last executing test programs: 3m13.600145243s ago: executing program 0 (id=382): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x18233, 0x1, 0x1}, 0x30, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0xd) 3m12.726944919s ago: executing program 0 (id=389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xb, 0xb}, {0xffff, 0xfffd}}}, 0x24}, 0x1, 0x0, 0x0, 0x200448b5}, 0x0) 3m12.620843039s ago: executing program 0 (id=390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x100, @empty, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x1}, 0x1c) 3m12.571870715s ago: executing program 0 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 3m12.527332893s ago: executing program 0 (id=392): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4101, 0x1005}], 0x1, 0x141, 0xfffffffc) 3m12.271941154s ago: executing program 0 (id=393): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 3m12.132990383s ago: executing program 32 (id=393): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 3m8.016404775s ago: executing program 2 (id=422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7, 0xf2ff}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 3m7.816385592s ago: executing program 2 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x65) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="0f333e65440fdcd965670fc770ad420f09c4c221458109000000d9fe0f52bd0e0000000f07b9800000c00f3235010000000f3066baf80cb86bc45b8bef66bafc0cec", 0x42}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m7.384874028s ago: executing program 2 (id=428): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000080), 0x4) 3m7.186956827s ago: executing program 2 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 3m7.097079636s ago: executing program 2 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 3m6.784600272s ago: executing program 2 (id=435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd29, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8553}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xfff, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 3m6.4811901s ago: executing program 33 (id=435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd29, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8553}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xfff, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 3m6.200721174s ago: executing program 3 (id=440): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x5, 0x3, 0x2, 0x3, 0x4000001, 0x6, 0x7ffffff5}) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) 3m6.110195994s ago: executing program 3 (id=441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000440)={@local, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @mcast1, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x3}}}}}}}}}, 0x0) 3m5.751233597s ago: executing program 3 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) 3m5.513707641s ago: executing program 3 (id=445): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 3m5.236545108s ago: executing program 3 (id=449): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001840)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x83, 0xef2, 0x0, &(0x7f0000000780)=@buf_max_buf="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"}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000b40)={0x2, 0x0, @ioapic={0xdddd0000, 0x0, 0x7, 0xff, 0x0, [{0x8, 0xbf, 0x8, '\x00', 0x4}, {0x8, 0xb, 0x9, '\x00', 0x3}, {0x2d, 0x22, 0x0, '\x00', 0x3}, {0x9a, 0x3, 0x8, '\x00', 0x4}, {0x12, 0x2, 0x8, '\x00', 0x5}, {0xf6, 0x1, 0x1, '\x00', 0x8}, {0x10, 0x0, 0x5, '\x00', 0x7}, {0xb1, 0x2, 0xff, '\x00', 0x6}, {0x1, 0x4, 0x2a}, {0x5, 0x9, 0x5, '\x00', 0x5}, {0x5, 0x3, 0x1, '\x00', 0x31}, {0x2, 0x1, 0x5, '\x00', 0xa}, {0x8, 0x7, 0xfc}, {0x5, 0x40, 0xdc, '\x00', 0x5}, {0x0, 0x1, 0x4, '\x00', 0x6}, {0x6, 0xee, 0x1, '\x00', 0x5}, {0x5, 0x6, 0x9, '\x00', 0x8}, {0x2f, 0xfc, 0x66, '\x00', 0x3}, {0x6, 0x8, 0x8, '\x00', 0x70}, {0x9, 0x5f, 0x40}, {0x10, 0x4, 0x2, '\x00', 0x4}, {0x6, 0x1, 0x0, '\x00', 0x2}, {0x88, 0x3, 0x49, '\x00', 0x10}, {0x3, 0xd3, 0x10, '\x00', 0x9}]}}) 3m4.452070266s ago: executing program 3 (id=453): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7d, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x28, {0x28, 0x23, "1ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a4779"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x2a060400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 3m4.305125019s ago: executing program 34 (id=453): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7d, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x28, {0x28, 0x23, "1ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a4779"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x2a060400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 1m19.441316865s ago: executing program 4 (id=1669): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 1m19.392900962s ago: executing program 4 (id=1670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xc000) 1m19.252391548s ago: executing program 4 (id=1671): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r2, {0xeffe068f8514295, 0xfff2}, {0xafabc05531515610, 0x2}, {0xc, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 1m17.29151729s ago: executing program 4 (id=1687): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 1m17.239045411s ago: executing program 4 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000c00)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1m16.861581225s ago: executing program 4 (id=1695): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m16.614856073s ago: executing program 35 (id=1695): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.660609476s ago: executing program 1 (id=2722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffecd) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000b40)=0x20000, 0x4) poll(&(0x7f0000000a00)=[{r0, 0x140}], 0x1, 0x3) 3.557456892s ago: executing program 1 (id=2725): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000003000/0x3000)=nil, 0x3000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000180)={0x8, r2}) 3.38194675s ago: executing program 1 (id=2729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 3.234692271s ago: executing program 8 (id=2732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.005952886s ago: executing program 8 (id=2735): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.981029486s ago: executing program 1 (id=2736): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)) 2.624864613s ago: executing program 8 (id=2739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="0f2855150f356436640f01c966b9630200000f3236f36cba420066ed2e0f01c2440f20c066350b000000440f22c0f2ad0f75f3", 0x33}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.557571859s ago: executing program 6 (id=2740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.519469581s ago: executing program 1 (id=2741): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000012640)={0x2020}, 0x2020) 2.354917139s ago: executing program 8 (id=2744): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x2, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffff8, 0x1fe, 0x6, 0x28, 0x2, 0x5}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b70cf489f5cb3b}) 2.304280197s ago: executing program 6 (id=2745): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bb"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8f70120b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.162123268s ago: executing program 1 (id=2747): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f00000006c0)={0x40, 0xb}, 0x0, 0x0}) lseek(r0, 0x164, 0x0) 1.829783279s ago: executing program 7 (id=2751): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}]) 1.70810163s ago: executing program 7 (id=2752): socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x9b9, 0x61, 0x11, 0xdf}}, 0x0}, 0x94) r0 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r0, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) 1.667091234s ago: executing program 6 (id=2753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x3}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x0, 0x0}, 0x10) 1.572184289s ago: executing program 7 (id=2754): setns(0xc9, 0x0) r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.508018308s ago: executing program 7 (id=2755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 1.48344569s ago: executing program 6 (id=2756): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) recvfrom$packet(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x2, 0x0, 0x0) 1.442328794s ago: executing program 8 (id=2757): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0xd, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.371625613s ago: executing program 5 (id=2758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="66ba610066b8682266ef66b875000f00d8440f00d90f090f07c744240023010000c74424020d000000ff2c24b8010000000f01c1673e674c0fc72e66440f3814c9420f01c9", 0x45}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.37031644s ago: executing program 6 (id=2759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000400)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000300)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) 1.332235108s ago: executing program 7 (id=2760): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) 1.209468386s ago: executing program 6 (id=2761): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r0) 947.594959ms ago: executing program 5 (id=2762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18}, 0x4000001) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 838.723764ms ago: executing program 5 (id=2763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 470.218695ms ago: executing program 5 (id=2764): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, 0x0, 0x0) 263.824855ms ago: executing program 7 (id=2765): unshare(0x6020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) r1 = timerfd_create(0x1, 0x0) read$FUSE(r1, &(0x7f0000001a00)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00', {0xa, 0x2, 0xb7af, 0x8001}, 0x2c, [0xd2c5, 0x6, 0x5, 0x2, 0x8000, 0x5, 0xb, 0x6, 0x5, 0xfd9c, 0x1, 0x1, 0x80, 0xc00000, 0x81b, 0x10000, 0x3, 0x8329, 0x7f, 0x1, 0x2, 0x2a, 0x1, 0xfffffff8, 0x383, 0x1, 0x3, 0x7, 0xc1f, 0x3, 0x6, 0xb, 0x10001, 0xfe, 0xcd40, 0x80000, 0x1, 0x6, 0x0, 0x8, 0xda, 0x0, 0x1, 0x55, 0x37e6, 0x733, 0x3, 0x24, 0x8, 0xd2, 0x7, 0x8, 0x8, 0x1, 0x1, 0xffff3d9b, 0xefe, 0xa, 0x6, 0x0, 0xfaf4, 0x80000001, 0x6, 0x6], [0x1, 0x1, 0x8, 0x5, 0x81, 0x8e, 0xe7a, 0x74d7, 0x7, 0x22ea, 0x2, 0x1ff, 0x5, 0x12, 0x4, 0x0, 0x1, 0xd6cb, 0x400, 0xf2, 0x2, 0x6, 0xea, 0x80, 0x7, 0x6, 0x8, 0x6, 0x8, 0x43, 0x9, 0x8, 0x7f, 0x7, 0x5, 0xb, 0x42, 0x6, 0x8, 0x266, 0xffffffff, 0xe7f1, 0x3, 0x6, 0x5, 0x100005, 0x8edc, 0x5, 0x4, 0x100, 0x5, 0x8, 0x80, 0x40, 0x0, 0x628, 0xa, 0x9, 0x5, 0xb7, 0xfff, 0x1, 0x101, 0x1], [0x1e3, 0x1, 0xffb, 0xe24e, 0x10, 0xe, 0x9, 0x6, 0x9, 0xf0, 0x5, 0x8bbe, 0x2, 0x1ff, 0x400, 0xffff8cca, 0xe100, 0x9, 0x1, 0x9, 0x7f, 0x80006, 0x1, 0x100, 0xa, 0x3, 0x200, 0x101, 0xcdc, 0xfffffffa, 0x1, 0x200, 0x8, 0x7, 0x3, 0x7926, 0x1, 0xfff, 0x2, 0xc, 0x4, 0x7fd, 0x7, 0x40, 0x1, 0xec74, 0x6, 0x26f95de4, 0x6, 0x10000, 0x9, 0x7fff, 0xa5, 0x10, 0x0, 0x9, 0x11, 0xea1f, 0x4f, 0x3919, 0x10, 0x4, 0x7fffffff, 0x9], [0x2, 0x100, 0x1, 0x60, 0x80000000, 0xcadc, 0x7, 0x3, 0x7fffffff, 0xfffffffb, 0xce8, 0xad18, 0x3, 0x0, 0x9, 0x8000, 0x0, 0x8000, 0x4, 0xde1, 0x3, 0x9, 0xf, 0x2, 0xfffffc00, 0x5, 0x202e, 0x9, 0x0, 0x1, 0x2, 0x80008000, 0x9, 0x2, 0x4, 0x1, 0x4, 0x1, 0xfff, 0x1, 0xf, 0x6, 0x7, 0x5, 0x5, 0x1000, 0x7, 0x3, 0x80000001, 0x9, 0x9, 0x10080, 0xd, 0x1, 0x401, 0x6, 0x20de0a7b, 0x1000, 0x3, 0x8, 0x2, 0x100, 0x6, 0x309c42a9]}, 0x45c) 146.261927ms ago: executing program 8 (id=2766): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) 35.258106ms ago: executing program 5 (id=2767): memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=2768): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff0300000009"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ev loop9: unable to read RDB block 0 [ 190.753217][ T4963] loop9: unable to read partition table [ 191.112053][ T5792] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 191.125474][ T9731] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 191.273880][ T5792] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.297217][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.304548][ T9737] overlayfs: failed to clone upperpath [ 191.310197][ T5792] usb 5-1: Product: syz [ 191.320863][ T5792] usb 5-1: Manufacturer: syz [ 191.327872][ T5792] usb 5-1: SerialNumber: syz [ 191.361969][ T29] audit: type=1400 audit(1786351477.316:948): avc: denied { cmd } for pid=9738 comm="syz.5.1348" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 191.412426][ T29] audit: type=1400 audit(1786351477.356:949): avc: denied { write } for pid=9734 comm="syz.1.1346" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 191.802808][ T29] audit: type=1400 audit(1786351477.756:950): avc: denied { attach_queue } for pid=9758 comm="syz.5.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 192.377640][ T5792] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 192.392213][ T5792] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 192.403152][ T5792] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 192.616275][ T9794] overlayfs: failed to clone upperpath [ 192.626051][ T5792] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 192.675337][ T9796] netlink: 'syz.5.1372': attribute type 1 has an invalid length. [ 192.681007][ T5792] usb 5-1: USB disconnect, device number 20 [ 192.730759][ T5792] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 192.764345][ T9796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.850336][ T9800] bond1: (slave gretap1): making interface the new active one [ 192.892267][ T9800] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 193.296633][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb829 instead [ 193.322623][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x37ad instead [ 193.342034][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xbaaa instead [ 193.356948][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6cf0 instead [ 193.388650][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x08f7 instead [ 193.402489][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9a2c instead [ 193.413568][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xef30 instead [ 193.424991][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xe243 instead [ 193.436595][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xb434 instead [ 193.456559][ T9830] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xbb23 instead [ 193.473729][ T9830] jffs2: Further such events for this erase block will not be printed [ 193.521876][ T9830] jffs2: notice: (9830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 193.554480][ T9842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.060830][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 194.068518][ T9866] ceph: No mds server is up or the cluster is laggy [ 194.072524][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 194.451214][ T29] audit: type=1400 audit(1786351480.406:951): avc: denied { write } for pid=9865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.573670][ T5725] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 194.666208][ T29] audit: type=1400 audit(1786351480.626:952): avc: denied { write } for pid=9902 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.744049][ T5725] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 194.756190][ T29] audit: type=1400 audit(1786351480.666:953): avc: denied { read } for pid=9905 comm="syz.4.1409" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 194.791450][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.809898][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.853195][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.856234][ T29] audit: type=1400 audit(1786351480.666:954): avc: denied { open } for pid=9905 comm="syz.4.1409" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 194.895724][ T5725] usb 6-1: config 0 descriptor?? [ 194.970067][ T29] audit: type=1400 audit(1786351480.676:955): avc: denied { write } for pid=9905 comm="syz.4.1409" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 195.056528][ T29] audit: type=1400 audit(1786351480.786:956): avc: denied { setopt } for pid=9912 comm="syz.6.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.336955][ T5725] hid_parser_main: 453 callbacks suppressed [ 195.336975][ T5725] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 195.370605][ T5725] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 195.388996][ T5725] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 195.404244][ T5725] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 195.419159][ T5725] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 195.435286][ T5725] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 195.452763][ T5725] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 195.484197][ T5725] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 195.550298][ T9937] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 195.569746][ T5725] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 195.590113][ T29] audit: type=1400 audit(1786351481.546:957): avc: denied { write } for pid=9923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.636919][ T9940] udevd[9940]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 196.172039][ T5725] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 196.229367][ T5725] usb 6-1: USB disconnect, device number 15 [ 196.395873][ T9914] kexec: Could not allocate control_code_buffer [ 196.543363][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 196.543378][ T29] audit: type=1400 audit(1786351482.506:960): avc: denied { write } for pid=9947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.674386][ T29] audit: type=1400 audit(1786351482.636:961): avc: denied { write } for pid=9979 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.677450][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 196.750506][ T29] audit: type=1400 audit(1786351482.706:962): avc: denied { append } for pid=9983 comm="syz.1.1432" name="demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.306166][ T29] audit: type=1400 audit(1786351483.266:963): avc: denied { write } for pid=9986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.513399][ T29] audit: type=1400 audit(1786351483.476:964): avc: denied { write } for pid=10015 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.711598][ T29] audit: type=1326 audit(1786351483.666:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.7.1443" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 197.747946][ T29] audit: type=1326 audit(1786351483.666:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.7.1443" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 197.776416][ T29] audit: type=1326 audit(1786351483.666:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.7.1443" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 197.812311][ T24] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 197.847130][ T29] audit: type=1326 audit(1786351483.666:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.7.1443" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 197.902331][ T5697] kernel read not supported for file /input/event0 (pid: 5697 comm: kworker/1:4) [ 197.915864][ T29] audit: type=1326 audit(1786351483.666:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10021 comm="syz.7.1443" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 197.974900][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.990871][ T24] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.021940][ T24] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 198.060442][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.081742][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 198.090994][ T24] usb 2-1: Product: syz [ 198.099488][ T24] usb 2-1: Manufacturer: syz [ 198.104437][ T24] usb 2-1: SerialNumber: syz [ 198.113526][ T5792] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 198.118456][ T24] usb 2-1: config 0 descriptor?? [ 198.136010][ T24] usb 2-1: selecting invalid altsetting 0 [ 198.282836][ T5792] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 198.303358][ T5792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 198.316914][ T5792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.327790][ T5792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 198.342266][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.360402][ T5792] usb 6-1: Product: syz [ 198.365781][ T5792] usb 6-1: Manufacturer: syz [ 198.367490][T10017] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 198.370472][ T5792] usb 6-1: SerialNumber: syz [ 198.384690][T10017] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 198.393301][T10017] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 198.394470][ T5792] usb 6-1: config 0 descriptor?? [ 198.406735][T10017] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 198.415266][T10017] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 198.425063][T10017] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 198.431595][ T5725] usb 2-1: USB disconnect, device number 18 [ 198.434188][T10017] usb 2-1: cannot submit urb 0, error -19: no device [ 198.446913][T10017] usb 2-1: cannot submit urb 0, error -19: no device [ 198.553586][T10051] fuse: fd is not a fuse device [ 198.649193][ T5792] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 198.704922][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1459'. [ 198.900329][ T5697] usb 6-1: USB disconnect, device number 16 [ 200.032406][ T5697] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 200.192229][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 200.198144][ T5697] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.209897][ T5697] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.221124][ T5697] usb 5-1: config 0 has no interface number 0 [ 200.227652][ T5697] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.239118][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.250097][ T5697] usb 5-1: config 0 descriptor?? [ 200.265293][ T5697] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 200.507958][ T24] usb 5-1: USB disconnect, device number 21 [ 201.679601][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 201.679618][ T29] audit: type=1326 audit(1786351487.636:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 201.785063][ T29] audit: type=1326 audit(1786351487.676:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 201.933283][ T29] audit: type=1326 audit(1786351487.676:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 202.090551][ T29] audit: type=1326 audit(1786351487.676:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 202.202745][ T29] audit: type=1326 audit(1786351487.676:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 202.336895][ T29] audit: type=1326 audit(1786351487.686:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 202.407936][ T29] audit: type=1326 audit(1786351487.776:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7a7b5e90e code=0x7ffc0000 [ 202.495166][ T29] audit: type=1326 audit(1786351487.776:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7a7b5e90e code=0x7ffc0000 [ 202.591545][ T29] audit: type=1326 audit(1786351487.786:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7a7b5e90e code=0x7ffc0000 [ 202.677246][ T29] audit: type=1326 audit(1786351487.796:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1488" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7a7b5e90e code=0x7ffc0000 [ 202.735083][T10155] SELinux: failed to load policy [ 202.965989][T10165] netdevsim netdevsim7 netdevsim2: IPsec offload requires 128 bit authentication [ 203.173670][T10181] ip6gre1: entered promiscuous mode [ 203.179174][T10181] ip6gre1: entered allmulticast mode [ 203.198963][T10181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.265510][T10166] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 203.292059][T10166] device-mapper: ioctl: error adding target to table [ 203.313058][ T24] libceph: connect (1)[c::]:6789 error -101 [ 203.327511][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 203.365575][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 203.371655][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 203.592755][ T24] libceph: connect (1)[c::]:6789 error -101 [ 203.600072][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 203.652765][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 203.671089][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 203.916177][T10225] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 203.924872][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 203.934342][T10225] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 203.942714][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 204.112791][ T24] libceph: connect (1)[c::]:6789 error -101 [ 204.121567][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 204.135673][T10188] ceph: No mds server is up or the cluster is laggy [ 204.135770][T10193] ceph: No mds server is up or the cluster is laggy [ 204.714619][T10259] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 205.568777][T10285] syzkaller1: entered promiscuous mode [ 205.576305][T10285] syzkaller1: entered allmulticast mode [ 205.682268][ T5792] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 205.752684][T10291] overlayfs: failed to clone upperpath [ 205.852793][ T5792] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.876254][ T5792] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.900716][ T5792] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 205.914663][ T5792] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 205.931853][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.940384][ T5792] usb 6-1: Product: syz [ 205.945760][ T5792] usb 6-1: Manufacturer: syz [ 205.960110][ T5792] usb 6-1: SerialNumber: syz [ 205.971666][T10299] 9p: Bad value for 'rfdno' [ 205.972563][T10279] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 206.221981][T10279] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 206.543653][T10327] netlink: 'syz.1.1570': attribute type 2 has an invalid length. [ 206.586788][T10327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1570'. [ 206.618292][T10327] : entered promiscuous mode [ 206.881828][T10279] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 207.017410][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 207.017427][ T29] audit: type=1400 audit(1786351492.976:1009): avc: denied { ioctl } for pid=10340 comm="syz.1.1576" path="socket:[29532]" dev="sockfs" ino=29532 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.049563][ T29] audit: type=1400 audit(1786351492.986:1010): avc: denied { write } for pid=10340 comm="syz.1.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.092069][ T5792] cdc_ncm 6-1:1.0: failed to get mac address [ 207.278507][ T29] audit: type=1400 audit(1786351493.236:1011): avc: denied { read } for pid=10350 comm="syz.6.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 207.313579][ T5792] cdc_ncm 6-1:1.0: bind() failure [ 207.323659][ T5792] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 207.338753][ T5792] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 207.361852][ T5792] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 207.378866][ T5792] usb 6-1: USB disconnect, device number 17 [ 207.956019][T10370] IPv4: Oversized IP packet from 127.202.26.0 [ 208.352642][ T42] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 208.492543][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 208.515131][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.525784][ T29] audit: type=1400 audit(1786351494.486:1012): avc: denied { view } for pid=10392 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 208.527027][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.557048][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.567214][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.581592][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.594570][ T42] usb 5-1: config 0 descriptor?? [ 208.662582][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 208.668391][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.679030][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.689304][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.699783][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.710101][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.723776][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.947474][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 208.953791][ T24] usbtmc 6-1:16.0: can't read capabilities [ 209.034158][ T42] plantronics 0003:047F:FFFF.000D: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 209.062773][T10410] udevd[10410]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 209.242915][ T42] usb 5-1: USB disconnect, device number 22 [ 209.290712][ T5697] usb 6-1: USB disconnect, device number 18 [ 209.358037][T10414] gretap1: entered promiscuous mode [ 209.363877][T10414] batman_adv: batadv0: Adding interface: gretap1 [ 209.370378][T10414] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 209.390442][T10414] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 209.520784][T10422] lo: Caught tx_queue_len zero misconfig [ 209.849530][ T29] audit: type=1400 audit(1786351495.806:1013): avc: denied { write } for pid=10430 comm="syz.4.1614" name="functions" dev="configfs" ino=8791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.934899][ T29] audit: type=1400 audit(1786351495.806:1014): avc: denied { write } for pid=10430 comm="syz.4.1614" name="c.1" dev="configfs" ino=19245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.017368][ T29] audit: type=1400 audit(1786351495.806:1015): avc: denied { create } for pid=10430 comm="syz.4.1614" name="SourceSink.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 210.043865][ T29] audit: type=1400 audit(1786351495.836:1016): avc: denied { write } for pid=10430 comm="syz.4.1614" name="c.1" dev="configfs" ino=19245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.363871][T10459] dummy0: entered promiscuous mode [ 210.376076][T10459] gretap0: entered promiscuous mode [ 210.391204][T10459] hsr1: entered allmulticast mode [ 210.396481][T10459] dummy0: entered allmulticast mode [ 210.401842][T10459] gretap0: entered allmulticast mode [ 210.545979][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1631'. [ 210.814351][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1638'. [ 211.525556][T10513] input: syz1 as /devices/virtual/input/input22 [ 211.572450][T10516] ip_tables: iptables: counters copy to user failed while replacing table [ 211.839602][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 211.851812][ T29] audit: type=1326 audit(1786351497.806:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.4.1656" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd20d59e0d9 code=0x0 [ 212.997509][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 213.279431][T10568] netlink: 'syz.7.1672': attribute type 15 has an invalid length. [ 213.287542][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1672'. [ 213.300621][T10568] netlink: 'syz.7.1672': attribute type 15 has an invalid length. [ 213.309211][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1672'. [ 213.322512][ T6720] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 213.337035][ T6720] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 213.346165][ T6720] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 213.356416][ T6720] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 214.236039][T10572] ceph: No mds server is up or the cluster is laggy [ 214.346132][ T5725] IPVS: starting estimator thread 0... [ 214.387423][ T5690] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 214.396240][ T5690] Registered device Abilis Systems DVB-Titan [ 214.407191][ T5690] usb 7-1: USB disconnect, device number 7 [ 214.436563][T10579] IPVS: using max 46 ests per chain, 110400 per kthread [ 214.441817][ T5690] Unregistered device Abilis Systems DVB-Titan [ 214.446471][ T5690] as10x_usb: device has been disconnected [ 214.485207][T10585] netlink: 'syz.7.1679': attribute type 4 has an invalid length. [ 214.498043][T10585] netlink: 'syz.7.1679': attribute type 4 has an invalid length. [ 214.661716][T10593] veth1_to_bond: entered allmulticast mode [ 214.669647][T10593] veth1_to_bond: entered promiscuous mode [ 214.676568][T10593] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1683'. [ 214.697852][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.715545][T10593] bridge_slave_0 (unregistering): left allmulticast mode [ 214.722778][T10593] bridge_slave_0 (unregistering): left promiscuous mode [ 214.730279][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.780274][T10520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.875793][T10592] veth1_to_bond: left promiscuous mode [ 214.896011][T10592] veth1_to_bond: left allmulticast mode [ 215.284693][ T29] audit: type=1400 audit(1786351501.236:1018): avc: denied { write } for pid=10609 comm="syz.7.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.802737][T10631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.834455][T10636] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 215.854604][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.867071][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.876087][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.886849][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.905097][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.938323][T10643] tls_set_device_offload: netdev not found [ 216.119272][T10655] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1712'. [ 216.157720][T10658] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 216.177962][T10658] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2097202.0), cmd(9) [ 216.292533][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.316979][T10668] netlink: 'syz.7.1714': attribute type 4 has an invalid length. [ 216.847349][T10693] bond0: invalid NS target :: specified for addition [ 216.859112][T10693] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 216.953839][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.961145][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.969120][T10635] bridge_slave_0: entered allmulticast mode [ 216.977876][T10635] bridge_slave_0: entered promiscuous mode [ 216.987463][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.998683][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.006294][T10635] bridge_slave_1: entered allmulticast mode [ 217.014487][T10635] bridge_slave_1: entered promiscuous mode [ 217.049813][T10635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.061792][T10635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.097925][T10635] team0: Port device team_slave_0 added [ 217.111152][T10635] team0: Port device team_slave_1 added [ 217.143399][T10635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.150455][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.176871][T10635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.191407][T10635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.198932][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.226446][T10635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.277979][T10635] hsr_slave_0: entered promiscuous mode [ 217.284587][T10635] hsr_slave_1: entered promiscuous mode [ 217.291027][T10635] debugfs: 'hsr0' already exists in 'hsr' [ 217.297173][T10635] Cannot create hsr debugfs directory [ 217.442221][ T5690] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 217.577371][T10635] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 217.589401][T10635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.602975][T10635] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 217.613344][ T5690] usb 6-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 217.626845][T10635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.628091][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.636958][T10635] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 217.654240][T10635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.663122][T10635] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 217.674874][T10635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.676481][ T5690] usb 6-1: config 0 descriptor?? [ 217.725089][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.732251][T10635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.739658][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.746854][T10635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.819233][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.827197][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.885327][T10635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.903010][T10635] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.917050][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.924227][ T6714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.941050][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.948227][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.974341][ T5613] Bluetooth: hci1: command tx timeout [ 218.128056][ T5690] smartjoyplus 0003:0925:8888.000E: hidraw0: USB HID vef.fd Device [HID 0925:8888] on usb-dummy_hcd.5-1/input0 [ 218.143564][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 218.158967][ T5690] smartjoyplus 0003:0925:8888.000E: Force feedback for SmartJoy PLUS PS2/USB adapter [ 218.180629][T10740] udevd[10740]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 218.321057][ T5725] usb 6-1: USB disconnect, device number 19 [ 218.432628][ T5724] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 218.480056][T10635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.602423][ T5724] usb 7-1: Using ep0 maxpacket: 16 [ 218.611862][ T5724] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.642981][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.666570][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.686771][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.706450][T10635] veth0_vlan: entered promiscuous mode [ 218.708502][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.731783][T10635] veth1_vlan: entered promiscuous mode [ 218.745175][ T5724] usb 7-1: config 0 descriptor?? [ 218.799491][T10635] veth0_macvtap: entered promiscuous mode [ 218.816159][T10635] veth1_macvtap: entered promiscuous mode [ 218.864240][T10635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.878069][T10635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.982493][ T6707] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.043263][ T6707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.111238][ T6712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.136053][ T6712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.210672][ T5724] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000F/input/input23 [ 219.233135][ T6720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.243624][ T6714] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.274322][ T6720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.284676][ T6714] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.337302][ T5724] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 219.401323][ T5724] usb 7-1: USB disconnect, device number 8 [ 219.404735][T10788] udevd[10788]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 220.010605][T10815] io-wq is not configured for unbound workers [ 220.041834][T10818] netlink: 'syz.7.1767': attribute type 1 has an invalid length. [ 220.058016][ T5608] Bluetooth: hci1: command tx timeout [ 220.187708][T10827] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1770'. [ 220.206697][T10818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.639442][T10840] input: syz0 as /devices/virtual/input/input24 [ 220.716067][ T5724] kernel read not supported for file /video9 (pid: 5724 comm: kworker/0:5) [ 220.906483][ T29] audit: type=1400 audit(1786351506.866:1019): avc: denied { read } for pid=10853 comm="syz.8.1781" laddr=fe80::94a3:b2ff:fe4c:3de9 lport=61752 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.933951][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'. [ 220.948669][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'. [ 221.693803][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 221.702467][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 221.716425][ T42] libceph: connect (1)[c::]:6789 error -101 [ 221.755441][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 221.774545][ T42] libceph: connect (1)[c::]:6789 error -101 [ 221.793420][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 221.846077][ T29] audit: type=1400 audit(1786351507.806:1020): avc: denied { mount } for pid=10893 comm="syz.8.1798" name="/" dev="rpc_pipefs" ino=33175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 221.904817][ T29] audit: type=1400 audit(1786351507.866:1021): avc: denied { unmount } for pid=10635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 221.973258][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 221.979926][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 222.031527][ T29] audit: type=1400 audit(1786351507.986:1022): avc: denied { map } for pid=10899 comm="syz.8.1800" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 222.069339][ T42] libceph: connect (1)[c::]:6789 error -101 [ 222.087026][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 222.134338][ T5608] Bluetooth: hci1: command tx timeout [ 222.160520][ T29] audit: type=1400 audit(1786351508.116:1023): avc: denied { ioctl } for pid=10903 comm="syz.5.1802" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 222.479357][T10885] ceph: No mds server is up or the cluster is laggy [ 222.502945][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 222.510519][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 222.514849][T10890] ceph: No mds server is up or the cluster is laggy [ 222.624558][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 222.651916][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 222.716470][T10906] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 222.755381][T10906] device-mapper: ioctl: error adding target to table [ 222.765666][ T29] audit: type=1400 audit(1786351508.726:1024): avc: denied { write } for pid=10914 comm="syz.8.1807" name="functions" dev="configfs" ino=8791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.822253][ T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 222.931638][ T29] audit: type=1400 audit(1786351508.886:1025): avc: denied { write } for pid=10914 comm="syz.8.1807" name="c.1" dev="configfs" ino=19245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.002242][ T29] audit: type=1400 audit(1786351508.886:1026): avc: denied { write } for pid=10914 comm="syz.8.1807" name="c.1" dev="configfs" ino=19245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.024946][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 223.044501][ T42] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 223.055177][ T42] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 223.068530][ T29] audit: type=1400 audit(1786351508.926:1027): avc: denied { setopt } for pid=10918 comm="syz.5.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.091750][ T42] usb 7-1: config 2 has no interface number 0 [ 223.104477][ T42] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 223.115574][ T42] usb 7-1: config 2 interface 88 has no altsetting 0 [ 223.127708][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 223.136782][ T42] usb 7-1: Product: syz [ 223.140980][ T42] usb 7-1: Manufacturer: syz [ 223.162280][ T42] usb 7-1: SerialNumber: syz [ 223.175301][T10911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 223.212245][ T5724] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 223.380844][ T5724] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 223.396530][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.412094][T10911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 223.455151][ T5724] usb 2-1: config 0 descriptor?? [ 223.473003][ T5724] pwc: Creative Labs Webcam 5 detected. [ 224.222780][ T5608] Bluetooth: hci1: command tx timeout [ 224.238786][ T42] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 224.250320][ T42] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 224.264119][ T42] asix 7-1:2.88: probe with driver asix failed with error -71 [ 224.279131][ T42] usb 7-1: USB disconnect, device number 9 [ 224.287375][ T5724] pwc: recv_control_msg error -71 req 02 val 2700 [ 224.333580][ T5724] pwc: recv_control_msg error -71 req 04 val 1600 [ 224.369858][ T5724] pwc: recv_control_msg error -71 req 02 val 2c00 [ 224.397790][ T5724] pwc: recv_control_msg error -71 req 04 val 1000 [ 224.405390][ T5724] pwc: recv_control_msg error -71 req 04 val 1300 [ 224.415082][ T5724] pwc: recv_control_msg error -71 req 04 val 1400 [ 224.426624][ T29] audit: type=1326 audit(1786351510.386:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.7.1829" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a7b9e0d9 code=0x7ffc0000 [ 224.426657][ T5724] pwc: recv_control_msg error -71 req 02 val 2000 [ 224.466691][ T5724] pwc: recv_control_msg error -71 req 02 val 2100 [ 224.489042][ T5724] pwc: recv_control_msg error -71 req 06 val 0600 [ 224.500152][ T5724] pwc: recv_control_msg error -71 req 04 val 1500 [ 224.510642][ T5724] pwc: recv_control_msg error -71 req 02 val 2500 [ 224.527645][ T5724] pwc: recv_control_msg error -71 req 02 val 2400 [ 224.542631][ T5724] pwc: recv_control_msg error -71 req 02 val 2600 [ 224.555089][ T5724] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.581943][ T5724] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.593089][ T5724] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.608435][ T5724] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.635375][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.635940][ T5724] pwc: Failed to power off camera (-71) [ 224.695827][T10973] bridge_slave_1 (unregistering): left allmulticast mode [ 224.711876][T10973] bridge_slave_1 (unregistering): left promiscuous mode [ 224.762284][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.854205][ T5724] pwc: Registered as video103. [ 224.892646][ T5795] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 224.906842][ T5724] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 224.936235][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1837'. [ 224.979020][ T5724] usb 2-1: USB disconnect, device number 19 [ 225.054849][ T5795] usb 9-1: Using ep0 maxpacket: 8 [ 225.202739][T10990] bond0: (slave erspan0): Error: Device can not be enslaved while up [ 225.222414][ T5795] usb 9-1: unable to get BOS descriptor or descriptor too short [ 225.232637][ T5795] usb 9-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 225.278139][ T5795] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 225.310561][ T5795] usb 9-1: can't read configurations, error -71 [ 225.686223][T11012] 9p: Unknown Cache mode or invalid value 7777777777777 [ 226.068250][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 226.068267][ T29] audit: type=1326 audit(1786351512.026:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.143089][ T29] audit: type=1326 audit(1786351512.026:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.220716][ T29] audit: type=1326 audit(1786351512.066:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.292474][ T29] audit: type=1326 audit(1786351512.066:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.329336][T11035] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 226.369311][ T29] audit: type=1326 audit(1786351512.066:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.427996][ T29] audit: type=1326 audit(1786351512.066:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.541560][ T29] audit: type=1326 audit(1786351512.066:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.619339][ T29] audit: type=1326 audit(1786351512.066:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.646631][T11042] fuse: fd is not a fuse device [ 226.693114][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 226.726551][ T29] audit: type=1326 audit(1786351512.066:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.760439][ T29] audit: type=1326 audit(1786351512.066:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.5.1855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fc0de59e0d9 code=0x7ffc0000 [ 226.911692][T11061] fuse: fd is not a fuse device [ 227.212119][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1874'. [ 227.712335][ T5725] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 227.772613][ T42] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 227.852348][ T5724] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 227.864265][ T5725] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.874946][ T5725] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 227.883107][ T5725] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.894945][ T5725] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.904828][ T5725] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.917877][ T5725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.930639][ T5725] usb 9-1: config 0 descriptor?? [ 227.944942][ T42] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 227.958980][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.973735][ T42] usb 6-1: Product: syz [ 227.978727][ T42] usb 6-1: Manufacturer: syz [ 227.985745][ T42] usb 6-1: SerialNumber: syz [ 228.002899][ T5724] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.008057][ T42] usb 6-1: config 0 descriptor?? [ 228.026817][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.040589][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.055135][ T5724] usb 7-1: config 0 descriptor?? [ 228.266810][T11111] overlayfs: missing 'workdir' [ 228.270469][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.284516][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.301256][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.316855][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.329314][ T5724] usbhid 7-1:0.0: can't add hid device: -71 [ 228.335718][ T5724] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 228.348771][ T5725] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 228.358113][ T5724] usb 7-1: USB disconnect, device number 10 [ 228.386939][ T5725] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 228.414639][T11113] udevd[11113]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 228.615349][ T5724] usb 9-1: USB disconnect, device number 4 [ 228.812267][ T1747] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 228.982900][ T1747] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 228.993667][ T1747] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 229.002500][ T1747] usb 7-1: config 8 has no interface number 0 [ 229.008712][ T1747] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.019889][ T1747] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 229.030984][ T1747] usb 7-1: config 8 interface 177 has no altsetting 0 [ 229.038069][ T42] usb 6-1: non-Atmel transceiver xxxxd41f [ 229.044030][ T1747] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.069461][ C1] ir_toy 7-1:8.177: out urb status: -71 [ 229.240237][ T42] usb 6-1: Firmware version (0.0) predates our first public release. [ 229.260340][ T42] usb 6-1: Please update to version 0.2 or newer [ 229.285505][ T42] usb 6-1: atusb_probe: initialization failed, error = -19 [ 229.323167][ T42] usb 6-1: USB disconnect, device number 20 [ 229.402392][ T5690] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 229.556801][ T5690] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 229.584227][ T1747] ir_toy 7-1:8.177: could not write reset command: -110 [ 229.600034][ T5690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.614447][ T1747] ir_toy 7-1:8.177: probe with driver ir_toy failed with error -110 [ 229.623513][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.636614][ T1747] usb 7-1: USB disconnect, device number 11 [ 229.670614][ T5690] as10x_usb: device has been detected [ 229.689709][ T5690] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 229.725107][ T5690] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 229.749646][ T5690] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:3: No space for directory leaf checksum. Please run e2fsck -D. [ 229.767610][ T5690] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #274: comm kworker/1:3: checksumming directory block 0 [ 229.780254][ T5690] usb 2-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -74 [ 229.790593][ T5690] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:3: No space for directory leaf checksum. Please run e2fsck -D. [ 229.806591][ T5690] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #274: comm kworker/1:3: checksumming directory block 0 [ 229.819778][ T5690] usb 2-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -74 [ 229.846328][ T5690] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:3: No space for directory leaf checksum. Please run e2fsck -D. [ 229.876458][ T5690] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #274: comm kworker/1:3: checksumming directory block 0 [ 229.889117][ T5690] usb 2-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -74 [ 229.899842][ T5690] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:3: No space for directory leaf checksum. Please run e2fsck -D. [ 229.915465][ T5690] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #274: comm kworker/1:3: checksumming directory block 0 [ 229.928924][ T5690] usb 2-1: loading /lib/firmware/as102_data1_st.hex failed with error -74 [ 229.942107][ T5690] usb 2-1: Direct firmware load for as102_data1_st.hex failed with error -74 [ 229.951075][ T5690] usb 2-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 230.347344][T11172] overlayfs: failed to clone upperpath [ 230.672408][ T5724] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 230.835705][ T5724] usb 7-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 230.855824][ T5724] usb 7-1: config index 0 descriptor too short (expected 143, got 141) [ 230.869616][ T5724] usb 7-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 230.911030][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.937637][ T5724] usb 7-1: Product: syz [ 230.952095][ T5724] usb 7-1: Manufacturer: syz [ 230.961673][ T5724] usb 7-1: SerialNumber: syz [ 230.968423][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1920'. [ 230.990929][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1920'. [ 231.831538][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 231.837663][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 232.096026][T11211] 9p: Bad value for 'rfdno' [ 232.213608][ T5724] usb 7-1: 1:2 : no or invalid class specific endpoint descriptor [ 232.335716][ T5724] usb 7-1: USB disconnect, device number 12 [ 232.412434][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 232.438821][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.602243][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 232.608107][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.624065][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.639079][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.659289][ T24] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 232.677260][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 232.689354][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 232.700449][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.713900][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.899223][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1932'. [ 232.935384][ T24] usb 9-1: GET_CAPABILITIES returned 0 [ 232.954626][ T24] usbtmc 9-1:16.0: can't read capabilities [ 233.084203][ T5792] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 233.169161][ T24] usb 9-1: USB disconnect, device number 5 [ 233.249926][T11191] Set syz1 is full, maxelem 65536 reached [ 233.254800][ T5792] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 233.268810][ T5792] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 233.278714][ T5792] usb 7-1: config 0 has no interface number 0 [ 233.287736][ T5792] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.301685][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.315512][ T5792] usb 7-1: Product: syz [ 233.319787][ T5792] usb 7-1: Manufacturer: syz [ 233.324441][ T5792] usb 7-1: SerialNumber: syz [ 233.331949][ T5792] usb 7-1: config 0 descriptor?? [ 233.356829][ T5792] yurex 7-1:0.50: USB YUREX device now attached to Yurex #1 [ 233.572445][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.026487][ T5795] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 234.040576][T11269] netlink: 'syz.7.1950': attribute type 16 has an invalid length. [ 234.048522][T11269] netlink: 'syz.7.1950': attribute type 17 has an invalid length. [ 234.059609][ T24] usb 7-1: USB disconnect, device number 13 [ 234.062434][T11269] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.086360][ T24] yurex 7-1:0.50: USB YUREX #1 now disconnected [ 234.185862][ T5795] usb 9-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 234.223376][ T5795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.236497][T11276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.262282][ T5795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.273741][ T5795] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.287736][ T5795] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.361419][ T5795] usb 9-1: config 0 descriptor?? [ 234.425145][T11281] xt_hashlimit: overflow, try lower: 0/0 [ 234.702555][ T5724] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 234.787390][ T5795] sony 0003:054C:1000.0011: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 234.805932][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 234.805948][ T29] audit: type=1400 audit(1786351520.756:1087): avc: denied { write } for pid=11304 comm="syz.7.1962" path="socket:[34288]" dev="sockfs" ino=34288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.838320][ T5795] sony 0003:054C:1000.0011: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.8-1/input0 [ 234.839976][ T5708] IPVS: starting estimator thread 0... [ 234.870786][ T5795] sony 0003:054C:1000.0011: failed to claim input [ 234.879343][ T5724] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 234.904391][ T5724] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 234.917636][T11309] udevd[11309]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 234.927177][ T5724] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 234.952226][ T5724] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.962616][T11308] IPVS: using max 41 ests per chain, 98400 per kthread [ 234.971571][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 234.979871][ T5724] usb 7-1: Product: syz [ 234.987320][ T5724] usb 7-1: Manufacturer: syz [ 235.014480][ T5724] usb 7-1: SerialNumber: syz [ 235.098099][ T5708] usb 9-1: USB disconnect, device number 6 [ 235.114197][ T5724] usb 7-1: config 0 descriptor?? [ 235.157663][T11283] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 235.191522][ T5724] usb 7-1: selecting invalid altsetting 0 [ 235.377125][ T29] audit: type=1400 audit(1786351521.336:1088): avc: denied { mount } for pid=11320 comm="syz.1.1969" name="/" dev="hugetlbfs" ino=34316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 235.402087][T11283] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 235.411686][T11283] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 235.421344][T11283] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 235.438350][ T29] audit: type=1400 audit(1786351521.396:1089): avc: denied { ioctl } for pid=11325 comm="syz.5.1971" path="/280/file0" dev="tmpfs" ino=1485 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 235.463304][T11283] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 235.472701][T11283] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 235.481133][ T5724] usb 7-1: USB disconnect, device number 14 [ 235.783697][ T29] audit: type=1400 audit(1786351521.736:1090): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 236.344632][ T29] audit: type=1400 audit(1786351522.306:1091): avc: denied { connect } for pid=11351 comm="syz.6.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.695736][T11361] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 237.066872][T11388] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 237.195215][ T6714] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 237.787814][ T5608] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 237.797846][ T5608] CPU: 1 UID: 0 PID: 5608 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.797879][ T5608] Tainted: [L]=SOFTLOCKUP [ 237.797886][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 237.797899][ T5608] Workqueue: hci3 hci_rx_work [ 237.797926][ T5608] Call Trace: [ 237.797933][ T5608] [ 237.797941][ T5608] dump_stack_lvl+0x100/0x190 [ 237.797968][ T5608] sysfs_warn_dup.cold+0x1c/0x28 [ 237.797996][ T5608] sysfs_create_dir_ns+0x24b/0x2b0 [ 237.798016][ T5608] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 237.798034][ T5608] ? find_held_lock+0x2b/0x80 [ 237.798052][ T5608] ? kobject_add_internal+0x25f/0x930 [ 237.798069][ T5608] ? kobject_add_internal+0x25f/0x930 [ 237.798090][ T5608] ? do_raw_spin_unlock+0x145/0x1e0 [ 237.798119][ T5608] kobject_add_internal+0x2c8/0x930 [ 237.798143][ T5608] kobject_add+0x16a/0x1e0 [ 237.798161][ T5608] ? __pfx_kobject_add+0x10/0x10 [ 237.798178][ T5608] ? class_to_subsys+0x10f/0x150 [ 237.798211][ T5608] ? kobject_put+0xb9/0x640 [ 237.798226][ T5608] ? _raw_spin_unlock+0x28/0x50 [ 237.798254][ T5608] device_add+0x294/0x1970 [ 237.798281][ T5608] ? __pfx_dev_set_name+0x10/0x10 [ 237.798300][ T5608] ? __pfx_device_add+0x10/0x10 [ 237.798328][ T5608] ? mgmt_send_event_skb+0x2fb/0x460 [ 237.798356][ T5608] hci_conn_add_sysfs+0x1a3/0x260 [ 237.798380][ T5608] le_conn_complete_evt+0x11eb/0x1f60 [ 237.798420][ T5608] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 237.798442][ T5608] ? hci_event_packet+0x186/0xcd0 [ 237.798465][ T5608] ? hci_event_packet+0x186/0xcd0 [ 237.798496][ T5608] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 237.798524][ T5608] ? skb_pull_data+0x15f/0x1e0 [ 237.798556][ T5608] hci_le_meta_evt+0x34a/0x5f0 [ 237.798581][ T5608] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 237.798608][ T5608] hci_event_packet+0x51c/0xcd0 [ 237.798630][ T5608] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 237.798654][ T5608] ? __pfx_hci_event_packet+0x10/0x10 [ 237.798679][ T5608] ? kcov_remote_start+0x384/0x670 [ 237.798700][ T5608] ? lockdep_hardirqs_on+0x78/0x100 [ 237.798729][ T5608] hci_rx_work+0x451/0xfc0 [ 237.798753][ T5608] process_one_work+0xa23/0x1940 [ 237.798781][ T5608] ? __pfx_process_one_work+0x10/0x10 [ 237.798808][ T5608] ? __pfx_hci_rx_work+0x10/0x10 [ 237.798830][ T5608] worker_thread+0x5ef/0xe50 [ 237.798860][ T5608] ? kthread+0x13a/0x450 [ 237.798877][ T5608] ? __pfx_worker_thread+0x10/0x10 [ 237.798895][ T5608] kthread+0x370/0x450 [ 237.798912][ T5608] ? __pfx_kthread+0x10/0x10 [ 237.798932][ T5608] ret_from_fork+0x72b/0xd50 [ 237.798961][ T5608] ? __pfx_ret_from_fork+0x10/0x10 [ 237.798987][ T5608] ? rcu_is_watching+0x12/0xc0 [ 237.799015][ T5608] ? __switch_to+0x800/0x10f0 [ 237.799034][ T5608] ? __pfx_kthread+0x10/0x10 [ 237.799054][ T5608] ret_from_fork_asm+0x1a/0x30 [ 237.799095][ T5608] [ 237.799120][ T5608] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.094212][ T5608] Bluetooth: hci3: failed to register connection device [ 238.272098][ T29] audit: type=1400 audit(1786351524.226:1092): avc: denied { watch_sb watch_reads } for pid=11451 comm="syz.5.2022" path="/293/file0" dev="tmpfs" ino=1554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.065633][ T29] audit: type=1400 audit(1786351525.026:1093): avc: denied { name_bind } for pid=11485 comm="syz.1.2035" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 239.230437][T11490] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2037'. [ 239.262306][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 239.305967][T11494] loop5: detected capacity change from 0 to 7 [ 239.319745][T11494] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 239.328722][T11494] loop5: partition table partially beyond EOD, truncated [ 239.339839][T11494] loop5: p1 size 1042712361 extends beyond EOD, truncated [ 239.394807][ T6221] udevd[6221]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 239.412321][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 239.422348][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.445839][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 239.463677][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.483690][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.506842][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.521371][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.537499][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.764406][ T24] usb 6-1: usb_control_msg returned -32 [ 239.778318][ T24] usbtmc 6-1:16.0: can't read capabilities [ 239.989614][ T29] audit: type=1400 audit(1786351525.946:1094): avc: denied { getopt } for pid=11518 comm="syz.8.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.013237][ T42] usb 6-1: USB disconnect, device number 21 [ 240.293305][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 240.507153][ T29] audit: type=1400 audit(1786351526.456:1095): avc: denied { bind } for pid=11545 comm="syz.7.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.599770][ T29] audit: type=1400 audit(1786351526.556:1096): avc: denied { watch } for pid=11550 comm="syz.6.2065" path="/280/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 240.624169][ T29] audit: type=1400 audit(1786351526.566:1097): avc: denied { mounton } for pid=11549 comm="syz.1.2066" path="/425/file0" dev="tmpfs" ino=2229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 240.674043][T11554] tipc: Started in network mode [ 240.682901][T11554] tipc: Node identity ac14140f, cluster identity 4711 [ 240.702270][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 240.713983][T11554] tipc: New replicast peer: 255.255.255.255 [ 240.721008][T11554] tipc: Enabled bearer , priority 10 [ 240.751805][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 241.285310][ T29] audit: type=1400 audit(1786351527.246:1098): avc: denied { connect } for pid=11577 comm="syz.7.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 241.412370][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 241.726053][ T42] tipc: Node number set to 2886997007 [ 242.355165][ T29] audit: type=1400 audit(1786351528.306:1099): avc: denied { map } for pid=11645 comm="syz.6.2106" path="/dev/radio6" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 242.462301][ T5724] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 242.623593][ T5724] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 242.647973][ T5724] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.680128][ T5724] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.716695][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.740582][ T5724] usb 6-1: config 0 descriptor?? [ 242.997178][T11665] input: syz0 as /devices/virtual/input/input29 [ 243.273083][ T5724] ath6kl: Failed to submit usb control message: -71 [ 243.285579][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 243.293544][ T5724] ath6kl: unable to send the bmi data to the device: -71 [ 243.310200][ T5724] ath6kl: Unable to send get target info: -71 [ 243.321568][ T10] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.343607][ T5724] ath6kl: Failed to init ath6kl core: -71 [ 243.344189][T11673] udevd[11673]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 243.368540][ T5724] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 243.395938][ T5724] usb 6-1: USB disconnect, device number 22 [ 243.496319][ T29] audit: type=1400 audit(1786351529.456:1100): avc: denied { override_creds } for pid=11678 comm="syz.7.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 244.089244][T11699] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.105845][T11699] bond2: (slave lo): Enslaving as an active interface with an up link [ 244.117803][T11699] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 244.225842][T11702] netlink: 'syz.5.2130': attribute type 19 has an invalid length. [ 244.282344][ T5724] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 244.367200][T11702] netlink: 'syz.5.2130': attribute type 19 has an invalid length. [ 244.452987][ T5724] usb 7-1: Using ep0 maxpacket: 32 [ 244.470884][ T5724] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 244.487179][ T5724] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 244.496313][ T5724] usb 7-1: config 0 has no interface number 0 [ 244.503279][ T5724] usb 7-1: config 0 interface 184 has no altsetting 0 [ 244.514608][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.529887][ T5724] usb 7-1: Product: syz [ 244.548077][ T5724] usb 7-1: Manufacturer: syz [ 244.557764][ T5724] usb 7-1: SerialNumber: syz [ 244.583473][ T5724] usb 7-1: config 0 descriptor?? [ 244.952299][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 245.067731][T11736] syzkaller1: entered promiscuous mode [ 245.074760][T11736] syzkaller1: entered allmulticast mode [ 245.104445][ T24] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 245.116264][ T24] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 245.124550][ T24] usb 9-1: Product: syz [ 245.128727][ T24] usb 9-1: SerialNumber: syz [ 245.136222][ T24] usb 9-1: config 0 descriptor?? [ 245.350104][ T24] hso 9-1:0.0: Can't find BULK endpoints [ 245.403814][ T29] audit: type=1326 audit(1786351531.366:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.5.2138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x7fc00000 [ 245.556132][ T5795] usb 9-1: USB disconnect, device number 7 [ 245.811226][ T5724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 245.830854][ T5724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 245.842428][ T5724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 245.854975][ T5724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 245.867158][ T5724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 245.879152][ T5724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 245.889056][ T5724] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 245.905995][ T5724] usb 7-1: USB disconnect, device number 15 [ 246.220478][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb829 instead [ 246.231101][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x37ad instead [ 246.242007][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xbaaa instead [ 246.253295][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6cf0 instead [ 246.264355][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x08f7 instead [ 246.275403][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9a2c instead [ 246.287785][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xef30 instead [ 246.298570][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xe243 instead [ 246.310495][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xb434 instead [ 246.321949][T11767] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xbb23 instead [ 246.333457][T11767] jffs2: Further such events for this erase block will not be printed [ 246.342479][T11767] jffs2: notice: (11767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 246.672322][ T42] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 246.842689][ T42] usb 9-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 246.859547][ T5708] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 246.868318][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.882793][ T42] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.894298][ T42] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.910059][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.918496][ T42] usb 9-1: Product: syz [ 246.923541][ T42] usb 9-1: Manufacturer: syz [ 246.928171][ T42] usb 9-1: SerialNumber: syz [ 247.044555][ T5708] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.056942][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.068340][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.078364][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.089493][ T5708] usb 7-1: config 0 descriptor?? [ 247.365320][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb829 instead [ 247.378438][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x37ad instead [ 247.397074][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xbaaa instead [ 247.408404][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6cf0 instead [ 247.427120][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x08f7 instead [ 247.445389][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9a2c instead [ 247.457045][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xef30 instead [ 247.467702][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xe243 instead [ 247.478930][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xb434 instead [ 247.494390][T11806] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xbb23 instead [ 247.507632][T11806] jffs2: Further such events for this erase block will not be printed [ 247.516877][T11806] jffs2: notice: (11806) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 247.606259][ T29] audit: type=1400 audit(1786351533.566:1102): avc: denied { execute } for pid=11814 comm="syz.5.2181" name="file2" dev="ramfs" ino=36232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 247.632683][ T29] audit: type=1400 audit(1786351533.566:1103): avc: denied { execute_no_trans } for pid=11814 comm="syz.5.2181" path="/file2" dev="ramfs" ino=36232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 247.662772][T11812] ushc 9-1:1.0: probe with driver ushc failed with error -110 [ 247.710068][ T5708] usb 7-1: language id specifier not provided by device, defaulting to English [ 247.752287][ T5724] usb 9-1: USB disconnect, device number 8 [ 247.851688][T11826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2186'. [ 247.873084][T11826] netlink: 'syz.5.2186': attribute type 7 has an invalid length. [ 247.892930][T11826] netlink: 'syz.5.2186': attribute type 8 has an invalid length. [ 247.912194][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2186'. [ 247.929643][T11826] erspan0: entered promiscuous mode [ 247.938197][T11826] gretap0: entered promiscuous mode [ 247.946181][T11826] erspan0: left promiscuous mode [ 247.952760][T11826] gretap0: left promiscuous mode [ 248.020946][T11828] coredump: 1030(syz.7.2185): Core dump to core aborted: cannot preserve file permissions [ 248.315784][ T5708] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #100: -71 [ 248.346159][ T5708] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 248.375092][ T5708] uclogic 0003:256C:006D.0013: failed probing pen v1 parameters: -71 [ 248.391789][ T5708] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 248.405885][ T5708] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 248.422876][ T5708] usb 7-1: USB disconnect, device number 16 [ 248.568147][T11847] gadgetfs: bound to dummy_udc driver [ 248.745998][ T29] audit: type=1400 audit(1786351534.706:1104): avc: denied { read } for pid=11850 comm="syz.5.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.844624][ T29] audit: type=1400 audit(1786351534.806:1105): avc: denied { bind } for pid=11854 comm="syz.5.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 248.871927][ T29] audit: type=1400 audit(1786351534.826:1106): avc: denied { listen } for pid=11854 comm="syz.5.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 249.830794][T11907] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.4194304) [ 249.920317][ T29] audit: type=1400 audit(1786351535.876:1107): avc: denied { write } for pid=11910 comm="syz.8.2224" name="cluster" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.947944][ T29] audit: type=1400 audit(1786351535.906:1108): avc: denied { write } for pid=11910 comm="syz.8.2224" name="node" dev="configfs" ino=37080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.970966][ T29] audit: type=1800 audit(1786351535.906:1109): pid=11911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2224" name="ipv4_port" dev="configfs" ino=36445 res=0 errno=0 [ 249.971328][T11909] Bluetooth: ISO socket layer initialized [ 250.010236][ T5724] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 250.174453][ T5724] usb 6-1: Using ep0 maxpacket: 32 [ 250.184924][ T5724] usb 6-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 250.190333][T11925] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.198084][ T5724] usb 6-1: config index 0 descriptor too short (expected 7317, got 149) [ 250.201152][T11925] bridge0: port 2(bridge_slave_1) entered listening state [ 250.216796][T11925] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.219859][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 250.223938][T11925] bridge0: port 1(bridge_slave_0) entered listening state [ 250.243848][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.258568][ T5724] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 250.274480][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.282790][ T5724] usb 6-1: Product: syz [ 250.287726][ T5724] usb 6-1: Manufacturer: syz [ 250.292664][ T5724] usb 6-1: SerialNumber: syz [ 250.397058][ T29] audit: type=1400 audit(1786351536.346:1110): avc: denied { execute } for pid=11928 comm="syz.6.2229" path="/dev/adsp1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 250.449494][T11925] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 250.535584][ T5724] gspca_main: STV06xx-2.14.0 probing 046d:08f5 [ 250.557020][ T5724] gspca_stv06xx: st6422 sensor detected [ 250.577145][T11925] batman_adv: batadv0: Interface activated: gretap1 [ 250.779284][T11933] kvm: kvm [11932]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 250.791911][T11933] kvm: kvm [11932]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 250.832801][ T5724] STV06xx 6-1:1.0: probe with driver STV06xx failed with error -71 [ 250.931836][T11938] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 250.971916][ T5724] usb 6-1: USB disconnect, device number 23 [ 251.031416][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.267993][T11950] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.468682][ T29] audit: type=1400 audit(1786351537.426:1111): avc: denied { setopt } for pid=11954 comm="syz.8.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.813179][ T5608] Bluetooth: hci1: command 0x0405 tx timeout [ 251.831476][ T29] audit: type=1400 audit(1786351537.786:1112): avc: denied { create } for pid=11969 comm="syz.7.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.953245][ T29] audit: type=1400 audit(1786351537.816:1113): avc: denied { bind } for pid=11969 comm="syz.7.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.071419][ T29] audit: type=1400 audit(1786351537.846:1114): avc: denied { ioctl } for pid=11971 comm="syz.6.2246" path="socket:[36631]" dev="sockfs" ino=36631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.112564][T11987] netlink: 'syz.6.2251': attribute type 7 has an invalid length. [ 252.129044][T11987] netlink: 'syz.6.2251': attribute type 8 has an invalid length. [ 252.344468][ T29] audit: type=1400 audit(1786351538.306:1115): avc: denied { watch_reads } for pid=11993 comm="syz.6.2254" path="/316/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 252.715040][T12010] key id 000004d2 not found [ 252.933285][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 253.022289][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 253.035100][T12027] jfs: Unknown parameter 'discard0' [ 253.121515][ T29] audit: type=1400 audit(1786351539.076:1116): avc: denied { name_bind } for pid=12029 comm="syz.6.2268" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 253.192672][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 253.209775][ T10] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 253.245919][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 253.272464][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.300898][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.324540][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 253.347558][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.361455][ T10] usb 6-1: Product: syz [ 253.366034][ T10] usb 6-1: Manufacturer: syz [ 253.372774][ T10] usb 6-1: SerialNumber: syz [ 253.381204][ T10] usb 6-1: config 0 descriptor?? [ 253.387270][T12015] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.625610][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 253.681375][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 253.893210][ T5608] Bluetooth: hci1: command 0x0405 tx timeout [ 254.063491][ C0] powermate: config urb returned -71 [ 254.071601][ C0] powermate: config urb returned -71 [ 254.077145][ C0] powermate: config urb returned -71 [ 254.083765][ C0] powermate: config urb returned -71 [ 254.115304][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 254.134545][ T5725] usb 6-1: USB disconnect, device number 24 [ 254.479446][T12065] fuse: fd is not a fuse device [ 254.527502][ T5725] bridge0: entered promiscuous mode [ 254.794027][T12078] netlink: 'syz.7.2289': attribute type 1 has an invalid length. [ 254.826128][T12078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.874582][T12078] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 254.974923][T12089] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 254.993415][T12089] overlayfs: failed to set xattr on upper [ 255.006324][T12089] overlayfs: ...falling back to redirect_dir=nofollow. [ 255.025445][ T29] audit: type=1400 audit(1786351540.976:1117): avc: denied { accept } for pid=12091 comm="syz.5.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 255.052821][T12089] overlayfs: ...falling back to index=off. [ 255.063421][T12089] overlayfs: ...falling back to uuid=null. [ 255.070890][T12089] overlayfs: ...falling back to xino=off. [ 255.317740][T12114] ipt_REJECT: TCP_RESET invalid for non-tcp [ 255.512100][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880356a1c00: rx timeout, send abort [ 255.535264][ T29] audit: type=1400 audit(1786351541.496:1118): avc: denied { read } for pid=4945 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 255.589022][ T29] audit: type=1400 audit(1786351541.496:1119): avc: denied { search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.604498][T12122] kvm: MWAIT instruction emulated as NOP! [ 255.613792][ T29] audit: type=1400 audit(1786351541.496:1120): avc: denied { write search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.012355][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880356a0400: rx timeout, send abort [ 256.024412][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880356a1c00: abort rx timeout. Force session deactivation [ 256.212580][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 256.375963][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 256.394575][ T10] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 256.408721][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.424666][ T10] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.435033][ T10] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 256.447907][ T10] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 256.461529][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 256.472887][ T10] usb 9-1: config 1 interface 1 has no altsetting 0 [ 256.482104][ T10] usb 9-1: string descriptor 0 read error: -22 [ 256.488477][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.520737][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880356a0400: abort rx timeout. Force session deactivation [ 256.613422][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 256.773364][ T24] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 256.784517][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.800022][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.809099][ T24] usb 6-1: Product: syz [ 256.816341][ T24] usb 6-1: Manufacturer: syz [ 256.821197][ T24] usb 6-1: SerialNumber: syz [ 256.841076][ T24] symbolserial 6-1:1.0: symbol converter detected [ 256.858910][ T24] usb 6-1: symbol converter now attached to ttyUSB0 [ 257.067829][ T24] usb 6-1: USB disconnect, device number 25 [ 257.084050][ T24] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 257.119071][ T24] symbolserial 6-1:1.0: device disconnected [ 257.528752][ T10] usb 9-1: 2:0: failed to get current value for ch 1 (-71) [ 257.738832][ T10] usb 9-1: USB disconnect, device number 9 [ 258.242341][T12220] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2344'. [ 258.382676][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 258.599533][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 258.626603][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 258.658996][ T10] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 258.664702][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 258.664717][ T29] audit: type=1400 audit(1786351544.616:1476): avc: denied { read } for pid=12237 comm="syz.1.2339" lport=33363 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 258.703717][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.743000][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.777098][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.817702][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.852042][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.882089][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.906779][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.927768][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.962538][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 258.984363][ T29] audit: type=1400 audit(1786351544.936:1477): avc: denied { read write } for pid=12249 comm="syz.1.2348" name="sg0" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 258.984734][ T10] usb 7-1: SerialNumber: syz [ 259.065368][ T29] audit: type=1400 audit(1786351544.936:1478): avc: denied { open } for pid=12249 comm="syz.1.2348" path="/dev/sg0" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 259.095576][ T29] audit: type=1326 audit(1786351545.006:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.1.2348" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9278b9e0d9 code=0x0 [ 259.098596][ T10] usb 7-1: config 0 descriptor?? [ 259.195707][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input31 [ 259.393266][T12217] input: syz0 as /devices/virtual/input/input32 [ 259.440119][ T29] audit: type=1400 audit(1786351545.396:1480): avc: denied { ioctl } for pid=12271 comm="syz.5.2357" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 259.478372][ T4948] bcm5974 7-1:0.0: could not read from device [ 259.490579][ T4948] bcm5974 7-1:0.0: could not read from device [ 259.506811][ T4948] bcm5974 7-1:0.0: could not read from device [ 259.511673][ T10] usb 7-1: USB disconnect, device number 17 [ 259.524342][ T4948] bcm5974 7-1:0.0: could not read from device [ 260.970268][T12310] trusted_key: syz.7.2372 sent an empty control message without MSG_MORE. [ 261.315346][ T24] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 261.447764][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2381'. [ 261.489625][T12332] hsr_slave_1 (unregistering): left promiscuous mode [ 261.507130][ T24] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 261.539931][ T24] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 261.554214][ T24] usb 7-1: config 0 has no interface number 0 [ 261.571912][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.588659][ T24] usb 7-1: Product: syz [ 261.603681][ T24] usb 7-1: Manufacturer: syz [ 261.619210][ T24] usb 7-1: SerialNumber: syz [ 261.648716][ T24] usb 7-1: config 0 descriptor?? [ 261.654466][T12336] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 261.681822][T12336] CIFS: Attempting to mount //127.0.0.1/share,ser=roœº‰jÖàvK~—ot [ 261.744955][T12337] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 261.761501][T12336] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 261.774021][T12336] CIFS: VFS: cifs_mount failed w/return code = -11 [ 262.506475][ T24] asix 7-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 175 [ 262.739659][ T10] usb 7-1: USB disconnect, device number 18 [ 262.882334][T12359] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.077809][T12368] netlink: zone id is out of range [ 263.128770][T12368] netlink: get zone limit has 4 unknown bytes [ 263.199657][T12373] fuse: fd is not a fuse device [ 263.653847][T12381] loop2: detected capacity change from 0 to 3 [ 263.676600][T12381] ldm_validate_privheads(): Disk read failed. [ 263.688034][T12381] Dev loop2: unable to read RDB block 3 [ 263.702352][T12381] loop2: unable to read partition table [ 263.717374][T12381] loop2: partition table beyond EOD, truncated [ 263.732762][T12381] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 264.483575][T12405] evm: overlay not supported [ 264.762459][ T5697] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 264.933799][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 264.960290][ T5697] usb 6-1: unable to get BOS descriptor or descriptor too short [ 264.990567][ T5697] usb 6-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.40 [ 265.023209][ T5697] usb 6-1: config 1 interface 0 has no altsetting 0 [ 265.049165][ T5697] usb 6-1: string descriptor 0 read error: -22 [ 265.067240][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.318095][T12425] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer. [ 265.579545][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 265.589128][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 265.628555][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.652492][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.660207][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.687488][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.708235][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.727858][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.763705][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.790851][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.797897][ T29] audit: type=1400 audit(1786351551.756:1481): avc: denied { read write } for pid=12444 comm="syz.6.2426" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.867755][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 265.879935][ T29] audit: type=1400 audit(1786351551.836:1482): avc: denied { ioctl } for pid=12444 comm="syz.6.2426" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.930054][ T5697] evision 0003:320F:5041.0014: unknown main item tag 0x0 [ 266.004118][T12448] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 266.016568][ T5697] evision 0003:320F:5041.0014: hidraw0: USB HID v0.05 Device [HID 320f:5041] on usb-dummy_hcd.5-1/input0 [ 266.054882][T12451] udevd[12451]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 266.097715][ T5697] usb 6-1: USB disconnect, device number 26 [ 266.249945][T12457] xt_hashlimit: size too large, truncated to 1048576 [ 266.708848][T12477] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2438'. [ 266.767280][ T29] audit: type=1400 audit(1786351552.726:1483): avc: denied { write } for pid=12480 comm="syz.5.2440" name="strings" dev="configfs" ino=8793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.820735][ T29] audit: type=1800 audit(1786351552.726:1484): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2440" name="manufacturer" dev="configfs" ino=38749 res=0 errno=0 [ 266.852370][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 266.871908][ T29] audit: type=1800 audit(1786351552.726:1485): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2440" name="product" dev="configfs" ino=38750 res=0 errno=0 [ 267.176626][ T29] audit: type=1326 audit(1786351553.136:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.2442" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0de59e0d9 code=0x0 [ 267.399411][T12506] netlink: 'syz.7.2449': attribute type 1 has an invalid length. [ 267.420411][T12506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.451525][T12506] bond3: (slave gretap1): making interface the new active one [ 267.460950][T12506] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 267.492457][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.895271][ T5697] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 267.947324][ T29] audit: type=1800 audit(1786351553.896:1487): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2457" name="file0" dev="overlay" ino=1954 res=0 errno=0 [ 268.063606][ T5697] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 268.080665][ T5697] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.100548][ T5697] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.113870][ T5697] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.136809][ T5697] usb 9-1: config 0 descriptor?? [ 268.868849][ T29] audit: type=1400 audit(1786351554.826:1488): avc: denied { write } for pid=12539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.059580][ T29] audit: type=1400 audit(1786351555.016:1489): avc: denied { write } for pid=12558 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.072854][T12562] overlayfs: failed to clone lowerpath [ 269.134376][T12568] overlayfs: failed to clone lowerpath [ 269.187142][ T5697] uclogic 0003:256C:006D.0015: interface is invalid, ignoring [ 269.495128][ T10] usb 9-1: USB disconnect, device number 10 [ 269.782289][ T29] audit: type=1400 audit(1786351555.736:1490): avc: denied { write } for pid=12573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.821408][ T5697] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 269.993543][ T5697] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 270.011423][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.023625][ T5697] usb 7-1: Product: syz [ 270.035562][ T5697] usb 7-1: Manufacturer: syz [ 270.046427][ T5697] usb 7-1: SerialNumber: syz [ 270.069245][ T5697] usb 7-1: config 0 descriptor?? [ 270.145160][ T5697] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 019 [ 270.349625][T12583] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 270.766980][ T5697] i2c i2c-1: failure reading functionality [ 270.848682][ T5697] i2c i2c-1: connected i2c-tiny-usb device [ 270.889610][ T5697] usb 7-1: USB disconnect, device number 19 [ 271.471333][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2495'. [ 271.605567][T12653] overlayfs: failed to clone lowerpath [ 271.622414][T12653] overlayfs: failed to clone lowerpath [ 271.734365][T12660] kvm: emulating exchange as write [ 271.751043][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 271.751059][ T29] audit: type=1804 audit(1786351557.706:1497): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.2501" name="bus" dev="ramfs" ino=41425 res=1 errno=0 [ 272.246730][T12685] netlink: 'syz.6.2510': attribute type 1 has an invalid length. [ 272.306239][T12685] bond2: entered promiscuous mode [ 272.311780][T12685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.442602][T12685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.480634][T12685] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 272.520173][T12685] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 272.558558][T12698] fuse: fd is not a fuse device [ 272.564716][T12685] bond2: (slave ipip0): making interface the new active one [ 272.577581][T12685] ipip0: entered promiscuous mode [ 272.599987][T12685] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 272.658898][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 272.682395][T12702] netlink: 'syz.7.2517': attribute type 29 has an invalid length. [ 272.719911][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 272.749722][ T29] audit: type=1400 audit(1786351558.706:1498): avc: denied { bind } for pid=12703 comm="syz.5.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.778621][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 272.790889][T12705] netlink: 'syz.7.2517': attribute type 29 has an invalid length. [ 272.805912][ T29] audit: type=1400 audit(1786351558.706:1499): avc: denied { connect } for pid=12703 comm="syz.5.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.829250][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 272.843028][ T29] audit: type=1400 audit(1786351558.786:1500): avc: denied { setopt } for pid=12709 comm="syz.8.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 272.929697][ T29] audit: type=1400 audit(1786351558.886:1501): avc: denied { remount } for pid=12713 comm="syz.1.2521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 273.017719][ T29] audit: type=1400 audit(1786351558.976:1502): avc: denied { create } for pid=12721 comm="syz.1.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 273.046691][ T29] audit: type=1400 audit(1786351558.976:1503): avc: denied { write } for pid=12721 comm="syz.1.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 273.268937][T12736] netlink: 'syz.6.2531': attribute type 1 has an invalid length. [ 273.309472][T12736] bond3: entered promiscuous mode [ 273.311943][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2532'. [ 273.316107][T12736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.394158][T12736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.430979][T12736] bond3: (slave ipip1): The slave device specified does not support setting the MAC address [ 273.450397][T12736] bond3: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 273.489349][T12736] bond3: (slave ipip1): making interface the new active one [ 273.497808][T12736] ipip1: entered promiscuous mode [ 273.505321][T12736] bond3: (slave ipip1): Enslaving as an active interface with an up link [ 273.859850][T12757] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 273.869504][T12757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 274.737527][T12796] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 274.768658][T12796] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.819695][ T29] audit: type=1400 audit(1786351560.776:1504): avc: denied { create } for pid=12805 comm="syz.5.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 274.855062][T12802] binder: 12801:12802 ioctl c0306201 200000000040 returned -14 [ 274.867766][ T29] audit: type=1400 audit(1786351560.806:1505): avc: denied { write } for pid=12805 comm="syz.5.2557" path="socket:[41717]" dev="sockfs" ino=41717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 275.310527][T12800] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 275.353576][T12800] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.554467][T12800] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 275.581460][T12800] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.597428][ T29] audit: type=1400 audit(1786351561.546:1506): avc: denied { write } for pid=12818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.801344][T12800] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 275.843419][T12800] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.157961][ T6720] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 276.177284][ T6720] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.342450][ T5697] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 276.422277][ T6720] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 276.459391][ T6720] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.488870][ T6720] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 276.518334][ T6720] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.534620][ T5697] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 276.742679][ T6720] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 276.794920][ T6720] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.075629][ T5697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 277.093769][ T5697] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 277.115611][ T5697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 277.141915][ T5697] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 277.158336][T12890] batman_adv: batadv0: Adding interface: dummy0 [ 277.172285][ T5697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.181827][T12890] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.217310][ T5697] usb 7-1: config 0 descriptor?? [ 277.222711][T12890] batman_adv: batadv0: Interface activated: dummy0 [ 277.374211][T12890] batadv0: mtu less than device minimum [ 277.396924][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.410447][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.421789][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.433107][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.446301][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.457563][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.468908][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.480194][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.491725][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.537680][ T5697] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 277.555978][ T5697] hdpvr 7-1:0.0: device init failed [ 277.577732][ T5697] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 277.607133][ T5697] usb 7-1: USB disconnect, device number 20 [ 277.943109][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 278.122187][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 278.147953][ T24] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.187960][ T24] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.220796][ T24] usb 9-1: config 0 has no interface number 0 [ 278.234971][ T24] usb 9-1: config 0 interface 184 has no altsetting 0 [ 278.267336][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.312416][ T24] usb 9-1: Product: syz [ 278.328199][ T24] usb 9-1: Manufacturer: syz [ 278.345345][ T24] usb 9-1: SerialNumber: syz [ 278.387229][ T24] usb 9-1: config 0 descriptor?? [ 278.924699][T12945] netlink: 121460 bytes leftover after parsing attributes in process `syz.7.2597'. [ 279.034362][T12953] binder: 12951:12953 ioctl c0306201 0 returned -14 [ 279.049995][T12952] fuse: fd is not a fuse device [ 279.085089][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 279.085105][ T29] audit: type=1400 audit(1786351565.046:1510): avc: denied { read } for pid=12954 comm="syz.6.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 279.182404][ T5724] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 279.337575][ T5724] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 279.348737][ T5724] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 279.372446][ T5724] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.397995][ T5724] usb 6-1: config 0 has no interface number 1 [ 279.407807][ T5724] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 279.435385][ T5724] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.449556][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.458007][ T5724] usb 6-1: SerialNumber: syz [ 279.465850][ T5724] usb 6-1: config 0 descriptor?? [ 279.479812][ T5724] uvcvideo 6-1:0.199: Found UVC 0.00 device (0002:0000) [ 279.489212][ T5724] uvcvideo 6-1:0.199: No valid video chain found. [ 279.839296][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 279.857432][ T5708] usb 6-1: USB disconnect, device number 27 [ 279.872798][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 279.897960][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 279.909176][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 279.924693][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 279.936050][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 279.958085][ T24] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 279.994961][ T24] usb 9-1: USB disconnect, device number 11 [ 280.567113][T12987] syzkaller1: entered promiscuous mode [ 280.584329][T12987] syzkaller1: entered allmulticast mode [ 280.642358][ T29] audit: type=1400 audit(1786351566.596:1511): avc: denied { read write } for pid=12990 comm="syz.8.2613" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 280.708183][ T29] audit: type=1400 audit(1786351566.596:1512): avc: denied { open } for pid=12990 comm="syz.8.2613" path="/dev/input/mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 280.932479][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.939767][ C1] bridge0: topology change detected, propagating [ 280.946424][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.953662][ C1] bridge0: topology change detected, propagating [ 281.540495][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2622'. [ 281.777041][ T10] dummy0: entered promiscuous mode [ 281.815089][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2622'. [ 281.827789][ T10] dummy0: left promiscuous mode [ 281.850403][T13014] nbd: device at index 64 is going down [ 281.883511][ T24] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 282.035230][ T6221] udevd[6221]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 282.083775][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 282.102925][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 282.124308][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 282.139639][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.141483][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2630'. [ 282.149624][ T24] usb 7-1: Product: syz [ 282.181455][ T24] usb 7-1: Manufacturer: syz [ 282.200121][ T24] usb 7-1: SerialNumber: syz [ 282.218078][T13035] erspan0: entered promiscuous mode [ 282.247686][ T24] usb 7-1: config 0 descriptor?? [ 282.258772][T13013] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 282.297491][T13035] macvtap1: entered promiscuous mode [ 282.319720][T13035] macvtap1: entered allmulticast mode [ 282.343449][T13035] erspan0: entered allmulticast mode [ 282.385986][T13036] erspan0: left allmulticast mode [ 282.402673][T13036] erspan0: left promiscuous mode [ 282.403914][ T29] audit: type=1400 audit(1786351568.366:1513): avc: denied { write } for pid=13025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.433312][T13036] macvtap1: left promiscuous mode [ 282.447255][T13036] macvtap1: left allmulticast mode [ 282.467293][T13039] batadv_slave_0: Caught tx_queue_len zero misconfig [ 282.524724][ T29] audit: type=1400 audit(1786351568.486:1514): avc: denied { write } for pid=13048 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.549583][ T24] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 282.556785][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 282.556881][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 282.619731][ T24] usb 7-1: USB disconnect, device number 21 [ 282.697081][ T24] mcba_usb 7-1:0.0 can0: device disconnected [ 283.490960][ T29] audit: type=1400 audit(1786351569.446:1515): avc: denied { write } for pid=13069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.736055][ T29] audit: type=1400 audit(1786351569.696:1516): avc: denied { write } for pid=13109 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.341429][ T29] audit: type=1400 audit(1786351570.296:1517): avc: denied { write } for pid=13131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.472320][ T5724] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 284.503445][ T29] audit: type=1400 audit(1786351570.466:1518): avc: denied { write } for pid=13154 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.632891][ T5724] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 284.657717][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.677600][ T5724] usb 6-1: Product: syz [ 284.690656][ T5724] usb 6-1: Manufacturer: syz [ 284.705836][ T5724] usb 6-1: SerialNumber: syz [ 285.043399][ T29] audit: type=1400 audit(1786351571.006:1519): avc: denied { write } for pid=13160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.173790][ T5724] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 285.277247][ T29] audit: type=1400 audit(1786351571.236:1520): avc: denied { write } for pid=13189 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.688031][T13254] overlayfs: failed to clone lowerpath [ 286.704476][T13254] overlayfs: failed to clone lowerpath [ 286.826560][ T29] audit: type=1400 audit(1786351572.786:1521): avc: denied { checkpoint_restore } for pid=13258 comm="syz.7.2697" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 287.221354][ T5724] usb 6-1: USB disconnect, device number 28 [ 287.250438][ T5724] usblp1: removed [ 288.676394][ T29] audit: type=1400 audit(1786351574.636:1522): avc: denied { setattr } for pid=13322 comm="syz.7.2724" name="/" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 288.731138][T13327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.871258][T13382] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 289.990335][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2745'. [ 290.016930][T13389] netlink: 75 bytes leftover after parsing attributes in process `syz.6.2745'. [ 290.406215][T13402] overlayfs: failed to resolve './cgroup': -2 [ 290.520068][ T29] audit: type=1400 audit(1786351576.476:1523): avc: denied { accept } for pid=13403 comm="syz.7.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.584010][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2753'. [ 290.649521][T13406] hsr_slave_1 (unregistering): left promiscuous mode [ 291.185604][ T5690] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 291.197033][ T5690] Registered device Abilis Systems DVB-Titan [ 291.208462][ T5690] usb 2-1: USB disconnect, device number 20 [ 291.240919][ T5690] Unregistered device Abilis Systems DVB-Titan [ 291.245106][ T5690] as10x_usb: device has been disconnected [ 291.316144][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 291.493501][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 291.501088][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 291.521765][ T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 291.537586][ T24] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 291.572916][ T5690] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 291.582398][ T24] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.596444][ T24] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 291.613043][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.624524][ T24] usb 7-1: Product: syz [ 291.633351][ T24] usb 7-1: Manufacturer: syz [ 291.644337][ T24] usb 7-1: SerialNumber: syz [ 291.708063][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 291.764373][ T5690] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 291.781687][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.817404][ T5690] usb 2-1: config 0 descriptor?? [ 291.857916][ T5690] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 291.919172][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input33 [ 292.102245][ T24] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 292.113536][ T24] (id 0x00) [ 292.206496][ T5607] ================================================================== [ 292.214600][ T5607] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x1a9/0x1b0 [ 292.222702][ T5607] Read of size 8 at addr ffff88803304d188 by task kworker/u9:4/5607 [ 292.230692][ T5607] [ 292.233028][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.233060][ T5607] Tainted: [L]=SOFTLOCKUP [ 292.233067][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.233081][ T5607] Workqueue: hci2 hci_rx_work [ 292.233108][ T5607] Call Trace: [ 292.233114][ T5607] [ 292.233122][ T5607] dump_stack_lvl+0x100/0x190 [ 292.233147][ T5607] print_report+0x13d/0x4b0 [ 292.233173][ T5607] ? __virt_addr_valid+0x239/0x430 [ 292.233198][ T5607] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 292.233222][ T5607] kasan_report+0xdf/0x1c0 [ 292.233277][ T5607] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 292.233305][ T5607] l2cap_sock_ready_cb+0x1a9/0x1b0 [ 292.233332][ T5607] l2cap_le_start+0x1ea/0xd20 [ 292.233350][ T5607] ? __pfx___mutex_lock+0x10/0x10 [ 292.233374][ T5607] ? l2cap_global_fixed_chan+0x26f/0x3b0 [ 292.233396][ T5607] ? __pfx_l2cap_le_start+0x10/0x10 [ 292.233415][ T5607] ? do_raw_read_unlock+0x3f/0x70 [ 292.233443][ T5607] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 292.233464][ T5607] ? __local_bh_enable_ip+0x9e/0x120 [ 292.233489][ T5607] ? l2cap_sock_new_connection_cb+0x239/0x360 [ 292.233517][ T5607] l2cap_connect_cfm+0x88e/0xf20 [ 292.233539][ T5607] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 292.233561][ T5607] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 292.233581][ T5607] le_conn_complete_evt+0x197c/0x1f60 [ 292.233605][ T5607] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 292.233624][ T5607] ? hci_event_packet+0x186/0xcd0 [ 292.233645][ T5607] hci_le_conn_complete_evt+0x23c/0x3a0 [ 292.233666][ T5607] ? skb_pull_data+0x15f/0x1e0 [ 292.233700][ T5607] hci_le_meta_evt+0x34a/0x5f0 [ 292.233722][ T5607] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 292.233743][ T5607] hci_event_packet+0x51c/0xcd0 [ 292.233761][ T5607] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 292.233781][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 292.233801][ T5607] ? kcov_remote_start+0x384/0x670 [ 292.233821][ T5607] ? lockdep_hardirqs_on+0x78/0x100 [ 292.233845][ T5607] hci_rx_work+0x451/0xfc0 [ 292.233866][ T5607] process_one_work+0xa23/0x1940 [ 292.233890][ T5607] ? __pfx_process_one_work+0x10/0x10 [ 292.233912][ T5607] ? __pfx_hci_rx_work+0x10/0x10 [ 292.233933][ T5607] worker_thread+0x5ef/0xe50 [ 292.233956][ T5607] ? kthread+0x13a/0x450 [ 292.233972][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 292.233990][ T5607] kthread+0x370/0x450 [ 292.234007][ T5607] ? __pfx_kthread+0x10/0x10 [ 292.234026][ T5607] ret_from_fork+0x72b/0xd50 [ 292.234052][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 292.234079][ T5607] ? rcu_is_watching+0x12/0xc0 [ 292.234107][ T5607] ? __switch_to+0x800/0x10f0 [ 292.234126][ T5607] ? __pfx_kthread+0x10/0x10 [ 292.234144][ T5607] ret_from_fork_asm+0x1a/0x30 [ 292.234175][ T5607] [ 292.234182][ T5607] [ 292.501304][ T5607] Allocated by task 13476: [ 292.505700][ T5607] kasan_save_stack+0x30/0x50 [ 292.510366][ T5607] kasan_save_track+0x14/0x30 [ 292.515025][ T5607] __kasan_kmalloc+0xaa/0xb0 [ 292.519610][ T5607] __kmalloc_noprof+0x322/0x820 [ 292.524447][ T5607] sk_prot_alloc+0x10b/0x2a0 [ 292.529027][ T5607] sk_alloc+0x36/0xe80 [ 292.533077][ T5607] bt_sock_alloc+0x3b/0x3c0 [ 292.537562][ T5607] l2cap_sock_create+0x144/0x340 [ 292.542496][ T5607] bt_sock_create+0x185/0x350 [ 292.547153][ T5607] __sock_create+0x339/0x860 [ 292.551733][ T5607] __sys_socket+0x14d/0x260 [ 292.556250][ T5607] __x64_sys_socket+0x72/0xb0 [ 292.560923][ T5607] do_syscall_64+0x115/0x870 [ 292.565512][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.571391][ T5607] [ 292.573693][ T5607] Freed by task 13476: [ 292.577747][ T5607] kasan_save_stack+0x30/0x50 [ 292.582415][ T5607] kasan_save_track+0x14/0x30 [ 292.587088][ T5607] kasan_save_free_info+0x3b/0x70 [ 292.592091][ T5607] __kasan_slab_free+0x5f/0x80 [ 292.596842][ T5607] kfree+0x22b/0x6c0 [ 292.600740][ T5607] __sk_destruct+0x88c/0xab0 [ 292.605331][ T5607] sk_destruct+0xc8/0xf0 [ 292.609554][ T5607] __sk_free+0xf4/0x3e0 [ 292.613692][ T5607] sk_free+0x61/0x90 [ 292.617602][ T5607] l2cap_sock_kill+0x187/0x2a0 [ 292.622384][ T5607] l2cap_sock_release+0x1cb/0x280 [ 292.627410][ T5607] __sock_release+0xb3/0x260 [ 292.632006][ T5607] sock_close+0x1c/0x30 [ 292.636147][ T5607] __fput+0x3ff/0xb50 [ 292.640116][ T5607] task_work_run+0x150/0x240 [ 292.644686][ T5607] exit_to_user_mode_loop+0x1d8/0x6f0 [ 292.650043][ T5607] do_syscall_64+0x666/0x870 [ 292.654616][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.660503][ T5607] [ 292.662821][ T5607] The buggy address belongs to the object at ffff88803304d000 [ 292.662821][ T5607] which belongs to the cache kmalloc-2k of size 2048 [ 292.676852][ T5607] The buggy address is located 392 bytes inside of [ 292.676852][ T5607] freed 2048-byte region [ffff88803304d000, ffff88803304d800) [ 292.690710][ T5607] [ 292.693015][ T5607] The buggy address belongs to the physical page: [ 292.699411][ T5607] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33048 [ 292.708150][ T5607] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 292.716628][ T5607] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 292.724170][ T5607] page_type: f5(slab) [ 292.728134][ T5607] raw: 00fff00000000040 ffff88813fe22000 dead000000000100 dead000000000122 [ 292.736699][ T5607] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 292.745263][ T5607] head: 00fff00000000040 ffff88813fe22000 dead000000000100 dead000000000122 [ 292.753917][ T5607] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 292.762584][ T5607] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 292.771233][ T5607] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 292.779879][ T5607] page dumped because: kasan: bad access detected [ 292.786268][ T5607] page_owner tracks the page as allocated [ 292.791962][ T5607] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5596, tgid 5596 (syz-executor), ts 70489355940, free_ts 70459144950 [ 292.813304][ T5607] post_alloc_hook+0xfd/0x120 [ 292.817969][ T5607] get_page_from_freelist+0xf48/0x3530 [ 292.823408][ T5607] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 292.829300][ T5607] new_slab+0xa2/0x640 [ 292.833347][ T5607] refill_objects+0xe3/0x410 [ 292.837917][ T5607] __pcs_replace_empty_main+0x376/0x680 [ 292.843438][ T5607] __kmalloc_cache_noprof+0x479/0x6c0 [ 292.848787][ T5607] rtnl_newlink+0x126/0x2380 [ 292.853377][ T5607] rtnetlink_rcv_msg+0x95e/0xe90 [ 292.858299][ T5607] netlink_rcv_skb+0x159/0x420 [ 292.863044][ T5607] netlink_unicast+0x585/0x850 [ 292.867788][ T5607] netlink_sendmsg+0x8b0/0xda0 [ 292.872532][ T5607] __sys_sendto+0x48b/0x4e0 [ 292.877017][ T5607] __x64_sys_sendto+0xe0/0x1c0 [ 292.881761][ T5607] do_syscall_64+0x115/0x870 [ 292.886333][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.892205][ T5607] page last free pid 5595 tgid 5595 stack trace: [ 292.898507][ T5607] __free_frozen_pages+0x79f/0x1090 [ 292.903693][ T5607] qlist_free_all+0x47/0xf0 [ 292.908178][ T5607] kasan_quarantine_reduce+0x1a0/0x1f0 [ 292.913617][ T5607] __kasan_slab_alloc+0x69/0x90 [ 292.918457][ T5607] __kmalloc_noprof+0x2bf/0x820 [ 292.923302][ T5607] cgroup_mkdir+0x270/0x1330 [ 292.927874][ T5607] kernfs_iop_mkdir+0x111/0x190 [ 292.932706][ T5607] vfs_mkdir+0x361/0x850 [ 292.936946][ T5607] filename_mkdirat+0x48b/0x5e0 [ 292.941775][ T5607] __x64_sys_mkdirat+0x89/0xc0 [ 292.946526][ T5607] do_syscall_64+0x115/0x870 [ 292.951098][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.956970][ T5607] [ 292.959278][ T5607] Memory state around the buggy address: [ 292.964885][ T5607] ffff88803304d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.972923][ T5607] ffff88803304d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.980963][ T5607] >ffff88803304d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.988997][ T5607] ^ [ 292.993301][ T5607] ffff88803304d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.001359][ T5607] ffff88803304d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.009412][ T5607] ================================================================== [ 293.037104][ T5607] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 293.044328][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.055358][ T5607] Tainted: [L]=SOFTLOCKUP [ 293.059682][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 293.069733][ T5607] Workqueue: hci2 hci_rx_work [ 293.074403][ T5607] Call Trace: [ 293.077662][ T5607] [ 293.080573][ T5607] dump_stack_lvl+0x100/0x190 [ 293.085235][ T5607] vpanic+0x552/0x970 [ 293.089196][ T5607] ? __pfx_vpanic+0x10/0x10 [ 293.093679][ T5607] ? mark_held_locks+0x40/0x70 [ 293.098444][ T5607] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 293.103718][ T5607] panic+0xd1/0xe0 [ 293.107423][ T5607] ? __pfx_panic+0x10/0x10 [ 293.111818][ T5607] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 293.117090][ T5607] ? preempt_schedule_common+0x42/0xc0 [ 293.122536][ T5607] check_panic_on_warn.cold+0x19/0x34 [ 293.127890][ T5607] end_report.part.0+0x3a/0x90 [ 293.132644][ T5607] kasan_report.cold+0xe/0x18 [ 293.137308][ T5607] ? l2cap_sock_ready_cb+0x1a9/0x1b0 [ 293.142581][ T5607] l2cap_sock_ready_cb+0x1a9/0x1b0 [ 293.147677][ T5607] l2cap_le_start+0x1ea/0xd20 [ 293.152334][ T5607] ? __pfx___mutex_lock+0x10/0x10 [ 293.157342][ T5607] ? l2cap_global_fixed_chan+0x26f/0x3b0 [ 293.162962][ T5607] ? __pfx_l2cap_le_start+0x10/0x10 [ 293.168158][ T5607] ? do_raw_read_unlock+0x3f/0x70 [ 293.173185][ T5607] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 293.179151][ T5607] ? __local_bh_enable_ip+0x9e/0x120 [ 293.184422][ T5607] ? l2cap_sock_new_connection_cb+0x239/0x360 [ 293.190478][ T5607] l2cap_connect_cfm+0x88e/0xf20 [ 293.195403][ T5607] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 293.200846][ T5607] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 293.206290][ T5607] le_conn_complete_evt+0x197c/0x1f60 [ 293.211654][ T5607] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 293.217358][ T5607] ? hci_event_packet+0x186/0xcd0 [ 293.222368][ T5607] hci_le_conn_complete_evt+0x23c/0x3a0 [ 293.227899][ T5607] ? skb_pull_data+0x15f/0x1e0 [ 293.232658][ T5607] hci_le_meta_evt+0x34a/0x5f0 [ 293.237421][ T5607] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 293.243488][ T5607] hci_event_packet+0x51c/0xcd0 [ 293.248335][ T5607] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 293.253615][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 293.258975][ T5607] ? kcov_remote_start+0x384/0x670 [ 293.264070][ T5607] ? lockdep_hardirqs_on+0x78/0x100 [ 293.269257][ T5607] hci_rx_work+0x451/0xfc0 [ 293.273659][ T5607] process_one_work+0xa23/0x1940 [ 293.278584][ T5607] ? __pfx_process_one_work+0x10/0x10 [ 293.283955][ T5607] ? __pfx_hci_rx_work+0x10/0x10 [ 293.288879][ T5607] worker_thread+0x5ef/0xe50 [ 293.293460][ T5607] ? kthread+0x13a/0x450 [ 293.297701][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 293.302795][ T5607] kthread+0x370/0x450 [ 293.306844][ T5607] ? __pfx_kthread+0x10/0x10 [ 293.311433][ T5607] ret_from_fork+0x72b/0xd50 [ 293.316012][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 293.321115][ T5607] ? rcu_is_watching+0x12/0xc0 [ 293.325868][ T5607] ? __switch_to+0x800/0x10f0 [ 293.330529][ T5607] ? __pfx_kthread+0x10/0x10 [ 293.335102][ T5607] ret_from_fork_asm+0x1a/0x30 [ 293.339861][ T5607] [ 293.343059][ T5607] Kernel Offset: disabled [ 293.347359][ T5607] Rebooting in 86400 seconds..