 537.694958][ T30] audit: type=1400 audit(1785755938.836:3191): avc: denied { bind } for pid=20810 comm="syz.8.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 537.867256][T20818] fuse: fd is not a fuse device [ 537.883094][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5311'. [ 537.925742][T20822] netlink: 'syz.4.5311': attribute type 5 has an invalid length. [ 537.933627][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5311'. [ 538.024390][T20826] overlayfs: failed to clone upperpath [ 538.232699][T20835] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5317'. [ 538.711235][T20867] overlayfs: failed to clone upperpath [ 538.776768][T20863] fuse: fd is not a fuse device [ 538.948016][T20872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5331'. [ 538.958082][T20872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5331'. [ 539.350011][T20883] bpf: Bad value for 'context' [ 539.625027][ T30] audit: type=1326 audit(1785755940.766:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 539.694746][ T30] audit: type=1326 audit(1785755940.766:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 539.701806][T20896] netlink: 'syz.8.5341': attribute type 1 has an invalid length. [ 539.732036][ T30] audit: type=1326 audit(1785755940.766:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 539.804751][ T30] audit: type=1326 audit(1785755940.766:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 539.856198][ T30] audit: type=1326 audit(1785755940.806:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 539.920444][T20899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.933143][ T30] audit: type=1326 audit(1785755940.816:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 539.959803][T20899] bond3: (slave bond4): making interface the new active one [ 539.971993][T20899] bond3: (slave bond4): Enslaving as an active interface with an up link [ 539.988606][T20902] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 540.025615][ T30] audit: type=1326 audit(1785755940.816:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 540.052440][ T30] audit: type=1326 audit(1785755940.826:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8591b5e84e code=0x7ffc0000 [ 540.083540][ T30] audit: type=1326 audit(1785755940.826:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20892 comm="syz.4.5340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8591b5e84e code=0x7ffc0000 [ 540.218528][T20913] overlayfs: failed to clone upperpath [ 540.275712][T13102] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 540.339808][T20919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.399170][ T5736] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 540.415365][ T5736] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 540.422948][T20919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.435205][T13102] usb 8-1: Using ep0 maxpacket: 8 [ 540.474249][ T3340] wlan1: authenticated [ 540.488944][T13102] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.498845][ T3340] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 540.503681][T20919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.506039][ T3340] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 540.520985][T13102] usb 8-1: config 0 has no interfaces? [ 540.524070][ T3340] wlan1: associated [ 540.552395][T13102] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 540.571577][T13102] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.580266][T13102] usb 8-1: Product: syz [ 540.584445][T13102] usb 8-1: Manufacturer: syz [ 540.589356][T13102] usb 8-1: SerialNumber: syz [ 540.596258][T13102] usb 8-1: config 0 descriptor?? [ 540.820958][ T5736] usb 8-1: USB disconnect, device number 23 [ 541.043861][T20936] fuse: fd is not a fuse device [ 542.361278][T20986] __nla_validate_parse: 2 callbacks suppressed [ 542.361295][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5369'. [ 543.020398][T21008] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 544.481247][T21048] fuse: fd is not a fuse device [ 544.632273][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 544.632289][ T30] audit: type=1326 audit(1785755945.776:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 544.705736][ T30] audit: type=1326 audit(1785755945.776:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 544.762842][ T30] audit: type=1326 audit(1785755945.776:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 544.810699][ T30] audit: type=1326 audit(1785755945.776:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 544.839175][ T30] audit: type=1326 audit(1785755945.776:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 544.869752][ T30] audit: type=1326 audit(1785755945.836:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d5d35e84e code=0x7ffc0000 [ 544.904600][ T30] audit: type=1326 audit(1785755945.836:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d5d35e84e code=0x7ffc0000 [ 544.932399][ T30] audit: type=1326 audit(1785755945.836:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d5d35e84e code=0x7ffc0000 [ 544.960297][ T30] audit: type=1326 audit(1785755945.836:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d5d35e84e code=0x7ffc0000 [ 544.988397][ T30] audit: type=1326 audit(1785755945.836:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.9.5396" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d5d35e84e code=0x7ffc0000 [ 545.149238][ T5736] libceph: connect (1)[c::]:6789 error -101 [ 545.165767][ T5736] libceph: mon0 (1)[c::]:6789 connect error [ 545.184970][ T5729] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 545.234888][T21061] ceph: No mds server is up or the cluster is laggy [ 545.526804][ T5729] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 545.557753][ T5729] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 545.606218][ T5729] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 545.625931][ T5729] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.654443][ T5729] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 545.675445][ T5729] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 545.716473][ T5729] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 545.736481][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 545.753886][ T5729] usb 8-1: Product: syz [ 545.760045][ T5729] usb 8-1: Manufacturer: syz [ 545.780580][T21057] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 545.792964][ T5729] cdc_wdm 8-1:1.0: skipping garbage [ 545.808914][ T5729] cdc_wdm 8-1:1.0: skipping garbage [ 545.851730][ T5729] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 545.868290][ T5729] cdc_wdm 8-1:1.0: Unknown control protocol [ 545.911156][T21084] netlink: 'syz.9.5406': attribute type 1 has an invalid length. [ 546.008725][T21084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.058665][T21086] bond2: (slave veth1): Enslaving as an active interface with a down link [ 546.074026][T21087] veth0_virt_wifi: entered promiscuous mode [ 546.087416][T21087] bond2: (slave veth0_virt_wifi): making interface the new active one [ 546.113088][T21087] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 546.175325][T21084] bond2: (slave veth0_virt_wifi): Releasing active interface [ 546.905455][T21093] netlink: 798 bytes leftover after parsing attributes in process `syz.4.5409'. [ 546.905831][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 546.921101][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 546.928517][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 546.935100][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 546.941352][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 546.947951][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 546.954784][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 546.961376][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 546.974814][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 546.981411][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 546.991997][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 546.998612][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 547.009415][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 547.016020][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 547.024771][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 547.031356][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 547.044738][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 547.051354][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 547.063027][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 547.069611][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 547.105357][T21100] fuse: fd is not a fuse device [ 547.363668][T21110] overlayfs: failed to clone upperpath [ 547.432601][T21098] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 547.447036][T21098] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 547.463961][T21098] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 547.479026][T21098] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 547.623381][ T5736] usb 8-1: USB disconnect, device number 24 [ 547.897417][T21122] overlayfs: failed to clone upperpath [ 548.285222][T21135] bond2: entered allmulticast mode [ 548.295845][T21133] bond2: left allmulticast mode [ 548.358327][T21138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21138 comm=syz.8.5424 [ 548.384470][T21138] netlink: 'syz.8.5424': attribute type 3 has an invalid length. [ 548.404350][T21138] netlink: 'syz.8.5424': attribute type 3 has an invalid length. [ 549.318072][T21153] netlink: 'syz.8.5430': attribute type 1 has an invalid length. [ 549.341862][T21153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 549.592849][T21153] bond5: (slave veth3): Enslaving as an active interface with a down link [ 549.614506][T21155] veth0_virt_wifi: entered promiscuous mode [ 549.647409][T21155] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 549.672218][T21156] bond5: (slave veth0_virt_wifi): Releasing active interface [ 549.808473][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 549.808490][ T30] audit: type=1400 audit(1785755950.956:3342): avc: denied { read } for pid=21159 comm="syz.8.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 549.870484][T17083] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 549.927627][T17083] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 549.938500][T17083] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 550.154547][ T30] audit: type=1400 audit(1785755951.296:3343): avc: denied { mounton } for pid=21171 comm="syz.3.5436" path="/file0" dev="bpf" ino=82967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 550.229295][T21172] lo speed is unknown, defaulting to 1000 [ 550.255761][T21174] overlayfs: upper fs does not support tmpfile. [ 550.580437][ T5609] libceph: connect (1)[c::]:6789 error -101 [ 550.587910][ T5609] libceph: mon0 (1)[c::]:6789 connect error [ 550.822310][T21179] ceph: No mds server is up or the cluster is laggy [ 550.847053][ T5729] libceph: connect (1)[c::]:6789 error -101 [ 550.860813][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 550.907833][T21197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.934212][T21197] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.5444'. [ 552.005354][ T30] audit: type=1400 audit(1785755953.156:3344): avc: denied { create } for pid=21236 comm="syz.9.5460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 552.006131][T21237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5460'. [ 552.044926][ T30] audit: type=1400 audit(1785755953.156:3345): avc: denied { write } for pid=21236 comm="syz.9.5460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 552.144980][T21243] netlink: 'syz.8.5461': attribute type 1 has an invalid length. [ 552.151679][T21237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 552.222347][T21246] fuse: fd is not a fuse device [ 552.260260][T21237] bond4 (unregistering): Released all slaves [ 552.344400][T21244] bond6: (slave veth5): Enslaving as an active interface with a down link [ 552.467498][T21260] tipc: Failed to remove unknown binding: 66,0,0/0:950436424/950436425 [ 552.496355][T21260] tipc: Failed to remove unknown binding: 66,0,0/0:950436424/950436425 [ 552.765053][T21280] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 552.780428][T21280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5472'. [ 554.981121][T21333] netlink: 'syz.9.5488': attribute type 1 has an invalid length. [ 555.107813][T21333] bond4: (slave bridge1): making interface the new active one [ 555.125769][T21333] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 555.403891][T21351] netlink: 'syz.4.5493': attribute type 1 has an invalid length. [ 555.435512][T21351] 8021q: adding VLAN 0 to HW filter on device bond10 [ 555.497725][T21355] fuse: Bad value for 'fd' [ 555.504542][T21351] bond10: (slave veth23): Enslaving as an active interface with a down link [ 555.580283][T21358] bond10: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 555.679848][T21351] bond10: (slave veth0_virt_wifi): Releasing active interface [ 555.783953][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 555.823535][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 555.872749][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 555.909786][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 555.939773][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 555.980780][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 555.998625][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 556.014214][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 556.074981][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 556.113256][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.8.5497 [ 556.652157][T21383] netlink: zone id is out of range [ 556.662551][T21383] netlink: get zone limit has 4 unknown bytes [ 557.400309][T21412] netlink: 'syz.3.5515': attribute type 1 has an invalid length. [ 557.477419][T21412] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.536816][T21414] bond7: (slave veth9): Enslaving as an active interface with a down link [ 557.548404][T21412] bond7: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 557.590715][T21412] bond7: (slave veth0_virt_wifi): Releasing active interface [ 558.138032][T21425] overlayfs: failed to resolve './cgroup': -2 [ 558.336004][T21437] lo speed is unknown, defaulting to 1000 [ 558.372184][T21431] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5522'. [ 558.382789][ T30] audit: type=1326 audit(1785755959.526:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21436 comm="syz.4.5524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x0 [ 558.430971][T21431] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5522'. [ 558.449478][T21443] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5526'. [ 558.482498][T21443] unsupported nlmsg_type 40 [ 558.511447][ T30] audit: type=1326 audit(1785755959.656:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 558.540652][ T30] audit: type=1326 audit(1785755959.656:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 558.567850][ T30] audit: type=1326 audit(1785755959.656:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 558.594947][ T30] audit: type=1326 audit(1785755959.656:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 558.621833][ T30] audit: type=1326 audit(1785755959.656:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 558.649532][ T30] audit: type=1326 audit(1785755959.656:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 558.676588][ T30] audit: type=1326 audit(1785755959.656:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 558.704049][ T30] audit: type=1326 audit(1785755959.656:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 558.732291][ T30] audit: type=1326 audit(1785755959.656:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21447 comm="syz.9.5527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 559.441579][ T5729] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 559.716136][ T5729] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 560.245322][T13102] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 560.476465][T21458] ceph: No mds server is up or the cluster is laggy [ 562.928010][T21561] 9p: Bad value for 'rfdno' [ 563.204136][T21568] netlink: 'syz.8.5568': attribute type 25 has an invalid length. [ 563.400802][T21573] netlink: 'syz.8.5569': attribute type 1 has an invalid length. [ 563.470726][T21573] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.643683][T21575] bond7: (slave veth7): Enslaving as an active interface with a down link [ 563.660425][T21573] bond7: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 563.690482][T21578] bond7: (slave veth0_virt_wifi): Releasing active interface [ 563.796871][T21584] fuse: fd is not a fuse device [ 564.120949][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5577'. [ 564.652055][ T30] kauditd_printk_skb: 2578 callbacks suppressed [ 564.652071][ T30] audit: type=1400 audit(1785755965.796:5934): avc: denied { write } for pid=21601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.746360][ T30] audit: type=1326 audit(1785755965.896:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.9.5580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 564.823438][ T30] audit: type=1400 audit(1785755965.896:5936): avc: denied { write } for pid=21624 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.871547][ T30] audit: type=1326 audit(1785755965.926:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.9.5580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 564.880761][ T5271] veth0_vlan: left promiscuous mode [ 564.898496][ T30] audit: type=1326 audit(1785755965.936:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.9.5580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 564.934020][ T30] audit: type=1326 audit(1785755965.936:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.9.5580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 564.972247][ T30] audit: type=1326 audit(1785755965.936:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.9.5580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 565.010017][ T30] audit: type=1326 audit(1785755965.966:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.9.5580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 565.019580][T13102] veth0_vlan: entered promiscuous mode [ 565.089043][ T30] audit: type=1326 audit(1785755965.966:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.9.5580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 565.182983][ T30] audit: type=1326 audit(1785755965.966:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21614 comm="syz.9.5580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d39e019 code=0x7ffc0000 [ 566.016074][T21659] fuse: fd is not a fuse device [ 567.068115][T21694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5603'. [ 567.078858][T21694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5603'. [ 567.175749][ T5729] IPVS: starting estimator thread 0... [ 567.275158][T21699] IPVS: using max 45 ests per chain, 108000 per kthread [ 567.682663][T21707] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5606] was attempted by " [ 568.098099][T21724] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.5614'. [ 568.212168][T21727] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.5614'. [ 568.573716][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5617'. [ 568.584366][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5617'. [ 568.593757][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5617'. [ 568.603445][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5617'. [ 568.612591][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5617'. [ 568.778348][T21743] overlayfs: failed to clone upperpath [ 568.829647][T21749] fuse: fd is not a fuse device [ 569.448747][T21764] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 569.452433][T21763] IPVS: stopping backup sync thread 21764 ... [ 569.700093][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 569.700108][ T30] audit: type=1326 audit(1785755970.846:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 569.775538][ T30] audit: type=1326 audit(1785755970.846:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 569.832702][ T30] audit: type=1326 audit(1785755970.846:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 569.884331][ T30] audit: type=1326 audit(1785755970.846:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 569.911375][ T30] audit: type=1326 audit(1785755970.886:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 569.939403][ T30] audit: type=1326 audit(1785755970.896:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 569.974897][ T30] audit: type=1326 audit(1785755970.896:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 570.004983][ T30] audit: type=1326 audit(1785755970.896:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 570.034749][ T30] audit: type=1326 audit(1785755970.896:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 570.062054][ T30] audit: type=1326 audit(1785755970.896:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21765 comm="syz.4.5628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 571.325467][T21800] 8021q: adding VLAN 0 to HW filter on device bond8 [ 572.476158][T21817] fuse: fd is not a fuse device [ 572.745283][T21832] __nla_validate_parse: 1 callbacks suppressed [ 572.745295][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5655'. [ 572.765689][T21832] hsr_slave_0 (unregistering): left promiscuous mode [ 573.021188][T21837] overlayfs: failed to resolve './bus': -2 [ 574.803476][T21870] SET target dimension over the limit! [ 574.862522][T21878] netlink: 'syz.9.5670': attribute type 9 has an invalid length. [ 574.928446][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 574.928461][ T30] audit: type=1326 audit(1785755976.076:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.7.5662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a4f9e019 code=0x7ffc0000 [ 574.962099][ T30] audit: type=1326 audit(1785755976.116:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.7.5662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a4f9e019 code=0x7ffc0000 [ 575.025008][T21886] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5673'. [ 575.151236][ T30] audit: type=1326 audit(1785755976.296:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.7.5662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe4a4f9e019 code=0x7ffc0000 [ 575.417857][ T30] audit: type=1326 audit(1785755976.566:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21860 comm="syz.7.5662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe4a4f9e019 code=0x7ffc0000 [ 575.924237][ T30] audit: type=1400 audit(1785755977.066:6089): avc: denied { watch } for pid=21912 comm="syz.8.5683" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 575.955703][ T30] audit: type=1400 audit(1785755977.046:6088): avc: denied { watch watch_reads } for pid=21905 comm="syz.7.5681" path="/" dev="ramfs" ino=83933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 576.011698][T21915] xt_connbytes: Forcing CT accounting to be enabled [ 576.018804][T21915] set match dimension is over the limit! [ 576.972193][T21941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5694'. [ 577.004191][T21941] selinux_netlink_send: 694 callbacks suppressed [ 577.004208][T21941] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21941 comm=syz.4.5694 [ 577.080738][ T30] audit: type=1800 audit(1785755978.226:6090): pid=21911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5681" name="bus" dev="ramfs" ino=83934 res=0 errno=0 [ 577.785277][ T30] audit: type=1400 audit(1785755978.936:6091): avc: denied { write } for pid=21947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.897241][ T30] audit: type=1400 audit(1785755979.046:6092): avc: denied { write } for pid=21963 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.564717][ T5729] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 578.768879][T21992] lo speed is unknown, defaulting to 1000 [ 578.814730][ T5729] usb 8-1: Using ep0 maxpacket: 32 [ 578.836512][ T5729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.874767][ T5729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.890641][ T5729] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 578.907014][T21995] netlink: 'syz.4.5708': attribute type 11 has an invalid length. [ 578.914938][ T5729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.929403][ T5729] usb 8-1: config 0 descriptor?? [ 579.060106][T21997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.071239][T21997] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.171995][T21997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.185697][T21997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.208859][T21997] veth1_vlan: left promiscuous mode [ 579.216557][T21997] veth1_vlan: entered promiscuous mode [ 579.226772][T21997] veth1_macvtap: left promiscuous mode [ 579.234222][T21997] veth0_macvtap: left promiscuous mode [ 579.240902][T21997] veth0_macvtap: entered promiscuous mode [ 579.247793][T21997] veth1_macvtap: entered promiscuous mode [ 579.293970][T21997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.335997][T21997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.348194][T21997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.363007][T21997] gretap0: entered promiscuous mode [ 579.393174][T21997] 8021q: adding VLAN 0 to HW filter on device eth0 [ 579.404849][T21997] 8021q: adding VLAN 0 to HW filter on device eth1 [ 579.417497][T21997] 8021q: adding VLAN 0 to HW filter on device eth2 [ 579.429403][T21997] 8021q: adding VLAN 0 to HW filter on device eth3 [ 579.453051][T21997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 579.496348][T21997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.518763][T21997] 8021q: adding VLAN 0 to HW filter on device bond6 [ 579.545801][T21997] 8021q: adding VLAN 0 to HW filter on device bond7 [ 579.627540][ T5729] ft260 0003:0403:6030.002F: unknown main item tag 0x0 [ 579.646254][ T5729] ft260 0003:0403:6030.002F: unknown main item tag 0x0 [ 579.803941][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5715'. [ 579.845893][T11367] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 579.864286][T11367] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 579.882982][ T5729] ft260 0003:0403:6030.002F: chip code: 0000 0000 [ 579.889982][T11367] netdevsim netdevsim4 eth0: set [0, 2] type 1 family 0 port 8472 - 0 [ 579.900115][T11367] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.970324][ T5609] libceph: connect (1)[c::]:6789 error -101 [ 579.979534][ T5609] libceph: mon0 (1)[c::]:6789 connect error [ 580.087662][ T5729] ft260 0003:0403:6030.002F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 580.112625][T22021] ceph: No mds server is up or the cluster is laggy [ 580.145485][T11363] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 580.156770][T11363] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 580.187799][T11363] netdevsim netdevsim4 eth2: set [0, 2] type 1 family 0 port 8472 - 0 [ 580.196814][T11363] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.214427][T11363] bond8: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 580.242981][T11363] bond8: (slave veth19): making interface the new active one [ 580.283675][T11363] bond8: active interface up! [ 580.330037][ T5729] ft260 0003:0403:6030.002F: failed to retrieve status: -32, no wakeup [ 580.340393][ T5729] ft260 0003:0403:6030.002F: failed to retrieve status: -32 [ 580.561562][ T5736] usb 8-1: USB disconnect, device number 25 [ 580.599252][T11359] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 580.609755][T11359] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 580.620462][T11359] netdevsim netdevsim4 eth1: set [0, 2] type 1 family 0 port 8472 - 0 [ 580.628981][T11359] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.641861][T11359] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 580.650548][T11359] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 580.659050][T11359] netdevsim netdevsim4 eth3: set [0, 2] type 1 family 0 port 8472 - 0 [ 580.667559][T11359] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.737587][T11363] bond9: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 580.937272][T11363] bond9: (slave veth21): making interface the new active one [ 580.949071][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5725'. [ 580.960797][T11363] bond9: active interface up! [ 580.979942][ T30] audit: type=1400 audit(1785755982.126:6093): avc: denied { bind } for pid=22041 comm="syz.8.5724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 581.166316][T11366] bond10: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 581.183556][T11366] bond10: (slave veth23): making interface the new active one [ 581.207402][T11366] bond10: active interface up! [ 581.526732][ T30] audit: type=1400 audit(1785755982.676:6094): avc: denied { watch watch_reads } for pid=22054 comm="syz.8.5730" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 582.127289][T22070] overlayfs: failed to clone lowerpath [ 582.135706][T22070] overlayfs: failed to clone lowerpath [ 582.201004][T22059] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5732'. [ 582.633617][T22088] overlayfs: failed to clone upperpath [ 583.848668][T22121] xt_hashlimit: size too large, truncated to 1048576 [ 583.866500][T22123] netlink: 'syz.8.5757': attribute type 11 has an invalid length. [ 583.957431][T22123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.967085][T22123] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.016520][T22123] batman_adv: batadv0: Interface activated: dummy0 [ 584.023798][T22123] batadv0: mtu less than device minimum [ 584.030982][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.042333][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.053647][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.064929][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.076173][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.087441][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.098731][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.110006][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.121258][T22123] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.227475][T22123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.292578][T22123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.339995][T22123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.382843][T22123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.394384][T22134] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5761'. [ 584.411898][T22123] veth1_vlan: left promiscuous mode [ 584.419427][T22123] veth0_vlan: left promiscuous mode [ 584.428134][T22123] veth0_vlan: entered promiscuous mode [ 584.434985][T22123] veth1_vlan: entered promiscuous mode [ 584.442999][T22123] veth1_macvtap: left promiscuous mode [ 584.449911][T22123] veth0_macvtap: left promiscuous mode [ 584.458137][T22123] veth0_macvtap: entered promiscuous mode [ 584.466431][T22123] veth1_macvtap: entered promiscuous mode [ 584.497842][T22123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.509258][T22123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.517219][T22123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.527277][T22123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.537625][T22123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.551198][T22123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.564750][T22123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.577827][T22123] 8021q: adding VLAN 0 to HW filter on device bond6 [ 584.598581][ T5729] lo speed is unknown, defaulting to 1000 [ 584.604721][ T5729] syz2: Port: 1 Link ACTIVE [ 584.634601][T11820] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.641707][T11820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.651877][T11820] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.658962][T11820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.915285][T11359] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.940848][T11359] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.953512][T11359] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.962830][T11359] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.993116][ T6279] bond7: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 585.006187][ T6279] bond7: (slave veth7): making interface the new active one [ 585.025659][ T6279] bond7: active interface up! [ 585.059354][T11359] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 585.110823][T11359] bond5: (slave veth3): making interface the new active one [ 585.153187][T22148] fuse: fd is not a fuse device [ 585.163257][T11359] bond5: active interface up! [ 585.177370][T11367] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 585.205325][T11367] bond6: (slave veth5): making interface the new active one [ 585.243213][T11367] bond6: active interface up! [ 585.855236][T22164] bond7: entered allmulticast mode [ 585.880343][T22163] bond7: left allmulticast mode [ 586.042523][T22171] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 586.042523][T22171] The task syz.8.5771 (22171) triggered the difference, watch for misbehavior. [ 586.938273][T22192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5780'. [ 586.957385][T22191] overlayfs: failed to clone upperpath [ 587.132241][T22204] fuse: fd is not a fuse device [ 588.112764][T22222] xt_hashlimit: size too large, truncated to 1048576 [ 588.136162][T22222] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 588.313040][T22229] fuse: fd is not a fuse device [ 588.360048][T22233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5795'. [ 588.539398][T22238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5797'. [ 588.931755][ T30] audit: type=1400 audit(1785755990.076:6095): avc: denied { setattr } for pid=22239 comm="syz.7.5796" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 589.076054][T11363] net_ratelimit: 145 callbacks suppressed [ 589.076073][T11363] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.100841][T11363] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.195514][T11816] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 589.210771][T11816] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 589.228390][T11363] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.237941][T11363] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.272586][T22270] fuse: fd is not a fuse device [ 589.358279][T12074] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.367059][T12074] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.485805][T11369] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.494065][T11369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.723884][ T30] audit: type=1400 audit(1785755991.866:6096): avc: denied { create } for pid=22298 comm="syz.4.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 590.792300][ T30] audit: type=1400 audit(1785755991.936:6097): avc: denied { create } for pid=22307 comm="syz.4.5822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.830691][ T30] audit: type=1400 audit(1785755991.966:6098): avc: denied { ioctl } for pid=22307 comm="syz.4.5822" path="socket:[84784]" dev="sockfs" ino=84784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.911832][ T30] audit: type=1400 audit(1785755991.966:6099): avc: denied { write } for pid=22307 comm="syz.4.5822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 591.033671][ T30] audit: type=1400 audit(1785755992.176:6100): avc: denied { write } for pid=22305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.169315][ T30] audit: type=1400 audit(1785755992.316:6101): avc: denied { write } for pid=22331 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.237571][T22333] lo speed is unknown, defaulting to 1000 [ 591.251356][ T30] audit: type=1400 audit(1785755992.396:6102): avc: denied { read } for pid=22332 comm="syz.4.5827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 591.419570][T22343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5829'. [ 592.455117][ T30] audit: type=1800 audit(1785755993.606:6103): pid=22324 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5820" name="bus" dev="ramfs" ino=85627 res=0 errno=0 [ 592.577181][T22366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5839'. [ 592.700835][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 592.972718][T22385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5845'. [ 593.074002][T22391] fuse: fd is not a fuse device [ 593.410804][T22403] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 593.636596][T22412] fuse: Bad value for 'fd' [ 593.643613][T22412] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5856'. [ 593.740381][T22417] bond1: entered allmulticast mode [ 593.763215][T22416] bond1: left allmulticast mode [ 593.781814][ T30] audit: type=1400 audit(1785755994.926:6104): avc: denied { nlmsg_read } for pid=22419 comm="syz.8.5860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 594.095324][T21932] net_ratelimit: 96 callbacks suppressed [ 594.095359][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.130446][T21932] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.265189][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.278217][T21932] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.315977][T22427] Invalid source name [ 594.397923][T12070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 594.412588][T12070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 594.427201][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.440308][T12073] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.565269][T12070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.574387][T12070] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.386198][T17083] Bluetooth: hci3: ISO packet for unknown connection handle 201 [ 595.557597][T22467] team0: Port device xfrm0 added [ 595.582215][T22467] tipc: Started in network mode [ 595.592795][T22467] tipc: Node identity 8e1604053b4c, cluster identity 4711 [ 595.601600][T22467] tipc: Enabled bearer , priority 0 [ 595.624770][ T5796] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 595.797282][T22462] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5873'. [ 595.812125][ T30] audit: type=1326 audit(1785755996.956:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 595.820486][ T5796] usb 8-1: unable to get BOS descriptor or descriptor too short [ 595.859224][ T5796] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 595.867285][ T5796] usb 8-1: can't read configurations, error -71 [ 595.870056][ T30] audit: type=1326 audit(1785755996.986:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 595.955794][ T30] audit: type=1326 audit(1785755996.986:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 595.985044][ T30] audit: type=1326 audit(1785755996.986:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 596.012446][ T30] audit: type=1326 audit(1785755996.986:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 596.049801][ T30] audit: type=1326 audit(1785755996.986:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 596.080100][ T30] audit: type=1326 audit(1785755996.996:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 596.109739][ T30] audit: type=1326 audit(1785755996.996:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 596.138504][ T30] audit: type=1326 audit(1785755997.006:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 596.207092][ T30] audit: type=1326 audit(1785755997.056:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22481 comm="syz.4.5884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8591b9e019 code=0x7ffc0000 [ 596.616607][T13102] tipc: Node number set to 3042575365 [ 597.185858][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5892'. [ 597.194969][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5892'. [ 598.083808][T22543] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5900'. [ 598.292763][T22551] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5907'. [ 598.933838][T22567] overlayfs: failed to clone upperpath [ 598.953834][T22568] netlink: 'syz.4.5913': attribute type 12 has an invalid length. [ 598.954006][T22564] siw: device registration error -23 [ 599.231267][T12073] net_ratelimit: 93 callbacks suppressed [ 599.231289][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.245240][T12070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 599.260270][T12070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 599.275837][T12073] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.387160][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.396125][T12073] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.525345][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.539048][T11361] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.674958][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.684588][T11361] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.775104][T13102] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 599.967733][T13102] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 599.977197][T13102] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 599.985650][T13102] usb 8-1: Product: syz [ 599.989971][T13102] usb 8-1: SerialNumber: syz [ 599.999317][T13102] usb 8-1: config 0 descriptor?? [ 600.343917][T22622] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5930'. [ 600.557714][T13102] hso 8-1:0.0: Failed to find INT IN ep [ 600.781156][ T8633] usb 8-1: USB disconnect, device number 28 [ 601.539266][T22641] 9p: Bad value for 'wfdno' [ 602.854394][T22680] fuse: fd is not a fuse device [ 603.356020][T22692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5957'. [ 603.482628][T22700] netlink: 'syz.9.5962': attribute type 2 has an invalid length. [ 603.493360][T22700] : entered promiscuous mode [ 603.640183][T22707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5961'. [ 603.974507][T22722] overlayfs: failed to clone upperpath [ 603.978003][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 603.978017][ T30] audit: type=1326 audit(1785756005.126:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22713 comm="syz.4.5967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8591b9e019 code=0x0 [ 604.256445][ T57] net_ratelimit: 93 callbacks suppressed [ 604.256465][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.277535][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.294714][T13102] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 604.382322][T22739] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5975'. [ 604.397090][T12072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.417185][T12072] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.484954][T12072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 604.499626][T12072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.538358][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.556684][T21932] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.579114][T13102] usb 8-1: config 160 has an invalid interface number: 200 but max is 0 [ 604.588463][T13102] usb 8-1: config 160 has no interface number 0 [ 604.595530][T13102] usb 8-1: config 160 interface 200 has no altsetting 0 [ 604.604415][T13102] usb 8-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 604.614550][T13102] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.624522][T13102] usb 8-1: Product: syz [ 604.643638][T13102] usb 8-1: Manufacturer: syz [ 604.655738][T13102] usb 8-1: SerialNumber: syz [ 604.676014][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.691389][T21932] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.032933][T22759] tipc: Enabling of bearer rejected, failed to enable media [ 605.188313][T22768] netlink: 'syz.9.5984': attribute type 3 has an invalid length. [ 605.198744][T22768] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5984'. [ 605.249983][T13102] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.263147][T13102] usb 8-1: MIDIStreaming interface descriptor not found [ 605.343288][T13102] usb 8-1: USB disconnect, device number 29 [ 605.432479][T22774] udevd[22774]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.867036][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5988'. [ 605.952396][ T30] audit: type=1800 audit(1785756007.026:6141): pid=22753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5980" name="bus" dev="ramfs" ino=89450 res=0 errno=0 [ 606.178697][T22794] tipc: New replicast peer: 255.255.255.255 [ 606.189312][T22794] tipc: Enabled bearer , priority 10 [ 606.274986][T22796] netlink: 'syz.9.5994': attribute type 10 has an invalid length. [ 606.305373][T22796] team0: Cannot enslave team device to itself [ 606.407325][ T30] audit: type=1400 audit(1785756007.556:6142): avc: denied { getopt } for pid=22800 comm="syz.4.5996" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 606.653366][T22812] batman_adv: batadv0: Adding interface: dummy0 [ 606.660578][T22812] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 606.686564][T22812] batman_adv: batadv0: Interface activated: dummy0 [ 607.845263][ T30] audit: type=1800 audit(1785756008.986:6143): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.6001" name="bus" dev="ramfs" ino=89514 res=0 errno=0 [ 609.229840][ T30] audit: type=1400 audit(3933239658.374:6144): avc: denied { accept } for pid=22879 comm="syz.7.6027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 609.307664][T12073] net_ratelimit: 113 callbacks suppressed [ 609.307684][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.322253][T12073] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 609.435047][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.443087][T11361] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 609.564733][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.572514][T12073] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 609.684923][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.692787][T12073] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 609.735020][T12073] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 609.749734][T12073] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.386390][T22912] lo speed is unknown, defaulting to 1000 [ 611.125155][T22937] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6045'. [ 611.864727][ T5729] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 612.036469][ T5729] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 612.047351][ T5729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 612.058441][ T5729] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 612.072143][ T5729] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 612.082707][ T5729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.096889][ T5729] usb 8-1: config 0 descriptor?? [ 612.113371][T22946] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 612.644488][T22958] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6054'. [ 613.144589][ T5729] usbhid 8-1:0.0: can't add hid device: -71 [ 613.150672][ T5729] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 613.161918][ T5729] usb 8-1: USB disconnect, device number 30 [ 613.201621][T22980] netlink: 'syz.4.6057': attribute type 1 has an invalid length. [ 613.211985][T22980] netlink: 'syz.4.6057': attribute type 4 has an invalid length. [ 613.227172][T22980] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.6057'. [ 613.596112][T22989] fuse: fd is not a fuse device [ 614.417185][T12070] net_ratelimit: 93 callbacks suppressed [ 614.417206][T12070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.436981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 614.464808][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.473971][T11361] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 614.594718][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.602520][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 614.616801][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 614.632000][T11361] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 614.754740][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.762771][T12073] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 614.874994][T12070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 615.373485][T23020] overlayfs: failed to clone lowerpath [ 615.423110][T23022] netlink: 'syz.9.6075': attribute type 11 has an invalid length. [ 615.464891][T23010] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 615.534176][T23026] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6077'. [ 615.626369][T23029] netlink: 140 bytes leftover after parsing attributes in process `syz.9.6078'. [ 617.019122][T23067] overlayfs: failed to clone upperpath [ 617.456744][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6093'. [ 617.797142][ T30] audit: type=1400 audit(3933239666.944:6145): avc: denied { unmount } for pid=10417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 617.961208][T23094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6100'. [ 618.021651][T23094] bridge8: port 1(veth29) entered blocking state [ 618.039536][T23094] bridge8: port 1(veth29) entered disabled state [ 618.050100][T23094] veth29: entered allmulticast mode [ 618.059267][T23094] veth29: entered promiscuous mode [ 618.079132][T23095] bridge8: port 2(veth0_to_bond) entered blocking state [ 618.105279][T23095] bridge8: port 2(veth0_to_bond) entered disabled state [ 618.112988][T23095] veth0_to_bond: entered allmulticast mode [ 618.120861][T23095] veth0_to_bond: entered promiscuous mode [ 618.129027][T23102] 9p: Bad value for 'rfdno' [ 618.220063][T23106] netlink: 'syz.4.6104': attribute type 1 has an invalid length. [ 618.238567][T23109] fuse: fd is not a fuse device [ 618.249013][T23106] 8021q: adding VLAN 0 to HW filter on device bond11 [ 618.367421][T23106] bond11: (slave syz_tun): Enslaving as a backup interface with an up link [ 619.260572][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 619.278859][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 619.288736][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 619.296988][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 619.310404][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 619.424743][T11592] net_ratelimit: 108 callbacks suppressed [ 619.424757][T11592] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.448109][T11592] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 619.593611][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.613081][T11361] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 619.734767][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.752218][T11361] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 619.780053][T23127] lo speed is unknown, defaulting to 1000 [ 619.889194][T11592] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 619.889951][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.903538][T11592] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.974779][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 620.279122][T23127] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.286384][T23127] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.293593][T23127] bridge_slave_0: entered allmulticast mode [ 620.301406][T23127] bridge_slave_0: entered promiscuous mode [ 620.318029][T23127] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.337339][T23127] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.344598][T23127] bridge_slave_1: entered allmulticast mode [ 620.353433][T23127] bridge_slave_1: entered promiscuous mode [ 620.393343][T23127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.409557][T23127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.456901][T23127] team0: Port device team_slave_0 added [ 620.547461][T23127] team0: Port device team_slave_1 added [ 620.583902][T23127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.592452][T23127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.622690][T23127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.638027][T23127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.645576][T23127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.679478][T23127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.693369][T23169] tipc: Started in network mode [ 620.698473][T23169] tipc: Node identity ac14140f, cluster identity 4711 [ 620.707801][T23169] tipc: New replicast peer: 255.255.255.255 [ 620.714931][T23169] tipc: Enabled bearer , priority 10 [ 620.881042][T23127] hsr_slave_0: entered promiscuous mode [ 620.888709][T23127] hsr_slave_1: entered promiscuous mode [ 620.896309][T23127] debugfs: 'hsr0' already exists in 'hsr' [ 620.904838][T23127] Cannot create hsr debugfs directory [ 621.361009][T17083] Bluetooth: hci2: command tx timeout [ 621.485126][ T30] audit: type=1400 audit(3933239670.624:6146): avc: denied { write } for pid=23174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.669179][ T30] audit: type=1400 audit(3933239670.814:6147): avc: denied { write } for pid=23198 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.824927][ T8633] tipc: Node number set to 2886997007 [ 622.056846][ T30] audit: type=1400 audit(3933239671.204:6148): avc: denied { write } for pid=23203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.231512][ T30] audit: type=1400 audit(3933239671.324:6149): avc: denied { write } for pid=23217 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.335688][T23223] fuse: fd is not a fuse device [ 622.733602][ T30] audit: type=1400 audit(3933239671.874:6150): avc: denied { write } for pid=23219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.009974][ T30] audit: type=1400 audit(3933239672.154:6151): avc: denied { write } for pid=23243 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.141098][T23127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 623.310552][T23127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.320414][T23127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 623.335358][T23127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.352977][T23127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 623.376885][T23127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.377491][T23255] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6137'. [ 623.395822][T23127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 623.418409][T23127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.434906][T17083] Bluetooth: hci2: command tx timeout [ 623.563337][ T30] audit: type=1400 audit(3933239672.704:6152): avc: denied { write } for pid=23248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.609812][T23270] fuse: fd is not a fuse device [ 623.758798][T23127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.797601][ T30] audit: type=1400 audit(3933239672.944:6153): avc: denied { write } for pid=23274 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.816287][T23127] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.868740][T21932] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.875902][T21932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.888327][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6141'. [ 623.913617][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.920787][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.030665][T23284] futex_wake_op: syz.4.6144 tries to shift op by 144; fix this program [ 624.039765][T23284] futex_wake_op: syz.4.6144 tries to shift op by 144; fix this program [ 624.535775][T11588] net_ratelimit: 147 callbacks suppressed [ 624.535794][T11588] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.556820][T12073] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 624.571197][T12073] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.594011][T11588] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 624.734766][T12072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.762526][T12072] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 624.894854][T12072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.919580][ T30] audit: type=1400 audit(3933239674.064:6154): avc: denied { write } for pid=23282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.952620][T23127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.965185][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.998358][T12073] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.077235][ T30] audit: type=1400 audit(3933239674.224:6155): avc: denied { write } for pid=23332 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.136379][T11588] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 625.229888][T23127] veth0_vlan: entered promiscuous mode [ 625.253345][T23127] veth1_vlan: entered promiscuous mode [ 625.309959][T23127] veth0_macvtap: entered promiscuous mode [ 625.330284][T23127] veth1_macvtap: entered promiscuous mode [ 625.373141][T23127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.437955][T23127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.499890][T12072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.524923][T17083] Bluetooth: hci2: command tx timeout [ 625.542004][T12072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.710025][ T30] audit: type=1400 audit(3933239674.854:6156): avc: denied { write } for pid=23334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.960946][ T30] audit: type=1400 audit(3933239675.104:6157): avc: denied { write } for pid=23351 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.186839][T12073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.279869][T11592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.410744][T21932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.427691][ T30] audit: type=1400 audit(3933239675.574:6158): avc: denied { write } for pid=23356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.452161][T21932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.566055][T12072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.587701][T12072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.677087][ T30] audit: type=1400 audit(3933239675.814:6159): avc: denied { write } for pid=23376 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.959029][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6160'. [ 627.075739][T23394] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.138897][T23396] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.208102][T23394] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.255497][T23394] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.326054][T23396] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.379108][ T30] audit: type=1400 audit(3933239676.524:6160): avc: denied { write } for pid=23380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.395364][T23394] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.465607][T23396] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.605773][T17083] Bluetooth: hci2: command tx timeout [ 627.873902][T23394] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.934991][T23394] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 627.973189][T23396] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 628.032690][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 628.032705][ T30] audit: type=1326 audit(3933239677.174:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23397 comm="syz.8.6161" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53a379e019 code=0x7ffc0000 [ 628.112748][ T30] audit: type=1326 audit(3933239677.174:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23397 comm="syz.8.6161" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53a379e019 code=0x7ffc0000 [ 629.201501][T23423] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6168'. [ 629.386225][ T30] audit: type=1400 audit(3933239678.524:6197): avc: denied { write } for pid=23418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.601320][T11588] net_ratelimit: 122 callbacks suppressed [ 629.601339][T11588] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.660084][T11588] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.676482][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 629.691273][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.752507][ T30] audit: type=1400 audit(3933239678.894:6198): avc: denied { write } for pid=23438 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.845590][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.880356][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.034890][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 630.067666][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.314896][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 630.330735][T12070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 630.508012][ T30] audit: type=1400 audit(3933239679.654:6199): avc: denied { write } for pid=23444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.663432][ T30] audit: type=1400 audit(3933239679.804:6200): avc: denied { write } for pid=23470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.200182][ T30] audit: type=1400 audit(3933239680.344:6201): avc: denied { write } for pid=23473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.321235][ T30] audit: type=1400 audit(3933239680.464:6202): avc: denied { write } for pid=23497 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.652879][T23520] overlayfs: failed to clone upperpath [ 631.722699][ T30] audit: type=1400 audit(3933239680.864:6203): avc: denied { write } for pid=23504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.777300][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6186'. [ 631.792454][T23524] siw: device registration error -23 [ 632.026126][ T30] audit: type=1400 audit(3933239681.174:6204): avc: denied { write } for pid=23528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.462444][T23541] tipc: Resetting bearer [ 632.830588][T23541] veth0_vlan: left promiscuous mode [ 633.585511][ T57] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 633.604776][ T57] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 633.628250][ T57] netdevsim netdevsim4 eth3: unset [0, 2] type 1 family 0 port 8472 - 0 [ 633.644318][ T57] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.667054][ T57] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 633.685113][ T57] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 633.701265][ T57] netdevsim netdevsim4 eth2: unset [0, 2] type 1 family 0 port 8472 - 0 [ 633.740346][ T57] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.770112][ T57] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 633.787835][ T57] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 633.799662][ T57] netdevsim netdevsim4 eth1: unset [0, 2] type 1 family 0 port 8472 - 0 [ 633.808689][ T57] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.821470][ T57] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 633.831602][ T57] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 633.840510][ T57] netdevsim netdevsim4 eth0: unset [0, 2] type 1 family 0 port 8472 - 0 [ 633.849162][ T57] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.170993][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 634.171009][ T30] audit: type=1400 audit(3933239683.314:6207): avc: denied { write } for pid=23576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.250149][T23610] can0: slcan on ttyS3. [ 634.270035][T23610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6209'. [ 634.290907][T23610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6209'. [ 634.306178][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.320972][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.435509][ T30] audit: type=1400 audit(3933239683.574:6208): avc: denied { mounton } for pid=23607 comm="syz.3.6208" path="/1387/file0" dev="tmpfs" ino=7334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 634.554366][ T30] audit: type=1400 audit(3933239683.684:6209): avc: denied { write } for pid=23614 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.612101][ T57] net_ratelimit: 123 callbacks suppressed [ 634.612119][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.666586][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.666967][T11361] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.686809][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.698863][T23609] can0 (unregistered): slcan off ttyS3. [ 634.725935][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.727112][T11361] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.754965][T11588] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.771843][T23619] netlink: 'syz.8.6211': attribute type 1 has an invalid length. [ 634.796693][T11588] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.838961][T23619] 8021q: adding VLAN 0 to HW filter on device bond9 [ 634.845665][T12073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.864895][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.900876][T21932] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.037023][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 635.124005][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6217'. [ 635.155265][T23637] netlink: 332 bytes leftover after parsing attributes in process `syz.9.6215'. [ 635.178464][ T30] audit: type=1400 audit(3933239684.314:6210): avc: denied { write } for pid=23620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.207471][T23619] bond9: (slave geneve2): making interface the new active one [ 635.221238][T23619] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 635.355373][ T30] audit: type=1400 audit(3933239684.504:6211): avc: denied { write } for pid=23649 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.683763][T23665] netlink: 'syz.9.6221': attribute type 1 has an invalid length. [ 635.704038][T23665] netlink: 'syz.9.6221': attribute type 4 has an invalid length. [ 635.724729][T23665] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.6221'. [ 635.746052][T23668] netlink: 'syz.9.6221': attribute type 1 has an invalid length. [ 635.767187][T23668] netlink: 'syz.9.6221': attribute type 4 has an invalid length. [ 635.773609][T23670] binder: BINDER_SET_CONTEXT_MGR already set [ 635.790666][T23668] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.6221'. [ 635.808335][T23670] binder: 23669:23670 ioctl 4018620d 200000004a80 returned -16 [ 636.040881][ T30] audit: type=1400 audit(3933239685.184:6212): avc: denied { write } for pid=23657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.223314][ T30] audit: type=1400 audit(3933239685.364:6213): avc: denied { write } for pid=23689 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.368885][T23693] tipc: Failed to remove unknown binding: 66,0,0/960417018:81610057/81610059 [ 636.475550][T23693] tipc: Failed to remove unknown binding: 66,0,0/960417018:81610057/81610058 [ 636.585691][T23693] tipc: Failed to remove unknown binding: 66,0,0/960417018:81610057/81610059 [ 636.692307][T23693] tipc: Failed to remove unknown binding: 66,0,0/960417018:81610057/81610058 [ 636.862029][ T30] audit: type=1400 audit(3933239686.004:6214): avc: denied { setopt } for pid=23714 comm="syz.1.6235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 637.463390][T23734] syzkaller0: entered promiscuous mode [ 637.470149][T23734] syzkaller0: entered allmulticast mode [ 638.878339][ T30] audit: type=1400 audit(3933239688.024:6215): avc: denied { write } for pid=23755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.190990][T23776] nvme_fabrics: missing parameter 'transport=%s' [ 639.200931][T23776] nvme_fabrics: missing parameter 'nqn=%s' [ 639.250785][ T30] audit: type=1400 audit(3933239688.394:6216): avc: denied { write } for pid=23775 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.254497][ T5729] IPVS: starting estimator thread 0... [ 639.353733][T23786] lo: Caught tx_queue_len zero misconfig [ 639.380139][T23787] Bluetooth: MGMT ver 1.23 [ 639.398162][T23780] IPVS: using max 38 ests per chain, 91200 per kthread [ 639.635049][T21932] net_ratelimit: 113 callbacks suppressed [ 639.635069][T21932] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.656539][T21932] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.715923][T11361] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 639.724329][T11361] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 639.844788][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 639.860016][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.005097][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.025812][T21932] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.043215][ T30] audit: type=1400 audit(3933239689.184:6217): avc: denied { write } for pid=23789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.154968][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.190468][T21932] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.261376][ T30] audit: type=1400 audit(3933239689.404:6218): avc: denied { write } for pid=23811 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.631654][T23821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6261'. [ 641.057080][ T30] audit: type=1400 audit(3933239690.204:6219): avc: denied { write } for pid=23816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.193430][ T30] audit: type=1400 audit(3933239690.334:6220): avc: denied { write } for pid=23846 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.301023][T23854] fuse: fd is not a fuse device [ 641.519890][T23863] netlink: 'syz.8.6270': attribute type 4 has an invalid length. [ 641.583036][ T5729] lo speed is unknown, defaulting to 1000 [ 641.589659][ T5729] syz2: Port: 1 Link DOWN [ 641.608774][ T30] audit: type=1400 audit(3933239690.754:6221): avc: denied { write } for pid=23852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.705452][T23869] netlink: 'syz.8.6270': attribute type 4 has an invalid length. [ 641.727689][ T30] audit: type=1400 audit(3933239690.864:6222): avc: denied { write } for pid=23874 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.800255][ T5729] lo speed is unknown, defaulting to 1000 [ 641.806123][ T5729] syz2: Port: 1 Link ACTIVE [ 642.146101][ T30] audit: type=1400 audit(3933239691.294:6223): avc: denied { write } for pid=23882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.484954][ T30] audit: type=1400 audit(3933239691.634:6224): avc: denied { write } for pid=23906 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.766767][T23916] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6283'. [ 643.276435][T23934] fuse: fd is not a fuse device [ 643.866033][T23928] syz.1.6287 (23928): drop_caches: 2 [ 644.057927][T23955] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6298'. [ 644.171461][T23959] lo speed is unknown, defaulting to 1000 [ 644.736051][T21932] net_ratelimit: 106 callbacks suppressed [ 644.736071][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.771990][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.796454][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.806355][T12072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 644.820721][T12072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 644.918193][T11588] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.945445][T21932] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.964735][T12072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.074700][T12072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.109829][T12072] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.696036][T24007] lo speed is unknown, defaulting to 1000 [ 646.526824][T24023] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6319'. [ 647.130047][T24038] netlink: 144 bytes leftover after parsing attributes in process `syz.9.6325'. [ 647.159917][T24035] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 647.177714][T24035] bond12: (slave macvlan0): Enslaving as an active interface with a down link [ 647.267850][T24044] netlink: 'syz.4.6328': attribute type 1 has an invalid length. [ 647.341876][T24044] 8021q: adding VLAN 0 to HW filter on device bond14 [ 647.356996][T24044] bond13: (slave bond14): making interface the new active one [ 647.366212][T24044] bond13: (slave bond14): Enslaving as an active interface with an up link [ 647.389558][T24050] bond13: (slave gretap2): Enslaving as a backup interface with an up link [ 647.440579][T24044] 8021q: adding VLAN 0 to HW filter on device bond13 [ 648.244436][ T30] audit: type=1400 audit(3933239697.384:6225): avc: denied { execute } for pid=24077 comm="syz.4.6337" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 648.271641][T24080] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6338'. [ 648.290770][T24080] netlink: 59 bytes leftover after parsing attributes in process `syz.9.6338'. [ 648.310456][T24080] netlink: 59 bytes leftover after parsing attributes in process `syz.9.6338'. [ 649.391356][T11366] tipc: Subscription rejected, illegal request [ 649.424076][T24118] veth1: Caught tx_queue_len zero misconfig [ 649.447882][T24118] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 649.459079][T24122] syzkaller0: entered promiscuous mode [ 649.464672][T24122] syzkaller0: entered allmulticast mode [ 650.166324][T24138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6369'. [ 650.546888][T11369] net_ratelimit: 120 callbacks suppressed [ 650.546908][T11369] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.570143][T11366] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 650.584556][T11366] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.615918][T11369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.744827][T11366] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.753010][T11366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.782534][T24153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.794129][T24153] batadv0: mtu less than device minimum [ 650.801239][T24153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.813913][T24153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.824896][T24153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 650.844709][T24153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.852430][T24153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.869377][T24153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.877133][T24153] batman_adv: batadv0: Interface deactivated: dummy0 [ 650.883821][T24153] batman_adv: batadv0: Removing interface: dummy0 [ 650.909587][T24155] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 650.926062][T24155] bond8: (slave lo): making interface the new active one [ 650.934171][T24155] bond8: (slave lo): Enslaving as an active interface with an up link [ 650.946645][ T5736] lo speed is unknown, defaulting to 1000 [ 650.952406][ T5814] lo speed is unknown, defaulting to 1000 [ 650.958814][ T188] lo speed is unknown, defaulting to 1000 [ 650.964570][ T5342] lo speed is unknown, defaulting to 1000 [ 650.970457][ T8642] lo speed is unknown, defaulting to 1000 [ 650.976327][ T8633] lo speed is unknown, defaulting to 1000 [ 651.074370][ T30] audit: type=1326 audit(3933239700.214:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24159 comm="syz.8.6365" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53a379e019 code=0x0 [ 652.155279][ T30] audit: type=1400 audit(3933239701.304:6227): avc: denied { write } for pid=24195 comm="syz.1.6379" name="header" dev="configfs" ino=40899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.187718][ T30] audit: type=1400 audit(3933239701.304:6228): avc: denied { write } for pid=24195 comm="syz.1.6379" name="fs" dev="configfs" ino=40906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.218838][ T30] audit: type=1400 audit(3933239701.304:6229): avc: denied { write } for pid=24195 comm="syz.1.6379" name="fs" dev="configfs" ino=40906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.261335][ T30] audit: type=1400 audit(3933239701.304:6230): avc: denied { write } for pid=24195 comm="syz.1.6379" name="c.1" dev="configfs" ino=45491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.313726][ T30] audit: type=1400 audit(3933239701.304:6231): avc: denied { write } for pid=24195 comm="syz.1.6379" name="c.1" dev="configfs" ino=45491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.389140][ T30] audit: type=1400 audit(3933239701.534:6232): avc: denied { mounton } for pid=24185 comm="syz.3.6375" path="/file0" dev="autofs" ino=100410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 652.442302][T24203] fuse: fd is not a fuse device [ 652.580498][T24196] ================================================================== [ 652.588587][T24196] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 652.596845][T24196] Read of size 64 at addr ffffffff9ba57740 by task syz.1.6379/24196 [ 652.604818][T24196] [ 652.607144][T24196] CPU: 1 UID: 0 PID: 24196 Comm: syz.1.6379 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.607175][T24196] Tainted: [L]=SOFTLOCKUP [ 652.607183][T24196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 652.607196][T24196] Call Trace: [ 652.607204][T24196] [ 652.607212][T24196] dump_stack_lvl+0x100/0x190 [ 652.607238][T24196] print_report+0x13d/0x4b0 [ 652.607266][T24196] ? __virt_addr_valid+0x239/0x430 [ 652.607294][T24196] ? usb_copy_descriptors+0x18d/0x320 [ 652.607318][T24196] kasan_report+0xdf/0x1c0 [ 652.607344][T24196] ? usb_copy_descriptors+0x18d/0x320 [ 652.607373][T24196] kasan_check_range+0x10f/0x1e0 [ 652.607402][T24196] __asan_memcpy+0x23/0x60 [ 652.607422][T24196] usb_copy_descriptors+0x18d/0x320 [ 652.607448][T24196] usb_assign_descriptors+0xd2/0x470 [ 652.607474][T24196] f_audio_bind+0x243a/0x3950 [ 652.607506][T24196] ? __pfx_f_audio_bind+0x10/0x10 [ 652.607534][T24196] usb_add_function+0x219/0x890 [ 652.607557][T24196] ? composite_dev_prepare+0x231/0x420 [ 652.607587][T24196] configfs_composite_bind+0xd83/0x1960 [ 652.607614][T24196] ? kernfs_create_link+0x1bd/0x240 [ 652.607643][T24196] gadget_bind_driver+0x28c/0xbf0 [ 652.607663][T24196] ? __pfx_gadget_bind_driver+0x10/0x10 [ 652.607682][T24196] really_probe+0x241/0xa60 [ 652.607708][T24196] __driver_probe_device+0x20e/0x450 [ 652.607734][T24196] driver_probe_device+0x4a/0x140 [ 652.607758][T24196] __driver_attach+0x21f/0x5b0 [ 652.607782][T24196] ? __pfx___driver_attach+0x10/0x10 [ 652.607805][T24196] bus_for_each_dev+0x13e/0x1d0 [ 652.607825][T24196] ? __pfx_bus_for_each_dev+0x10/0x10 [ 652.607843][T24196] ? bus_add_driver+0x2b5/0x5b0 [ 652.607866][T24196] bus_add_driver+0x305/0x5b0 [ 652.607888][T24196] driver_register+0x1e2/0x360 [ 652.607915][T24196] usb_gadget_register_driver_owner+0x132/0x210 [ 652.607947][T24196] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 652.607973][T24196] configfs_write_iter+0x302/0x4e0 [ 652.607996][T24196] vfs_write+0x6ac/0x1050 [ 652.608025][T24196] ? __pfx_configfs_write_iter+0x10/0x10 [ 652.608055][T24196] ? __pfx_vfs_write+0x10/0x10 [ 652.608092][T24196] ksys_write+0x12a/0x250 [ 652.608122][T24196] ? __pfx_ksys_write+0x10/0x10 [ 652.608155][T24196] do_syscall_64+0x115/0x870 [ 652.608180][T24196] ? clear_bhb_loop+0x40/0x90 [ 652.608202][T24196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.608222][T24196] RIP: 0033:0x7fcc6c99e019 [ 652.608239][T24196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.608258][T24196] RSP: 002b:00007fcc6d79d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.608277][T24196] RAX: ffffffffffffffda RBX: 00007fcc6cc25fa0 RCX: 00007fcc6c99e019 [ 652.608291][T24196] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000004 [ 652.608303][T24196] RBP: 00007fcc6ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 652.608315][T24196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.608326][T24196] R13: 00007fcc6cc26038 R14: 00007fcc6cc25fa0 R15: 00007ffe19180908 [ 652.608345][T24196] [ 652.608353][T24196] [ 652.912248][T24196] The buggy address belongs to the variable: [ 652.918214][T24196] ac_header_desc+0x0/0x40 [ 652.922630][T24196] [ 652.924959][T24196] The buggy address belongs to the physical page: [ 652.931362][T24196] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba57 [ 652.940114][T24196] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 652.948017][T24196] raw: 00fff00000002000 ffffea00006e95c8 ffffea00006e95c8 0000000000000000 [ 652.956605][T24196] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 652.965186][T24196] page dumped because: kasan: bad access detected [ 652.971588][T24196] page_owner info is not present (never set?) [ 652.977640][T24196] [ 652.979960][T24196] Memory state around the buggy address: [ 652.985578][T24196] ffffffff9ba57600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 652.993657][T24196] ffffffff9ba57680: 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 653.001711][T24196] >ffffffff9ba57700: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 653.009764][T24196] ^ [ 653.016174][T24196] ffffffff9ba57780: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 653.024239][T24196] ffffffff9ba57800: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 653.032291][T24196] ================================================================== [ 653.081247][T24196] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 653.088476][T24196] CPU: 1 UID: 0 PID: 24196 Comm: syz.1.6379 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.099416][T24196] Tainted: [L]=SOFTLOCKUP [ 653.103732][T24196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 653.113782][T24196] Call Trace: [ 653.117058][T24196] [ 653.119982][T24196] dump_stack_lvl+0x100/0x190 [ 653.124664][T24196] vpanic+0x552/0x970 [ 653.128646][T24196] ? __pfx_vpanic+0x10/0x10 [ 653.133143][T24196] ? mark_held_locks+0x40/0x70 [ 653.137912][T24196] ? usb_copy_descriptors+0x18d/0x320 [ 653.143287][T24196] panic+0xd1/0xe0 [ 653.147006][T24196] ? __pfx_panic+0x10/0x10 [ 653.151423][T24196] ? usb_copy_descriptors+0x18d/0x320 [ 653.156796][T24196] ? preempt_schedule_common+0x42/0xc0 [ 653.162256][T24196] check_panic_on_warn.cold+0x19/0x34 [ 653.167625][T24196] end_report.part.0+0x3a/0x90 [ 653.172402][T24196] kasan_report.cold+0xe/0x18 [ 653.177100][T24196] ? usb_copy_descriptors+0x18d/0x320 [ 653.182484][T24196] kasan_check_range+0x10f/0x1e0 [ 653.187428][T24196] __asan_memcpy+0x23/0x60 [ 653.191844][T24196] usb_copy_descriptors+0x18d/0x320 [ 653.197049][T24196] usb_assign_descriptors+0xd2/0x470 [ 653.202336][T24196] f_audio_bind+0x243a/0x3950 [ 653.207024][T24196] ? __pfx_f_audio_bind+0x10/0x10 [ 653.212066][T24196] usb_add_function+0x219/0x890 [ 653.216922][T24196] ? composite_dev_prepare+0x231/0x420 [ 653.222391][T24196] configfs_composite_bind+0xd83/0x1960 [ 653.229419][T24196] ? kernfs_create_link+0x1bd/0x240 [ 653.234641][T24196] gadget_bind_driver+0x28c/0xbf0 [ 653.239667][T24196] ? __pfx_gadget_bind_driver+0x10/0x10 [ 653.245217][T24196] really_probe+0x241/0xa60 [ 653.249713][T24196] __driver_probe_device+0x20e/0x450 [ 653.255002][T24196] driver_probe_device+0x4a/0x140 [ 653.260016][T24196] __driver_attach+0x21f/0x5b0 [ 653.264771][T24196] ? __pfx___driver_attach+0x10/0x10 [ 653.270044][T24196] bus_for_each_dev+0x13e/0x1d0 [ 653.274875][T24196] ? __pfx_bus_for_each_dev+0x10/0x10 [ 653.280231][T24196] ? bus_add_driver+0x2b5/0x5b0 [ 653.285064][T24196] bus_add_driver+0x305/0x5b0 [ 653.289730][T24196] driver_register+0x1e2/0x360 [ 653.294480][T24196] usb_gadget_register_driver_owner+0x132/0x210 [ 653.300719][T24196] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 653.306353][T24196] configfs_write_iter+0x302/0x4e0 [ 653.311457][T24196] vfs_write+0x6ac/0x1050 [ 653.315784][T24196] ? __pfx_configfs_write_iter+0x10/0x10 [ 653.321403][T24196] ? __pfx_vfs_write+0x10/0x10 [ 653.326160][T24196] ksys_write+0x12a/0x250 [ 653.330479][T24196] ? __pfx_ksys_write+0x10/0x10 [ 653.335324][T24196] do_syscall_64+0x115/0x870 [ 653.339901][T24196] ? clear_bhb_loop+0x40/0x90 [ 653.344563][T24196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.350438][T24196] RIP: 0033:0x7fcc6c99e019 [ 653.354836][T24196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.374441][T24196] RSP: 002b:00007fcc6d79d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.382842][T24196] RAX: ffffffffffffffda RBX: 00007fcc6cc25fa0 RCX: 00007fcc6c99e019 [ 653.390800][T24196] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000004 [ 653.398748][T24196] RBP: 00007fcc6ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 653.406715][T24196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.414677][T24196] R13: 00007fcc6cc26038 R14: 00007fcc6cc25fa0 R15: 00007ffe19180908 [ 653.422646][T24196] [ 653.425867][T24196] Kernel Offset: disabled [ 653.430164][T24196] Rebooting in 86400 seconds..