last executing test programs: 1m42.353673475s ago: executing program 4 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x11, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bb", 0x0, 0x0, 0x0, 0xffffffff}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) 1m42.070281148s ago: executing program 4 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) 1m41.440422061s ago: executing program 4 (id=331): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffd, 0x5, &(0x7f0000006680)) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) io_pgetevents(0x0, 0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000700)={0x0, 0x3938700}, 0x0) 1m40.489789705s ago: executing program 4 (id=335): r0 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) dup3(r8, r0, 0x0) 1m39.397466239s ago: executing program 4 (id=340): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) 1m38.379530146s ago: executing program 1 (id=344): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) r2 = dup(r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x222200, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, 0x0) 1m37.741617382s ago: executing program 4 (id=345): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000240)="5cb0", 0x2) write$ppp(r1, &(0x7f0000000280)="29d9", 0x2) 1m36.999201575s ago: executing program 32 (id=345): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000240)="5cb0", 0x2) write$ppp(r1, &(0x7f0000000280)="29d9", 0x2) 1m36.989658617s ago: executing program 1 (id=347): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bae000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@nested_create_vm={0x12d, 0x18}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r6}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f00000002c0)) 1m35.74944948s ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1m34.665275795s ago: executing program 1 (id=358): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2204803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 1m34.301604439s ago: executing program 1 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) flock(0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc6}, @l2cap_cid_signaling={{0xc2}, [@l2cap_info_rsp={{0xb, 0x5, 0x96}, {0x0, 0x386a, "54e3d2fc6d7c1fc510cf5fa9d905a877bf25d204983085cab34a348a679904a3f7531ec68e866cbca6325a6e1adde2f4ca364024f17d7363a66372490d6b1ea5f25727fbb472b2a4e241f1d7a7b5c9bff086a6075b1fb7a8a7b870032cb818cf39283497c98e3dec4143209d215d06f7438035ae23ff66b12a900bacd69cc54353ffb07f202b285742bac2e616687b4191c7"}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x8}}, @l2cap_conf_rsp={{0x5, 0x3, 0x6}, {0x3000, 0x96f4, 0xffff}}, @l2cap_create_chan_rsp={{0xd, 0xf1, 0x8}, {0x4, 0xfff7, 0xff, 0x6}}, @l2cap_info_req={{0xa, 0xf, 0x2}, {0x6}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x3ff}}]}}, 0xcb) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x2}]}}}, 0x8) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x1000000, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a42420300010102"], 0x0) 1m33.609173022s ago: executing program 1 (id=365): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1m33.241413321s ago: executing program 33 (id=365): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 13.537650556s ago: executing program 5 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000180)={0xa000, 0x8000, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.860797065s ago: executing program 5 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='\n', 0x1) close(r1) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) 9.870519748s ago: executing program 5 (id=746): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40055}, 0x4c050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f00000005c0)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.228720345s ago: executing program 6 (id=750): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) mkdir(0x0, 0x22) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 6.177617685s ago: executing program 5 (id=751): syz_open_dev$loop(0x0, 0xfffffbff7ffffffb, 0x1222e2) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 6.075656392s ago: executing program 0 (id=752): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x4be2, 0x16, 0x0, 0x0) 5.378277835s ago: executing program 3 (id=755): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd, 0xfffffffffffffffa}, {0x6}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x104, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@in6={0xa, 0x4e20, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x80, 0x0}, 0x50) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendmsg$rds(r1, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1c, 0x0, 0x0, 0x2400c834}, 0x8004) 5.221620815s ago: executing program 6 (id=756): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 5.136357653s ago: executing program 0 (id=757): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) 4.857459232s ago: executing program 3 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x40602, 0x18) write(r0, &(0x7f0000000400)='rdma', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='ipv4', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') 4.502274107s ago: executing program 0 (id=760): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff0000050003"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x6, 0x6, 0x6, 0x0, 0x84, 0x100}) landlock_restrict_self(r1, 0xe) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0xfffff000, 0x4) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/23) 4.383947997s ago: executing program 3 (id=761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1/local\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1/addr\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/2\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1/nodes/2\x00', 0x1ff) 4.283476263s ago: executing program 2 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 4.212080952s ago: executing program 6 (id=763): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r1) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 4.067179683s ago: executing program 3 (id=764): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 3.279481227s ago: executing program 2 (id=765): bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.127447146s ago: executing program 5 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xfffffff9) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.06945883s ago: executing program 2 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r1, &(0x7f0000001400)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) 2.930143178s ago: executing program 2 (id=768): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x48840, 0x0) read$ptp(r1, 0x0, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 2.766625962s ago: executing program 0 (id=769): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) 1.943296454s ago: executing program 6 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) 1.73473353s ago: executing program 0 (id=771): socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 1.512907848s ago: executing program 3 (id=772): syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1.45797651s ago: executing program 2 (id=773): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) sendmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="67a873ce195a275eb1b6619e78a7d507dcb99407f421809b7caea286c5a49d313e513ee800b74dae1b396feed9ead90da8ec0806f3cc8c0942416d1022c82a", 0x3f}], 0x1}}], 0x1, 0x810) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x3}}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e23, 0x9, @private1, 0x106}, 0x1c) 1.419461016s ago: executing program 5 (id=774): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x83, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7b, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x13, 0x6, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='@!)'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.173195567s ago: executing program 2 (id=775): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000433000/0x4000)=nil, 0x4000}, 0x1}) pipe(&(0x7f0000000500)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3eb, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.067806988s ago: executing program 0 (id=776): unshare(0xe060400) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), 0x0) r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001000000010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100") r1 = eventfd(0xfffffffb) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) r2 = dup(r1) ioctl$COMEDI_SETRSUBD(r2, 0x6410) unshare(0x2c060000) 933.600325ms ago: executing program 6 (id=777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a40000000002010400000000000000000a000007180001802f000280050001009800000006000340200200003c0003800c00028004000100890000002c00018014000300fe80000000000000000000000000002a14000400000000000000000000000000000000013c0002802c00018014000300fe8000000000000000000000000000211400040000000000000000000000ffffe00000020c000280050001"], 0xa4}}, 0x4) 518.352484ms ago: executing program 3 (id=778): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1407"], 0xb4}, 0x1, 0x0, 0x0, 0x30000840}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x2, 0xe9b, 0x100, 0xd, 0x7f, 0x44233, 0x200, 0x80, 0x941, 0x8001, 0x6, 0x4, 0x4, 0x20000, 0xb], 0x4, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=779): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) kernel console output (not intermixed with test programs): (1)127.0.0.1:6789 connect error [ 114.833891][ T6601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.874884][ T6603] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 114.949533][ T6603] bond1: entered allmulticast mode [ 114.990175][ T6578] tipc: Resetting bearer [ 115.152478][ T6581] ceph: No mds server is up or the cluster is laggy [ 115.717805][ T5703] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.917893][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 115.939925][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.965813][ T5703] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.005964][ T5703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.028725][ T5703] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.049625][ T5703] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.119976][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.137966][ T5703] usb 2-1: Product: syz [ 116.147777][ T5703] usb 2-1: Manufacturer: syz [ 116.156895][ T5703] usb 2-1: SerialNumber: syz [ 116.668118][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 116.668129][ T30] audit: type=1400 audit(1787631701.967:532): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.328888][ T5703] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 117.355349][ T5703] cdc_ncm 2-1:1.0: bind() failure [ 117.399671][ T5703] usb 2-1: USB disconnect, device number 8 [ 117.666660][ T5710] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.836844][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 117.852700][ T5710] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 117.884323][ T5710] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 117.917313][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 117.967486][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 118.027471][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 118.079018][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.103130][ T5710] usb 4-1: Product: syz [ 118.118420][ T5710] usb 4-1: Manufacturer: syz [ 118.142180][ T5710] usb 4-1: SerialNumber: syz [ 118.164370][ T5710] usb 4-1: config 0 descriptor?? [ 118.271890][ T30] audit: type=1400 audit(1787631703.567:533): avc: denied { read } for pid=6629 comm="syz.1.261" path="socket:[13069]" dev="sockfs" ino=13069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.382557][ T30] audit: type=1400 audit(1787631703.677:534): avc: denied { read write } for pid=6631 comm="syz.1.262" name="video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 118.461222][ T30] audit: type=1400 audit(1787631703.707:535): avc: denied { open } for pid=6631 comm="syz.1.262" path="/dev/video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 118.496621][ T5710] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 118.524732][ T5710] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 118.566412][ T30] audit: type=1400 audit(1787631703.717:536): avc: denied { ioctl } for pid=6631 comm="syz.1.262" path="/dev/video0" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 118.762915][ T6633] netlink: 'syz.1.262': attribute type 21 has an invalid length. [ 118.794568][ T6633] netlink: 128 bytes leftover after parsing attributes in process `syz.1.262'. [ 119.538211][ T5710] usb 4-1: USB disconnect, device number 5 [ 119.883194][ T6578] tipc: Disabling bearer [ 119.935839][ T6606] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 119.969711][ T189] tipc: Node number set to 1584625657 [ 120.018404][ T6633] netlink: 'syz.1.262': attribute type 5 has an invalid length. [ 120.055123][ T30] audit: type=1326 audit(1787631705.347:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6637 comm="syz.4.263" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cf0d9e0d9 code=0x0 [ 120.085420][ T6633] netlink: 'syz.1.262': attribute type 6 has an invalid length. [ 120.107106][ T6633] netlink: 3 bytes leftover after parsing attributes in process `syz.1.262'. [ 120.140749][ T6642] gadgetfs: bound to dummy_udc driver [ 120.303632][ T30] audit: type=1400 audit(1787631705.597:538): avc: denied { ioctl } for pid=6647 comm="syz.1.266" path="socket:[13187]" dev="sockfs" ino=13187 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.435348][ T30] audit: type=1400 audit(1787631705.647:539): avc: denied { read write } for pid=6647 comm="syz.1.266" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.469872][ T5696] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 120.493001][ C0] gadgetfs: connected [ 120.498231][ T5696] gadgetfs: disconnected [ 120.557580][ T30] audit: type=1400 audit(1787631705.647:540): avc: denied { open } for pid=6647 comm="syz.1.266" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.685057][ T30] audit: type=1400 audit(1787631705.657:541): avc: denied { ioctl } for pid=6647 comm="syz.1.266" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.506956][ T5703] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.560975][ T6677] ======================================================= [ 121.560975][ T6677] WARNING: The mand mount option has been deprecated and [ 121.560975][ T6677] and is ignored by this kernel. Remove the mand [ 121.560975][ T6677] option from the mount to silence this warning. [ 121.560975][ T6677] ======================================================= [ 121.667522][ T6677] overlayfs: failed to resolve './bus': -2 [ 121.697148][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 121.723776][ T5703] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 121.765358][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.788083][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 121.788107][ T30] audit: type=1400 audit(1787631707.087:552): avc: denied { mount } for pid=6680 comm="syz.0.276" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.833904][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.860838][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.879516][ T30] audit: type=1400 audit(1787631707.127:553): avc: denied { search } for pid=6680 comm="syz.0.276" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 121.908024][ T5703] usb 3-1: Product: syz [ 121.932791][ T5703] usb 3-1: Manufacturer: syz [ 121.957307][ T5703] usb 3-1: SerialNumber: syz [ 122.009217][ T5703] usb 3-1: 0:1 : does not exist [ 122.020898][ T30] audit: type=1400 audit(1787631707.127:554): avc: denied { write } for pid=6680 comm="syz.0.276" name="uprobe_events" dev="tracefs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 122.054913][ T5703] usb 3-1: unit 1 not found! [ 122.067017][ T5703] usb 3-1: unit 9 not found! [ 122.108760][ T30] audit: type=1400 audit(1787631707.127:555): avc: denied { open } for pid=6680 comm="syz.0.276" path="/66/bus/tracing/uprobe_events" dev="tracefs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 122.252358][ T30] audit: type=1400 audit(1787631707.207:556): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 122.371416][ T30] audit: type=1400 audit(1787631707.627:557): avc: denied { mounton } for pid=6690 comm="syz.0.280" path="/68/file0" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 122.417872][ T5703] usb 3-1: USB disconnect, device number 6 [ 122.551119][ T30] audit: type=1400 audit(1787631707.797:558): avc: denied { watch_reads } for pid=6688 comm="syz.1.279" path="/45/bus" dev="overlay" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.800710][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 122.818431][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 122.929637][ T6697] ceph: No mds server is up or the cluster is laggy [ 123.670518][ T6715] tipc: Started in network mode [ 123.701095][ T6715] tipc: Node identity 7f000001, cluster identity 4711 [ 123.754940][ T30] audit: type=1400 audit(1787631709.047:559): avc: denied { name_connect } for pid=6718 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 123.840113][ T6715] tipc: New replicast peer: 127.0.0.2 [ 123.866006][ T6715] tipc: Enabled bearer , priority 10 [ 125.007800][ T189] tipc: Node number set to 2130706433 [ 125.583884][ T30] audit: type=1400 audit(1787631710.877:560): avc: denied { mounton } for pid=6739 comm="syz.0.294" path="/72/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.662929][ T6740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.976919][ T30] audit: type=1400 audit(1787631711.267:561): avc: denied { sqpoll } for pid=6755 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 127.192296][ T6756] syz.1.298 (6756): drop_caches: 2 [ 127.300870][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'. [ 127.434245][ T6782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.305'. [ 127.503228][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.513152][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.582412][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.695706][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.739090][ T30] audit: type=1400 audit(1787631713.027:562): avc: denied { mount } for pid=6786 comm="syz.0.308" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 127.798079][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.836290][ T30] audit: type=1400 audit(1787631713.027:563): avc: denied { read write } for pid=6786 comm="syz.0.308" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.940090][ T30] audit: type=1400 audit(1787631713.027:564): avc: denied { open } for pid=6786 comm="syz.0.308" path="/75/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 128.032314][ T30] audit: type=1400 audit(1787631713.027:565): avc: denied { ioctl } for pid=6786 comm="syz.0.308" path="/75/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 128.150074][ T30] audit: type=1400 audit(1787631713.197:566): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 128.809922][ T30] audit: type=1400 audit(1787631714.107:567): avc: denied { read append } for pid=6803 comm="syz.1.313" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.822665][ T30] audit: type=1400 audit(1787631714.107:568): avc: denied { open } for pid=6803 comm="syz.1.313" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.909945][ T6805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.946463][ T6805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.022708][ T6805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.098730][ T6805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.131955][ T6805] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.203227][ T6805] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.254942][ T6805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.277195][ T6805] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.308505][ T6805] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.331842][ T6805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.342985][ T6819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.370166][ T6805] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.404914][ T6805] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.439513][ T6822] bond2: (slave ip6erspan0): making interface the new active one [ 130.463868][ T6805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.486708][ T6805] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.506232][ T6805] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.621798][ T6822] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 130.756683][ T5703] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.778216][ T189] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.908127][ T5703] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 130.908961][ T5703] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 130.908989][ T5703] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.911173][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.911204][ T5703] usb 4-1: Product: syz [ 130.911214][ T5703] usb 4-1: Manufacturer: syz [ 130.911223][ T5703] usb 4-1: SerialNumber: syz [ 130.923071][ T5703] rtl8150 4-1:1.0: couldn't find required endpoints [ 130.923179][ T5703] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 130.927098][ T189] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 130.929543][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.929561][ T189] usb 3-1: Product: syz [ 130.929571][ T189] usb 3-1: Manufacturer: syz [ 130.929579][ T189] usb 3-1: SerialNumber: syz [ 131.161201][ T30] audit: type=1400 audit(1787631716.457:569): avc: denied { bind } for pid=6806 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.203203][ T30] audit: type=1400 audit(1787631716.497:570): avc: denied { write } for pid=6806 comm="syz.3.314" path="socket:[13985]" dev="sockfs" ino=13985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.229375][ T5703] usb 4-1: USB disconnect, device number 6 [ 131.325674][ T6834] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5594] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   [ 131.645937][ T30] audit: type=1400 audit(1787631716.947:571): avc: denied { mount } for pid=6818 comm="syz.2.316" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 131.711387][ T189] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 131.711417][ T189] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.728536][ T189] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.735919][ T189] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 131.756514][ T189] usb 3-1: USB disconnect, device number 7 [ 131.994132][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.073807][ C0] Unknown status report in ack skb [ 132.138671][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.328116][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.393690][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.536708][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.912833][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 132.912845][ T30] audit: type=1400 audit(1787631718.207:579): avc: denied { create } for pid=6853 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.967423][ T6854] netlink: 'syz.3.327': attribute type 2 has an invalid length. [ 132.967438][ T6854] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.327'. [ 132.967451][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 133.446051][ T30] audit: type=1400 audit(1787631718.737:580): avc: denied { read write } for pid=6863 comm="syz.2.332" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.446270][ T30] audit: type=1400 audit(1787631718.737:581): avc: denied { open } for pid=6863 comm="syz.2.332" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.545129][ T6865] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 133.909655][ T6865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.928589][ T30] audit: type=1400 audit(1787631719.227:582): avc: denied { write } for pid=6871 comm="syz.0.333" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.955468][ T6875] binder: 6871:6875 ioctl c0306201 0 returned -14 [ 133.955524][ T30] audit: type=1400 audit(1787631719.247:583): avc: denied { ioctl } for pid=6871 comm="syz.0.333" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.039079][ T6874] bond1: (slave dummy0): making interface the new active one [ 134.039522][ T6874] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 134.057097][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.098248][ T6870] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.113393][ T6865] netlink: 'syz.2.332': attribute type 10 has an invalid length. [ 134.113411][ T6865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.332'. [ 134.113468][ T6865] dummy0: entered promiscuous mode [ 134.119223][ T6865] bond1: (slave dummy0): Releasing active interface [ 134.119239][ T6865] bond1: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 134.119264][ T6865] bond1: (slave gretap1): making interface the new active one [ 134.217327][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.424880][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.456954][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.461855][ T30] audit: type=1400 audit(1787631719.757:584): avc: denied { read } for pid=6878 comm="syz.4.335" name="trace_pipe" dev="tracefs" ino=3737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 134.613415][ T30] audit: type=1400 audit(1787631719.907:585): avc: denied { ioctl } for pid=6885 comm="syz.2.336" path="socket:[14226]" dev="sockfs" ino=14226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.616655][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.664691][ T6886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.665817][ T6886] IPv6: NLM_F_CREATE should be set when creating new route [ 135.081454][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.081728][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.254582][ T30] audit: type=1400 audit(1787631720.547:586): avc: denied { read } for pid=5593 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 135.254619][ T30] audit: type=1400 audit(1787631720.547:587): avc: denied { open } for pid=5593 comm="syz-executor" path="/67/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 135.273412][ T30] audit: type=1400 audit(1787631720.567:588): avc: denied { read } for pid=5593 comm="syz-executor" name="instances" dev="tracefs" ino=3760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 135.639493][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.772335][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.137285][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.237783][ T6309] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.287296][ T6309] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.459380][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.536676][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.696630][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.443948][ T6309] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.485162][ T6309] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.782342][ T6913] cgroup: Unknown subsys name 'cpuset' [ 138.064940][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 138.064950][ T30] audit: type=1400 audit(1787631723.357:793): avc: denied { ioctl } for pid=6919 comm="syz-executor" path="socket:[14608]" dev="sockfs" ino=14608 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.103793][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.118076][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.153246][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.184650][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.193052][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.398960][ T30] audit: type=1400 audit(1787631723.507:794): avc: denied { mounton } for pid=6919 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 138.466957][ T134] bridge_slave_1: left allmulticast mode [ 138.521222][ T134] bridge_slave_1: left promiscuous mode [ 138.539281][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.578404][ T30] audit: type=1400 audit(1787631723.507:795): avc: denied { read } for pid=5258 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 138.634940][ T6927] null_blk: nullb1: using native zone append [ 138.702629][ T134] bridge_slave_0: left allmulticast mode [ 138.739918][ T134] bridge_slave_0: left promiscuous mode [ 138.749532][ T30] audit: type=1400 audit(1787631723.557:796): avc: denied { search } for pid=5258 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.794279][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.882832][ T6935] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 138.905667][ T30] audit: type=1400 audit(1787631723.557:797): avc: denied { search } for pid=5258 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.031375][ T30] audit: type=1400 audit(1787631723.557:798): avc: denied { search } for pid=5258 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.081321][ T6941] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 139.210104][ T30] audit: type=1400 audit(1787631723.557:799): avc: denied { read } for pid=5258 comm="dhcpcd" name="n31" dev="tmpfs" ino=3529 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.290410][ T6927] null_blk: disk nullb1 created [ 139.363904][ T30] audit: type=1400 audit(1787631723.557:800): avc: denied { open } for pid=5258 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=3529 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.461685][ T6949] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 139.513048][ T30] audit: type=1400 audit(1787631723.557:801): avc: denied { getattr } for pid=5258 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=3529 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.569445][ T6956] jffs2: notice: (6956) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 139.616976][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.634269][ T30] audit: type=1400 audit(1787631723.727:802): avc: denied { mount } for pid=6924 comm="syz.3.351" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 139.701811][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.739293][ T134] bond0 (unregistering): Released all slaves [ 139.866260][ T6941] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 139.903502][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 140.015109][ T134] tipc: Disabling bearer [ 140.043949][ T134] tipc: Left network mode [ 140.300076][ T51] Bluetooth: hci3: command tx timeout [ 141.052939][ T6989] lo: Caught tx_queue_len zero misconfig [ 141.366027][ T134] hsr_slave_0: left promiscuous mode [ 141.392089][ T134] hsr_slave_1: left promiscuous mode [ 141.422913][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.733997][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.751692][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.761056][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.769507][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.779416][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.960428][ T134] team0 (unregistering): Port device team_slave_1 removed [ 142.032565][ T134] team0 (unregistering): Port device team_slave_0 removed [ 142.117268][ T5695] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.143754][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 142.287564][ T5695] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 142.333732][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.372808][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.381382][ T5604] Bluetooth: hci3: command tx timeout [ 142.441861][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 142.487126][ T5695] as10x_usb: device has been detected [ 142.531930][ T5695] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 142.812960][ T5695] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 143.168941][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 143.168953][ T30] audit: type=1400 audit(1787631728.467:950): avc: denied { firmware_load } for pid=5695 comm="kworker/0:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 143.216245][ T5695] as10x_usb: error during firmware upload part1 [ 143.276461][ T5695] Registered device Abilis Systems DVB-Titan [ 143.732286][ T134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.778904][ T30] audit: type=1400 audit(1787631729.067:951): avc: denied { write } for pid=7026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.824415][ T5604] Bluetooth: hci1: command tx timeout [ 143.960673][ T7061] syzkaller0: entered promiscuous mode [ 143.971276][ T30] audit: type=1400 audit(1787631729.267:952): avc: denied { write } for pid=7062 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.997305][ T7061] syzkaller0: entered allmulticast mode [ 144.016770][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.037447][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.056291][ T6919] bridge_slave_0: entered allmulticast mode [ 144.072814][ T6919] bridge_slave_0: entered promiscuous mode [ 144.242867][ T7066] Bluetooth: (null): Too short H5 packet [ 144.404087][ T5695] usb 3-1: USB disconnect, device number 8 [ 144.436061][ T5695] Unregistered device Abilis Systems DVB-Titan [ 144.438509][ T5695] as10x_usb: device has been disconnected [ 144.457534][ T5604] Bluetooth: hci3: command tx timeout [ 144.617818][ T30] audit: type=1400 audit(1787631729.917:953): avc: denied { create } for pid=7070 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.671566][ T30] audit: type=1400 audit(1787631729.937:954): avc: denied { bind } for pid=7070 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.735214][ T30] audit: type=1400 audit(1787631729.947:955): avc: denied { accept } for pid=7070 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.801023][ T30] audit: type=1400 audit(1787631729.947:956): avc: denied { write } for pid=7070 comm="syz.0.377" path="socket:[15239]" dev="sockfs" ino=15239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.899968][ T5604] Bluetooth: hci1: command tx timeout [ 146.536703][ T5604] Bluetooth: hci3: command tx timeout [ 147.979532][ T5604] Bluetooth: hci1: command tx timeout [ 148.094068][ T30] audit: type=1400 audit(1787631733.387:957): avc: denied { mount } for pid=7127 comm="syz.2.388" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.063664][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 149.072462][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.089941][ T30] audit: type=1400 audit(1787631734.387:958): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.117177][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.154547][ T6919] bridge_slave_1: entered allmulticast mode [ 149.179328][ T6919] bridge_slave_1: entered promiscuous mode [ 149.235398][ T7125] syz_tun: entered allmulticast mode [ 149.245947][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 149.285902][ T134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.411955][ T6919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.450374][ T6919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.466771][ T7142] netlink: 'syz.0.391': attribute type 11 has an invalid length. [ 149.520148][ T134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.712949][ T7143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.797532][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 149.825868][ T6919] team0: Port device team_slave_0 added [ 149.884450][ T134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.937426][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.985177][ T6919] team0: Port device team_slave_1 added [ 149.996452][ T30] audit: type=1400 audit(1787631735.297:959): avc: denied { name_bind } for pid=7147 comm="syz.0.393" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 150.028865][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.057368][ T5604] Bluetooth: hci1: command tx timeout [ 150.086954][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.114829][ T30] audit: type=1400 audit(1787631735.387:960): avc: denied { setopt } for pid=7147 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.163308][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.227387][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.266807][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.308807][ T6670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.362149][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.371911][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.427027][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.467014][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.492695][ T30] audit: type=1326 audit(1787631735.767:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.2.392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2e539e0d9 code=0x0 [ 150.577152][ T6919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.663231][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.693856][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.831920][ T6919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.068461][ T6919] hsr_slave_0: entered promiscuous mode [ 151.098074][ T6919] hsr_slave_1: entered promiscuous mode [ 151.124358][ T6919] debugfs: 'hsr0' already exists in 'hsr' [ 151.149985][ T6919] Cannot create hsr debugfs directory [ 151.188433][ T30] audit: type=1400 audit(1787631736.487:962): avc: denied { write } for pid=7157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.414756][ T30] audit: type=1400 audit(1787631736.707:963): avc: denied { write } for pid=7176 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.590693][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 151.670295][ T134] bridge_slave_1: left allmulticast mode [ 151.689397][ T134] bridge_slave_1: left promiscuous mode [ 151.710239][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.740937][ T134] bridge_slave_0: left allmulticast mode [ 151.757931][ T134] bridge_slave_0: left promiscuous mode [ 151.778010][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.148978][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.178545][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.199152][ T134] bond0 (unregistering): Released all slaves [ 152.264248][ T134] tipc: Left network mode [ 152.875778][ T134] hsr_slave_0: left promiscuous mode [ 152.890783][ T30] audit: type=1400 audit(1787631738.187:964): avc: denied { name_bind } for pid=7200 comm="syz.0.400" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 152.926463][ T134] hsr_slave_1: left promiscuous mode [ 152.960305][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.998792][ T30] audit: type=1800 audit(1787631738.237:965): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.398" name="/" dev="fuse" ino=6 res=0 errno=0 [ 153.025760][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.088740][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.123854][ T30] audit: type=1400 audit(1787631738.267:966): avc: denied { write } for pid=7192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.158204][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.265211][ T30] audit: type=1400 audit(1787631738.507:967): avc: denied { write } for pid=7213 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.324730][ T134] veth1_macvtap: left promiscuous mode [ 153.364186][ T134] veth0_macvtap: left promiscuous mode [ 153.389832][ T134] veth1_vlan: left promiscuous mode [ 153.418859][ T134] veth0_vlan: left promiscuous mode [ 154.314163][ T30] audit: type=1400 audit(1787631739.607:968): avc: denied { set_context_mgr } for pid=7243 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.394685][ T7245] binder: 7243:7245 ioctl c0306201 2000000006c0 returned -14 [ 154.425609][ T30] audit: type=1400 audit(1787631739.667:969): avc: denied { map } for pid=7243 comm="syz.3.403" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.475266][ T134] team0 (unregistering): Port device team_slave_1 removed [ 154.540547][ T134] team0 (unregistering): Port device team_slave_0 removed [ 154.560425][ T30] audit: type=1400 audit(1787631739.677:970): avc: denied { call } for pid=7243 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.638035][ T30] audit: type=1400 audit(1787631739.897:971): avc: denied { watch } for pid=7248 comm="syz.0.404" path="/105/file0" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.738713][ T30] audit: type=1400 audit(1787631739.897:972): avc: denied { watch_sb watch_reads } for pid=7248 comm="syz.0.404" path="/105/file0" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.820025][ T6323] net_ratelimit: 199 callbacks suppressed [ 154.820040][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.887759][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.917339][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.956823][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.992379][ T30] audit: type=1400 audit(1787631740.287:973): avc: denied { mount } for pid=7253 comm="syz.0.406" name="/" dev="ramfs" ino=16225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 155.028618][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.071120][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.078420][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.088795][ T30] audit: type=1400 audit(1787631740.367:974): avc: denied { watch watch_reads } for pid=7253 comm="syz.0.406" path="/" dev="ramfs" ino=16225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 155.117302][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.147056][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.166303][ T7006] bridge_slave_0: entered allmulticast mode [ 155.193618][ T7006] bridge_slave_0: entered promiscuous mode [ 155.199907][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.234284][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 155.241198][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.267483][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.277554][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.307584][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.341107][ T7006] bridge_slave_1: entered allmulticast mode [ 155.379804][ T7006] bridge_slave_1: entered promiscuous mode [ 155.446880][ T30] audit: type=1326 audit(1787631740.747:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e539e0d9 code=0x7ffc0000 [ 155.586394][ T6919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.602799][ T30] audit: type=1326 audit(1787631740.747:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e539e0d9 code=0x7ffc0000 [ 155.696682][ T30] audit: type=1326 audit(1787631740.777:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.2.407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e539e0d9 code=0x7ffc0000 [ 155.767653][ T6919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.803414][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.851840][ T6919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.883969][ T6919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.933586][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.003794][ T6919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.049207][ T6919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.089428][ T6919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.141564][ T6919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.301340][ T7006] team0: Port device team_slave_0 added [ 156.375949][ T7006] team0: Port device team_slave_1 added [ 156.510697][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.570495][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.727061][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.814913][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.855173][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.006208][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.203248][ T7006] hsr_slave_0: entered promiscuous mode [ 157.235854][ T7006] hsr_slave_1: entered promiscuous mode [ 157.268730][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 157.663616][ T6919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.761465][ T6919] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.810135][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.817258][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.897821][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.904943][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.540333][ T7006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.619391][ T7312] ubi0: attaching mtd0 [ 158.628809][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.660196][ T7006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.669271][ T7312] ubi0: scanning is finished [ 158.692496][ T7312] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 158.719911][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.765725][ T7006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.777928][ T7315] UBIFS error (pid: 7315): cannot open "ubi0:testvol", error -19 [ 158.839544][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.979970][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7 [ 159.013730][ T7006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 159.061763][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.198478][ T7312] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 159.441860][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.582390][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.658680][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.665817][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.750666][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 159.750678][ T30] audit: type=1400 audit(1787631745.047:1089): avc: denied { bind } for pid=7333 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.783002][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.790126][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.839147][ T134] net_ratelimit: 200 callbacks suppressed [ 159.839162][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.946697][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.028718][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.107097][ T6669] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.143973][ T7348] evm: overlay not supported [ 160.154411][ T30] audit: type=1400 audit(1787631745.447:1090): avc: denied { shutdown } for pid=7349 comm="syz.0.418" lport=36628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.189883][ T6669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 160.278016][ T30] audit: type=1400 audit(1787631745.547:1091): avc: denied { remount } for pid=7346 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 160.330303][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.386481][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 160.482827][ T30] audit: type=1400 audit(1787631745.777:1092): avc: denied { write } for pid=7329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.571747][ T6919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.578761][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.625676][ T7369] unsupported nlmsg_type 40 [ 160.638080][ T6669] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.689414][ T6669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 160.715046][ T7364] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.785463][ T30] audit: type=1400 audit(1787631746.077:1093): avc: denied { write } for pid=7372 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.991195][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8 [ 161.493400][ T6919] veth0_vlan: entered promiscuous mode [ 161.590119][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.625635][ T6919] veth1_vlan: entered promiscuous mode [ 161.811821][ T6919] veth0_macvtap: entered promiscuous mode [ 161.868762][ T6919] veth1_macvtap: entered promiscuous mode [ 161.960457][ T6919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.048795][ T6919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.108959][ T6327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.308048][ T6669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.373259][ T6669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.460626][ T5710] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.507854][ T6669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.581388][ T7006] veth0_vlan: entered promiscuous mode [ 162.644944][ T7006] veth1_vlan: entered promiscuous mode [ 162.688491][ T5710] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 162.722735][ T6327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.754477][ T5710] usb 4-1: config 0 has no interfaces? [ 162.760933][ T6327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.770746][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.827027][ T5710] usb 4-1: config 0 descriptor?? [ 162.876167][ T6669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.910585][ T6669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.930622][ T7006] veth0_macvtap: entered promiscuous mode [ 162.963076][ T7413] syzkaller0: entered promiscuous mode [ 162.972664][ T30] audit: type=1400 audit(1787631748.267:1094): avc: denied { mounton } for pid=6919 comm="syz-executor" path="/root/syzkaller.Gskx3z/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 163.014493][ T7413] syzkaller0: entered allmulticast mode [ 163.037550][ T7006] veth1_macvtap: entered promiscuous mode [ 163.072187][ T30] audit: type=1400 audit(1787631748.307:1095): avc: denied { mounton } for pid=6919 comm="syz-executor" path="/root/syzkaller.Gskx3z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 163.175334][ T30] audit: type=1400 audit(1787631748.307:1096): avc: denied { mounton } for pid=6919 comm="syz-executor" path="/root/syzkaller.Gskx3z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 163.235836][ T5696] usb 4-1: USB disconnect, device number 7 [ 163.288758][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.335395][ T30] audit: type=1400 audit(1787631748.357:1097): avc: denied { mounton } for pid=6919 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 163.364686][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.468319][ T6323] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.519528][ T6323] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.539411][ T30] audit: type=1400 audit(1787631748.357:1098): avc: denied { mount } for pid=6919 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 163.743366][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.886881][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.912112][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.429'. [ 163.963873][ T6669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.995098][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.429'. [ 164.005835][ T6669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.027213][ T6327] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.054133][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.429'. [ 164.077083][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 164.114547][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.127533][ T6327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.143739][ T6327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.155340][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.220561][ T10] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 164.285267][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 164.333961][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 164.387264][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 164.432020][ T7437] netlink: 'syz.5.431': attribute type 1 has an invalid length. [ 164.452864][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 164.511201][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 164.555247][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.431'. [ 164.570884][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 164.622382][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 164.695458][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 164.868403][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.907036][ T6309] net_ratelimit: 114 callbacks suppressed [ 164.907051][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 164.949361][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.986890][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 165.146628][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 165.190997][ T6327] IPVS: starting estimator thread 0... [ 165.210248][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'. [ 165.223822][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 165.263146][ T7449] IPVS: nq: FWM 3 0x00000003 - no destination available [ 165.294293][ T10] usb 3-1: USB disconnect, device number 9 [ 165.328319][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 165.347005][ T7457] IPVS: using max 78 ests per chain, 187200 per kthread [ 165.371790][ T7460] bpf: Bad value for 'context' [ 165.398285][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 165.410299][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 165.450239][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 165.465779][ T10] keyspan 3-1:1.0: device disconnected [ 165.606646][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 165.639506][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 165.763376][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 165.763387][ T30] audit: type=1400 audit(1787631751.057:1102): avc: denied { write } for pid=7451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.800380][ T153] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 166.056305][ T30] audit: type=1400 audit(1787631751.347:1103): avc: denied { write } for pid=7473 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.158405][ T7483] ªªªªªª: renamed from lo (while UP) [ 166.173798][ T30] audit: type=1400 audit(1787631751.467:1104): avc: denied { bind } for pid=7480 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.383516][ T7483] lo: name change rollback failed: -105 [ 166.401659][ T30] audit: type=1400 audit(1787631751.697:1105): avc: denied { write } for pid=7489 comm="syz.3.443" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.755050][ T30] audit: type=1804 audit(1787631752.047:1106): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.444" name="bus" dev="ramfs" ino=17873 res=1 errno=0 [ 166.847267][ T30] audit: type=1804 audit(1787631752.097:1107): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.444" name="bus" dev="ramfs" ino=17873 res=1 errno=0 [ 167.213898][ T30] audit: type=1400 audit(1787631752.507:1108): avc: denied { transfer } for pid=7502 comm="syz.5.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.391384][ T30] audit: type=1400 audit(1787631752.687:1109): avc: denied { bind } for pid=7509 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.475874][ T30] audit: type=1400 audit(1787631752.757:1110): avc: denied { write } for pid=7512 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 167.937288][ T30] audit: type=1400 audit(1787631753.227:1111): avc: denied { write } for pid=7521 comm="syz.2.454" name="functions" dev="configfs" ino=9337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.701238][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 168.747806][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 169.966617][ T6309] net_ratelimit: 85 callbacks suppressed [ 169.966632][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 170.018205][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.167813][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 170.204811][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.354954][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 170.404492][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.557224][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 170.592789][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.609098][ T189] hid_parser_main: 29 callbacks suppressed [ 170.609111][ T189] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.746698][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 170.773301][ T189] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.807872][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 170.890609][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 170.890621][ T30] audit: type=1400 audit(1787631756.187:1125): avc: denied { accept } for pid=7591 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.544097][ T7600] tipc: Started in network mode [ 171.625161][ T7600] tipc: Node identity 4, cluster identity 4711 [ 171.720245][ T7600] tipc: Node number set to 4 [ 172.213124][ T7617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7617 comm=syz.0.475 [ 172.333243][ T30] audit: type=1400 audit(1787631757.627:1126): avc: denied { write } for pid=7598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.434155][ T7620] syzkaller0: entered promiscuous mode [ 172.463716][ T30] audit: type=1400 audit(1787631757.747:1127): avc: denied { write } for pid=7623 comm="syz.5.479" name="functions" dev="configfs" ino=9337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.490505][ T7620] syzkaller0: entered allmulticast mode [ 172.639792][ T30] audit: type=1400 audit(1787631757.907:1128): avc: denied { write } for pid=7626 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.014073][ T30] audit: type=1400 audit(1787631758.307:1129): avc: denied { create } for pid=7640 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.040155][ T7641] tipc: Enabling not permitted [ 173.084054][ T7641] tipc: Enabling of bearer rejected, failed to enable media [ 173.113383][ T30] audit: type=1400 audit(1787631758.307:1130): avc: denied { read } for pid=7640 comm="syz.0.484" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 173.217686][ T30] audit: type=1400 audit(1787631758.307:1131): avc: denied { open } for pid=7640 comm="syz.0.484" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 173.604009][ T30] audit: type=1400 audit(1787631758.897:1132): avc: denied { write } for pid=7638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.734615][ T30] audit: type=1400 audit(1787631759.027:1133): avc: denied { setopt } for pid=7665 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.862662][ T30] audit: type=1400 audit(1787631759.147:1134): avc: denied { write } for pid=7667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.407557][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 174.512117][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 175.036638][ T6323] net_ratelimit: 89 callbacks suppressed [ 175.036656][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 175.074139][ T5694] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 175.126410][ T6323] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.289087][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 175.299053][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 175.338819][ T5694] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.359547][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.447312][ T5694] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.530521][ T5694] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.547889][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 175.600357][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.609908][ T5694] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.681617][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.761289][ T5694] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.777345][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 175.829175][ T6323] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 175.846091][ T5694] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.935406][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.997644][ T6323] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 176.018263][ T5694] usb 4-1: config 0 descriptor?? [ 176.037136][ T6323] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 176.306400][ T5694] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 176.455329][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 176.455342][ T30] audit: type=1400 audit(1787631761.747:1231): avc: denied { write } for pid=7715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.652503][ T30] audit: type=1400 audit(1787631761.827:1232): avc: denied { create } for pid=7733 comm="syz.6.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 176.706413][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.765508][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.791773][ T30] audit: type=1400 audit(1787631761.977:1233): avc: denied { read write } for pid=7689 comm="syz.3.493" name="lp0" dev="devtmpfs" ino=3057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 176.885916][ T30] audit: type=1400 audit(1787631761.977:1234): avc: denied { open } for pid=7689 comm="syz.3.493" path="/dev/usb/lp0" dev="devtmpfs" ino=3057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 176.993676][ T30] audit: type=1400 audit(1787631762.047:1235): avc: denied { write } for pid=7743 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.125499][ T30] audit: type=1804 audit(1787631762.317:1236): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.506" name="/newroot/12/bus/file1" dev="overlay" ino=90 res=1 errno=0 [ 177.625134][ T30] audit: type=1400 audit(1787631762.917:1237): avc: denied { write } for pid=7752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.858945][ T5694] usb 4-1: USB disconnect, device number 8 [ 177.902032][ T30] audit: type=1326 audit(1787631763.197:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.2.511" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2e539e0d9 code=0x0 [ 177.975465][ T5694] usblp0: removed [ 178.086447][ T30] audit: type=1400 audit(1787631763.257:1239): avc: denied { write } for pid=7777 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.246124][ T30] audit: type=1326 audit(1787631763.267:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbd999e0d9 code=0x0 [ 178.574372][ T7796] fuse: Bad value for 'fd' [ 178.735273][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.857886][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.058305][ T42] net_ratelimit: 58 callbacks suppressed [ 180.058318][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 180.131978][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.297446][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 180.352309][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.477414][ T7811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.518'. [ 180.526635][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 180.602826][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.756612][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 180.798713][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 180.895781][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.524'. [ 180.946941][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 181.003384][ T7836] hsr_slave_0 (unregistering): left promiscuous mode [ 181.027219][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 181.268654][ T7841] capability: warning: `syz.0.526' uses deprecated v2 capabilities in a way that may be insecure [ 181.357366][ T7847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7847 comm=syz.5.529 [ 181.502394][ T7850] gadgetfs: bound to dummy_udc driver [ 181.787352][ T189] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 181.814857][ C0] gadgetfs: connected [ 181.828157][ T189] gadgetfs: disconnected [ 182.006835][ C0] gadgetfs: connected [ 182.016153][ T189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 182.042677][ T189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 182.078950][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.115586][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 182.115599][ T30] audit: type=1400 audit(1787631767.407:1253): avc: denied { mount } for pid=7858 comm="syz.3.533" name="/" dev="autofs" ino=19046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 182.176659][ C0] gadgetfs: configuration #1 [ 182.302196][ T7850] gadgetfs: suspended from state 3 [ 182.308447][ T189] usb 2-1: can't set config #1, error -71 [ 182.321424][ T189] usb 2-1: USB disconnect, device number 10 [ 182.331732][ T7850] gadgetfs: disconnected [ 182.590194][ T7864] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 183.209806][ T7883] binder: 7882:7883 ioctl c0306201 0 returned -14 [ 183.271302][ T30] audit: type=1326 audit(1787631768.567:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b119e0d9 code=0x7ffc0000 [ 183.402633][ T30] audit: type=1326 audit(1787631768.597:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b119e0d9 code=0x7ffc0000 [ 183.511684][ T30] audit: type=1326 audit(1787631768.607:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b119e0d9 code=0x7ffc0000 [ 183.631753][ T30] audit: type=1326 audit(1787631768.607:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f57b119e0d9 code=0x7ffc0000 [ 183.684764][ T30] audit: type=1326 audit(1787631768.617:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b119e0d9 code=0x7ffc0000 [ 183.714715][ T30] audit: type=1326 audit(1787631768.677:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f57b115e90e code=0x7ffc0000 [ 183.765877][ T30] audit: type=1326 audit(1787631768.677:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f57b115e90e code=0x7ffc0000 [ 183.867965][ T30] audit: type=1326 audit(1787631768.677:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f57b115e90e code=0x7ffc0000 [ 183.982564][ T30] audit: type=1326 audit(1787631768.677:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f57b115e90e code=0x7ffc0000 [ 184.046622][ T6309] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.077463][ T7897] netlink: 'syz.5.546': attribute type 10 has an invalid length. [ 184.095700][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.103010][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.172940][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.180103][ T7897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.187502][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.194614][ T7897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.330279][ T7897] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 185.214167][ T153] net_ratelimit: 87 callbacks suppressed [ 185.214183][ T153] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 185.373319][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.516641][ T153] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 185.537441][ T153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.666816][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 185.685944][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 185.817525][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 185.862860][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.007367][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 186.041380][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.058013][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 186.065279][ T5604] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.690679][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.6.557'. [ 187.765201][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 187.765214][ T30] audit: type=1400 audit(1787631773.057:1333): avc: denied { append } for pid=7951 comm="syz.6.565" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 187.959444][ T7957] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 188.146858][ T189] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 188.322015][ T30] audit: type=1400 audit(1787631773.617:1334): avc: denied { connect } for pid=7961 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.400075][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 188.943108][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.951817][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.132472][ T189] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.177472][ T189] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 189.237862][ T189] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 189.269869][ T189] usb 6-1: can't read configurations, error -71 [ 190.282443][ T134] net_ratelimit: 78 callbacks suppressed [ 190.282458][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 190.379636][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.546610][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 190.566881][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.696924][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 190.777054][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.927149][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 190.981898][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 191.019118][ T30] audit: type=1400 audit(1787631776.317:1335): avc: denied { setopt } for pid=7985 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.095239][ T5604] Bluetooth: hci1: unexpected event 0x03 length: 7 < 11 [ 191.147203][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 191.156985][ T7986] netlink: 'syz.5.576': attribute type 1 has an invalid length. [ 191.199640][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 191.357361][ T189] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 191.808126][ T189] usb 7-1: Using ep0 maxpacket: 16 [ 192.394328][ T7993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.417044][ T189] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.471950][ T189] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 192.544923][ T189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.609926][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.652388][ T189] usb 7-1: Product: syz [ 192.679728][ T189] usb 7-1: Manufacturer: syz [ 192.703141][ T189] usb 7-1: SerialNumber: syz [ 192.750044][ T189] usb 7-1: config 0 descriptor?? [ 192.765859][ T8004] netlink: 'syz.5.584': attribute type 1 has an invalid length. [ 192.791956][ T189] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.123726][ T189] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 193.749476][ T8004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.831626][ T8010] bond2: entered promiscuous mode [ 193.950697][ T8011] bond1: (slave ip6erspan0): making interface the new active one [ 194.077285][ T8011] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 194.117996][ T30] audit: type=1400 audit(1787631779.417:1336): avc: denied { setopt } for pid=8019 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.207166][ T189] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 194.231893][ T189] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 194.300695][ T189] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 194.344893][ T189] em28xx 7-1:0.0: No AC97 audio processor [ 194.359236][ T8027] Illegal XDP return value 4294967274 on prog (id 61) dev N/A, expect packet loss! [ 194.399649][ T189] usb 7-1: USB disconnect, device number 2 [ 194.433111][ T189] em28xx 7-1:0.0: Disconnecting em28xx [ 194.565085][ T189] em28xx: Freeing device [ 195.123782][ T8033] xt_hashlimit: size too large, truncated to 1048576 [ 195.278329][ T30] audit: type=1400 audit(1787631780.577:1337): avc: denied { read } for pid=8049 comm="syz.3.599" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.312876][ T6305] net_ratelimit: 96 callbacks suppressed [ 195.312891][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 195.404542][ T6305] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 195.438784][ T30] audit: type=1400 audit(1787631780.577:1338): avc: denied { open } for pid=8049 comm="syz.3.599" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.580333][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 195.606447][ T30] audit: type=1400 audit(1787631780.657:1339): avc: denied { ioctl } for pid=8049 comm="syz.3.599" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.658689][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 195.809271][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 195.817911][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.831285][ T6305] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 195.850488][ T30] audit: type=1400 audit(1787631780.657:1340): avc: denied { read write } for pid=7006 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.730691][ T10] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 196.757861][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 196.771922][ T30] audit: type=1400 audit(1787631780.657:1341): avc: denied { open } for pid=7006 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.796344][ T10] usb 4-1: config 0 has no interfaces? [ 196.809822][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.836749][ T10] usb 4-1: config 0 has no interfaces? [ 196.853562][ T10] usb 4-1: config 0 has no interfaces? [ 196.876937][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.942806][ T30] audit: type=1400 audit(1787631780.657:1342): avc: denied { ioctl } for pid=7006 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.968777][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 196.977450][ T10] usb 4-1: config 0 descriptor?? [ 196.999698][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.131810][ T30] audit: type=1400 audit(1787631780.787:1343): avc: denied { create } for pid=8053 comm="syz.6.600" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 197.241288][ T30] audit: type=1400 audit(1787631780.797:1344): avc: denied { read write } for pid=8049 comm="syz.3.599" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.310810][ T10] usb 4-1: USB disconnect, device number 9 [ 197.415829][ T30] audit: type=1400 audit(1787631780.797:1345): avc: denied { open } for pid=8049 comm="syz.3.599" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.705564][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 197.727337][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 197.897740][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 197.916024][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 197.961645][ T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 197.995137][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.048736][ T9] usb 7-1: config 0 has no interface number 0 [ 198.081118][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.109510][ T9] usb 7-1: Product: syz [ 198.135242][ T9] usb 7-1: Manufacturer: syz [ 198.160108][ T9] usb 7-1: SerialNumber: syz [ 198.194163][ T9] usb 7-1: config 0 descriptor?? [ 198.231055][ T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 198.434690][ T9] usb 7-1: qt2_attach - failed to power on unit: -71 [ 198.469833][ T9] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 198.512642][ T9] usb 7-1: USB disconnect, device number 3 [ 198.694896][ T189] libceph: connect (1)[c::]:6789 error -101 [ 198.719892][ T189] libceph: mon0 (1)[c::]:6789 connect error [ 198.833626][ T8104] ceph: No mds server is up or the cluster is laggy [ 199.143390][ T8115] netlink: 'syz.5.620': attribute type 9 has an invalid length. [ 199.387365][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 199.387376][ T30] audit: type=1400 audit(1787631784.687:1408): avc: denied { map_create } for pid=8119 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.569410][ T30] audit: type=1400 audit(1787631784.717:1409): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 199.704633][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'. [ 199.719826][ T30] audit: type=1400 audit(1787631784.747:1410): avc: denied { map_read map_write } for pid=8119 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.845245][ T30] audit: type=1400 audit(1787631785.117:1411): avc: denied { mount } for pid=8124 comm="syz.3.624" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 199.974156][ T30] audit: type=1400 audit(1787631785.177:1412): avc: denied { search } for pid=8124 comm="syz.3.624" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.052781][ T8126] dlm: closing connection to node 1 [ 200.117735][ T30] audit: type=1400 audit(1787631785.177:1413): avc: denied { search } for pid=8124 comm="syz.3.624" name="dlm" dev="configfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.146818][ T8126] dlm: io handling for node: 1 stopped [ 200.185368][ T8126] dlm: closing connection to node 1 done [ 200.211917][ T30] audit: type=1400 audit(1787631785.187:1414): avc: denied { search } for pid=8124 comm="syz.3.624" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.326981][ T6305] net_ratelimit: 70 callbacks suppressed [ 200.327008][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.356483][ T30] audit: type=1400 audit(1787631785.187:1415): avc: denied { search } for pid=8124 comm="syz.3.624" name="dlm" dev="configfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.438210][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.486726][ T153] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.529271][ T30] audit: type=1400 audit(1787631785.187:1416): avc: denied { search } for pid=8124 comm="syz.3.624" name="cluster" dev="configfs" ino=18980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.567049][ T153] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.618125][ T153] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.648507][ T30] audit: type=1400 audit(1787631785.187:1417): avc: denied { search } for pid=8124 comm="syz.3.624" name="comms" dev="configfs" ino=18982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.680330][ T153] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.738291][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.775122][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.818222][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 200.858686][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.761760][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 203.026587][ T189] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 203.197387][ T189] usb 6-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 203.238889][ T189] usb 6-1: config 0 has an invalid interface number: 176 but max is 0 [ 203.275545][ T189] usb 6-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 203.319298][ T189] usb 6-1: config 0 has no interface number 0 [ 203.347020][ T189] usb 6-1: config 0 interface 176 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.405090][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.427364][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.467815][ T189] usb 6-1: Product: syz [ 203.473116][ T189] usb 6-1: Manufacturer: syz [ 203.483523][ T189] usb 6-1: SerialNumber: syz [ 203.500380][ T189] usb 6-1: config 0 descriptor?? [ 203.511331][ T8140] syz.3.628 (8140) used greatest stack depth: 19272 bytes left [ 203.537630][ T189] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.626732][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 203.639799][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 203.680527][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 203.719377][ T189] snd-usb-audio 6-1:0.176: probe with driver snd-usb-audio failed with error -2 [ 203.730678][ T10] usb 3-1: config 0 has no interface number 0 [ 203.762057][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.792653][ T189] usb 6-1: USB disconnect, device number 4 [ 203.827818][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 203.845021][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.176/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 203.900082][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.983014][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 204.030891][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.088733][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.119186][ T10] usb 3-1: config 0 descriptor?? [ 204.154667][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 204.316615][ T5694] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.487889][ T5694] usb 4-1: Using ep0 maxpacket: 8 [ 204.527755][ T5694] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 204.574975][ T5694] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 204.635652][ T5694] usb 4-1: config 0 has no interface number 0 [ 204.661938][ T10] usb 3-1: USB disconnect, device number 10 [ 204.685938][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.708809][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 204.742124][ T5694] usb 4-1: Product: syz [ 204.773185][ T5694] usb 4-1: Manufacturer: syz [ 204.806147][ T5694] usb 4-1: SerialNumber: syz [ 204.869721][ T5694] usb 4-1: config 0 descriptor?? [ 205.101507][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 205.101528][ T30] audit: type=1400 audit(1787631790.397:1447): avc: denied { bind } for pid=8175 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.162143][ T5694] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 205.209655][ T5694] uvcvideo 4-1:0.31: Failed to initialize entity for entity 32774 [ 205.267673][ T5694] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 205.294072][ T30] audit: type=1400 audit(1787631790.487:1448): avc: denied { write } for pid=8175 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.383872][ T5694] usb 4-1: USB disconnect, device number 10 [ 205.417450][ T42] net_ratelimit: 137 callbacks suppressed [ 205.417465][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 205.491471][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.636764][ T189] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 205.666855][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 205.691130][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.826664][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 205.844475][ T189] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 205.866699][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 205.876981][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 205.889562][ T189] usb 6-1: config 0 has no interfaces? [ 205.920191][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.968034][ T189] usb 6-1: config 0 descriptor?? [ 206.012619][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 206.021843][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 206.037027][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 206.078083][ T9] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 206.110736][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.125037][ T30] audit: type=1400 audit(1787631791.427:1449): avc: denied { watch watch_reads } for pid=8185 comm="syz.3.646" path="/126" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 206.162267][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.171425][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 206.193089][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 206.241781][ T9] as10x_usb: device has been detected [ 206.299570][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 206.337464][ T30] audit: type=1400 audit(1787631791.637:1450): avc: denied { read } for pid=8190 comm="syz.3.649" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.388625][ T9] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 206.424554][ T8193] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 206.432841][ T153] IPVS: starting estimator thread 0... [ 206.458094][ T5694] usb 6-1: USB disconnect, device number 5 [ 206.471410][ T9] as10x_usb: error during firmware upload part1 [ 206.489811][ T30] audit: type=1400 audit(1787631791.667:1451): avc: denied { open } for pid=8190 comm="syz.3.649" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.523977][ T9] Registered device Abilis Systems DVB-Titan [ 206.536857][ T8195] IPVS: using max 78 ests per chain, 187200 per kthread [ 206.550283][ T8192] binder: 8190:8192 ioctl c0306201 200000000180 returned -14 [ 206.583288][ T30] audit: type=1400 audit(1787631791.677:1452): avc: denied { ioctl } for pid=8190 comm="syz.3.649" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.616299][ T8197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.658115][ T8197] bond3: (slave bond4): making interface the new active one [ 206.668872][ T30] audit: type=1400 audit(1787631791.677:1453): avc: denied { set_context_mgr } for pid=8190 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 206.690929][ T8197] bond3: (slave bond4): Enslaving as an active interface with an up link [ 206.738803][ T30] audit: type=1400 audit(1787631791.707:1454): avc: denied { name_bind } for pid=8187 comm="syz.2.647" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 206.767482][ T8193] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 206.799077][ T30] audit: type=1400 audit(1787631791.707:1455): avc: denied { node_bind } for pid=8187 comm="syz.2.647" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 206.861021][ T30] audit: type=1400 audit(1787631791.737:1456): avc: denied { bind } for pid=8178 comm="syz.5.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.240486][ T8216] No such timeout policy "n" [ 208.004017][ T5604] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 208.333109][ T5694] usb 7-1: USB disconnect, device number 4 [ 208.446031][ T5694] Unregistered device Abilis Systems DVB-Titan [ 208.449531][ T5694] as10x_usb: device has been disconnected [ 208.682446][ T8249] netlink: 'syz.5.663': attribute type 1 has an invalid length. [ 208.701351][ T8249] netlink: 'syz.5.663': attribute type 4 has an invalid length. [ 208.718984][ T8249] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.663'. [ 208.728385][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 208.743670][ T8249] netlink: 'syz.5.663': attribute type 1 has an invalid length. [ 208.759169][ T8249] netlink: 'syz.5.663': attribute type 4 has an invalid length. [ 208.779086][ T8249] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.663'. [ 208.888292][ T9] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 208.929377][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.953746][ T9] usb 4-1: Product: syz [ 208.966567][ T9] usb 4-1: Manufacturer: syz [ 208.981028][ T9] usb 4-1: SerialNumber: syz [ 209.618602][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 210.499792][ T6309] net_ratelimit: 82 callbacks suppressed [ 210.499806][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.585109][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.776589][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.804492][ T6305] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.937263][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.974941][ T8281] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6919] was attempted by " [ 210.983225][ T6305] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 211.151815][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 211.151825][ T30] audit: type=1400 audit(1787631796.427:1531): avc: denied { mounton } for pid=8282 comm="syz.0.674" path="/168/file0" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 211.223102][ T30] audit: type=1400 audit(1787631796.447:1532): avc: denied { getopt } for pid=8273 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.348569][ T30] audit: type=1400 audit(1787631796.647:1533): avc: denied { accept } for pid=8284 comm="syz.6.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.445372][ T5694] usb 4-1: USB disconnect, device number 11 [ 211.456173][ T5694] usblp0: removed [ 211.486871][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.494726][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 211.616923][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.643613][ T8291] binder: 8290:8291 unknown command 0 [ 211.649181][ T30] audit: type=1400 audit(1787631796.937:1534): avc: denied { transfer } for pid=8290 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 211.673229][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 211.703997][ T8291] binder: 8290:8291 ioctl c0306201 2000000001c0 returned -22 [ 211.743937][ T8296] capability: warning: `syz.2.679' uses 32-bit capabilities (legacy support in use) [ 211.851761][ T30] audit: type=1400 audit(1787631797.147:1535): avc: denied { create } for pid=8295 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 211.885124][ T8296] netlink: 72 bytes leftover after parsing attributes in process `syz.2.679'. [ 211.922446][ T5604] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 211.933680][ T30] audit: type=1400 audit(1787631797.177:1536): avc: denied { write } for pid=8295 comm="syz.2.679" path="socket:[21425]" dev="sockfs" ino=21425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 211.958189][ T189] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 212.064440][ T30] audit: type=1400 audit(1787631797.357:1537): avc: denied { write } for pid=8300 comm="syz.2.681" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 212.140126][ T189] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 212.158023][ T189] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 212.192950][ T189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.218706][ T8307] netlink: 'syz.3.682': attribute type 10 has an invalid length. [ 212.230075][ T189] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 212.244726][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.683'. [ 212.253803][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.261082][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.268519][ T30] audit: type=1400 audit(1787631797.547:1538): avc: denied { setopt } for pid=8303 comm="syz.5.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.293059][ T189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.317046][ T189] usb 7-1: config 0 descriptor?? [ 212.322061][ T30] audit: type=1400 audit(1787631797.547:1539): avc: denied { write } for pid=8303 comm="syz.5.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.354986][ T8293] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 212.387886][ T30] audit: type=1400 audit(1787631797.667:1540): avc: denied { cmd } for pid=8305 comm="syz.2.684" path="socket:[21496]" dev="sockfs" ino=21496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 212.419974][ T8307] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.427749][ T8307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.435053][ T8307] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.442131][ T8307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.494508][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802b88b000: rx timeout, send abort [ 212.506109][ T8307] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 213.793980][ T8340] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 213.846289][ T8340] team0: Cannot enslave team device to itself [ 214.044059][ T189] usbhid 7-1:0.0: can't add hid device: -71 [ 214.065611][ T189] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 214.105853][ T8348] syz_tun: entered allmulticast mode [ 214.115694][ T189] usb 7-1: USB disconnect, device number 5 [ 214.710920][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 214.899596][ T8360] Bluetooth: MGMT ver 1.23 [ 215.354169][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.6.702'. [ 215.445832][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.6.702'. [ 215.511786][ T6305] net_ratelimit: 82 callbacks suppressed [ 215.511799][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.590881][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.648286][ T6305] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.717195][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.767640][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.828614][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.917168][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.008903][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.078474][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.147193][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.213827][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 216.213837][ T30] audit: type=1400 audit(1787631801.507:1576): avc: denied { create } for pid=8395 comm="syz.5.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 216.342611][ T30] audit: type=1400 audit(1787631801.557:1577): avc: denied { sys_module } for pid=8393 comm="syz.2.706" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 216.444157][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 216.505160][ T30] audit: type=1400 audit(1787631801.757:1578): avc: denied { write } for pid=8405 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.593721][ T8409] bridge0: port 3(vlan2) entered blocking state [ 216.646411][ T8409] bridge0: port 3(vlan2) entered disabled state [ 216.655482][ T30] audit: type=1400 audit(1787631801.757:1579): avc: denied { remove_name } for pid=8405 comm="rm" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=5242 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.774241][ T8409] vlan2: entered allmulticast mode [ 216.944834][ T30] audit: type=1400 audit(1787631801.757:1580): avc: denied { unlink } for pid=8405 comm="rm" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=5242 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.040936][ T8409] geneve0: entered allmulticast mode [ 217.072483][ T8409] vlan2: entered promiscuous mode [ 217.174024][ T8409] geneve0: entered promiscuous mode [ 217.502959][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.596210][ T30] audit: type=1400 audit(1787631802.887:1581): avc: denied { write } for pid=8412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.630574][ T8434] bond0: (slave bridge0): Releasing backup interface [ 217.644567][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.755898][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.763158][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.785559][ T30] audit: type=1400 audit(1787631803.027:1582): avc: denied { mount } for pid=8429 comm="syz.0.713" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 217.901230][ T30] audit: type=1400 audit(1787631803.137:1583): avc: denied { write } for pid=8442 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.938646][ T8434] bridge_slave_0: left allmulticast mode [ 217.990593][ T8434] bridge_slave_0: left promiscuous mode [ 218.022055][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.089584][ T8434] bridge_slave_1: left allmulticast mode [ 218.120509][ T8434] bridge_slave_1: left promiscuous mode [ 218.155087][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.289591][ T8434] bond0: (slave bond_slave_0): Releasing backup interface [ 218.368754][ T8434] bond0: (slave bond_slave_1): Releasing backup interface [ 218.444665][ T8434] team0: Port device team_slave_0 removed [ 218.463380][ T30] audit: type=1400 audit(1787631803.757:1584): avc: denied { read } for pid=8449 comm="syz.2.718" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 218.522749][ T8434] team0: Port device team_slave_1 removed [ 218.565741][ T30] audit: type=1400 audit(1787631803.757:1585): avc: denied { open } for pid=8449 comm="syz.2.718" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 218.614478][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.659942][ T8434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.724422][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.794874][ T8434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.875797][ T8437] team0: Mode changed to "activebackup" [ 219.331933][ T8457] tipc: Started in network mode [ 219.357951][ T8457] tipc: Node identity ba5a81949425, cluster identity 4711 [ 219.380173][ T8457] tipc: Enabled bearer , priority 0 [ 219.399787][ T8463] syzkaller0: entered promiscuous mode [ 219.418166][ T8463] syzkaller0: entered allmulticast mode [ 219.433135][ T8452] tipc: Resetting bearer [ 219.472058][ T8452] tipc: Disabling bearer [ 219.566725][ T189] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 219.648915][ T8473] FAULT_INJECTION: forcing a failure. [ 219.648915][ T8473] name failslab, interval 1, probability 0, space 0, times 1 [ 219.687314][ T8473] CPU: 0 UID: 0 PID: 8473 Comm: syz.6.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.687337][ T8473] Tainted: [L]=SOFTLOCKUP [ 219.687342][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 219.687350][ T8473] Call Trace: [ 219.687354][ T8473] [ 219.687359][ T8473] dump_stack_lvl+0x100/0x190 [ 219.687380][ T8473] should_fail_ex.cold+0x5/0xa [ 219.687396][ T8473] should_failslab+0xc2/0x120 [ 219.687410][ T8473] __kmalloc_cache_noprof+0x91/0x6d0 [ 219.687425][ T8473] ? resv_map_alloc+0x46/0x400 [ 219.687445][ T8473] resv_map_alloc+0x46/0x400 [ 219.687464][ T8473] hugetlbfs_get_inode+0x385/0x700 [ 219.687485][ T8473] hugetlb_file_setup+0x15b/0x5b0 [ 219.687503][ T8473] ksys_mmap_pgoff+0x242/0x610 [ 219.687523][ T8473] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 219.687541][ T8473] ? xfd_validate_state+0x129/0x190 [ 219.687561][ T8473] __x64_sys_mmap+0x125/0x190 [ 219.687576][ T8473] do_syscall_64+0x123/0x790 [ 219.687591][ T8473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.687603][ T8473] RIP: 0033:0x7f503cb9e0d9 [ 219.687613][ T8473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.687623][ T8473] RSP: 002b:00007f503da3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 219.687635][ T8473] RAX: ffffffffffffffda RBX: 00007f503ce25fa0 RCX: 00007f503cb9e0d9 [ 219.687642][ T8473] RDX: 000000000000000c RSI: 0000000000010001 RDI: 0000000000000000 [ 219.687649][ T8473] RBP: 00007f503cc35024 R08: ffffffffffffffff R09: 0000000000000000 [ 219.687655][ T8473] R10: 000000000004c032 R11: 0000000000000246 R12: 0000000000000000 [ 219.687661][ T8473] R13: 00007f503ce26038 R14: 00007f503ce25fa0 R15: 00007ffe7493ee48 [ 219.687675][ T8473] [ 219.913402][ T189] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.926937][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.938247][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.948030][ T189] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.961031][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.970432][ T189] usb 4-1: config 0 descriptor?? [ 220.418766][ T189] plantronics 0003:047F:FFFF.0005: unbalanced delimiter at end of report description [ 220.474560][ T189] plantronics 0003:047F:FFFF.0005: parse failed [ 220.509468][ T189] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 220.539460][ T6327] net_ratelimit: 151 callbacks suppressed [ 220.539488][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.555750][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 220.696633][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.709989][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 220.736309][ T189] usb 4-1: USB disconnect, device number 12 [ 220.876805][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.897872][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 221.057571][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 221.085647][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 221.189561][ T8498] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 221.247180][ T42] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 221.256200][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 221.493426][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 221.493436][ T30] audit: type=1400 audit(1787631806.787:1593): avc: denied { ioctl } for pid=8507 comm="syz.6.735" path="socket:[22320]" dev="sockfs" ino=22320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.613356][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.735'. [ 222.736022][ T30] audit: type=1400 audit(1787631808.027:1594): avc: denied { write } for pid=8519 comm="syz.5.739" name="functions" dev="configfs" ino=9337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.791633][ T189] usb 1-1: USB disconnect, device number 2 [ 222.860769][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 222.879766][ T30] audit: type=1400 audit(1787631808.077:1595): avc: denied { write } for pid=8519 comm="syz.5.739" name="c.1" dev="configfs" ino=9342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.991689][ T30] audit: type=1400 audit(1787631808.077:1596): avc: denied { create } for pid=8519 comm="syz.5.739" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 223.213727][ T30] audit: type=1400 audit(1787631808.077:1597): avc: denied { write } for pid=8519 comm="syz.5.739" name="c.1" dev="configfs" ino=9342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.611663][ T30] audit: type=1400 audit(1787631808.077:1598): avc: denied { bind } for pid=8524 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.998563][ T30] audit: type=1400 audit(1787631810.267:1599): avc: denied { unlink } for pid=5592 comm="syz-executor" name="file0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 226.151264][ T6327] net_ratelimit: 68 callbacks suppressed [ 226.151277][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.173815][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.580582][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.627893][ T6327] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.655168][ T30] audit: type=1400 audit(1787631813.947:1600): avc: denied { setopt } for pid=8557 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.797720][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.826637][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.967008][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.002726][ T6309] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 229.094932][ T30] audit: type=1400 audit(1787631814.387:1601): avc: denied { bind } for pid=8569 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.146597][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.173574][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 229.579497][ T30] audit: type=1400 audit(1787631814.877:1602): avc: denied { read write } for pid=8565 comm="syz.2.753" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 229.726066][ T30] audit: type=1400 audit(1787631814.877:1603): avc: denied { open } for pid=8565 comm="syz.2.753" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 229.891954][ T30] audit: type=1400 audit(1787631815.067:1604): avc: denied { accept } for pid=8576 comm="syz.6.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 229.998413][ T30] audit: type=1400 audit(1787631815.087:1605): avc: denied { write } for pid=8576 comm="syz.6.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.102378][ T8585] nvmet_rdma: malformed ip/port passed: : [ 230.113014][ T30] audit: type=1400 audit(1787631815.187:1606): avc: denied { write } for pid=8583 comm="syz.3.758" name="subsystems" dev="configfs" ino=3514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.179771][ T8586] nvmet_rdma: malformed ip/port passed: : [ 230.211601][ T30] audit: type=1400 audit(1787631815.267:1607): avc: denied { write } for pid=8583 comm="syz.3.758" name="ports" dev="configfs" ino=3515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.297347][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.760'. [ 230.331178][ T30] audit: type=1400 audit(1787631815.367:1608): avc: denied { read append } for pid=8583 comm="syz.3.758" name="addr_trtype" dev="configfs" ino=22546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 230.424430][ T8591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.459322][ T30] audit: type=1800 audit(1787631815.377:1609): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.758" name="addr_trtype" dev="configfs" ino=22546 res=0 errno=0 [ 230.598359][ T8591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.615022][ T8591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.375847][ T6309] net_ratelimit: 26 callbacks suppressed [ 231.375860][ T6309] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.425731][ T8602] netlink: 'syz.6.763': attribute type 12 has an invalid length. [ 231.456469][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 231.466904][ T134] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.474995][ T8591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.482827][ T134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 231.509410][ T8591] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 231.563924][ T8591] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 231.606348][ T8610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.627138][ T6669] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.645576][ T8591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.670495][ T8591] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 231.678223][ T6669] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.708191][ T8591] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 231.728243][ T6669] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.786698][ T6669] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.795206][ T8613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.817714][ T6669] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.848566][ T8613] bond2: (slave bond3): Enslaving as an active interface with an up link [ 231.857546][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.049217][ T6327] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.296667][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.618952][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.624980][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.901252][ T8616] bond2 (unregistering): (slave bond3): Releasing backup interface [ 233.055593][ T8616] bond2 (unregistering): Released all slaves [ 233.497248][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.526675][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 233.668514][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.756536][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 233.785578][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 233.944576][ T9] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 234.111853][ T8653] netlink: 'syz.6.777': attribute type 1 has an invalid length. [ 234.178539][ T189] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 234.196082][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 234.241732][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.301735][ T9] usb 6-1: config 0 descriptor?? [ 234.382228][ T189] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 234.419486][ T189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.466418][ T189] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 234.500719][ T8657] kvm: pic: non byte write [ 234.511466][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.746931][ C0] ================================================================== [ 234.755007][ C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 234.762536][ C0] Read of size 1 at addr ffff888051fc50e8 by task syz.2.775/8658 [ 234.770215][ C0] [ 234.772510][ C0] CPU: 0 UID: 0 PID: 8658 Comm: syz.2.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.772526][ C0] Tainted: [L]=SOFTLOCKUP [ 234.772530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 234.772536][ C0] Call Trace: [ 234.772541][ C0] [ 234.772545][ C0] dump_stack_lvl+0x100/0x190 [ 234.772562][ C0] print_report+0x13d/0x4b0 [ 234.772577][ C0] ? __virt_addr_valid+0x239/0x430 [ 234.772594][ C0] ? find_endpoint+0x2a3/0x2c0 [ 234.772608][ C0] kasan_report+0xdf/0x1c0 [ 234.772620][ C0] ? find_endpoint+0x2a3/0x2c0 [ 234.772635][ C0] find_endpoint+0x2a3/0x2c0 [ 234.772649][ C0] dummy_timer+0x500/0x3700 [ 234.772668][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.772685][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 234.772700][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 234.772716][ C0] ? mark_held_locks+0x40/0x70 [ 234.772731][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.772743][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 234.772758][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 234.772774][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 234.772788][ C0] handle_softirqs+0x1e6/0x9d0 [ 234.772806][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 234.772822][ C0] ? _raw_spin_unlock+0x28/0x50 [ 234.772831][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 234.772846][ C0] __irq_exit_rcu+0x194/0x210 [ 234.772862][ C0] irq_exit_rcu+0x9/0x30 [ 234.772870][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 234.772883][ C0] [ 234.772886][ C0] [ 234.772890][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.772902][ C0] RIP: 0010:write_comp_data+0x41/0xa0 [ 234.772919][ C0] Code: 7f 12 48 63 d0 a9 00 01 00 ff 74 1e f6 c4 01 74 68 a9 00 00 00 0f 75 61 f7 c2 00 00 00 f0 75 59 8b 87 34 17 00 00 85 c0 74 4f <8b> 87 08 17 00 00 83 f8 03 75 44 48 8b 87 10 17 00 00 8b bf 0c 17 [ 234.772930][ C0] RSP: 0018:ffffc90004dbf430 EFLAGS: 00000246 [ 234.772939][ C0] RAX: 8000000000000001 RBX: 00000000000708c0 RCX: ffffffff828a41ba [ 234.772946][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88804b98a580 [ 234.772952][ C0] RBP: ffff88801d900000 R08: 0000000000000005 R09: 0000000000000000 [ 234.772959][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 234.772965][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 234.772973][ C0] ? lookup_page_ext+0x7a/0x100 [ 234.772984][ C0] lookup_page_ext+0x7a/0x100 [ 234.772994][ C0] page_table_check_clear+0x189/0x540 [ 234.773005][ C0] __page_table_check_pte_clear+0x10f/0x120 [ 234.773016][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 234.773027][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 234.773040][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 234.773054][ C0] __zap_vma_range+0x2c36/0x48c0 [ 234.773077][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 234.773092][ C0] ? mas_next_slot+0x10a3/0x1960 [ 234.773108][ C0] ? find_held_lock+0x2b/0x80 [ 234.773122][ C0] unmap_vmas+0x299/0x5f0 [ 234.773139][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 234.773155][ C0] ? mas_next_slot+0x10a3/0x1960 [ 234.773171][ C0] exit_mmap+0x1ef/0xa00 [ 234.773182][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 234.773191][ C0] ? rcu_is_watching+0x13/0xc0 [ 234.773205][ C0] ? find_held_lock+0x2b/0x80 [ 234.773217][ C0] ? uprobe_clear_state+0x5f/0x250 [ 234.773230][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 234.773247][ C0] __mmput+0x12a/0x410 [ 234.773264][ C0] mmput+0x67/0x80 [ 234.773279][ C0] do_exit+0x8b1/0x2ae0 [ 234.773291][ C0] ? __pfx_do_exit+0x10/0x10 [ 234.773302][ C0] ? do_raw_spin_lock+0x128/0x260 [ 234.773314][ C0] ? find_held_lock+0x2b/0x80 [ 234.773326][ C0] ? get_signal+0x7e0/0x21e0 [ 234.773336][ C0] do_group_exit+0xd5/0x2a0 [ 234.773348][ C0] get_signal+0x1ec7/0x21e0 [ 234.773360][ C0] ? __pfx_get_signal+0x10/0x10 [ 234.773370][ C0] ? do_futex+0x190/0x440 [ 234.773382][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 234.773396][ C0] ? find_held_lock+0x2b/0x80 [ 234.773409][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 234.773424][ C0] ? handle_softirqs+0x7ee/0x9d0 [ 234.773441][ C0] exit_to_user_mode_loop+0x139/0x700 [ 234.773452][ C0] ? rcu_is_watching+0x13/0xc0 [ 234.773464][ C0] do_syscall_64+0x661/0x790 [ 234.773477][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.773488][ C0] RIP: 0033:0x7fe2e539e0d9 [ 234.773496][ C0] Code: Unable to access opcode bytes at 0x7fe2e539e0af. [ 234.773501][ C0] RSP: 002b:00007fe2e62710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 234.773510][ C0] RAX: fffffffffffffe00 RBX: 00007fe2e5626098 RCX: 00007fe2e539e0d9 [ 234.773517][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2e5626098 [ 234.773523][ C0] RBP: 00007fe2e5626090 R08: 0000000000000000 R09: 0000000000000000 [ 234.773530][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.773536][ C0] R13: 00007fe2e5626128 R14: 00007ffc478f4840 R15: 00007ffc478f4928 [ 234.773546][ C0] [ 234.773549][ C0] [ 235.257004][ C0] Allocated by task 5797: [ 235.261306][ C0] kasan_save_stack+0x30/0x50 [ 235.265970][ C0] kasan_save_track+0x14/0x30 [ 235.270618][ C0] __kasan_kmalloc+0xaa/0xb0 [ 235.275178][ C0] __kmalloc_noprof+0x32f/0x840 [ 235.280000][ C0] usb_copy_descriptors+0xcd/0x320 [ 235.285081][ C0] f_midi2_bind+0x1dad/0x2770 [ 235.289727][ C0] usb_add_function+0x219/0x890 [ 235.294556][ C0] configfs_composite_bind+0xd83/0x1960 [ 235.300070][ C0] gadget_bind_driver+0x28c/0xbf0 [ 235.305061][ C0] really_probe+0x241/0xa60 [ 235.309529][ C0] __driver_probe_device+0x210/0x460 [ 235.314780][ C0] driver_probe_device+0x4a/0x140 [ 235.319771][ C0] __driver_attach+0x21f/0x5b0 [ 235.324500][ C0] bus_for_each_dev+0x13e/0x1d0 [ 235.329322][ C0] bus_add_driver+0x305/0x5b0 [ 235.333968][ C0] driver_register+0x1e2/0x360 [ 235.338699][ C0] usb_gadget_register_driver_owner+0x132/0x210 [ 235.344906][ C0] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 235.350514][ C0] configfs_write_iter+0x302/0x4e0 [ 235.355593][ C0] vfs_write+0x6af/0x1050 [ 235.359891][ C0] ksys_write+0x12a/0x250 [ 235.364190][ C0] do_syscall_64+0x123/0x790 [ 235.368748][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.374611][ C0] [ 235.376916][ C0] Freed by task 8520: [ 235.380861][ C0] kasan_save_stack+0x30/0x50 [ 235.385516][ C0] kasan_save_track+0x14/0x30 [ 235.390167][ C0] kasan_save_free_info+0x3b/0x70 [ 235.395159][ C0] __kasan_slab_free+0x5f/0x80 [ 235.399888][ C0] kfree+0x22b/0x6d0 [ 235.403753][ C0] usb_free_all_descriptors+0x81/0x1a0 [ 235.409180][ C0] purge_configs_funcs+0x285/0x510 [ 235.414259][ C0] configfs_composite_unbind+0xae/0x210 [ 235.419777][ C0] gadget_unbind_driver+0x20c/0x4f0 [ 235.424941][ C0] device_remove+0xcb/0x180 [ 235.429409][ C0] device_release_driver_internal+0x44e/0x620 [ 235.435444][ C0] driver_detach+0xd8/0x1b0 [ 235.439915][ C0] bus_remove_driver+0x13b/0x2e0 [ 235.444835][ C0] driver_unregister+0x76/0xb0 [ 235.449565][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 235.455250][ C0] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 235.460859][ C0] configfs_write_iter+0x302/0x4e0 [ 235.465938][ C0] vfs_write+0x6af/0x1050 [ 235.470237][ C0] ksys_write+0x12a/0x250 [ 235.474547][ C0] do_syscall_64+0x123/0x790 [ 235.479105][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.484976][ C0] [ 235.487269][ C0] The buggy address belongs to the object at ffff888051fc5000 [ 235.487269][ C0] which belongs to the cache kmalloc-512 of size 512 [ 235.501287][ C0] The buggy address is located 232 bytes inside of [ 235.501287][ C0] freed 512-byte region [ffff888051fc5000, ffff888051fc5200) [ 235.515052][ C0] [ 235.517343][ C0] The buggy address belongs to the physical page: [ 235.523719][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888051fc6c00 pfn:0x51fc4 [ 235.533755][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 235.542218][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 235.550680][ C0] page_type: f5(slab) [ 235.554626][ C0] raw: 00fff00000000240 ffff88801c02bc80 ffffea0000de4210 ffffea000150a210 [ 235.563175][ C0] raw: ffff888051fc6c00 0000000000100008 00000000f5000000 0000000000000000 [ 235.571724][ C0] head: 00fff00000000240 ffff88801c02bc80 ffffea0000de4210 ffffea000150a210 [ 235.580360][ C0] head: ffff888051fc6c00 0000000000100008 00000000f5000000 0000000000000000 [ 235.588996][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 235.597632][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 235.606266][ C0] page dumped because: kasan: bad access detected [ 235.612642][ C0] page_owner tracks the page as allocated [ 235.618321][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5797, tgid 5796 (syz.1.8), ts 70363102648 [ 235.637384][ C0] post_alloc_hook+0xfd/0x120 [ 235.642031][ C0] get_page_from_freelist+0x110d/0x35b0 [ 235.647555][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 235.653417][ C0] new_slab+0xa9/0x6e0 [ 235.657455][ C0] refill_objects+0xe3/0x410 [ 235.662025][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 235.667552][ C0] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 235.672895][ C0] snd_mixer_oss_build_test+0x7a/0x380 [ 235.678323][ C0] snd_mixer_oss_build_test_all+0x5d0/0x6e0 [ 235.684183][ C0] snd_mixer_oss_build_input+0x139/0xd50 [ 235.689785][ C0] snd_mixer_oss_notify_handler+0x48d/0x990 [ 235.695659][ C0] snd_card_register+0x2af/0x760 [ 235.700565][ C0] f_midi2_bind+0x1198/0x2770 [ 235.705211][ C0] usb_add_function+0x219/0x890 [ 235.710033][ C0] configfs_composite_bind+0xd83/0x1960 [ 235.715546][ C0] gadget_bind_driver+0x28c/0xbf0 [ 235.720545][ C0] page last free pid 1 tgid 1 ts 17709836469 stack trace: [ 235.727615][ C0] free_pages_prepare+0x586/0xe00 [ 235.732607][ C0] __free_contig_range_common+0x14f/0x250 [ 235.738292][ C0] destroy_args+0xa8/0x7a0 [ 235.742682][ C0] debug_vm_pgtable+0x1d69/0x3490 [ 235.747677][ C0] do_one_initcall+0x11c/0x6f0 [ 235.752409][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 235.757590][ C0] kernel_init+0x21/0x1e0 [ 235.761890][ C0] ret_from_fork+0x730/0xd60 [ 235.766445][ C0] ret_from_fork_asm+0x1a/0x30 [ 235.771174][ C0] [ 235.773476][ C0] Memory state around the buggy address: [ 235.779081][ C0] ffff888051fc4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.787105][ C0] ffff888051fc5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.795129][ C0] >ffff888051fc5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.803158][ C0] ^ [ 235.810576][ C0] ffff888051fc5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.818600][ C0] ffff888051fc5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.826623][ C0] ================================================================== [ 235.834649][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 235.841813][ C0] CPU: 0 UID: 0 PID: 8658 Comm: syz.2.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.852537][ C0] Tainted: [L]=SOFTLOCKUP [ 235.856827][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 235.866848][ C0] Call Trace: [ 235.870098][ C0] [ 235.872913][ C0] dump_stack_lvl+0x100/0x190 [ 235.877563][ C0] vpanic+0x553/0x970 [ 235.881515][ C0] ? __pfx_vpanic+0x10/0x10 [ 235.885984][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 235.890981][ C0] ? find_endpoint+0x2a3/0x2c0 [ 235.895716][ C0] panic+0xd1/0xe0 [ 235.899402][ C0] ? __pfx_panic+0x10/0x10 [ 235.903784][ C0] ? end_report.part.0+0x23/0x90 [ 235.908695][ C0] ? rcu_is_watching+0x13/0xc0 [ 235.913426][ C0] ? end_report.part.0+0x23/0x90 [ 235.918335][ C0] check_panic_on_warn.cold+0x19/0x34 [ 235.923675][ C0] end_report.part.0+0x3a/0x90 [ 235.928409][ C0] kasan_report.cold+0xe/0x18 [ 235.933058][ C0] ? find_endpoint+0x2a3/0x2c0 [ 235.937794][ C0] find_endpoint+0x2a3/0x2c0 [ 235.942355][ C0] dummy_timer+0x500/0x3700 [ 235.946835][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 235.952609][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 235.958211][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 235.963119][ C0] ? mark_held_locks+0x40/0x70 [ 235.967854][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.973626][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 235.978535][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 235.983705][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 235.988786][ C0] handle_softirqs+0x1e6/0x9d0 [ 235.993533][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 235.998790][ C0] ? _raw_spin_unlock+0x28/0x50 [ 236.003606][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 236.009219][ C0] __irq_exit_rcu+0x194/0x210 [ 236.013868][ C0] irq_exit_rcu+0x9/0x30 [ 236.018078][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 236.023689][ C0] [ 236.026590][ C0] [ 236.029490][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.035439][ C0] RIP: 0010:write_comp_data+0x41/0xa0 [ 236.040783][ C0] Code: 7f 12 48 63 d0 a9 00 01 00 ff 74 1e f6 c4 01 74 68 a9 00 00 00 0f 75 61 f7 c2 00 00 00 f0 75 59 8b 87 34 17 00 00 85 c0 74 4f <8b> 87 08 17 00 00 83 f8 03 75 44 48 8b 87 10 17 00 00 8b bf 0c 17 [ 236.060356][ C0] RSP: 0018:ffffc90004dbf430 EFLAGS: 00000246 [ 236.066388][ C0] RAX: 8000000000000001 RBX: 00000000000708c0 RCX: ffffffff828a41ba [ 236.074326][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88804b98a580 [ 236.082274][ C0] RBP: ffff88801d900000 R08: 0000000000000005 R09: 0000000000000000 [ 236.090214][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 236.098152][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 236.106090][ C0] ? lookup_page_ext+0x7a/0x100 [ 236.110909][ C0] lookup_page_ext+0x7a/0x100 [ 236.115555][ C0] page_table_check_clear+0x189/0x540 [ 236.120893][ C0] __page_table_check_pte_clear+0x10f/0x120 [ 236.126764][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 236.133146][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 236.138662][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 236.145393][ C0] __zap_vma_range+0x2c36/0x48c0 [ 236.150309][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 236.155565][ C0] ? mas_next_slot+0x10a3/0x1960 [ 236.160486][ C0] ? find_held_lock+0x2b/0x80 [ 236.165136][ C0] unmap_vmas+0x299/0x5f0 [ 236.169439][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 236.174265][ C0] ? mas_next_slot+0x10a3/0x1960 [ 236.179174][ C0] exit_mmap+0x1ef/0xa00 [ 236.183387][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 236.188128][ C0] ? rcu_is_watching+0x13/0xc0 [ 236.192863][ C0] ? find_held_lock+0x2b/0x80 [ 236.197510][ C0] ? uprobe_clear_state+0x5f/0x250 [ 236.202591][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 236.208195][ C0] __mmput+0x12a/0x410 [ 236.212237][ C0] mmput+0x67/0x80 [ 236.215935][ C0] do_exit+0x8b1/0x2ae0 [ 236.220061][ C0] ? __pfx_do_exit+0x10/0x10 [ 236.224617][ C0] ? do_raw_spin_lock+0x128/0x260 [ 236.229608][ C0] ? find_held_lock+0x2b/0x80 [ 236.234258][ C0] ? get_signal+0x7e0/0x21e0 [ 236.238817][ C0] do_group_exit+0xd5/0x2a0 [ 236.243291][ C0] get_signal+0x1ec7/0x21e0 [ 236.247765][ C0] ? __pfx_get_signal+0x10/0x10 [ 236.252583][ C0] ? do_futex+0x190/0x440 [ 236.256881][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 236.262397][ C0] ? find_held_lock+0x2b/0x80 [ 236.267042][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 236.273167][ C0] ? handle_softirqs+0x7ee/0x9d0 [ 236.278085][ C0] exit_to_user_mode_loop+0x139/0x700 [ 236.283424][ C0] ? rcu_is_watching+0x13/0xc0 [ 236.288158][ C0] do_syscall_64+0x661/0x790 [ 236.292718][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.298577][ C0] RIP: 0033:0x7fe2e539e0d9 [ 236.302960][ C0] Code: Unable to access opcode bytes at 0x7fe2e539e0af. [ 236.309943][ C0] RSP: 002b:00007fe2e62710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.318321][ C0] RAX: fffffffffffffe00 RBX: 00007fe2e5626098 RCX: 00007fe2e539e0d9 [ 236.326262][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2e5626098 [ 236.334199][ C0] RBP: 00007fe2e5626090 R08: 0000000000000000 R09: 0000000000000000 [ 236.342146][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.350101][ C0] R13: 00007fe2e5626128 R14: 00007ffc478f4840 R15: 00007ffc478f4928 [ 236.358055][ C0] [ 236.361088][ C0] Kernel Offset: disabled [ 236.365382][ C0] Rebooting in 86400 seconds..